$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft File: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json) Hash identifier: 8NtaRoNUcEIE4QdlSj/e1IBrYqfLzreR9VUd55yA7IM= Subject key identifier: DE:57:1B:A8:AE:25:4B:57:3A:C2:CC:F1:16:2B:01:96:AF:EF:4C:BB Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB Certificate issuer: /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft Manifest number: 013F Signing time: Thu 03 Jul 2025 04:27:44 +0000 Manifest this update: Thu 03 Jul 2025 04:27:43 +0000 Manifest next update: Thu 10 Jul 2025 04:27:43 +0000 Files and hashes: 1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: qYmpff+RtjcKr/YIneObOa3QhaPBDX5/uswZarR28h8=) 2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: sf8Mnz1qsHdpKeF1ILemxPeqebYjdCIUvrzVLMZpW/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Validity Not Before: Jul 3 04:27:43 2025 GMT Not After : Jul 10 04:27:43 2025 GMT Subject: CN=686606c0-ac6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:49:a3:0d:9e:03:3c:af:5b:5d:b1:6c:41: 64:11:6b:75:9d:84:82:49:98:e4:be:e8:c4:96:2a: c9:03:06:bd:cc:3f:a2:b9:2d:ce:00:cc:85:52:40: de:41:a7:be:11:09:aa:34:f2:50:69:1d:d6:ce:23: 8c:74:6b:a0:e6:07:ec:5f:ea:9a:a7:f2:1d:30:bb: b0:c2:91:a9:c0:5e:66:d9:23:0b:f8:c3:ae:53:82: 9c:fe:1e:59:87:a8:89:2b:54:d9:8e:85:19:64:af: f7:50:74:96:70:6e:89:45:ea:df:6c:8e:d8:82:59: dd:fd:59:bd:a4:4e:f4:d3:16:5a:14:a4:1c:02:fe: c7:9f:5d:d6:1f:25:85:80:c7:85:2d:f8:a9:e3:93: 14:02:41:fc:c0:fa:07:bd:8b:86:bd:a2:2f:3e:d1: 6f:54:99:10:7f:0c:f9:15:f5:8a:5d:ac:01:41:22: 5d:00:21:d9:40:c5:3d:79:fd:71:7c:fd:7b:6c:95: cb:1f:fe:9e:1d:c6:41:e6:a9:6c:72:63:a4:bd:3e: 64:48:ce:75:c8:bb:3a:9a:3f:a3:17:ae:ba:e6:18: d6:d9:c9:c5:f5:b1:ef:5a:c6:32:4c:94:cc:62:f1: 93:c2:0d:a5:ac:12:b7:a3:b9:97:1b:66:40:d3:d7: e7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:57:1B:A8:AE:25:4B:57:3A:C2:CC:F1:16:2B:01:96:AF:EF:4C:BB X509v3 Authority Key Identifier: keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:25:c5:bc:0e:15:5a:00:6f:6d:b1:b8:fb:03:47:8d:e1:d4: c8:7e:5d:30:fb:92:d0:71:0c:00:ba:af:e7:9b:49:7c:0d:fb: 42:3c:10:74:f5:6e:46:bc:31:6d:19:7b:90:8e:e5:75:cc:9f: b9:f2:ad:e6:af:f2:13:ca:3c:01:51:01:8a:3c:70:1a:d4:7e: 5f:bc:43:f2:ea:12:4a:b1:db:7e:9c:8b:1c:8c:72:5c:f9:7f: e2:1d:ad:b4:54:1b:dc:ae:3d:a6:db:f5:f3:f4:1a:d5:0e:20: c0:1b:46:5d:80:86:6b:95:e5:0b:38:83:fe:a4:bc:af:7c:06: e4:6e:f7:3e:0a:80:2f:2a:4b:e1:40:ff:80:14:a8:7d:4e:a6: d1:62:7e:f6:8a:1e:88:6e:ff:cb:29:18:f1:64:fc:2c:b6:e5: d6:da:b2:02:0d:b6:28:73:49:89:19:7c:ad:95:e2:ac:de:a5: 81:b8:e0:40:06:b6:19:81:33:08:5c:eb:2b:12:c5:87:4d:29: ad:8e:84:52:03:aa:09:c9:0c:b7:be:3e:1a:a3:4f:10:87:20: d5:9a:56:a6:ba:9e:15:85:e5:91:52:68:99:ce:b2:94:6d:96: 72:91:08:aa:19:c6:8b:42:3e:5c:03:8a:ce:85:8a:a8:f6:cb: 43:fa:9c:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFCOUYxMTAvBgNVBAUTKEY1M0U1NjQwNzY5OEMxRkFBNzVEMjU3NjU1MTNCNTA3 NjUyQzk3QUIwHhcNMjUwNzAzMDQyNzQzWhcNMjUwNzEwMDQyNzQzWjAYMRYwFAYD VQQDEw02ODY2MDZjMC1hYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw69Jow2eAzyvW12xbEFkEWt1nYSCSZjkvujElirJAwa9zD+iuS3OAMyFUkDe Qae+EQmqNPJQaR3WziOMdGug5gfsX+qap/IdMLuwwpGpwF5m2SML+MOuU4Kc/h5Z h6iJK1TZjoUZZK/3UHSWcG6JRerfbI7Yglnd/Vm9pE700xZaFKQcAv7Hn13WHyWF gMeFLfip45MUAkH8wPoHvYuGvaIvPtFvVJkQfwz5FfWKXawBQSJdACHZQMU9ef1x fP17bJXLH/6eHcZB5qlscmOkvT5kSM51yLs6mj+jF6665hjW2cnF9bHvWsYyTJTM YvGTwg2lrBK3o7mXG2ZA09fnuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5XG6iu JUtXOsLM8RYrAZav70y7MB8GA1UdIwQYMBaAFPU+VkB2mMH6p10ldlUTtQdlLJer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUI5Ri81NjkyMjkwMjZF MTUxMUVFOEQ2RUQ0NThDNEY5QUUwMi85VDVXUUhhWXdmcW5YU1YyVlJPMUIyVXNs NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUNVdRSGFZd2ZxblhTVjJWUk8xQjJVc2w2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUI5Ri81NjkyMjkwMjZFMTUxMUVFOEQ2RUQ0NThDNEY5QUUwMi85VDVXUUhhWXdm cW5YU1YyVlJPMUIyVXNsNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKJcW8DhVaAG9tsbj7A0eN4dTIfl0w+5LQcQwAuq/nm0l8DftCPBB0 9W5GvDFtGXuQjuV1zJ+58q3mr/ITyjwBUQGKPHAa1H5fvEPy6hJKsdt+nIscjHJc +X/iHa20VBvcrj2m2/Xz9BrVDiDAG0ZdgIZrleULOIP+pLyvfAbkbvc+CoAvKkvh QP+AFKh9TqbRYn72ih6Ibv/LKRjxZPwstuXW2rICDbYoc0mJGXytleKs3qWBuOBA BrYZgTMIXOsrEsWHTSmtjoRSA6oJyQy3vj4ao08QhyDVmlamup4VheWRUmiZzrKU bZZykQiqGcaLQj5cA4rOhYqo9stD+pzo -----END CERTIFICATE-----Generated at Fri Jul 4 02:56:16 2025 by rpki-client