$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json) Hash identifier: 990XjNMb179Q0JJDE/gLbP64ELNlvrhexZ38dpAknbg= Subject key identifier: 3D:6A:EE:2B:2F:4A:1F:EB:10:2C:95:6B:DC:62:8D:46:86:C8:54:DC Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Certificate serial: 0EE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft Manifest number: 0ED6 Signing time: Fri 22 Aug 2025 17:45:36 +0000 Manifest this update: Fri 22 Aug 2025 17:45:36 +0000 Manifest next update: Fri 29 Aug 2025 17:45:35 +0000 Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: IJIcAMnGdHNbH98pW9eHNxP2VkQeiBMYm6Fy9RUp7k0=) 2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: az5u8maauMT/Sx2+Phgo1Z/ovh8gwvsYIRukSLKNLEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3811 (0xee3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Validity Not Before: Aug 22 17:45:36 2025 GMT Not After : Aug 29 17:45:35 2025 GMT Subject: CN=68a8acc0-1be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:f4:98:db:dc:fb:35:1b:01:84:68:cd:ec: 1a:c0:2e:b4:61:e2:10:63:19:a4:cd:8b:26:29:d3: 38:60:8c:4d:3b:e6:e8:f6:e5:35:73:9f:b9:0d:e4: c9:af:53:94:02:51:99:88:11:a9:00:05:c3:46:eb: 79:12:fb:4c:59:eb:93:54:2d:26:b2:dc:8c:cd:63: b8:ce:e3:19:ed:38:ef:fe:53:b8:c1:6c:31:0a:a2: c6:38:03:9d:f9:24:8d:cc:d6:f1:d9:a7:17:82:5c: f0:16:65:44:df:00:2c:7d:92:f6:37:d0:08:2d:7e: d3:ea:35:81:52:03:2f:62:5f:b0:ad:bc:34:28:38: ea:5b:1d:29:92:dd:00:5d:f6:83:73:fa:d6:48:68: 04:5b:d9:e9:f2:7b:c3:73:dc:b1:13:c1:dd:54:fe: ab:9c:c7:4f:e4:f7:78:12:ab:37:36:2b:f4:d1:f5: 42:54:6f:4e:71:32:a6:c8:7d:5d:ac:ad:d8:a9:28: b1:15:47:0b:7f:a6:9e:55:41:b9:a9:e0:72:2f:17: 1f:53:64:0f:0a:c8:0d:b0:79:87:b3:43:18:c4:c1: b5:6e:20:bc:11:44:0f:c6:d6:57:3d:c7:27:ab:f8: 45:a9:a1:6b:e6:eb:a1:99:86:8c:bc:68:21:4e:9f: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6A:EE:2B:2F:4A:1F:EB:10:2C:95:6B:DC:62:8D:46:86:C8:54:DC X509v3 Authority Key Identifier: keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:74:3a:12:12:8d:3f:60:8c:ff:05:9d:ee:96:8f:ca:2c:e4: 2d:6a:76:70:d5:68:3e:4b:2a:f0:44:51:97:df:24:ff:30:53: 1d:31:67:0f:62:43:18:28:0b:33:fd:28:20:8b:76:36:11:0b: c1:d9:9b:9e:6a:68:9d:b5:ed:36:ca:b1:49:98:36:3d:c7:09: b8:74:a7:ee:05:f2:18:44:90:13:e0:be:85:09:f3:91:2d:10: 7a:de:9b:12:a2:a7:38:b7:b4:07:06:04:9a:61:b4:53:19:b9: 43:0a:20:58:d1:b6:66:92:f7:98:91:ce:8a:dc:02:be:53:a1: e0:53:b3:07:b0:9b:01:76:aa:ef:2b:dc:0d:47:ee:6b:6f:0e: 81:88:c0:cf:c6:59:08:ad:d2:b9:ee:6e:b0:c2:b6:27:c2:41: 90:c0:d1:20:bd:f1:ce:31:27:99:6d:35:d5:ca:8d:c4:0b:03: 5f:27:2c:a5:7f:0f:74:6b:d9:ba:07:8e:ef:3a:57:ec:07:86: be:d3:09:03:c9:be:66:fc:2c:f4:c2:b3:90:ba:20:fd:64:d8: 15:07:99:f4:5b:14:13:37:6f:db:fe:91:06:f3:ef:5e:ef:1f: 23:64:08:22:e0:17:fd:6e:89:2a:58:e4:78:83:de:ac:22:b4: fd:de:7c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYzMUMxMTAvBgNVBAUTKEY3MkU3RDVFMUJCNDU0MkFCN0ZGNzc3MzY1ODgzQzE2 MDEwMzRERTkwHhcNMjUwODIyMTc0NTM2WhcNMjUwODI5MTc0NTM1WjAYMRYwFAYD VQQDEw02OGE4YWNjMC0xYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+30mNvc+zUbAYRozewawC60YeIQYxmkzYsmKdM4YIxNO+bo9uU1c5+5DeTJ r1OUAlGZiBGpAAXDRut5EvtMWeuTVC0mstyMzWO4zuMZ7Tjv/lO4wWwxCqLGOAOd +SSNzNbx2acXglzwFmVE3wAsfZL2N9AILX7T6jWBUgMvYl+wrbw0KDjqWx0pkt0A XfaDc/rWSGgEW9np8nvDc9yxE8HdVP6rnMdP5Pd4Eqs3Niv00fVCVG9OcTKmyH1d rK3YqSixFUcLf6aeVUG5qeByLxcfU2QPCsgNsHmHs0MYxMG1biC8EUQPxtZXPccn q/hFqaFr5uuhmYaMvGghTp9+4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1q7isv Sh/rECyVa9xijUaGyFTcMB8GA1UdIwQYMBaAFPcufV4btFQqt/93c2WIPBYBA03p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjMxQy9BOUMzMTcwNDhD MjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZDcTNfM2R6WllnOEZnRURU ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5NTlYaHUwVkNxM18zZHpaWWc4RmdFRFRlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjMxQy9BOUMzMTcwNDhDMjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZD cTNfM2R6WllnOEZnRURUZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIdDoSEo0/YIz/BZ3ulo/KLOQtanZw1Wg+SyrwRFGX3yT/MFMdMWcP YkMYKAsz/Sggi3Y2EQvB2Zueamidte02yrFJmDY9xwm4dKfuBfIYRJAT4L6FCfOR LRB63psSoqc4t7QHBgSaYbRTGblDCiBY0bZmkveYkc6K3AK+U6HgU7MHsJsBdqrv K9wNR+5rbw6BiMDPxlkIrdK57m6wwrYnwkGQwNEgvfHOMSeZbTXVyo3ECwNfJyyl fw90a9m6B47vOlfsB4a+0wkDyb5m/Cz0wrOQuiD9ZNgVB5n0WxQTN2/b/pEG8+9e 7x8jZAgi4Bf9bokqWOR4g96sIrT93nx6 -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:54 2025 by rpki-client