$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: wTLvItKys+Ml5SBA6Li8vQhG7YCgg458mIeth8JRY+0= Subject key identifier: EB:BC:99:BA:9B:D3:3A:B9:33:3F:A7:43:DE:F8:EF:68:00:A4:CD:19 Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: 6C Signing time: Tue 01 Jul 2025 07:56:29 +0000 Manifest this update: Tue 01 Jul 2025 07:56:29 +0000 Manifest next update: Tue 08 Jul 2025 07:56:29 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: DnaKl9LMr3SmUHHEruTw6sknYX9KfNpaFEaE1TwlWSQ=) 2: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: L0TZYBSsOsDONanKB37IQO4Pn//vriAmy6T0miFbXi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Jul 1 07:56:29 2025 GMT Not After : Jul 8 07:56:29 2025 GMT Subject: CN=686394ad-2577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:f8:3a:1b:0c:e7:b6:1b:dd:6f:26:40:76: 8c:b7:0a:fc:28:93:5c:90:64:67:9c:0c:82:f5:9f: 19:8d:c2:26:73:49:01:1e:d6:4c:49:03:97:00:11: 68:34:c2:4f:d5:06:0e:7a:37:2d:d9:7f:d4:cb:7e: 3a:7b:ae:d0:ad:f3:60:da:dc:d8:1f:39:ed:de:b5: 15:9a:65:1e:4d:01:76:53:24:da:f6:d3:86:5b:d9: ca:cc:2e:bd:20:63:7e:26:e8:1c:85:29:4a:39:75: 28:40:d1:3d:c7:32:86:8d:bc:e7:23:48:ad:d6:53: 5d:ef:e9:f2:fc:1b:75:73:de:8a:88:71:4b:b1:ad: c2:a4:b2:7d:e4:6e:77:a7:ae:2d:6f:a4:0d:3b:1e: 2b:c4:6a:9c:b2:d9:4d:44:84:43:50:9a:97:08:50: 2a:c2:1c:f8:af:43:2f:a1:2b:fd:61:36:3d:7a:00: 19:1a:3d:e7:db:54:f1:01:9e:4b:02:90:f2:9d:a5: 67:44:52:60:93:86:e5:5c:f3:00:b8:67:ba:27:cc: 49:07:59:e2:78:66:18:b1:f3:e5:72:41:64:03:9e: 51:2d:00:c3:dd:e9:49:19:b8:97:9f:e9:c6:75:25: 46:73:f8:8a:3f:7b:02:60:a1:72:47:89:dd:5f:fc: f5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BC:99:BA:9B:D3:3A:B9:33:3F:A7:43:DE:F8:EF:68:00:A4:CD:19 X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:25:50:b9:9b:97:39:68:e8:99:da:7f:54:60:6e:55:bd:14: c9:a5:df:39:04:1b:25:7c:a2:e6:2e:c9:5b:51:2a:e1:1d:81: 2b:a4:a8:36:9f:f7:94:48:03:7a:02:32:97:e4:f0:4c:04:00: 92:54:aa:5a:8f:b5:e5:0e:be:63:f7:96:01:0e:ff:17:c8:a5: 26:93:7d:31:49:63:cd:43:78:fe:79:1b:19:49:b6:8e:2e:fe: 63:d8:c1:c6:04:2f:f0:6e:a6:13:60:50:9a:fa:d5:87:b5:82: b7:67:b8:27:04:ad:1f:76:28:16:57:48:e9:c2:37:9b:f9:b7: 37:5e:84:16:99:35:32:c1:0f:ce:71:7e:bb:f1:b5:d1:2b:01: 6b:3b:e2:3b:40:9f:99:88:a6:14:d8:cf:a2:7e:5c:d8:3b:54: 83:98:0d:1a:38:1d:65:86:15:b3:5a:b7:97:93:49:5f:94:b3: f4:a1:36:4f:65:35:6c:03:e8:84:28:d3:f3:45:b3:fd:f8:f1: 5e:d1:50:e8:18:33:a7:72:f0:a9:47:b1:1b:b4:e8:f5:ac:6e: 7f:a6:89:12:01:a6:ac:91:17:00:56:f1:ac:be:bc:73:f0:0a: 53:1a:26:be:37:3b:4c:60:66:23:1c:16:1e:0e:69:a9:66:0a: 4b:66:28:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODVFOTExMC8GA1UEBRMoRjY5OEI1QjQ3QTA2RDUzMDdERUM2MDg5NjkwNjMwNzRC NjhGRjVDQTAeFw0yNTA3MDEwNzU2MjlaFw0yNTA3MDgwNzU2MjlaMBgxFjAUBgNV BAMTDTY4NjM5NGFkLTI1NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo+Pg6GwznthvdbyZAdoy3Cvwok1yQZGecDIL1nxmNwiZzSQEe1kxJA5cAEWg0 wk/VBg56Ny3Zf9TLfjp7rtCt82Da3NgfOe3etRWaZR5NAXZTJNr204Zb2crMLr0g Y34m6ByFKUo5dShA0T3HMoaNvOcjSK3WU13v6fL8G3Vz3oqIcUuxrcKksn3kbnen ri1vpA07HivEapyy2U1EhENQmpcIUCrCHPivQy+hK/1hNj16ABkaPefbVPEBnksC kPKdpWdEUmCThuVc8wC4Z7onzEkHWeJ4Zhix8+VyQWQDnlEtAMPd6UkZuJef6cZ1 JUZz+Io/ewJgoXJHid1f/PV1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU67yZupvT OrkzP6dD3vjvaACkzRkwHwYDVR0jBBgwFoAU9pi1tHoG1TB97GCJaQYwdLaP9cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0M5MjgwNDNBRDE3 NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDlj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXBpMXRIb0cxVEI5N0dDSmFRWXdkTGFQOWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NUU5L0M5MjgwNDNBRDE3NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRC OTdHQ0phUVl3ZExhUDljby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE0lULmblzlo6Jnaf1RgblW9FMml3zkEGyV8ouYuyVtRKuEdgSukqDaf 95RIA3oCMpfk8EwEAJJUqlqPteUOvmP3lgEO/xfIpSaTfTFJY81DeP55GxlJto4u /mPYwcYEL/BuphNgUJr61Ye1grdnuCcErR92KBZXSOnCN5v5tzdehBaZNTLBD85x frvxtdErAWs74jtAn5mIphTYz6J+XNg7VIOYDRo4HWWGFbNat5eTSV+Us/ShNk9l NWwD6IQo0/NFs/348V7RUOgYM6dy8KlHsRu06PWsbn+miRIBpqyRFwBW8ay+vHPw ClMaJr43O0xgZiMcFh4OaalmCktmKEw= -----END CERTIFICATE-----Generated at Thu Jul 3 03:51:16 2025 by rpki-client