$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: xbyBq7njNTAFsD6NXg58MjBsU8dewD29m2B7UU823Po= Subject key identifier: 1A:08:53:9E:83:07:89:36:86:20:2E:C3:0B:B3:1B:56:0A:25:EC:8D Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 17F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 17EE Signing time: Wed 02 Jul 2025 16:40:41 +0000 Manifest this update: Wed 02 Jul 2025 16:40:40 +0000 Manifest next update: Wed 09 Jul 2025 16:40:40 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: NuUjLj+8MTW8sB8OuCHij7xPorP3objDiTuc6XlKGuo=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: g6s+BNZQJQ8eLNLhvPLgACbzK2XG9M1Q2Nm7UCMcOkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6134 (0x17f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Jul 2 16:40:40 2025 GMT Not After : Jul 9 16:40:40 2025 GMT Subject: CN=68656109-ee82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:a7:c0:ae:90:d4:6e:48:21:71:6a:0b:e8: a9:0a:c0:ac:e9:ae:de:61:75:d8:63:8e:88:76:52: ca:a9:f1:3a:29:ad:c5:49:5b:f7:92:52:7d:cb:ef: 9a:81:29:4a:c3:4a:85:42:4b:15:1e:fa:14:6f:64: c8:8f:71:d5:9d:96:8f:b5:77:e2:06:d9:fb:c5:48: 3d:eb:c1:33:14:a8:f0:7c:5b:a1:6f:e0:bc:82:36: a6:24:94:41:14:3a:e2:ed:16:3d:03:1a:f1:42:0e: 70:8a:f9:fb:4a:e6:93:d8:0b:a4:75:1f:77:06:fe: 40:7d:88:be:6e:12:a6:4c:4f:c0:02:62:1f:4b:67: d0:34:87:79:4e:9e:a0:56:34:75:b4:60:e3:69:44: 17:c3:cc:29:b5:f1:04:c6:7e:4b:4a:98:aa:7f:d3: 63:98:6d:f9:cc:ee:14:f3:19:cb:44:e8:d7:0e:16: af:0f:f9:a0:bb:1a:73:fc:dd:f4:75:8a:aa:3a:f9: 19:e0:18:c2:e6:bc:53:ec:72:18:66:16:3f:70:20: 61:4e:46:d3:2f:bd:fc:17:0b:33:a6:e7:83:0a:6f: 6a:1c:17:e4:60:78:ef:52:52:f4:e2:7c:cc:a5:8e: db:50:03:23:7b:6c:c4:a3:af:c8:a0:4a:b1:1b:4b: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:08:53:9E:83:07:89:36:86:20:2E:C3:0B:B3:1B:56:0A:25:EC:8D X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:61:84:0f:a3:2d:27:be:5d:fe:34:60:80:e2:31:55:a5:3c: 30:e9:a2:c2:2e:ea:fb:2e:53:74:72:4a:8f:16:b2:3d:be:71: 11:df:fa:24:69:8a:d4:da:26:a9:9c:c0:de:64:15:2f:f6:18: ab:4e:a9:8f:01:2a:b9:7f:ee:61:ba:57:e6:b9:42:51:6f:66: c2:b1:f1:8d:86:1b:c0:3e:f9:71:78:1b:3e:00:41:0a:34:76: ce:83:76:18:f1:32:e9:1a:14:00:74:60:18:ce:f1:f4:c9:73: 04:28:6a:6e:d1:7e:65:33:b2:f3:23:98:12:06:0f:0d:b0:c8: 5c:90:a7:42:29:f3:28:0e:d2:66:07:f1:34:b7:a8:39:c6:da: 92:49:5e:54:99:3f:07:6a:1b:3f:53:9e:4f:75:a7:a0:aa:cb: 68:5b:7d:3f:2e:55:c0:df:90:08:8b:a4:d2:c7:08:e3:ad:7c: 27:35:47:05:5b:ab:99:37:d3:bb:51:37:a8:19:22:4e:1a:0a: dd:18:3b:5a:11:dc:f4:8e:0d:fa:f6:4d:69:20:fb:34:9d:0f: 3c:3a:57:b4:a0:56:2e:7e:5b:1a:19:3d:37:cc:17:6a:ad:d0: cf:83:7a:05:74:10:ef:72:eb:92:94:f3:03:b9:31:c4:0a:69: 79:b3:97:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUwNzAyMTY0MDQwWhcNMjUwNzA5MTY0MDQwWjAYMRYwFAYD VQQDEw02ODY1NjEwOS1lZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZOnwK6Q1G5IIXFqC+ipCsCs6a7eYXXYY46IdlLKqfE6Ka3FSVv3klJ9y++a gSlKw0qFQksVHvoUb2TIj3HVnZaPtXfiBtn7xUg968EzFKjwfFuhb+C8gjamJJRB FDri7RY9AxrxQg5wivn7SuaT2AukdR93Bv5AfYi+bhKmTE/AAmIfS2fQNId5Tp6g VjR1tGDjaUQXw8wptfEExn5LSpiqf9NjmG35zO4U8xnLROjXDhavD/mguxpz/N30 dYqqOvkZ4BjC5rxT7HIYZhY/cCBhTkbTL738FwszpueDCm9qHBfkYHjvUlL04nzM pY7bUAMje2zEo6/IoEqxG0urRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoIU56D B4k2hiAuwwuzG1YKJeyNMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxYYQPoy0nvl3+NGCA4jFVpTww6aLCLur7LlN0ckqPFrI9vnER3/ok aYrU2iapnMDeZBUv9hirTqmPASq5f+5hulfmuUJRb2bCsfGNhhvAPvlxeBs+AEEK NHbOg3YY8TLpGhQAdGAYzvH0yXMEKGpu0X5lM7LzI5gSBg8NsMhckKdCKfMoDtJm B/E0t6g5xtqSSV5UmT8Hahs/U55PdaegqstoW30/LlXA35AIi6TSxwjjrXwnNUcF W6uZN9O7UTeoGSJOGgrdGDtaEdz0jg369k1pIPs0nQ88Ole0oFYuflsaGT03zBdq rdDPg3oFdBDvcuuSlPMDuTHECml5s5ey -----END CERTIFICATE-----Generated at Thu Jul 3 19:49:58 2025 by rpki-client