$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json) Hash identifier: GngtoPAE/Lka0vdOu6hIMagZymXZqyfsPCNcytKX34I= Subject key identifier: 94:8E:46:B7:E0:81:31:92:79:0A:FB:13:B5:2F:93:12:FB:39:08:69 Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft Manifest number: 8E Signing time: Sat 23 Aug 2025 06:47:43 +0000 Manifest this update: Sat 23 Aug 2025 06:47:42 +0000 Manifest next update: Sat 30 Aug 2025 06:47:42 +0000 Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: hWdpYmnrGwNTGELfEolP0e7UJnqeA0IOKXgOL24h25g=) 2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Validity Not Before: Aug 23 06:47:42 2025 GMT Not After : Aug 30 06:47:42 2025 GMT Subject: CN=68a9640e-7554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:21:84:95:b7:2b:1b:c2:ba:32:56:0d:a2: 05:e5:d9:c7:35:19:2b:65:d7:98:7b:84:98:3e:ff: 03:e0:07:1c:02:cd:cb:7d:63:2d:40:4c:d5:54:5c: d0:fb:1d:da:ee:c3:5c:6d:ca:41:9a:6f:15:29:e6: eb:bc:99:4b:df:5d:d0:a9:ea:e8:a9:9e:1a:dc:bf: bc:8b:1c:d4:d0:8c:fd:7e:50:c9:0c:15:f3:23:b0: 33:41:a4:e5:d3:f1:e5:99:b1:10:3b:16:05:b2:2f: b5:6d:5f:34:30:58:73:c9:b3:0e:59:dc:69:25:ee: 40:84:93:77:14:3f:77:5b:cb:01:3f:5a:43:68:0c: 9a:c5:7e:7d:74:cc:06:34:13:15:de:17:d6:b5:3b: 74:d7:88:3a:44:b2:37:e0:ec:4b:96:6d:c7:6b:df: d6:24:8e:89:df:6a:7e:88:0e:83:37:76:00:60:8b: dd:16:30:62:b0:4b:f8:eb:1c:cb:2c:f6:fd:66:aa: 4d:97:30:f3:db:0f:12:aa:5a:a3:1d:36:b9:d6:b1: 3f:07:b5:8f:fd:55:2c:e8:61:76:9c:a7:70:5d:ef: 03:76:39:25:69:62:18:90:47:bf:3c:f2:3c:f5:d6: 24:29:54:ec:66:33:da:68:59:08:59:09:e9:1d:9c: b0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8E:46:B7:E0:81:31:92:79:0A:FB:13:B5:2F:93:12:FB:39:08:69 X509v3 Authority Key Identifier: keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:cb:32:10:84:f4:2f:84:04:2b:7b:ec:d1:4d:5c:46:09:7f: 3e:2c:a1:5f:a6:07:2a:cf:36:16:19:4a:68:f3:84:b9:e8:97: 03:c0:08:93:4f:23:45:a2:54:07:6b:c4:cb:2d:0b:1a:1e:63: 29:9c:21:bf:f2:97:90:f6:32:33:e6:c7:07:10:b3:ac:86:6b: 6e:22:c2:96:6b:55:f9:b8:86:78:b6:21:3c:f2:b9:00:c2:ca: 69:cd:51:da:a0:5b:2a:77:df:17:77:4a:49:14:d3:cf:00:f4: 7a:75:1b:d7:16:2b:98:57:40:33:b9:fd:73:7d:4a:56:2b:58: da:86:94:bb:51:e8:96:5d:38:d9:55:1c:10:27:c5:3d:23:b4: a2:80:83:c5:cf:3c:6e:d7:e6:51:24:89:b5:22:42:37:94:4f: 98:ae:96:65:67:4a:03:36:e2:6d:5f:a9:d9:31:9b:f9:2f:e6: 15:0c:07:31:c6:e3:c9:ce:03:48:47:d4:7d:38:7d:11:d1:c1: e3:df:5f:24:49:31:37:ad:fe:5a:17:34:bc:d8:db:69:44:79: 32:a7:e9:9e:88:3f:42:fc:9f:8f:bf:f9:b4:4c:3d:db:b2:b5: e8:e4:eb:7d:73:53:94:5e:8e:e1:d9:cd:7c:3a:6c:18:33:ed: 9d:5e:9f:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIxQUUxMTAvBgNVBAUTKEY2RDM3OTMwMjc3NTFDNjJGOEFCQjkwODg2RUE5M0Y0 OUIzM0Y2NEMwHhcNMjUwODIzMDY0NzQyWhcNMjUwODMwMDY0NzQyWjAYMRYwFAYD VQQDEw02OGE5NjQwZS03NTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgQhhJW3KxvCujJWDaIF5dnHNRkrZdeYe4SYPv8D4AccAs3LfWMtQEzVVFzQ +x3a7sNcbcpBmm8VKebrvJlL313QqeroqZ4a3L+8ixzU0Iz9flDJDBXzI7AzQaTl 0/HlmbEQOxYFsi+1bV80MFhzybMOWdxpJe5AhJN3FD93W8sBP1pDaAyaxX59dMwG NBMV3hfWtTt014g6RLI34OxLlm3Ha9/WJI6J32p+iA6DN3YAYIvdFjBisEv46xzL LPb9ZqpNlzDz2w8SqlqjHTa51rE/B7WP/VUs6GF2nKdwXe8DdjklaWIYkEe/PPI8 9dYkKVTsZjPaaFkIWQnpHZywHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSORrfg gTGSeQr7E7UvkxL7OQhpMB8GA1UdIwQYMBaAFPbTeTAndRxi+Ku5CIbqk/SbM/ZM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS82QzcwNDhBNkFD NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhHTDRxN2tJaHVxVDlKc3o5 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzl0TjVNQ2QxSEdMNHE3a0lodXFUOUpzejlrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjFBRS82QzcwNDhBNkFDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhH TDRxN2tJaHVxVDlKc3o5a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACyzIQhPQvhAQre+zRTVxGCX8+LKFfpgcqzzYWGUpo84S56JcDwAiT TyNFolQHa8TLLQsaHmMpnCG/8peQ9jIz5scHELOshmtuIsKWa1X5uIZ4tiE88rkA wsppzVHaoFsqd98Xd0pJFNPPAPR6dRvXFiuYV0Azuf1zfUpWK1jahpS7UeiWXTjZ VRwQJ8U9I7SigIPFzzxu1+ZRJIm1IkI3lE+YrpZlZ0oDNuJtX6nZMZv5L+YVDAcx xuPJzgNIR9R9OH0R0cHj318kSTE3rf5aFzS82NtpRHkyp+meiD9C/J+Pv/m0TD3b srXo5Ot9c1OUXo7h2c18OmwYM+2dXp9D -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:51 2025 by rpki-client