$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: 9MYgZY6WpXKhqAazA4/5LDob3tLxCORLDakk2QtdoFw= Subject key identifier: 96:04:5A:C3:D8:44:28:33:D8:AB:42:87:94:57:C8:8E:75:A9:5E:0E Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 0819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 080B Signing time: Wed 02 Jul 2025 21:11:12 +0000 Manifest this update: Wed 02 Jul 2025 21:11:11 +0000 Manifest next update: Wed 09 Jul 2025 21:11:11 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: 8FoKjG8AUucpSx2XOYyC4Nm6S1DihGxaQg+zv1TCfak=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: L4B2evBW9dTHQXVqbxeQ4CNrkuNZaT5qA9O5a+LAGeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2073 (0x819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Jul 2 21:11:11 2025 GMT Not After : Jul 9 21:11:11 2025 GMT Subject: CN=6865a06f-5dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:de:16:67:d7:50:29:f9:dc:99:73:32:83: 8f:78:67:84:0e:d0:46:85:ba:f5:a7:64:38:60:4b: e4:05:02:e9:75:8d:06:c1:82:d0:b4:65:62:af:0d: 87:21:50:78:78:0c:8d:13:37:c6:f2:90:a7:16:fb: 84:5a:57:f9:48:49:6b:c7:8e:4c:60:55:69:02:f6: 6d:9a:c7:8b:d0:3c:79:d4:20:7e:5b:62:dc:5d:7f: 8c:2e:9c:ab:8c:36:14:b7:45:e8:c3:96:23:ca:ce: 8c:0a:96:1c:3a:8c:ac:65:6e:37:c5:ce:e3:56:d1: ff:9e:53:28:af:6a:a8:c8:76:75:be:aa:43:3d:3a: e7:b5:b0:d1:08:9e:86:92:58:57:c3:f7:cf:61:4a: 17:9e:86:0f:bd:c1:9f:88:96:db:b2:d7:f8:5c:0d: b4:cd:f0:37:75:ba:a9:5f:70:76:a9:54:c1:f5:ec: 6b:42:df:0f:0f:2e:96:f9:81:a2:bf:d5:bd:e4:82: db:6c:72:7d:23:cf:0f:dc:b5:c3:b2:c3:e4:83:d3: 7b:3c:cc:f0:df:3e:47:9c:69:bb:a3:21:e8:6a:30: 58:da:7e:2d:33:d0:70:ba:1b:34:8f:ec:37:b3:72: f0:60:50:88:81:52:ac:a6:98:63:aa:c7:73:c9:bb: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:5A:C3:D8:44:28:33:D8:AB:42:87:94:57:C8:8E:75:A9:5E:0E X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f2:a2:bc:7b:b6:0b:f6:e1:66:60:0a:66:17:46:e1:7e:d3: 29:db:12:96:6d:76:cc:d8:a9:a0:3f:e6:45:6b:d5:77:fb:42: f8:2f:d9:ed:9b:64:66:fe:fc:b6:fe:b5:2e:3d:d5:93:8f:c8: 15:b7:c5:76:cd:ba:f7:33:fa:36:02:77:61:9e:17:89:88:4e: 09:28:06:9d:87:18:d1:9f:14:18:fe:51:cf:f8:50:fa:32:68: f4:02:be:28:a6:f4:ef:1e:15:65:36:25:5f:f7:6b:bc:18:14: 6c:a1:5d:f2:de:f6:82:d4:41:c1:95:15:4e:74:62:32:d8:11: 8b:5b:68:32:49:9d:0a:1a:2c:f7:a3:95:fe:3f:86:55:68:e1: 57:ce:89:a7:dc:ef:3a:0d:da:c5:ba:81:b8:6b:ef:24:26:8e: 8b:c2:f3:84:8f:0b:82:2a:49:42:c8:3b:a7:7e:0a:94:bf:78: 89:67:5e:16:4e:5e:4f:3b:b7:02:e7:49:21:09:a6:52:c0:6d: ef:18:ca:ea:62:ac:27:81:3a:94:67:bf:d6:ab:2c:a3:37:54: 4c:a4:25:1b:92:e3:5d:f9:7b:05:e9:25:1d:f6:9c:db:a8:0a: 0c:9d:1b:d1:ce:40:97:9c:1b:10:d5:ac:2a:44:3f:81:c9:b7: 5b:ed:90:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjUwNzAyMjExMTExWhcNMjUwNzA5MjExMTExWjAYMRYwFAYD VQQDEw02ODY1YTA2Zi01ZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujfeFmfXUCn53JlzMoOPeGeEDtBGhbr1p2Q4YEvkBQLpdY0GwYLQtGVirw2H IVB4eAyNEzfG8pCnFvuEWlf5SElrx45MYFVpAvZtmseL0Dx51CB+W2LcXX+MLpyr jDYUt0Xow5Yjys6MCpYcOoysZW43xc7jVtH/nlMor2qoyHZ1vqpDPTrntbDRCJ6G klhXw/fPYUoXnoYPvcGfiJbbstf4XA20zfA3dbqpX3B2qVTB9exrQt8PDy6W+YGi v9W95ILbbHJ9I88P3LXDssPkg9N7PMzw3z5HnGm7oyHoajBY2n4tM9Bwuhs0j+w3 s3LwYFCIgVKspphjqsdzybvL4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYEWsPY RCgz2KtCh5RXyI51qV4OMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB58qK8e7YL9uFmYApmF0bhftMp2xKWbXbM2KmgP+ZFa9V3+0L4L9nt m2Rm/vy2/rUuPdWTj8gVt8V2zbr3M/o2AndhnheJiE4JKAadhxjRnxQY/lHP+FD6 Mmj0Ar4opvTvHhVlNiVf92u8GBRsoV3y3vaC1EHBlRVOdGIy2BGLW2gySZ0KGiz3 o5X+P4ZVaOFXzomn3O86DdrFuoG4a+8kJo6LwvOEjwuCKklCyDunfgqUv3iJZ14W Tl5PO7cC50khCaZSwG3vGMrqYqwngTqUZ7/WqyyjN1RMpCUbkuNd+XsF6SUd9pzb qAoMnRvRzkCXnBsQ1awqRD+Bybdb7ZCA -----END CERTIFICATE-----Generated at Fri Jul 4 07:28:00 2025 by rpki-client