$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json) Hash identifier: K2GbDz/oficyEyfGLtyLkNaBVkx1PyItOHhQkneEmxM= Subject key identifier: 9D:EA:F5:A4:25:78:E3:A8:AF:83:9D:23:C8:4E:54:87:72:AC:AD:BA Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Certificate serial: 033D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft Manifest number: 0335 Signing time: Thu 03 Jul 2025 01:27:51 +0000 Manifest this update: Thu 03 Jul 2025 01:27:50 +0000 Manifest next update: Thu 10 Jul 2025 01:27:50 +0000 Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: K1IqH3UGiasqQ16gFSBYci4M8nH9LumGgYfGPxukVOA=) 2: 148BC3E8833B11EEA71E1715C4F9AE02.roa (hash: ZO4FyXUvWQjoBnjdYas53x9mwxjL1ZSYmacbdFPrIGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 829 (0x33d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Validity Not Before: Jul 3 01:27:50 2025 GMT Not After : Jul 10 01:27:50 2025 GMT Subject: CN=6865dc96-b559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:6e:dc:b5:d6:c1:5e:a8:0a:8d:f8:e5:3d: d4:05:d9:52:69:78:64:53:5e:7f:f1:00:65:a5:e4: 6e:ca:9c:7d:a7:75:32:0d:8b:95:5a:1a:b5:ce:75: 8e:cf:fd:58:36:75:5c:3b:aa:1f:4e:38:94:be:5c: 2c:96:eb:9e:f1:4f:b7:29:c8:b7:cc:dd:7f:8a:73: c4:5d:ae:bd:3b:a4:7c:f0:d7:6c:de:20:0b:fd:5f: 17:98:ba:1b:57:7b:9e:6d:59:f3:45:d5:a6:3e:3f: 24:37:87:c4:a3:f8:7b:73:66:a3:94:e8:c4:bf:b8: 9e:a7:2e:e9:73:ad:29:46:09:37:77:56:76:ac:2b: 67:a9:52:28:97:f2:58:ff:53:f0:77:29:12:db:17: a4:e2:1c:a2:41:31:bf:ae:20:c1:c3:80:d5:79:b1: d8:0d:dc:52:86:b5:4c:6e:52:82:7b:44:1e:17:be: cb:3d:2e:65:bd:0f:34:bb:94:72:3c:2f:ef:a2:2b: b4:4c:57:fe:83:55:67:24:e0:27:f5:fc:d7:00:c8: 4d:e1:c7:4a:a2:3e:14:c7:c5:f6:c3:1b:dc:32:f2: ed:26:50:ad:0b:91:74:ad:4d:0b:50:d1:40:02:ee: 44:9f:19:8d:83:b0:97:26:08:f2:6f:06:d4:7e:eb: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EA:F5:A4:25:78:E3:A8:AF:83:9D:23:C8:4E:54:87:72:AC:AD:BA X509v3 Authority Key Identifier: keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4f:5f:e2:e7:8b:6d:3e:a8:04:f5:a4:7d:17:83:c7:74:e5: e2:57:8b:3c:96:d1:29:1c:ea:6c:d7:70:fc:ae:84:50:6b:0b: c3:02:a3:ff:ac:08:40:67:5a:86:a5:4a:9a:f8:24:91:96:45: 83:7c:d3:9e:42:b0:ed:45:6e:1f:51:7b:7f:93:70:7d:80:ff: 78:9c:c9:83:3d:a6:12:d9:14:aa:3c:75:42:03:5d:00:fd:92: d0:69:49:3b:16:65:fd:b4:88:98:9a:b6:41:4e:e9:bc:ea:64: c2:e0:73:f6:56:32:0d:46:85:88:71:c0:7f:38:dc:d8:d5:ee: 4a:db:0a:02:df:1a:bf:94:3d:61:b8:1e:fd:6f:76:c4:0d:7f: d6:8e:9b:7f:45:de:de:d1:1f:7c:4f:79:07:e0:16:f8:e1:0d: 12:f4:89:a8:92:1b:3e:0c:c8:f0:a4:b0:41:63:f9:67:de:2f: d7:b1:fc:48:37:68:e5:23:8e:bc:32:e9:cf:6d:0d:98:5d:f9: 52:6e:44:dd:97:68:d8:3a:3c:8c:43:a0:1f:61:b2:66:d2:08: db:bb:5f:ed:68:a6:45:14:27:b8:e1:f3:d6:bb:ea:71:d8:5e: 82:32:bd:92:d2:f6:4f:3b:f1:3b:75:55:1a:5c:3f:1c:01:51: ff:e5:21:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw NDc0QzkxQzYwHhcNMjUwNzAzMDEyNzUwWhcNMjUwNzEwMDEyNzUwWjAYMRYwFAYD VQQDEw02ODY1ZGM5Ni1iNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPRu3LXWwV6oCo345T3UBdlSaXhkU15/8QBlpeRuypx9p3UyDYuVWhq1znWO z/1YNnVcO6ofTjiUvlwsluue8U+3Kci3zN1/inPEXa69O6R88Nds3iAL/V8XmLob V3uebVnzRdWmPj8kN4fEo/h7c2ajlOjEv7iepy7pc60pRgk3d1Z2rCtnqVIol/JY /1PwdykS2xek4hyiQTG/riDBw4DVebHYDdxShrVMblKCe0QeF77LPS5lvQ80u5Ry PC/voiu0TFf+g1VnJOAn9fzXAMhN4cdKoj4Ux8X2wxvcMvLtJlCtC5F0rU0LUNFA Au5EnxmNg7CXJgjybwbUfuseNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3q9aQl eOOor4OdI8hOVIdyrK26MB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t VHhnWnU2aE0xYklFZE1rY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9T1/i54ttPqgE9aR9F4PHdOXiV4s8ltEpHOps13D8roRQawvDAqP/ rAhAZ1qGpUqa+CSRlkWDfNOeQrDtRW4fUXt/k3B9gP94nMmDPaYS2RSqPHVCA10A /ZLQaUk7FmX9tIiYmrZBTum86mTC4HP2VjINRoWIccB/ONzY1e5K2woC3xq/lD1h uB79b3bEDX/Wjpt/Rd7e0R98T3kH4Bb44Q0S9Imokhs+DMjwpLBBY/ln3i/XsfxI N2jlI468MunPbQ2YXflSbkTdl2jYOjyMQ6AfYbJm0gjbu1/taKZFFCe44fPWu+px 2F6CMr2S0vZPO/E7dVUaXD8cAVH/5SFV -----END CERTIFICATE-----Generated at Thu Jul 3 09:24:14 2025 by rpki-client