$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: qMyU09YYPktGOoyDhLlgCUn+pvIns+86UkACbAFUOtI= Subject key identifier: B9:49:AB:3A:19:62:16:BB:03:BC:73:37:54:EF:E9:53:44:75:15:77 Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 0533 Signing time: Fri 22 Aug 2025 23:42:49 +0000 Manifest this update: Fri 22 Aug 2025 23:42:48 +0000 Manifest next update: Fri 29 Aug 2025 23:42:48 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: skKVHLzGYluH0VpOofU/pMDpqwO8z6tFqxTS0HyaKKw=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: GBlJBvL9mw9TcJgwkIpDEFzq0c16HJn6FF84wJKDCP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: Aug 22 23:42:48 2025 GMT Not After : Aug 29 23:42:48 2025 GMT Subject: CN=68a90079-c20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:36:b4:b6:94:4d:c9:81:e7:bb:9a:8b:bb:c3: 9e:b1:2b:ac:8a:78:f0:f9:9f:0b:32:80:21:a8:1e: 2b:71:50:a2:0d:45:8c:c4:cf:ca:2d:80:2c:be:e6: 06:3f:6e:ae:40:c8:58:de:3d:09:90:f2:c2:5a:68: 4c:a0:aa:84:79:e7:38:5b:d3:3a:e7:0e:27:a5:75: e3:bf:a0:40:02:7d:3d:57:14:ef:b0:ff:da:0a:d4: 1d:8a:65:e5:5f:ca:a5:f8:b3:dc:a8:58:79:95:93: 0c:55:75:3b:b2:f4:2e:df:0c:cb:a2:2d:a4:09:04: cc:b4:96:2b:89:c1:81:15:b0:3f:70:1c:a6:25:b6: 50:aa:b9:15:59:ec:6b:31:11:3a:44:4b:24:c1:7f: 6a:fe:cb:1f:ec:98:8c:97:60:50:37:d7:be:e2:bf: 8c:91:cd:96:f9:ae:a4:49:00:1e:06:e7:c7:e0:c4: 18:cd:20:a1:2b:58:50:24:8a:14:30:c8:ee:59:b7: 9e:38:99:88:d7:cb:25:95:01:02:8b:6d:9e:65:99: 96:48:e3:48:a8:8b:a4:7e:09:0d:98:7b:6d:59:98: 39:12:47:db:67:33:50:30:a3:29:26:9e:81:a6:a3: 7d:67:ea:e3:1e:fb:16:4f:a3:59:f6:3a:a7:9b:c1: e1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:49:AB:3A:19:62:16:BB:03:BC:73:37:54:EF:E9:53:44:75:15:77 X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ce:ce:79:dc:a4:9d:da:88:95:d7:be:65:ee:c0:65:57:8d: 54:8d:b8:98:62:da:cd:c7:07:1a:bd:45:c6:f6:2b:d1:f2:2b: 1d:7c:08:21:bc:dd:cf:8e:b2:db:5b:9b:cf:3c:6d:d0:45:53: e1:74:ac:37:67:ef:2e:79:f4:04:93:d3:86:37:e4:bb:90:81: 15:43:a8:17:a8:7a:83:74:37:5b:b4:a5:4b:92:71:52:cc:f1: 73:db:25:d0:b7:56:9b:8c:b6:67:cc:55:6a:07:c2:ad:e5:32: 48:3f:30:db:5c:f7:94:70:21:4a:4e:a9:9f:6e:be:06:fd:a5: 97:48:75:9d:4d:27:b2:cc:20:84:2d:94:80:00:72:9d:24:86: 0f:d7:75:6e:57:0f:01:fb:55:a2:7a:03:c5:6e:08:73:a4:7c: 66:db:77:66:50:f6:5b:4b:4e:e0:52:1b:a5:f3:60:0f:55:64: d4:84:79:aa:6a:18:33:a0:b8:2f:a9:37:1c:28:67:11:56:2d: d2:d3:65:4a:13:83:c4:38:5e:7f:15:0f:67:93:74:3c:d7:10: 3b:01:44:a9:9f:d6:46:a0:2d:dd:47:fe:5f:49:87:b9:dd:70: d4:f4:a8:89:47:dd:2a:78:17:83:96:f3:67:dc:fa:92:ad:97: cb:60:1c:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjUwODIyMjM0MjQ4WhcNMjUwODI5MjM0MjQ4WjAYMRYwFAYD VQQDEw02OGE5MDA3OS1jMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6za0tpRNyYHnu5qLu8OesSusinjw+Z8LMoAhqB4rcVCiDUWMxM/KLYAsvuYG P26uQMhY3j0JkPLCWmhMoKqEeec4W9M65w4npXXjv6BAAn09VxTvsP/aCtQdimXl X8ql+LPcqFh5lZMMVXU7svQu3wzLoi2kCQTMtJYricGBFbA/cBymJbZQqrkVWexr MRE6REskwX9q/ssf7JiMl2BQN9e+4r+Mkc2W+a6kSQAeBufH4MQYzSChK1hQJIoU MMjuWbeeOJmI18sllQECi22eZZmWSONIqIukfgkNmHttWZg5EkfbZzNQMKMpJp6B pqN9Z+rjHvsWT6NZ9jqnm8HhgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlJqzoZ Yha7A7xzN1Tv6VNEdRV3MB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvzs553KSd2oiV175l7sBlV41UjbiYYtrNxwcavUXG9ivR8isdfAgh vN3PjrLbW5vPPG3QRVPhdKw3Z+8uefQEk9OGN+S7kIEVQ6gXqHqDdDdbtKVLknFS zPFz2yXQt1abjLZnzFVqB8Kt5TJIPzDbXPeUcCFKTqmfbr4G/aWXSHWdTSeyzCCE LZSAAHKdJIYP13VuVw8B+1WiegPFbghzpHxm23dmUPZbS07gUhul82APVWTUhHmq ahgzoLgvqTccKGcRVi3S02VKE4PEOF5/FQ9nk3Q81xA7AUSpn9ZGoC3dR/5fSYe5 3XDU9KiJR90qeBeDlvNn3PqSrZfLYBwc -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:37 2025 by rpki-client