$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: LhaAd2uRT+w73K+/lCxu3d9sDQbe3noOGZX2P6DwY6g= Subject key identifier: 94:25:7E:29:8D:52:71:ED:81:D9:96:77:37:AF:19:EB:C3:93:62:03 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 07EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 07E5 Signing time: Wed 20 Aug 2025 21:07:48 +0000 Manifest this update: Wed 20 Aug 2025 21:07:48 +0000 Manifest next update: Wed 27 Aug 2025 21:07:48 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: MSWMBi56phGYKET+upDEplUhDeCjbWIcurxmUBMLU30=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: ipH52NvI6j7Qm3VJ3UEcq9yvGVo2LC48K1opbVhCFvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Aug 20 21:07:48 2025 GMT Not After : Aug 27 21:07:48 2025 GMT Subject: CN=68a63924-9512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:b9:80:13:37:d4:04:eb:fc:15:02:83:6c: 9a:be:8f:34:f7:0a:e4:f4:86:0b:d9:e4:74:1d:6d: e8:6f:7a:e0:9c:0a:9c:31:b5:2f:51:59:f4:71:02: f3:ab:9d:1a:e9:cb:57:65:b8:45:28:49:cc:27:46: 28:f4:6f:07:11:d3:2a:97:a5:b1:87:87:ef:70:60: c5:02:d0:29:29:1d:d0:0a:4b:46:44:fe:79:fe:64: 1b:eb:4e:53:d5:f2:0e:e6:0b:77:d1:87:59:2b:b9: 93:ce:02:63:c1:2b:79:86:23:3e:24:d4:bd:29:62: 70:0e:ee:19:76:13:f0:dc:3c:eb:c6:4b:bf:b4:f4: 48:44:e2:3a:c2:a8:4c:92:9c:0e:56:2c:10:da:e7: 4f:3c:27:f0:e2:5e:46:39:40:f2:29:a2:f2:bd:39: 7b:5f:af:13:ea:2b:91:b4:c6:d5:ab:5e:c6:f9:00: a4:03:51:7c:84:34:cd:b6:17:cb:9e:ee:2c:01:e3: c9:e8:f4:d4:0c:3f:a1:d9:28:02:73:81:14:75:b9: 79:b3:26:cd:f7:d6:c4:12:01:dd:2a:fb:5b:89:1c: d8:fb:6d:1d:05:73:d5:c5:ba:ac:96:85:45:f4:36: 47:2c:73:27:02:41:35:05:d1:35:fd:ef:f8:a1:a0: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:25:7E:29:8D:52:71:ED:81:D9:96:77:37:AF:19:EB:C3:93:62:03 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:fa:f0:2e:c4:8e:8b:5b:60:76:99:e4:1f:7a:c4:7d:16:03: 47:05:6e:65:a8:32:8c:ba:ac:03:b7:5c:e1:86:d6:bc:1e:d5: 5f:b3:e7:81:ac:54:af:35:df:01:c8:64:5f:53:6c:bf:be:68: 9c:a7:a5:f0:dd:c9:c5:57:9f:6b:ad:66:58:5e:26:21:79:33: f5:50:41:89:d9:54:78:8e:95:41:85:40:5b:61:b7:b9:97:10: 5f:a1:9b:26:86:de:f6:88:30:15:86:d8:be:b5:0f:db:d4:19: db:3b:bf:e1:b4:f6:de:18:48:23:db:fb:27:a7:9e:59:1f:1c: 73:71:51:fc:17:94:77:63:d7:a1:f3:08:83:ae:67:db:27:aa: 22:fb:d4:bf:f9:90:f7:ce:19:01:5e:bf:0d:7a:d3:fa:e7:52: 46:21:61:07:21:f8:d1:0b:06:e0:ac:28:fa:5f:6d:67:b9:11: 87:54:11:ba:91:a4:b9:6a:70:84:e3:1b:65:a2:9d:c2:44:f9: e7:98:48:ad:90:01:d5:38:9e:ae:83:4f:54:24:7d:a7:c9:22: a4:67:aa:70:23:c2:5a:01:d3:9c:d5:ac:43:80:47:4c:cf:cf: c0:ea:8b:b4:93:32:ff:2c:9a:da:48:1b:12:6e:ed:18:79:99: 7f:65:d1:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjUwODIwMjEwNzQ4WhcNMjUwODI3MjEwNzQ4WjAYMRYwFAYD VQQDEw02OGE2MzkyNC05NTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVa5gBM31ATr/BUCg2yavo809wrk9IYL2eR0HW3ob3rgnAqcMbUvUVn0cQLz q50a6ctXZbhFKEnMJ0Yo9G8HEdMql6Wxh4fvcGDFAtApKR3QCktGRP55/mQb605T 1fIO5gt30YdZK7mTzgJjwSt5hiM+JNS9KWJwDu4ZdhPw3Dzrxku/tPRIROI6wqhM kpwOViwQ2udPPCfw4l5GOUDyKaLyvTl7X68T6iuRtMbVq17G+QCkA1F8hDTNthfL nu4sAePJ6PTUDD+h2SgCc4EUdbl5sybN99bEEgHdKvtbiRzY+20dBXPVxbqsloVF 9DZHLHMnAkE1BdE1/e/4oaBUxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQlfimN UnHtgdmWdzevGevDk2IDMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk+vAuxI6LW2B2meQfesR9FgNHBW5lqDKMuqwDt1zhhta8HtVfs+eB rFSvNd8ByGRfU2y/vmicp6Xw3cnFV59rrWZYXiYheTP1UEGJ2VR4jpVBhUBbYbe5 lxBfoZsmht72iDAVhti+tQ/b1BnbO7/htPbeGEgj2/snp55ZHxxzcVH8F5R3Y9eh 8wiDrmfbJ6oi+9S/+ZD3zhkBXr8NetP651JGIWEHIfjRCwbgrCj6X21nuRGHVBG6 kaS5anCE4xtlop3CRPnnmEitkAHVOJ6ug09UJH2nySKkZ6pwI8JaAdOc1axDgEdM z8/A6ou0kzL/LJraSBsSbu0YeZl/ZdEo -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:45 2025 by rpki-client