$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: o9cs8iStcJnNUqbtsIPK9hOsqxZBFOYAfpJwfn3uEz8= Subject key identifier: EC:E7:E5:17:7B:D5:A3:57:B3:C7:C4:03:93:A3:19:8B:A9:84:32:4A Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: 8D Signing time: Sat 23 Aug 2025 07:04:56 +0000 Manifest this update: Sat 23 Aug 2025 07:04:56 +0000 Manifest next update: Sat 30 Aug 2025 07:04:55 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: 5ErQD8EkvMdc16yvy4Tcq1a2lJOFoah6UyJmBqcbg7E=) 2: D14C1FE06AB211F0976F001AC4F9AE02.roa (hash: CNFybG+1Rnqg1iljhEw8ck5HDJaCoHmMcCeBkIlBTRM=) 3: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=) 4: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: SlcZUPBC731CkDPBH5QtG+XBH8C8VdxLmEudErYJG5E=) 5: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=) 6: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: osJymXWvyeEbSd3fJszp+bN45618xj8y1ABpGIi5IYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Aug 23 07:04:56 2025 GMT Not After : Aug 30 07:04:55 2025 GMT Subject: CN=68a96818-29f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:f9:f1:e8:84:15:ae:b8:5f:eb:88:94:34: 3c:7f:90:08:c4:74:3f:4e:4c:0e:cd:df:cb:a4:bf: 75:32:5f:b4:16:db:36:b2:af:96:af:14:e4:a7:1f: af:b1:b7:19:29:b6:a1:45:b9:69:f2:20:f7:51:6e: f5:a4:2d:40:51:18:18:b6:99:c8:98:39:ff:8a:79: a9:7e:ab:ed:6d:09:da:8d:6d:c2:1f:c8:49:bf:d9: d5:58:ee:f2:f9:d7:44:de:c1:ee:c1:d6:9a:45:39: 0d:3b:f2:d6:3e:47:e1:2a:03:2b:57:59:e8:b8:05: 33:7c:50:36:d2:fd:79:84:09:d2:b9:5d:ea:28:ed: 8c:8b:72:c8:59:d3:aa:e5:f2:9e:96:cc:94:5d:2d: 38:1d:a7:f6:c9:a8:ed:4b:78:2b:df:3d:80:32:65: f1:3f:78:2f:97:f4:07:a0:5a:2f:e6:43:7c:87:35: 0d:77:e6:0b:89:02:55:de:77:25:88:ae:d3:33:cf: f5:0b:95:56:ab:67:1a:aa:10:a6:9f:ca:2b:a2:28: c3:d3:3c:9c:5c:b8:23:7e:48:4e:e4:44:1d:9e:e3: 6e:52:89:03:43:8a:cb:07:8b:f5:e2:c4:cd:3e:9b: 21:e6:4f:1d:af:a1:be:12:a6:9b:b3:31:98:f6:5c: 41:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E7:E5:17:7B:D5:A3:57:B3:C7:C4:03:93:A3:19:8B:A9:84:32:4A X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:7a:b0:b2:87:ed:ef:48:fc:a6:3d:62:9c:66:8c:e1:27:85: 4f:9d:25:28:b6:b3:a1:63:ba:e7:a4:12:49:e3:e4:93:1a:03: 14:b3:f7:6e:c0:de:3c:20:50:f6:07:37:51:4c:65:17:4e:cc: c2:f6:6c:a6:26:ab:6d:e5:43:37:08:63:e6:a7:69:18:44:1c: 51:ea:d1:81:51:d3:63:cf:a1:17:fd:9d:1b:af:d8:d3:83:31: 94:e1:f9:73:8f:7e:6c:74:04:e3:0f:f3:49:0d:de:9d:ad:8b: 9d:c8:3e:e8:d9:06:9c:16:9b:86:25:70:5e:ce:55:42:a2:0d: 81:2b:e1:f6:c7:29:9d:7c:2c:88:09:c1:fc:f2:5f:39:a8:50: ed:fc:a4:c5:74:4a:00:5d:54:18:c9:44:76:b7:bf:e4:28:3e: 6f:82:a9:84:c7:65:53:e9:26:1e:a5:d1:ea:6f:57:08:3e:93: 8d:21:4d:44:f8:ad:d3:19:a1:52:df:d4:8e:3b:65:c4:19:70: f8:d2:36:29:c4:cc:ca:29:07:17:65:6c:fc:15:b9:fb:ff:e5: 68:d3:05:3c:5b:8e:56:9d:a9:c6:29:1c:83:51:a2:88:36:95: 76:c6:11:0d:37:67:21:04:40:f1:5d:93:b9:b3:e5:a3:9d:3d: 14:57:b6:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjUwODIzMDcwNDU2WhcNMjUwODMwMDcwNDU1WjAYMRYwFAYD VQQDEw02OGE5NjgxOC0yOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7z58eiEFa64X+uIlDQ8f5AIxHQ/TkwOzd/LpL91Ml+0Fts2sq+WrxTkpx+v sbcZKbahRblp8iD3UW71pC1AURgYtpnImDn/inmpfqvtbQnajW3CH8hJv9nVWO7y +ddE3sHuwdaaRTkNO/LWPkfhKgMrV1nouAUzfFA20v15hAnSuV3qKO2Mi3LIWdOq 5fKelsyUXS04Haf2yajtS3gr3z2AMmXxP3gvl/QHoFov5kN8hzUNd+YLiQJV3ncl iK7TM8/1C5VWq2caqhCmn8oroijD0zycXLgjfkhO5EQdnuNuUokDQ4rLB4v14sTN Ppsh5k8dr6G+EqabszGY9lxBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzn5Rd7 1aNXs8fEA5OjGYuphDJKMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFU Qjk3R0NKYVFZd2RMYVA5Y28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHerCyh+3vSPymPWKcZozhJ4VPnSUotrOhY7rnpBJJ4+STGgMUs/du wN48IFD2BzdRTGUXTszC9mymJqtt5UM3CGPmp2kYRBxR6tGBUdNjz6EX/Z0br9jT gzGU4flzj35sdATjD/NJDd6drYudyD7o2QacFpuGJXBezlVCog2BK+H2xymdfCyI CcH88l85qFDt/KTFdEoAXVQYyUR2t7/kKD5vgqmEx2VT6SYepdHqb1cIPpONIU1E +K3TGaFS39SOO2XEGXD40jYpxMzKKQcXZWz8Fbn7/+Vo0wU8W45WnanGKRyDUaKI NpV2xhENN2chBEDxXZO5s+WjnT0UV7a1 -----END CERTIFICATE-----Generated at Sun Aug 24 04:35:51 2025 by rpki-client