$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: boYaFaV+cWdnL7KPqUrUUKMhdvqz4BlTOr8IJmAgrT8= Subject key identifier: A5:8D:32:51:52:82:47:1C:8A:D5:2F:48:9A:8A:B9:F7:DA:EA:EC:F1 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: AE Signing time: Fri 05 Sep 2025 06:35:26 +0000 Manifest this update: Fri 05 Sep 2025 06:35:26 +0000 Manifest next update: Fri 12 Sep 2025 06:35:26 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: BdEF6YWBaVxswpTw4THhGcIxy9Q9S/E6pOI/5VYI2fs=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Sep 5 06:35:26 2025 GMT Not After : Sep 12 06:35:26 2025 GMT Subject: CN=68ba84ae-f2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:b9:87:61:1e:9d:21:b5:9b:a1:0f:d9:4b: 66:85:be:ba:0f:fd:04:e5:8f:0f:f7:a8:01:b2:49: ac:c7:b5:d2:02:cd:85:90:c2:80:87:32:b3:9a:0f: e0:e6:8a:98:f6:27:1c:e0:4a:da:0a:06:53:04:f3: a0:05:0b:59:be:4f:9b:8f:23:6f:d9:18:b5:a4:a5: 7d:be:b9:ce:45:71:9b:05:96:2b:c7:af:12:9b:a7: 87:fe:cb:88:28:ec:7a:14:4a:a1:04:7f:70:40:a0: eb:45:b5:c2:69:16:37:37:16:fd:a0:e2:dc:22:78: c3:a7:fa:ea:35:c4:99:b9:a9:d7:d4:dd:96:5b:27: a1:1d:83:90:9d:cf:d2:85:74:d6:1e:a0:9c:68:8a: da:21:60:50:d8:b6:5f:eb:45:0a:61:31:47:f4:ed: 97:72:27:7a:c4:ed:5e:a1:ab:c7:2d:5b:24:e5:26: 52:12:52:27:fa:78:9c:67:41:85:10:c4:4e:4b:a4: 6f:5b:8a:25:5c:a0:9a:c6:5f:05:b8:d3:90:f3:7b: 1a:12:bf:81:2a:c8:75:5e:3b:ec:eb:ee:41:12:dd: 6c:3a:66:ff:6d:27:8c:b4:4f:c1:77:3a:59:af:11: 6b:6b:88:3e:a8:a3:21:25:10:4d:96:0b:be:f6:25: 0a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8D:32:51:52:82:47:1C:8A:D5:2F:48:9A:8A:B9:F7:DA:EA:EC:F1 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:13:d3:48:e8:69:2b:09:5a:3a:b0:74:55:97:b6:57:0c:22: a7:3e:aa:14:5d:96:25:97:b1:4a:63:eb:bb:ec:2d:95:a2:b0: 90:5b:fe:4c:85:2f:1d:68:64:63:6c:c7:ba:56:c8:58:db:05: 70:4e:f5:d2:aa:3d:43:9e:7c:68:89:6f:c1:88:45:e8:f5:0b: ca:fe:9e:da:3b:f3:53:76:0b:62:ec:0c:64:d4:d3:eb:95:ec: 26:e5:31:18:f0:49:3a:39:19:17:1f:12:53:79:fd:f7:92:f2: 4b:31:9b:c2:96:5e:3c:ca:1a:5c:b9:74:ef:e1:0d:d9:18:0e: 9d:c6:b6:af:90:30:c1:23:71:9e:f5:b2:00:af:19:45:4e:7c: 95:c1:73:2a:f4:7f:a5:11:32:7e:f8:dc:25:e5:dc:68:70:4d: 39:ab:c7:6e:81:4c:ad:a5:b1:6f:d0:a9:59:56:e9:8a:b9:7b: 1d:a6:b6:b5:12:f5:a7:7d:81:df:5b:b0:7b:73:ba:df:2e:28: 4f:59:27:43:8e:05:5d:e2:4d:fb:10:f3:d5:9c:f8:e7:df:dc: 8c:fb:75:cc:45:21:94:01:49:e5:fc:3b:22:32:af:e3:26:5e: 4c:d6:7f:40:04:84:43:70:32:1a:87:45:e6:bc:80:17:30:d1: ad:d1:49:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjUwOTA1MDYzNTI2WhcNMjUwOTEyMDYzNTI2WjAYMRYwFAYD VQQDEw02OGJhODRhZS1mMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVi5h2EenSG1m6EP2Utmhb66D/0E5Y8P96gBskmsx7XSAs2FkMKAhzKzmg/g 5oqY9icc4EraCgZTBPOgBQtZvk+bjyNv2Ri1pKV9vrnORXGbBZYrx68Sm6eH/suI KOx6FEqhBH9wQKDrRbXCaRY3Nxb9oOLcInjDp/rqNcSZuanX1N2WWyehHYOQnc/S hXTWHqCcaIraIWBQ2LZf60UKYTFH9O2Xcid6xO1eoavHLVsk5SZSElIn+nicZ0GF EMROS6RvW4olXKCaxl8FuNOQ83saEr+BKsh1Xjvs6+5BEt1sOmb/bSeMtE/BdzpZ rxFra4g+qKMhJRBNlgu+9iUKAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWNMlFS gkccitUvSJqKuffa6uzxMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRE9NI6GkrCVo6sHRVl7ZXDCKnPqoUXZYll7FKY+u77C2VorCQW/5M hS8daGRjbMe6VshY2wVwTvXSqj1DnnxoiW/BiEXo9QvK/p7aO/NTdgti7Axk1NPr lewm5TEY8Ek6ORkXHxJTef33kvJLMZvCll48yhpcuXTv4Q3ZGA6dxravkDDBI3Ge 9bIArxlFTnyVwXMq9H+lETJ++Nwl5dxocE05q8dugUytpbFv0KlZVumKuXsdpra1 EvWnfYHfW7B7c7rfLihPWSdDjgVd4k37EPPVnPjn39yM+3XMRSGUAUnl/DsiMq/j Jl5M1n9ABIRDcDIah0XmvIAXMNGt0Ul8 -----END CERTIFICATE-----Generated at Sat Sep 6 21:28:26 2025 by rpki-client