$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json) Hash identifier: gmyYkXVWJsuJ4enK5P4ngVZt9QzGFR2ZqN/NjV7ifpk= Subject key identifier: 21:33:F3:12:1B:72:13:1D:6B:1E:70:C2:33:50:54:5D:CC:5E:E2:42 Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft Manifest number: 74 Signing time: Thu 03 Jul 2025 07:06:29 +0000 Manifest this update: Thu 03 Jul 2025 07:06:28 +0000 Manifest next update: Thu 10 Jul 2025 07:06:28 +0000 Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: s88Gbg9CKHwNvc2F2hLOOis9xkbtBxW62nooTOxkd58=) 2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Validity Not Before: Jul 3 07:06:28 2025 GMT Not After : Jul 10 07:06:28 2025 GMT Subject: CN=68662bf4-94ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:db:01:2b:10:d9:25:12:d2:6e:e1:be:95: d8:5d:5d:16:c1:8f:ef:05:d3:07:25:45:2a:b9:f5: 11:39:96:16:8d:a6:78:eb:6d:16:46:dc:4f:fb:a5: 9f:8c:5e:74:97:f6:00:21:06:d3:af:20:d9:cc:ed: 3f:c0:5e:ff:9c:e0:87:c7:bb:9b:b8:95:5f:5d:e3: 60:dc:b2:aa:ba:ab:dc:8e:b7:9f:17:c3:30:f2:4c: 9c:23:a8:99:75:94:81:1a:e8:94:29:35:39:06:7b: 12:98:38:8f:ef:42:92:de:5b:82:24:49:1c:2d:bc: 99:90:17:56:b8:b1:7f:1f:a4:a7:e6:ae:bf:ab:39: ea:83:c3:ca:a7:03:17:0c:19:3c:d3:2b:be:cb:86: f3:90:00:47:6a:40:b6:e3:fc:f7:59:f8:b4:2c:61: fa:e1:0a:ff:17:02:8c:11:e8:08:6b:78:27:b1:ef: 1d:e9:3a:c8:73:fe:8a:6c:3f:b0:cc:75:39:66:8b: ab:c5:8a:4b:3a:18:e0:ed:99:99:e3:38:4f:c3:36: 68:a0:cd:de:73:d8:58:f3:98:db:09:eb:83:45:9c: 8f:ef:11:77:59:5c:76:01:22:7a:50:90:3e:ec:e7: cf:2d:57:9f:12:60:30:d1:58:0a:22:25:42:13:4b: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:33:F3:12:1B:72:13:1D:6B:1E:70:C2:33:50:54:5D:CC:5E:E2:42 X509v3 Authority Key Identifier: keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4b:32:4c:95:81:7c:f3:e1:38:bd:93:ce:9d:a4:34:fb:ec: f2:f5:f4:35:d4:20:1e:66:e4:69:50:bc:47:02:ce:ca:ae:13: da:3f:33:28:05:0c:39:6f:3b:9f:dc:6b:d9:8b:1c:61:11:66: ce:d1:c3:1c:9c:df:1d:3b:c3:7c:78:92:e0:63:e7:b7:d1:df: af:e9:41:d9:20:3b:30:91:eb:e2:f9:5c:aa:a8:c5:ff:29:0b: ac:95:67:fd:ce:04:81:b6:7b:43:e5:13:87:c3:4c:4d:58:73: 83:56:50:dc:32:dd:90:4c:11:87:09:80:b4:87:d6:5a:a1:af: 77:2f:ca:0d:e2:c0:ec:1b:6e:37:b0:49:1d:b5:25:c1:ec:38: fb:05:07:52:e0:3b:fd:19:03:40:20:df:86:a8:62:1f:13:89: cf:c8:02:6b:5b:ef:3d:1b:24:24:a2:1f:f1:b9:39:d4:b1:1c: e0:38:0a:84:f0:50:42:11:4d:35:23:e6:10:18:07:6c:9a:ee: 79:9c:f8:c1:94:fd:1f:32:7d:0b:87:82:56:c6:32:2d:4e:15: 5b:b6:77:62:0b:4d:c0:5c:1c:51:19:15:29:bd:35:f3:42:9f: 4a:fc:4e:b5:47:3e:83:2d:1d:ef:d2:c6:2c:96:44:27:7c:da: ba:b7:12:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjFBRTExMC8GA1UEBRMoRjZEMzc5MzAyNzc1MUM2MkY4QUJCOTA4ODZFQTkzRjQ5 QjMzRjY0QzAeFw0yNTA3MDMwNzA2MjhaFw0yNTA3MTAwNzA2MjhaMBgxFjAUBgNV BAMTDTY4NjYyYmY0LTk0ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRM9sBKxDZJRLSbuG+ldhdXRbBj+8F0wclRSq59RE5lhaNpnjrbRZG3E/7pZ+M XnSX9gAhBtOvINnM7T/AXv+c4IfHu5u4lV9d42Dcsqq6q9yOt58XwzDyTJwjqJl1 lIEa6JQpNTkGexKYOI/vQpLeW4IkSRwtvJmQF1a4sX8fpKfmrr+rOeqDw8qnAxcM GTzTK77LhvOQAEdqQLbj/PdZ+LQsYfrhCv8XAowR6AhreCex7x3pOshz/opsP7DM dTlmi6vFiks6GODtmZnjOE/DNmigzd5z2FjzmNsJ64NFnI/vEXdZXHYBInpQkD7s 588tV58SYDDRWAoiJUITS9OrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUITPzEhty Ex1rHnDCM1BUXcxe4kIwHwYDVR0jBBgwFoAU9tN5MCd1HGL4q7kIhuqT9Jsz9kww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMUFFLzZDNzA0OEE2QUM3 MzExRUZBM0NCRDE0QUM0RjlBRTAyLzl0TjVNQ2QxSEdMNHE3a0lodXFUOUpzejlr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOXRONU1DZDFIR0w0cTdrSWh1cVQ5SnN6OWt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky MUFFLzZDNzA0OEE2QUM3MzExRUZBM0NCRDE0QUM0RjlBRTAyLzl0TjVNQ2QxSEdM NHE3a0lodXFUOUpzejlrdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9LMkyVgXzz4Ti9k86dpDT77PL19DXUIB5m5GlQvEcCzsquE9o/MygF DDlvO5/ca9mLHGERZs7Rwxyc3x07w3x4kuBj57fR36/pQdkgOzCR6+L5XKqoxf8p C6yVZ/3OBIG2e0PlE4fDTE1Yc4NWUNwy3ZBMEYcJgLSH1lqhr3cvyg3iwOwbbjew SR21JcHsOPsFB1LgO/0ZA0Ag34aoYh8Tic/IAmtb7z0bJCSiH/G5OdSxHOA4CoTw UEIRTTUj5hAYB2ya7nmc+MGU/R8yfQuHglbGMi1OFVu2d2ILTcBcHFEZFSm9NfNC n0r8TrVHPoMtHe/SxiyWRCd82rq3Eos= -----END CERTIFICATE-----Generated at Fri Jul 4 00:18:00 2025 by rpki-client