$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json) Hash identifier: LVy4FmD8JqKH1EQyjbdj4KiIHECzcLuQ5b81xHmZivo= Subject key identifier: 34:BA:78:F9:C7:9D:00:09:B3:70:5F:40:48:EF:EC:FB:F1:8E:1D:CD Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 13B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft Manifest number: 13AD Signing time: Sun 24 Aug 2025 16:55:26 +0000 Manifest this update: Sun 24 Aug 2025 16:55:26 +0000 Manifest next update: Sun 31 Aug 2025 16:55:25 +0000 Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: d4Febr0czwcXJ96tGiGK+xV5bycrweSVxZRPihaxhkg=) 2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: Ps2kpMcHFW9xZn4cXtCxGzuJfkKA6kvJeaElditES+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5046 (0x13b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Aug 24 16:55:26 2025 GMT Not After : Aug 31 16:55:25 2025 GMT Subject: CN=68ab43fe-dbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:3d:58:12:b2:26:37:04:e3:d0:a6:05:f3: 46:be:bc:2c:e6:eb:da:7c:a0:c8:8e:ef:e1:27:7f: 00:82:9b:a9:5d:7c:6b:10:8c:0c:0b:a2:6d:88:68: b4:a7:07:1a:dd:ae:d6:2b:f7:cb:44:01:ac:d6:94: 2c:aa:f8:cb:e5:de:e8:9e:24:b5:1c:b4:ef:bc:de: 0a:42:e6:8f:eb:72:77:4a:99:84:82:96:ad:b1:ba: 57:ff:45:32:61:1a:79:27:c3:58:58:fd:a4:6f:f9: 8a:53:64:85:59:71:ef:cd:d3:9b:59:46:93:0f:7f: c3:20:2a:1d:0b:4f:76:51:a0:43:f1:55:36:8c:d2: 5d:ca:6c:16:61:91:56:8a:db:fb:48:35:90:ad:e7: 31:19:49:4a:01:fa:d4:85:6e:f5:ff:d6:2b:73:00: 88:74:dd:48:56:3b:5c:b1:d4:41:03:3e:99:f7:40: 46:d5:63:57:b2:be:1b:25:3b:0c:00:06:8b:f2:06: 72:84:db:10:15:e9:7b:9c:6a:bd:a7:0d:85:33:ca: 4c:77:89:d5:40:18:d7:44:0c:9e:17:ef:8e:5f:04: 30:fa:c6:a2:85:25:a3:63:00:ae:ed:72:50:79:e8: ca:d1:18:e9:fb:02:95:5e:58:4f:40:af:e1:5e:a8: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BA:78:F9:C7:9D:00:09:B3:70:5F:40:48:EF:EC:FB:F1:8E:1D:CD X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:0d:d4:1b:1f:a6:ff:7d:d9:81:fe:74:ac:eb:4d:d6:57:a8: 1d:d5:d1:15:5e:fe:42:ce:b3:53:bb:7a:84:66:39:83:ac:26: 0a:af:6d:25:7a:fe:ea:0e:6a:b1:d8:57:d7:79:dc:ef:72:5a: 9e:1d:0f:cc:b8:36:4f:57:47:3c:5f:31:f6:ad:08:16:5a:85: 66:fb:87:89:c5:55:08:ff:ee:d5:d8:ef:cb:f7:37:cd:1b:63: bb:1a:a9:c4:52:63:dc:d7:58:03:68:47:a0:fa:0a:be:b7:14: e5:66:b5:0b:c1:0b:da:4a:33:b4:f9:96:55:0d:22:78:3b:db: 8d:59:72:78:e3:a0:70:cd:f4:a0:71:3b:f4:a5:92:40:27:13: cb:62:2a:50:e1:17:d4:a0:fb:b5:33:55:5d:43:cb:1e:7b:7c: c0:02:9f:f9:a6:9d:9c:eb:24:4f:f6:32:bc:00:fd:d6:3a:fe: 7e:ba:a5:fd:24:0f:e9:e5:eb:e9:b4:8c:16:ee:c1:7e:74:c8: a5:72:66:0e:32:bc:35:49:a7:ca:5b:64:e2:3d:6a:fd:e8:24: d8:66:d2:b9:d8:32:b2:ab:21:2b:bb:31:42:4d:a2:9e:c0:85: fc:19:46:57:91:e3:0d:6f:13:f8:eb:52:71:5b:11:40:99:55: 8c:73:46:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjUwODI0MTY1NTI2WhcNMjUwODMxMTY1NTI1WjAYMRYwFAYD VQQDEw02OGFiNDNmZS1kYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2Y9WBKyJjcE49CmBfNGvrws5uvafKDIju/hJ38AgpupXXxrEIwMC6JtiGi0 pwca3a7WK/fLRAGs1pQsqvjL5d7oniS1HLTvvN4KQuaP63J3SpmEgpatsbpX/0Uy YRp5J8NYWP2kb/mKU2SFWXHvzdObWUaTD3/DICodC092UaBD8VU2jNJdymwWYZFW itv7SDWQrecxGUlKAfrUhW71/9YrcwCIdN1IVjtcsdRBAz6Z90BG1WNXsr4bJTsM AAaL8gZyhNsQFel7nGq9pw2FM8pMd4nVQBjXRAyeF++OXwQw+saihSWjYwCu7XJQ eejK0Rjp+wKVXlhPQK/hXqjtGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS6ePnH nQAJs3BfQEjv7Pvxjh3NMB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjhEQi82NTc5Mzc4Qzk5MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3 WEc4U1Y0WDBEMXZDY0o5OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHDdQbH6b/fdmB/nSs603WV6gd1dEVXv5CzrNTu3qEZjmDrCYKr20l ev7qDmqx2FfXedzvclqeHQ/MuDZPV0c8XzH2rQgWWoVm+4eJxVUI/+7V2O/L9zfN G2O7GqnEUmPc11gDaEeg+gq+txTlZrULwQvaSjO0+ZZVDSJ4O9uNWXJ446BwzfSg cTv0pZJAJxPLYipQ4RfUoPu1M1VdQ8see3zAAp/5pp2c6yRP9jK8AP3WOv5+uqX9 JA/p5evptIwW7sF+dMilcmYOMrw1SafKW2TiPWr96CTYZtK52DKyqyEruzFCTaKe wIX8GUZXkeMNbxP461JxWxFAmVWMc0ZW -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:56 2025 by rpki-client