$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft File: RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft (raw, json) Hash identifier: p9+chqC/DVfkZ2buLh6sJDfuuVlLF6Ln6DvyxAxOgy0= Subject key identifier: EC:05:F2:2F:B4:B3:45:28:F0:8D:D5:63:4E:58:C0:0D:6E:E5:50:E4 Authority key identifier: 44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 Certificate issuer: /CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft Manifest number: A9 Signing time: Sat 23 Aug 2025 06:22:16 +0000 Manifest this update: Sat 23 Aug 2025 06:22:15 +0000 Manifest next update: Sat 30 Aug 2025 06:22:15 +0000 Files and hashes: 1: RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl (hash: bNAiQldrEVh+XylXC4xWhFca6Q8mUGQJE6XxKjo2w2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Validity Not Before: Aug 23 06:22:15 2025 GMT Not After : Aug 30 06:22:15 2025 GMT Subject: CN=68a95e18-5501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:d3:e0:0e:db:b3:e6:5a:fd:86:58:c7:7c: 99:2f:5d:73:5b:81:e6:65:27:58:c1:1e:56:8e:a7: 80:c4:91:38:ea:2a:dc:0c:fe:60:6f:06:07:48:60: 7d:9f:78:48:8e:06:37:9e:1e:9e:3e:e9:6d:b9:bc: 28:7e:a5:f2:22:0b:63:cf:82:d5:b4:6e:b9:8e:d7: e5:03:67:bb:5d:ac:61:f3:80:c8:92:34:48:65:87: 21:f5:8a:13:e4:06:6d:dd:fb:b8:61:b0:2d:f8:ff: 0f:d8:ec:b7:aa:ce:fd:b8:46:6d:11:c1:27:a1:e0: 77:8c:bb:96:c4:33:0a:48:a3:e6:13:c6:68:ca:74: 88:ea:a0:7d:1e:48:4f:ab:af:54:d3:c6:4b:d6:6a: fa:b4:8f:bb:66:02:32:45:f0:86:91:38:70:7c:48: b0:fb:06:6a:36:e6:4d:eb:58:4a:ca:ac:5b:9b:f6: d9:cb:ee:a1:ff:1a:f0:82:63:69:af:12:54:fc:3d: c3:74:47:2a:46:0f:4a:3a:8f:6b:08:68:40:0e:27: 3e:a2:46:7a:7c:1a:56:d8:f5:f3:1a:ba:39:46:b0: ce:a8:92:44:2b:6d:32:55:48:5c:0a:54:48:5a:bd: ab:00:c2:8c:dd:05:99:e8:6a:a1:86:0b:0b:33:31: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:05:F2:2F:B4:B3:45:28:F0:8D:D5:63:4E:58:C0:0D:6E:E5:50:E4 X509v3 Authority Key Identifier: keyid:44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:81:d3:b1:af:bd:7d:3d:de:4c:de:12:f1:fd:8f:dd:c4:26: da:a1:04:d0:b9:39:25:d0:fa:06:fc:e2:b5:3d:d3:c9:d1:b3: 63:b0:95:65:df:9c:b2:f9:0c:c0:fb:a5:5d:a1:56:d8:6b:f9: 7b:5d:f4:c5:ea:3c:45:74:ff:4f:60:f2:f2:61:a5:c3:d4:f6: bd:2a:2a:dd:c1:f7:c7:aa:33:61:16:2d:3d:62:87:6d:37:82: d8:96:b6:0e:59:52:c1:2e:dd:1f:ad:96:d9:ad:a6:e5:d1:69: 43:77:bb:bb:f9:ae:a6:ee:e8:2e:e4:aa:58:f2:d4:75:08:f1: fd:46:87:d0:3b:92:e7:0e:18:2f:49:cf:18:5e:b8:ba:ad:43: 29:d2:84:ef:ed:bb:37:33:aa:5f:f4:62:30:5c:dc:30:16:f9: 33:85:73:6a:65:e1:af:b0:c6:df:ad:cc:c0:e8:1b:37:11:89: 58:d1:f1:32:3c:84:d9:6f:3a:b5:38:af:7f:b2:cb:0d:48:c6: 7b:02:07:df:a5:ad:83:d9:f8:c8:52:04:c1:94:06:0c:c1:3c: bd:9f:bc:f5:0e:15:3a:85:4e:f6:ef:63:45:19:0a:a4:9c:5c: 16:50:c3:a3:8e:5e:d3:c6:49:ee:c9:ed:24:d7:64:33:59:67: ee:94:d3:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKDQ0RjlDNERBNDdFNjM3MUZEMUM5RjlGOEU1NjREMTgw M0EwRjMyODcwHhcNMjUwODIzMDYyMjE1WhcNMjUwODMwMDYyMjE1WjAYMRYwFAYD VQQDEw02OGE5NWUxOC01NTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO3T4A7bs+Za/YZYx3yZL11zW4HmZSdYwR5WjqeAxJE46ircDP5gbwYHSGB9 n3hIjgY3nh6ePultubwofqXyIgtjz4LVtG65jtflA2e7Xaxh84DIkjRIZYch9YoT 5AZt3fu4YbAt+P8P2Oy3qs79uEZtEcEnoeB3jLuWxDMKSKPmE8ZoynSI6qB9HkhP q69U08ZL1mr6tI+7ZgIyRfCGkThwfEiw+wZqNuZN61hKyqxbm/bZy+6h/xrwgmNp rxJU/D3DdEcqRg9KOo9rCGhADic+okZ6fBpW2PXzGro5RrDOqJJEK20yVUhcClRI Wr2rAMKM3QWZ6GqhhgsLMzEmxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwF8i+0 s0Uo8I3VY05YwA1u5VDkMB8GA1UdIwQYMBaAFET5xNpH5jcf0cn5+OVk0YA6DzKH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wQUU0ODI5MDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9SUG5FMmtmbU54X1J5Zm40NVdUUmdEb1BN b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQbkUya2ZtTnhfUnlmbjQ1V1RSZ0RvUE1vYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wQUU0ODI5MDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9SUG5FMmtmbU54 X1J5Zm40NVdUUmdEb1BNb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvgdOxr719Pd5M3hLx/Y/dxCbaoQTQuTkl0PoG/OK1PdPJ0bNjsJVl 35yy+QzA+6VdoVbYa/l7XfTF6jxFdP9PYPLyYaXD1Pa9KirdwffHqjNhFi09Yodt N4LYlrYOWVLBLt0frZbZrabl0WlDd7u7+a6m7ugu5KpY8tR1CPH9RofQO5LnDhgv Sc8YXri6rUMp0oTv7bs3M6pf9GIwXNwwFvkzhXNqZeGvsMbfrczA6Bs3EYlY0fEy PITZbzq1OK9/sssNSMZ7Agffpa2D2fjIUgTBlAYMwTy9n7z1DhU6hU7272NFGQqk nFwWUMOjjl7Txknuye0k12QzWWfulNPG -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:16 2025 by rpki-client