$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: Az5cU5cE3RFiwot+EXI53j3w7Chzuh3HfeS4iR0nojY= Subject key identifier: CA:32:B0:72:99:37:73:6B:72:6E:16:F6:5D:97:51:6A:C2:77:EB:F6 Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 0396 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 0389 Signing time: Thu 21 Aug 2025 00:59:22 +0000 Manifest this update: Thu 21 Aug 2025 00:59:21 +0000 Manifest next update: Thu 28 Aug 2025 00:59:21 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: rQis55lnzCDcgeYllMGNKi1QPm1thm1De3RmAmuy6bc=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: q4NAjQjTJMFxxldl/AAiP8pDMUCdKKJhMRmCf+Jtl3M=) 3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: ICtuLoIJdvxcdfC6YrLD+/53y4ZZXc5VV+d4pptI4w0=) 4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: sTauF35xc8SZpRjcL8yNs6xEdRvTaoYQZFwMt4H/aTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Aug 21 00:59:21 2025 GMT Not After : Aug 28 00:59:21 2025 GMT Subject: CN=68a66f6a-7990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:f8:7e:40:12:00:53:10:a5:ea:00:76:52: 0e:d2:6b:8e:0f:5e:ba:a5:48:4d:20:3a:8b:6f:cf: ef:c8:78:c9:73:5f:77:ef:7c:46:ee:98:7f:f4:98: 2e:2e:a1:68:40:94:e2:e8:cb:0a:17:30:e2:90:5e: d6:48:ab:e3:18:09:49:e4:44:1a:8d:ba:de:d6:58: b2:f1:5a:75:8e:b2:06:f1:3a:f7:14:06:41:dd:5c: 33:b9:30:07:2b:de:d0:cd:8b:2b:b2:a6:e9:f6:5e: 7b:ba:a4:dc:a4:37:78:25:80:0e:03:c5:2c:da:c7: 0a:87:d0:bf:2e:9b:7c:f8:db:c3:5a:e7:19:d3:64: a9:43:be:3e:27:7f:11:50:6e:4f:bc:f6:29:95:bd: c1:9d:4d:db:1b:51:ce:3c:81:17:17:25:ec:3b:67: bc:f0:d7:f7:98:1c:1b:00:ff:f5:1e:3c:f0:31:82: 9c:11:70:d6:dc:67:b5:13:e2:eb:6f:36:a8:bf:20: 39:3b:3f:fc:a8:d9:d7:6c:b6:20:44:d6:67:8f:29: fa:64:bd:1d:73:c4:02:1b:d6:6d:a8:5d:8d:f2:e7: cb:1d:4a:4e:b8:fd:09:ef:55:8b:11:87:f4:29:c0: 5e:9d:55:20:c8:59:f2:e9:36:35:1e:50:09:6c:07: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:32:B0:72:99:37:73:6B:72:6E:16:F6:5D:97:51:6A:C2:77:EB:F6 X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a1:4b:2d:e8:43:a3:31:4b:5d:df:34:7d:9a:03:83:a4:8e: 99:aa:ca:9a:ea:14:d0:95:68:75:72:bb:5e:55:90:62:77:ae: 65:2e:1b:6c:01:ab:0a:ea:c1:75:f4:4f:d9:49:b5:60:de:8b: 02:a6:5d:29:f8:62:5e:53:d1:bc:82:d4:36:a5:37:c5:de:9f: 3d:35:96:46:f6:86:2b:00:43:ca:c2:2b:f1:9f:5b:ee:55:fc: 5a:c8:a0:a1:8d:54:2d:38:b1:e5:fd:1a:aa:cf:48:91:3d:99: f9:1e:0b:c8:64:26:c5:06:31:2e:db:1a:f9:74:6b:2b:9c:19: 6d:cc:49:5d:51:df:33:a4:81:a7:95:e0:b7:3a:77:d0:92:78: 10:54:0a:65:76:3a:f0:b6:c1:26:39:e9:ae:d7:11:7e:f4:ef: cd:03:48:b9:d1:e3:b0:ab:d3:df:12:38:a3:09:23:90:f9:a7: 52:31:5a:31:e0:89:bf:39:b4:1b:ce:48:0e:a3:e7:74:d4:cc: fa:03:e2:62:8f:d1:d9:ca:5a:91:74:ea:23:20:3b:d9:58:f5: 75:8f:7c:a7:c2:e6:de:f9:2e:74:55:a9:52:b2:01:81:a8:7d: ff:10:57:dc:89:65:db:6b:e1:0d:11:cb:e0:d8:c1:26:36:01: 7f:0d:2d:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjUwODIxMDA1OTIxWhcNMjUwODI4MDA1OTIxWjAYMRYwFAYD VQQDEw02OGE2NmY2YS03OTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVj4fkASAFMQpeoAdlIO0muOD166pUhNIDqLb8/vyHjJc19373xG7ph/9Jgu LqFoQJTi6MsKFzDikF7WSKvjGAlJ5EQajbre1liy8Vp1jrIG8Tr3FAZB3VwzuTAH K97QzYsrsqbp9l57uqTcpDd4JYAOA8Us2scKh9C/Lpt8+NvDWucZ02SpQ74+J38R UG5PvPYplb3BnU3bG1HOPIEXFyXsO2e88Nf3mBwbAP/1HjzwMYKcEXDW3Ge1E+Lr bzaovyA5Oz/8qNnXbLYgRNZnjyn6ZL0dc8QCG9ZtqF2N8ufLHUpOuP0J71WLEYf0 KcBenVUgyFny6TY1HlAJbAf/lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoysHKZ N3Nrcm4W9l2XUWrCd+v2MB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRoUst6EOjMUtd3zR9mgODpI6Zqsqa6hTQlWh1crteVZBid65lLhts AasK6sF19E/ZSbVg3osCpl0p+GJeU9G8gtQ2pTfF3p89NZZG9oYrAEPKwivxn1vu VfxayKChjVQtOLHl/Rqqz0iRPZn5HgvIZCbFBjEu2xr5dGsrnBltzEldUd8zpIGn leC3OnfQkngQVApldjrwtsEmOemu1xF+9O/NA0i50eOwq9PfEjijCSOQ+adSMVox 4Im/ObQbzkgOo+d01Mz6A+Jij9HZylqRdOojIDvZWPV1j3ynwube+S50ValSsgGB qH3/EFfciWXba+ENEcvg2MEmNgF/DS2l -----END CERTIFICATE-----Generated at Sat Aug 23 01:54:14 2025 by rpki-client