$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: izRvCUc0V9qy4gAcVUt6z7cZ35rtvgccO6RVRrRfYJQ= Subject key identifier: 63:1A:40:AC:12:A5:A9:B1:58:25:49:4D:57:95:AF:8F:6C:82:C8:9F Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: 9E Signing time: Mon 21 Jul 2025 06:26:32 +0000 Manifest this update: Mon 21 Jul 2025 06:26:32 +0000 Manifest next update: Mon 28 Jul 2025 06:26:32 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: P1eaDYREpCJSMOKb5+xcIP+7iyz5U4m3DRUTxkp67Ws=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: Jul 21 06:26:32 2025 GMT Not After : Jul 28 06:26:32 2025 GMT Subject: CN=687ddd98-5f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:44:74:41:90:82:60:3b:b1:f3:e4:23:1d: aa:fb:1f:57:b2:44:74:36:d9:40:f5:5c:b8:04:25: 6f:0f:73:41:13:a9:3f:8e:14:b6:e6:c6:e7:5d:c9: 6b:03:74:78:e5:d9:48:02:fa:e8:6e:59:9e:3b:0e: 90:29:7d:54:be:19:54:0e:42:a8:3f:08:ca:d0:79: e9:65:32:0c:46:cd:e6:e7:9d:67:b1:4f:9e:23:3e: 34:ff:33:b9:0f:1b:3b:41:34:3d:19:f0:68:3c:ef: ef:ab:79:67:4c:3b:63:3c:83:f6:c6:f2:a9:d9:90: a0:f9:df:7c:79:89:a1:7f:79:f1:e7:41:62:01:c9: 8f:a4:88:15:bf:1d:5c:48:b9:60:5a:63:66:e9:eb: 3c:31:84:f2:1d:7d:f9:3e:fe:64:09:cb:5c:21:05: e8:ce:2f:ac:b1:0d:ba:46:38:19:2c:8a:7e:a2:a6: ad:d6:1a:4c:2d:03:82:f0:e1:3a:26:dc:a1:90:56: 1b:58:7a:ce:ab:30:f8:49:56:f3:23:f0:35:03:2b: 4c:95:e4:e9:cb:9f:c2:5a:84:f7:0d:e2:e0:63:0b: 2e:57:6c:44:e6:64:21:67:ce:9b:5b:b7:26:68:47: 4e:db:e5:6c:ff:7f:57:79:67:02:c6:fe:8c:2a:75: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1A:40:AC:12:A5:A9:B1:58:25:49:4D:57:95:AF:8F:6C:82:C8:9F X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:76:50:04:22:ab:55:7d:65:c9:28:35:8d:44:bc:14:81:c1: 42:93:86:d0:5a:8f:b4:1b:21:8e:b0:52:e8:32:c2:6a:f5:09: 9c:0f:c2:c0:bf:37:dd:f7:d6:6e:59:89:41:1c:9b:a7:de:b2: a2:39:c3:1a:f2:c8:77:ce:78:06:77:01:47:c4:dd:d0:15:72: 8e:68:39:41:e6:26:70:92:e7:dd:9f:36:52:0e:e8:96:50:0b: d2:ad:2f:6b:f2:2e:40:41:cb:17:b0:7e:7a:52:1c:1d:12:68: 8e:05:80:a1:00:51:ff:89:8a:4b:c3:a0:1c:e5:29:b0:2c:08: 6e:47:12:f5:89:23:3a:80:65:e0:16:46:1e:0b:29:4b:67:77: 9c:73:44:7a:7a:59:1b:41:39:57:6e:cd:b2:28:64:98:a5:da: 17:96:ef:f4:63:4b:0a:b0:b8:dc:fb:bb:7c:96:4c:9b:58:e1: f6:74:3f:c1:d9:a5:90:49:88:ed:93:dc:c2:bf:e5:5c:6d:6c: 24:bc:26:1b:a9:8b:8d:49:14:95:c4:da:a7:10:cb:fd:80:d7: 53:ad:59:03:a6:bc:84:c3:4c:0b:9b:aa:6e:a0:18:76:44:94: b1:6e:f2:75:fa:86:8e:49:b0:2c:e2:e6:e3:52:84:9c:08:fe: 97:28:61:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKDQ1N0RCNzY2RTFCMEQ2QTREQ0M3RjlBRUNEMjg3RDRE QzNFNzBDOUUwHhcNMjUwNzIxMDYyNjMyWhcNMjUwNzI4MDYyNjMyWjAYMRYwFAYD VQQDEw02ODdkZGQ5OC01Zjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEFEdEGQgmA7sfPkIx2q+x9XskR0NtlA9Vy4BCVvD3NBE6k/jhS25sbnXclr A3R45dlIAvroblmeOw6QKX1UvhlUDkKoPwjK0HnpZTIMRs3m551nsU+eIz40/zO5 Dxs7QTQ9GfBoPO/vq3lnTDtjPIP2xvKp2ZCg+d98eYmhf3nx50FiAcmPpIgVvx1c SLlgWmNm6es8MYTyHX35Pv5kCctcIQXozi+ssQ26RjgZLIp+oqat1hpMLQOC8OE6 JtyhkFYbWHrOqzD4SVbzI/A1AytMleTpy5/CWoT3DeLgYwsuV2xE5mQhZ86bW7cm aEdO2+Vs/39XeWcCxv6MKnU5wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMaQKwS pamxWCVJTVeVr49sgsifMB8GA1UdIwQYMBaAFEV9t2bhsNak3Mf5rs0ofU3D5wye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xMjA4NUQxODc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFxVGN4X211elNoOVRjUG5E SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xMjA4NUQxODc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFx VGN4X211elNoOVRjUG5ESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmdlAEIqtVfWXJKDWNRLwUgcFCk4bQWo+0GyGOsFLoMsJq9QmcD8LA vzfd99ZuWYlBHJun3rKiOcMa8sh3zngGdwFHxN3QFXKOaDlB5iZwkufdnzZSDuiW UAvSrS9r8i5AQcsXsH56UhwdEmiOBYChAFH/iYpLw6Ac5SmwLAhuRxL1iSM6gGXg FkYeCylLZ3ecc0R6elkbQTlXbs2yKGSYpdoXlu/0Y0sKsLjc+7t8lkybWOH2dD/B 2aWQSYjtk9zCv+VcbWwkvCYbqYuNSRSVxNqnEMv9gNdTrVkDpryEw0wLm6puoBh2 RJSxbvJ1+oaOSbAs4ubjUoScCP6XKGFw -----END CERTIFICATE-----Generated at Mon Jul 21 12:38:08 2025 by rpki-client