$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: jQFg3orjQxatGC+qmYnjRh9ocAczMsIdzinyUGTT+1U= Subject key identifier: BD:94:DC:7F:FD:DD:AC:5C:5E:48:BA:E1:43:56:0E:4A:2E:F9:F6:C2 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 95 Signing time: Sat 19 Jul 2025 06:40:40 +0000 Manifest this update: Sat 19 Jul 2025 06:40:39 +0000 Manifest next update: Sat 26 Jul 2025 06:40:39 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: wVfqidLxrEDxD/iIJZjHrQQfnUHyE7l4N/RUE/YR924=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Jul 19 06:40:39 2025 GMT Not After : Jul 26 06:40:39 2025 GMT Subject: CN=687b3de7-0c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:16:f2:06:0e:1a:15:88:13:b0:d6:b8:9d: 71:d9:4f:89:b1:c4:38:9f:2b:6e:80:cf:b1:0d:6e: 15:79:20:65:4c:31:da:e9:6b:e8:e5:52:0e:e1:e8: 28:22:06:df:a1:96:42:15:1f:59:fd:da:4c:35:f7: c4:90:be:cf:ac:d6:e7:ca:46:01:c3:a0:ba:a5:2e: 23:1a:af:19:ca:6c:4b:a6:a7:cc:bb:11:ff:18:0a: e9:3d:2e:f2:58:ed:d8:c0:34:67:bf:a2:0e:ce:7b: 73:21:5c:db:13:75:85:92:c6:59:6e:40:26:28:17: e3:6e:2f:82:f2:82:d6:bd:03:fe:09:13:44:6c:46: 1b:60:9e:3d:ae:ca:ad:97:ac:5f:72:a2:8d:df:c9: 1b:03:16:e6:c8:97:57:7e:ee:d4:84:70:f6:bf:74: fb:be:b4:87:51:f6:f1:ca:81:f2:5d:2e:f4:a8:f3: 6f:f0:7a:7a:5d:18:d2:80:12:6d:76:42:15:c5:ac: 15:b0:82:10:dc:02:db:63:74:7a:fe:a7:6b:06:74: 6c:dd:06:0b:8d:71:a8:12:6c:f6:af:d4:a4:cb:cb: a0:03:64:71:9f:0c:04:4c:3a:1e:a8:68:f3:85:14: de:6d:6f:d2:23:db:cb:74:3c:d0:50:42:c4:69:f7: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:94:DC:7F:FD:DD:AC:5C:5E:48:BA:E1:43:56:0E:4A:2E:F9:F6:C2 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:eb:c9:aa:cb:8c:e6:ab:14:a1:af:23:f1:51:0a:c2:d2:89: 2e:ee:10:81:5c:10:9c:8e:c9:17:7e:82:13:ef:ff:e8:82:40: 0e:d3:fa:ca:13:19:fe:95:24:7d:7f:5f:50:2f:33:61:9f:1f: 2d:8d:7b:1c:0c:57:5e:fe:78:fb:a9:25:41:d2:f3:f6:d4:33: 24:cf:f2:bf:a6:0c:2c:33:78:27:74:03:c5:d1:74:a9:24:e9: 47:7e:17:d8:9d:16:08:85:a1:61:e5:81:d2:a0:9c:f7:fd:7f: 85:17:e6:a7:dc:c3:c3:c7:51:9e:08:b6:df:ab:e9:9d:59:c1: e7:35:d0:60:7f:e0:da:35:17:17:24:bb:81:03:7a:de:88:e1: 69:49:1c:69:f9:5d:cf:a9:72:8a:0b:eb:33:ea:3b:13:a7:a4: d1:a1:92:6e:6a:c8:9f:0a:08:bc:2e:b0:8e:53:70:9d:07:07: 4e:67:6b:ed:8c:3a:df:d3:e0:04:1f:d7:1f:46:8d:a8:8b:b2: 84:1d:f1:37:ab:70:a7:7d:91:a0:0f:a4:4e:ab:21:de:68:61: a6:af:b1:ee:f2:90:c9:d4:77:fc:4e:a2:fc:ad:37:f8:9a:4f: 18:3f:a3:31:72:4e:a9:15:ed:40:18:a0:1f:a7:bf:59:9e:8e: 6c:8c:ca:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjUwNzE5MDY0MDM5WhcNMjUwNzI2MDY0MDM5WjAYMRYwFAYD VQQDEw02ODdiM2RlNy0wYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaQW8gYOGhWIE7DWuJ1x2U+JscQ4nytugM+xDW4VeSBlTDHa6Wvo5VIO4ego IgbfoZZCFR9Z/dpMNffEkL7PrNbnykYBw6C6pS4jGq8ZymxLpqfMuxH/GArpPS7y WO3YwDRnv6IOzntzIVzbE3WFksZZbkAmKBfjbi+C8oLWvQP+CRNEbEYbYJ49rsqt l6xfcqKN38kbAxbmyJdXfu7UhHD2v3T7vrSHUfbxyoHyXS70qPNv8Hp6XRjSgBJt dkIVxawVsIIQ3ALbY3R6/qdrBnRs3QYLjXGoEmz2r9Sky8ugA2RxnwwETDoeqGjz hRTebW/SI9vLdDzQUELEaffwqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2U3H/9 3axcXki64UNWDkou+fbCMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA168mqy4zmqxShryPxUQrC0oku7hCBXBCcjskXfoIT7//ogkAO0/rK Exn+lSR9f19QLzNhnx8tjXscDFde/nj7qSVB0vP21DMkz/K/pgwsM3gndAPF0XSp JOlHfhfYnRYIhaFh5YHSoJz3/X+FF+an3MPDx1GeCLbfq+mdWcHnNdBgf+DaNRcX JLuBA3reiOFpSRxp+V3PqXKKC+sz6jsTp6TRoZJuasifCgi8LrCOU3CdBwdOZ2vt jDrf0+AEH9cfRo2oi7KEHfE3q3CnfZGgD6ROqyHeaGGmr7Hu8pDJ1Hf8TqL8rTf4 mk8YP6Mxck6pFe1AGKAfp79Zno5sjMoK -----END CERTIFICATE-----Generated at Sun Jul 20 18:44:12 2025 by rpki-client