$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json) Hash identifier: lsPyW5UVbYqo5x/HwKfiuQczpHokwDC122fkuT4IGBU= Subject key identifier: 31:D9:18:03:0D:13:5F:B6:0B:B5:96:BD:FC:27:AC:92:68:F5:35:5C Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft Manifest number: 034E Signing time: Thu 21 Aug 2025 01:11:36 +0000 Manifest this update: Thu 21 Aug 2025 01:11:36 +0000 Manifest next update: Thu 28 Aug 2025 01:11:36 +0000 Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: nizrVbD9kZz1NwSWykzYxbiMfmaYg1CpMQwD5QJsy8A=) 2: 148BC3E8833B11EEA71E1715C4F9AE02.roa (hash: ZO4FyXUvWQjoBnjdYas53x9mwxjL1ZSYmacbdFPrIGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Validity Not Before: Aug 21 01:11:36 2025 GMT Not After : Aug 28 01:11:36 2025 GMT Subject: CN=68a67248-37af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:4c:e2:4f:e7:aa:4c:00:f9:4a:0e:57:d9: b0:08:6a:b2:14:46:aa:5b:99:5a:ec:a5:7a:73:be: b4:df:8c:4e:23:87:67:66:fc:f8:26:39:a4:54:43: 8c:d0:07:f0:dc:6c:fd:46:a8:b0:b2:97:f0:a9:cd: 08:6e:a9:4c:66:ca:c8:1b:4e:22:b0:9f:f4:3b:57: f0:93:18:32:10:77:10:1a:3f:0b:06:11:df:0c:03: f2:c0:63:5e:f0:4e:fd:a2:67:51:11:6b:a8:53:cc: 56:eb:8c:fc:bb:03:69:de:e9:dc:4f:08:a2:21:4c: 2b:54:6b:f2:c0:95:14:ba:74:f7:64:72:73:d0:1d: 25:4f:63:96:3a:f6:ec:c4:ed:d4:86:1f:8d:00:f6: 5b:9e:5c:ef:f9:70:f9:f2:04:23:49:b3:ad:cf:f4: 54:6e:58:7b:ce:96:1a:bf:9a:7e:f8:a0:73:15:a5: 17:d6:2f:ce:de:c1:f6:92:ad:d0:db:fb:c0:fc:6b: 8f:a6:4c:89:5a:82:4c:c2:44:86:7e:9b:7c:bc:34: 61:04:e4:af:76:79:8b:d8:5c:ed:46:83:76:e0:88: 38:4a:f4:3a:da:bb:b0:18:1d:4f:c4:a1:8f:c6:19: 12:56:1f:b0:05:9f:c1:72:bc:b0:41:34:f8:ee:70: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D9:18:03:0D:13:5F:B6:0B:B5:96:BD:FC:27:AC:92:68:F5:35:5C X509v3 Authority Key Identifier: keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:14:d0:22:e4:b2:29:96:61:17:2f:d1:0f:1f:33:4e:65:0b: 38:6e:b7:ed:9e:04:28:69:87:fe:39:4c:85:d0:31:f7:dc:0d: a6:9c:f4:de:8f:c6:c4:cc:2d:92:71:cd:21:f6:74:b8:4c:3f: 5a:35:69:c4:57:1c:1c:7d:18:1d:06:f3:83:2e:69:fa:07:55: 14:6a:d6:28:b3:13:c2:e3:c4:eb:7c:dd:b1:aa:73:e9:83:ed: 55:a9:b5:ce:47:d7:c8:6c:56:d1:02:11:4e:20:59:33:43:ce: 7c:48:46:7b:8f:f7:cb:b4:bc:61:11:91:b0:d3:90:6f:9d:9f: 61:32:f2:71:08:07:42:41:2c:8d:67:59:80:41:b1:e7:15:91: 75:62:7c:d0:ca:4a:99:66:c8:61:28:90:3e:4f:93:cb:87:9b: 6d:7d:ba:1e:62:26:7b:bc:f4:d5:c9:84:85:21:85:e4:fa:2a: 51:7a:bc:13:4d:af:2b:8b:ee:ef:63:2c:4a:30:a6:eb:97:27: 46:2e:03:00:9f:03:d4:89:6b:9a:69:ad:66:f7:fa:64:90:19: 73:93:57:f7:bc:9f:41:0c:09:f8:19:b4:82:26:03:97:9c:63: 58:d8:cd:24:0d:bc:56:2a:79:2e:e8:46:f9:a8:e5:9d:b0:7a: 9b:ea:89:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw NDc0QzkxQzYwHhcNMjUwODIxMDExMTM2WhcNMjUwODI4MDExMTM2WjAYMRYwFAYD VQQDEw02OGE2NzI0OC0zN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/lM4k/nqkwA+UoOV9mwCGqyFEaqW5la7KV6c76034xOI4dnZvz4JjmkVEOM 0Afw3Gz9Rqiwspfwqc0IbqlMZsrIG04isJ/0O1fwkxgyEHcQGj8LBhHfDAPywGNe 8E79omdREWuoU8xW64z8uwNp3uncTwiiIUwrVGvywJUUunT3ZHJz0B0lT2OWOvbs xO3Uhh+NAPZbnlzv+XD58gQjSbOtz/RUblh7zpYav5p++KBzFaUX1i/O3sH2kq3Q 2/vA/GuPpkyJWoJMwkSGfpt8vDRhBOSvdnmL2FztRoN24Ig4SvQ62ruwGB1PxKGP xhkSVh+wBZ/BcrywQTT47nD0GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHZGAMN E1+2C7WWvfwnrJJo9TVcMB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t VHhnWnU2aE0xYklFZE1rY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqFNAi5LIplmEXL9EPHzNOZQs4brftngQoaYf+OUyF0DH33A2mnPTe j8bEzC2Scc0h9nS4TD9aNWnEVxwcfRgdBvODLmn6B1UUatYosxPC48TrfN2xqnPp g+1VqbXOR9fIbFbRAhFOIFkzQ858SEZ7j/fLtLxhEZGw05BvnZ9hMvJxCAdCQSyN Z1mAQbHnFZF1YnzQykqZZshhKJA+T5PLh5ttfboeYiZ7vPTVyYSFIYXk+ipRerwT Ta8ri+7vYyxKMKbrlydGLgMAnwPUiWuaaa1m9/pkkBlzk1f3vJ9BDAn4GbSCJgOX nGNY2M0kDbxWKnku6Eb5qOWdsHqb6onR -----END CERTIFICATE-----Generated at Thu Aug 21 05:47:05 2025 by rpki-client