$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: 20CXauf38Y45e6y2/B5tFb3xtt8LDoDyxaBVvDZEnfI= Subject key identifier: 06:FC:E3:DE:45:C3:D9:10:67:E1:10:AF:99:95:22:7D:C2:87:51:BF Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 01E1 Signing time: Thu 21 Aug 2025 02:47:38 +0000 Manifest this update: Thu 21 Aug 2025 02:47:37 +0000 Manifest next update: Thu 28 Aug 2025 02:47:37 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: GNJ36plgnG0A1zJr4PrB0Lv+osKi8wgSqFAPLv5lzvM=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Aug 21 02:47:37 2025 GMT Not After : Aug 28 02:47:37 2025 GMT Subject: CN=68a688ca-99a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:00:78:b5:c3:c8:f7:32:cf:20:de:07:8f: b5:f8:a8:11:bd:bc:40:18:51:b3:3f:bf:7e:77:0a: c1:1c:f4:b9:a8:04:80:af:58:11:64:9d:aa:03:91: a5:a3:ac:c2:f9:da:f1:f2:44:65:b9:d3:e5:59:50: 0a:66:02:c5:b6:3e:0a:f1:7f:0c:2d:29:7e:3b:9d: 3a:ba:33:0c:55:08:6a:69:07:81:0d:05:07:31:d0: e6:b8:39:94:83:d4:6c:e1:b0:a4:f9:12:0c:2f:61: 57:b2:58:5a:b4:a9:27:b5:90:57:51:e3:b8:dd:a6: 74:55:2a:bf:ef:d0:64:39:f2:5d:79:19:d7:5a:d2: fe:7a:f6:f0:98:8e:3f:95:50:17:3f:9c:26:62:d7: 26:1a:f2:44:bb:66:75:7f:4f:47:f1:64:4e:df:7f: cc:06:f7:d8:fa:01:5f:39:50:ac:b6:30:cb:b4:a5: 3d:3c:51:53:ac:ba:16:5a:df:0b:94:57:8a:b9:2d: 5a:73:f4:51:c6:43:cb:35:99:ab:52:45:ec:66:a6: c1:87:a1:d7:ab:15:7d:bc:03:c0:ed:8c:01:14:a9: ee:ec:5c:03:9a:a5:af:03:cd:5a:fb:6d:1b:57:b8: 1f:dc:4f:93:63:45:bc:d2:79:12:78:a5:2d:cf:20: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FC:E3:DE:45:C3:D9:10:67:E1:10:AF:99:95:22:7D:C2:87:51:BF X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e9:8c:66:15:51:6b:6e:ea:c0:89:47:3b:42:2d:32:9d:f0: f2:59:66:16:c0:2b:98:a1:b7:99:8f:de:03:8f:15:fa:b0:d6: 14:86:d9:88:15:64:e9:b3:4e:7f:17:fa:50:51:62:21:9a:3e: 36:ea:57:7c:42:15:44:f0:b3:74:37:18:64:55:a8:4e:42:2c: 02:70:cc:37:56:53:d3:c3:c5:95:82:c1:ef:ac:a4:f2:29:4d: 01:53:f5:9d:36:5b:f4:e7:f2:79:e1:b0:71:f1:58:72:a0:e5: 0a:73:77:8f:06:e1:06:b8:ce:1b:8f:05:f9:24:af:f7:59:80: 41:64:39:85:72:99:d8:58:4f:27:d8:4d:4c:83:e4:3e:b0:7e: 5a:86:fd:52:a4:d3:48:d1:01:d9:8f:92:e0:bd:05:95:bc:6c: d3:c1:57:8b:8b:6a:f7:4f:89:a5:3a:82:b1:a9:8a:db:e9:f8: af:04:53:92:3b:12:3d:0f:4d:87:9f:c0:70:c9:f8:f2:84:d5: c6:08:b9:ac:af:6a:42:8e:f1:bb:85:d9:a0:5f:c9:b7:21:bc: 68:8b:76:be:3c:c9:6a:ce:44:f7:4f:1b:f5:a5:07:9e:1b:bd: c8:fc:87:fe:35:8d:d6:ed:78:70:8d:5e:3d:d5:78:08:ef:16: 1b:f2:40:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUwODIxMDI0NzM3WhcNMjUwODI4MDI0NzM3WjAYMRYwFAYD VQQDEw02OGE2ODhjYS05OWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4wAeLXDyPcyzyDeB4+1+KgRvbxAGFGzP79+dwrBHPS5qASAr1gRZJ2qA5Gl o6zC+drx8kRludPlWVAKZgLFtj4K8X8MLSl+O506ujMMVQhqaQeBDQUHMdDmuDmU g9Rs4bCk+RIML2FXslhatKkntZBXUeO43aZ0VSq/79BkOfJdeRnXWtL+evbwmI4/ lVAXP5wmYtcmGvJEu2Z1f09H8WRO33/MBvfY+gFfOVCstjDLtKU9PFFTrLoWWt8L lFeKuS1ac/RRxkPLNZmrUkXsZqbBh6HXqxV9vAPA7YwBFKnu7FwDmqWvA81a+20b V7gf3E+TY0W80nkSeKUtzyAXUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAb8495F w9kQZ+EQr5mVIn3Ch1G/MB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi6YxmFVFrburAiUc7Qi0ynfDyWWYWwCuYobeZj94DjxX6sNYUhtmI FWTps05/F/pQUWIhmj426ld8QhVE8LN0NxhkVahOQiwCcMw3VlPTw8WVgsHvrKTy KU0BU/WdNlv05/J54bBx8VhyoOUKc3ePBuEGuM4bjwX5JK/3WYBBZDmFcpnYWE8n 2E1Mg+Q+sH5ahv1SpNNI0QHZj5LgvQWVvGzTwVeLi2r3T4mlOoKxqYrb6fivBFOS OxI9D02Hn8BwyfjyhNXGCLmsr2pCjvG7hdmgX8m3Ibxoi3a+PMlqzkT3Txv1pQee G73I/If+NY3W7XhwjV491XgI7xYb8kAd -----END CERTIFICATE-----Generated at Fri Aug 22 16:32:14 2025 by rpki-client