$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json) Hash identifier: j0bxgYZctSfVdqg0XTe+8nctJi88oPNTigFDMTskoGA= Subject key identifier: 06:98:6F:1E:45:C1:E7:C4:A8:80:12:B7:63:AA:E4:42:C2:EE:A1:56 Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft Manifest number: 0355 Signing time: Fri 05 Sep 2025 01:18:53 +0000 Manifest this update: Fri 05 Sep 2025 01:18:52 +0000 Manifest next update: Fri 12 Sep 2025 01:18:52 +0000 Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: 0f7nJS0xx+Z2c1eFeQIVhsMgoHEA3mmooYiNkud9LIY=) 2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: C1ezUxuL3ClkX3BgQjjS1dTVihRitOogxbbsy9SR+JY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Validity Not Before: Sep 5 01:18:52 2025 GMT Not After : Sep 12 01:18:52 2025 GMT Subject: CN=68ba3a7d-5139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:14:49:fa:5a:9a:99:36:26:f5:57:b3:61: a7:89:a6:73:58:17:92:eb:5c:f3:a7:e1:e8:98:dd: 75:64:3e:87:ed:4d:2c:c8:54:02:d6:2e:a6:f0:bd: 01:b0:36:21:e1:29:ed:ac:bf:47:f1:0c:61:39:75: 05:a6:c6:5c:50:15:bf:70:2a:bb:19:e4:1f:3d:36: 88:52:6d:15:f5:76:a8:3e:54:2d:71:19:5a:7a:46: 61:69:79:4d:d4:fe:29:6a:c2:9a:7c:2b:77:4f:4d: c9:c4:06:24:b5:aa:06:de:04:60:91:fc:92:4c:36: 45:0d:3a:c9:c7:57:b8:c2:98:16:c4:4a:c5:a0:e0: f6:8e:05:cd:6d:69:52:0c:3c:ed:e2:f0:03:23:f0: 2d:38:cb:b7:39:78:bd:63:8f:66:db:43:c2:1c:04: 43:11:9d:9e:66:10:0c:b8:f5:04:4a:52:3e:83:34: 82:9a:4a:b3:99:5f:b5:90:5a:3a:85:30:73:b2:83: e7:04:58:07:92:d4:98:66:99:c3:da:90:f1:7d:e1: 48:71:72:f4:af:a1:89:f5:3b:b0:36:19:27:00:b4: 74:fa:4d:cd:90:b7:6f:d0:cb:7b:29:a4:4b:90:62: 3e:e2:3a:55:fd:37:6b:bb:07:6f:c1:5f:36:fc:e2: 59:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:98:6F:1E:45:C1:E7:C4:A8:80:12:B7:63:AA:E4:42:C2:EE:A1:56 X509v3 Authority Key Identifier: keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:48:7f:20:3f:57:9a:63:79:69:de:97:40:7d:a1:25:17:59: ef:c8:cc:63:3d:53:e9:6e:17:53:87:0c:57:2f:0b:0b:18:e4: 00:78:8d:d9:6c:f4:57:33:01:71:0b:6f:b9:09:46:1c:38:14: 09:a7:ee:47:e9:78:a7:96:2c:23:ba:80:84:fd:93:7b:4f:e6: 81:23:1d:2a:51:07:cb:78:20:ab:a0:56:45:2c:76:6e:90:82: 16:32:f8:47:ce:7d:7a:63:0a:36:33:03:be:25:91:04:ca:51: f5:48:80:5b:b8:05:b7:ce:e1:09:fc:d5:d4:d5:1e:e7:a7:d9: e2:55:ea:bf:34:1b:9c:dd:d0:cb:d9:8d:fb:25:f0:e6:61:a9: ac:3a:d7:9b:d1:f6:09:41:7d:8a:22:da:2f:b7:f5:0e:bd:34: b7:29:de:29:24:ab:64:e8:04:c6:89:56:22:2f:82:d0:39:b0: 2c:5c:e5:f0:e0:ce:da:be:0d:f8:21:ef:1e:5c:23:5c:f2:3f: 1e:67:7c:fa:4d:a4:1a:fa:79:33:15:7c:a0:51:c8:06:da:b0: d1:f6:85:52:f0:bb:1b:86:15:12:b3:57:d4:2e:dc:16:b0:79: 80:4f:24:8f:60:57:28:6e:a3:21:82:f8:49:a8:83:9b:cc:b1: 59:a1:16:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy MUYwQTUxMzUwHhcNMjUwOTA1MDExODUyWhcNMjUwOTEyMDExODUyWjAYMRYwFAYD VQQDEw02OGJhM2E3ZC01MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5MUSfpampk2JvVXs2GniaZzWBeS61zzp+HomN11ZD6H7U0syFQC1i6m8L0B sDYh4SntrL9H8QxhOXUFpsZcUBW/cCq7GeQfPTaIUm0V9XaoPlQtcRlaekZhaXlN 1P4pasKafCt3T03JxAYktaoG3gRgkfySTDZFDTrJx1e4wpgWxErFoOD2jgXNbWlS DDzt4vADI/AtOMu3OXi9Y49m20PCHARDEZ2eZhAMuPUESlI+gzSCmkqzmV+1kFo6 hTBzsoPnBFgHktSYZpnD2pDxfeFIcXL0r6GJ9TuwNhknALR0+k3NkLdv0Mt7KaRL kGI+4jpV/TdruwdvwV82/OJZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaYbx5F wefEqIASt2Oq5ELC7qFWMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP UndMZktmSFUzUFVoOEtVVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7SH8gP1eaY3lp3pdAfaElF1nvyMxjPVPpbhdThwxXLwsLGOQAeI3Z bPRXMwFxC2+5CUYcOBQJp+5H6XinliwjuoCE/ZN7T+aBIx0qUQfLeCCroFZFLHZu kIIWMvhHzn16Ywo2MwO+JZEEylH1SIBbuAW3zuEJ/NXU1R7np9niVeq/NBuc3dDL 2Y37JfDmYamsOteb0fYJQX2KItovt/UOvTS3Kd4pJKtk6ATGiVYiL4LQObAsXOXw 4M7avg34Ie8eXCNc8j8eZ3z6TaQa+nkzFXygUcgG2rDR9oVS8LsbhhUSs1fULtwW sHmATySPYFcobqMhgvhJqIObzLFZoRb4 -----END CERTIFICATE-----Generated at Sat Sep 6 13:33:54 2025 by rpki-client