$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json) Hash identifier: eabdTOONMNuM1mIJ8T74CbVtQAZT4YsbWu4YjvZspms= Subject key identifier: 93:30:24:AC:16:A9:08:E7:FA:E4:90:B3:3E:2E:4C:F7:C0:31:36:56 Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft Manifest number: 73 Signing time: Tue 01 Jul 2025 07:39:00 +0000 Manifest this update: Tue 01 Jul 2025 07:38:59 +0000 Manifest next update: Tue 08 Jul 2025 07:38:59 +0000 Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: LhgpwGyfhk1QJJmhdOEDXqAEIZD9VAvFxeRYsFkDtw4=) 2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Validity Not Before: Jul 1 07:38:59 2025 GMT Not After : Jul 8 07:38:59 2025 GMT Subject: CN=68639094-8689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:a7:c8:cc:bd:98:78:6d:e0:2d:97:1b:14: 85:e9:95:14:0d:fa:1c:38:18:7a:a0:19:cd:f8:71: ff:8b:de:ea:38:41:e0:10:fe:94:b0:93:1f:5f:d9: 47:4e:1c:7d:1c:12:15:cf:58:0f:17:bc:9d:8b:5c: 36:b2:67:7d:05:19:9c:51:e1:2e:e3:dc:40:06:11: 59:b7:77:d7:80:88:f1:5d:df:75:bc:21:f2:ba:e0: 36:bd:af:d5:33:75:c9:4a:02:66:82:2b:9e:fe:32: df:57:1c:2c:96:ed:9f:88:97:bb:d0:bf:e5:5c:ce: 94:ef:d4:fd:e4:91:47:56:40:1a:50:22:ba:51:b8: ad:ae:1b:40:cd:9d:cf:15:32:37:4a:d5:a3:58:f0: 4b:16:8f:7e:c2:0c:a7:33:98:93:24:84:19:5f:97: 03:20:3b:6e:8e:d7:5c:06:75:70:6c:1e:65:f5:7d: a4:7c:39:7b:c1:38:da:1c:68:b1:91:02:2d:a3:11: 5b:23:98:ff:a5:39:44:2f:6b:85:58:98:60:97:43: d2:52:46:c4:42:81:e3:1c:dd:7e:f3:e8:93:76:83: 54:4a:01:10:f7:8c:e4:ea:88:b2:7a:0d:52:09:c3: 0c:27:0f:a1:53:42:4e:f9:12:15:9f:c7:17:f5:e0: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:30:24:AC:16:A9:08:E7:FA:E4:90:B3:3E:2E:4C:F7:C0:31:36:56 X509v3 Authority Key Identifier: keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5b:e7:59:fa:67:09:bd:f5:10:9f:72:db:2e:bf:cb:cf:45: 22:cc:22:4a:c1:74:fc:de:fc:26:b6:e6:e8:f2:ff:69:de:95: 4c:9e:89:a7:ea:e9:14:63:d0:14:3c:23:bb:ec:06:39:8d:00: 5c:9e:89:76:50:5a:6e:de:68:76:27:83:88:86:01:e3:8e:7f: 12:6a:9c:6b:14:b8:a2:11:7e:54:a4:62:cb:a5:42:52:5d:43: ee:8a:e4:14:36:7f:cf:37:8a:10:f6:ce:7d:71:d9:1e:69:0a: cd:ff:7d:75:52:67:6a:39:fb:a7:0f:e3:13:1e:02:78:df:2d: c0:d6:ca:2e:ab:1b:f7:15:ed:d9:69:db:f1:fa:05:7e:c3:86: aa:7a:ab:c2:b4:74:80:89:11:8c:db:9d:ec:04:ff:10:76:b3: 85:13:a6:e7:3b:2d:20:3c:2a:b7:a3:11:c7:72:2e:a9:16:ed: bf:4d:67:b3:c1:77:92:70:9f:7d:b4:ba:60:30:f7:02:a0:f8: f5:82:f1:0b:41:74:50:ed:13:a9:79:db:8d:2b:16:b2:90:dc: e6:fe:f6:09:e6:9e:23:e0:78:85:b9:a3:76:fa:92:ef:23:e1: c6:e8:c8:4b:4e:7a:44:0a:d0:5d:e9:90:44:6a:cf:15:56:6e: 78:69:d2:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjFBRTExMC8GA1UEBRMoRjZEMzc5MzAyNzc1MUM2MkY4QUJCOTA4ODZFQTkzRjQ5 QjMzRjY0QzAeFw0yNTA3MDEwNzM4NTlaFw0yNTA3MDgwNzM4NTlaMBgxFjAUBgNV BAMTDTY4NjM5MDk0LTg2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDZ6fIzL2YeG3gLZcbFIXplRQN+hw4GHqgGc34cf+L3uo4QeAQ/pSwkx9f2UdO HH0cEhXPWA8XvJ2LXDayZ30FGZxR4S7j3EAGEVm3d9eAiPFd33W8IfK64Da9r9Uz dclKAmaCK57+Mt9XHCyW7Z+Il7vQv+VczpTv1P3kkUdWQBpQIrpRuK2uG0DNnc8V MjdK1aNY8EsWj37CDKczmJMkhBlflwMgO26O11wGdXBsHmX1faR8OXvBONocaLGR Ai2jEVsjmP+lOUQva4VYmGCXQ9JSRsRCgeMc3X7z6JN2g1RKARD3jOTqiLJ6DVIJ wwwnD6FTQk75EhWfxxf14AKdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkzAkrBap COf65JCzPi5M98AxNlYwHwYDVR0jBBgwFoAU9tN5MCd1HGL4q7kIhuqT9Jsz9kww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMUFFLzZDNzA0OEE2QUM3 MzExRUZBM0NCRDE0QUM0RjlBRTAyLzl0TjVNQ2QxSEdMNHE3a0lodXFUOUpzejlr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOXRONU1DZDFIR0w0cTdrSWh1cVQ5SnN6OWt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky MUFFLzZDNzA0OEE2QUM3MzExRUZBM0NCRDE0QUM0RjlBRTAyLzl0TjVNQ2QxSEdM NHE3a0lodXFUOUpzejlrdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9b51n6Zwm99RCfctsuv8vPRSLMIkrBdPze/Ca25ujy/2nelUyeiafq 6RRj0BQ8I7vsBjmNAFyeiXZQWm7eaHYng4iGAeOOfxJqnGsUuKIRflSkYsulQlJd Q+6K5BQ2f883ihD2zn1x2R5pCs3/fXVSZ2o5+6cP4xMeAnjfLcDWyi6rG/cV7dlp 2/H6BX7Dhqp6q8K0dICJEYzbnewE/xB2s4UTpuc7LSA8KrejEcdyLqkW7b9NZ7PB d5Jwn320umAw9wKg+PWC8QtBdFDtE6l5240rFrKQ3Ob+9gnmniPgeIW5o3b6ku8j 4cboyEtOekQK0F3pkERqzxVWbnhp0uw= -----END CERTIFICATE-----Generated at Wed Jul 2 13:16:41 2025 by rpki-client