$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: Qwq1+15hrdwggXplNtwVK/f7byO5oIjKX9cWXk7wEfg= Subject key identifier: 17:96:9D:C3:AB:F0:B4:61:DF:36:D0:AE:91:30:F5:FA:1B:6F:5A:12 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 0204 Signing time: Thu 21 Aug 2025 02:21:02 +0000 Manifest this update: Thu 21 Aug 2025 02:21:01 +0000 Manifest next update: Thu 28 Aug 2025 02:21:01 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: NMN5GpYI0fOB+PJxs099OLa0znTr0VwR6zKaT4a0kWA=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Aug 21 02:21:01 2025 GMT Not After : Aug 28 02:21:01 2025 GMT Subject: CN=68a6828d-f22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:50:b2:bc:9a:6c:30:71:18:88:d0:b0:d2: b1:d3:35:90:e6:a4:67:e1:29:9a:f8:25:47:06:f2: 85:a5:07:6b:db:1e:45:64:5b:8f:8a:cc:56:f0:0a: 4f:ff:09:8e:73:99:78:76:1d:34:bc:76:7d:d1:ca: 87:a2:6a:47:b9:23:43:07:c8:03:a6:55:82:72:8a: 1b:22:a2:36:94:65:81:e2:4d:f6:27:fa:87:a7:91: 27:bc:ac:d6:7f:b3:8a:8d:8c:0e:f7:23:bb:51:65: 83:62:52:65:7f:de:3c:08:36:86:61:a5:7f:02:01: e6:9b:24:05:4a:85:d6:70:ff:bd:e4:7e:3f:03:a6: 41:02:1c:52:84:00:a5:07:bd:dc:0e:81:c5:8f:c6: 59:ba:a1:5f:33:fb:ab:16:e4:75:94:20:3a:c3:90: aa:a5:14:49:c6:e1:aa:67:97:b5:c4:a8:a8:b6:ee: 5c:be:57:b1:8a:fa:2d:f8:c4:98:c3:3b:87:dc:52: e0:0a:4b:cd:ca:07:3d:46:73:a2:1d:80:e6:09:8c: 24:d5:12:db:3e:f0:36:62:17:57:72:d0:5d:29:0e: d3:49:fd:e4:21:cb:c6:7a:f1:3b:f0:f0:be:2a:4b: 4c:0c:ce:ed:ce:00:5a:6b:04:c5:f9:12:f5:69:62: 3a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:96:9D:C3:AB:F0:B4:61:DF:36:D0:AE:91:30:F5:FA:1B:6F:5A:12 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:66:f5:ba:9e:3b:b2:80:31:36:45:60:a5:4c:a6:4c:db:61: b9:81:14:84:49:4b:a3:6d:b4:80:47:ae:af:6c:f0:d2:9f:c1: 03:93:0e:9a:08:38:6e:8a:09:4f:36:d1:0a:f0:51:2c:0e:69: fe:b1:fa:14:92:7d:f0:5d:eb:a3:7f:bc:8b:2d:fd:e1:b1:b9: 22:70:3d:96:11:2c:0f:ac:9f:09:80:5d:ae:ff:8d:56:fe:93: 4c:1f:5b:ee:e5:c7:5d:25:29:f9:db:3e:ee:e6:d1:4c:8a:9d: 08:6d:9c:e1:98:ce:97:81:db:dd:1b:3e:70:65:53:33:c7:60: d5:fc:a4:fd:b5:7b:9d:84:e4:8a:30:45:f5:f9:96:c4:a6:4b: b7:0f:b1:96:8a:02:3c:4a:64:cd:fe:1d:8d:35:35:ee:b3:5c: 74:8a:7c:1c:ba:aa:27:46:1e:12:0e:dc:d4:2b:c5:0c:2d:29: d9:a9:4f:a8:fc:95:b7:a2:91:67:3b:9b:00:ab:ea:3a:6a:3b: 43:b5:af:20:ce:37:79:b8:b5:8d:6b:0e:dd:4d:48:0f:2b:37: 78:2c:1d:b1:59:59:85:97:f0:00:c2:bd:01:5e:4a:cc:cf:ef: 9f:c3:16:6e:70:7f:fe:ec:3e:6a:db:e6:95:ae:66:5e:c9:21: f0:bc:71:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUwODIxMDIyMTAxWhcNMjUwODI4MDIyMTAxWjAYMRYwFAYD VQQDEw02OGE2ODI4ZC1mMjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dRQsryabDBxGIjQsNKx0zWQ5qRn4Sma+CVHBvKFpQdr2x5FZFuPisxW8ApP /wmOc5l4dh00vHZ90cqHompHuSNDB8gDplWCcoobIqI2lGWB4k32J/qHp5EnvKzW f7OKjYwO9yO7UWWDYlJlf948CDaGYaV/AgHmmyQFSoXWcP+95H4/A6ZBAhxShACl B73cDoHFj8ZZuqFfM/urFuR1lCA6w5CqpRRJxuGqZ5e1xKiotu5cvlexivot+MSY wzuH3FLgCkvNygc9RnOiHYDmCYwk1RLbPvA2YhdXctBdKQ7TSf3kIcvGevE78PC+ KktMDM7tzgBaawTF+RL1aWI6qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeWncOr 8LRh3zbQrpEw9fobb1oSMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFZvW6njuygDE2RWClTKZM22G5gRSESUujbbSAR66vbPDSn8EDkw6a CDhuiglPNtEK8FEsDmn+sfoUkn3wXeujf7yLLf3hsbkicD2WESwPrJ8JgF2u/41W /pNMH1vu5cddJSn52z7u5tFMip0IbZzhmM6XgdvdGz5wZVMzx2DV/KT9tXudhOSK MEX1+ZbEpku3D7GWigI8SmTN/h2NNTXus1x0inwcuqonRh4SDtzUK8UMLSnZqU+o /JW3opFnO5sAq+o6ajtDta8gzjd5uLWNaw7dTUgPKzd4LB2xWVmFl/AAwr0BXkrM z++fwxZucH/+7D5q2+aVrmZeySHwvHGZ -----END CERTIFICATE-----Generated at Sat Aug 23 03:25:09 2025 by rpki-client