$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft File: V09tVmTqm98xXPZMjl5n0mODwgU.mft (raw, json) Hash identifier: tmJioKahbA5sLahz9QsIQd5M4hTxBk9NUQJimJNPYoE= Subject key identifier: 35:72:22:9F:6F:4D:F2:45:53:57:CC:51:8B:B4:8C:F8:E7:DB:C0:AF Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 Certificate issuer: /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft Manifest number: 0AF2 Signing time: Wed 02 Jul 2025 19:36:47 +0000 Manifest this update: Wed 02 Jul 2025 19:36:47 +0000 Manifest next update: Wed 09 Jul 2025 19:36:47 +0000 Files and hashes: 1: V09tVmTqm98xXPZMjl5n0mODwgU.crl (hash: 7Uxo300sCM/Q5KZX9Qbm8acH2w2nuy2WMB0AobR6Ryw=) 2: 52216250493611EAA0968624C4F9AE02.roa (hash: XjkXLtL5CTFLl3MU4C1ptKiUasRS1cFai/QK6ioOeWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85FC, serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Validity Not Before: Jul 2 19:36:47 2025 GMT Not After : Jul 9 19:36:47 2025 GMT Subject: CN=68658a4f-d81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:c9:53:12:a2:34:f9:d1:cc:04:5c:38:40: d0:fd:a4:5b:5a:3b:7b:26:d3:85:b1:ca:67:ac:cc: 9a:40:b7:97:db:88:99:4a:3d:e0:e6:d3:f9:b2:9b: 02:ce:00:b7:39:55:c5:e7:d2:49:72:ff:e4:43:7b: e5:6d:a5:96:ed:fe:da:53:1a:c9:df:6c:cc:4b:89: 5c:58:d8:34:71:9d:0b:56:2a:e2:c7:8c:f9:84:11: 52:c7:b4:70:16:e0:10:cb:1a:af:22:ff:b7:52:23: fd:67:e6:31:b6:81:b4:7c:92:88:cd:a1:c4:87:94: 2c:5e:89:07:75:da:98:15:67:2d:f5:a4:9a:30:fb: ac:0d:10:49:36:f6:57:5d:06:83:62:aa:44:6a:49: 8d:03:85:9f:a7:ef:db:21:b5:00:a8:77:5c:5f:f5: 76:5f:6d:16:8e:0f:31:1f:91:0b:dd:1a:7a:e0:d2: cc:a6:77:7a:8b:d6:5a:cf:35:52:e1:94:00:a0:12: 72:9d:40:68:e4:30:81:56:03:f1:f7:b1:94:42:16: 68:20:3e:a7:b7:79:d5:6e:15:22:2b:90:82:f6:be: a8:26:b3:24:6f:57:ec:39:a1:71:14:15:aa:01:64: 37:29:7a:f0:ae:63:fa:49:7a:c2:b6:7b:8b:12:07: b4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:72:22:9F:6F:4D:F2:45:53:57:CC:51:8B:B4:8C:F8:E7:DB:C0:AF X509v3 Authority Key Identifier: keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8d:5b:fe:68:58:bb:28:44:39:cc:07:dd:f9:06:d0:03:79: 6e:c9:1d:24:84:95:6d:e3:d2:fd:9a:ef:21:87:60:8f:5e:3f: 55:aa:63:0a:f3:3c:19:f4:43:79:ef:49:78:f9:d8:c0:42:90: 28:e8:32:2c:6a:c9:c3:81:5d:81:45:78:3c:90:88:5c:61:4d: 59:30:10:95:f3:88:89:3a:0c:fc:7e:df:bb:56:7d:24:1f:d2: 51:77:7e:0c:98:7e:79:b9:fa:37:21:f3:b7:ac:c3:6a:48:29: 83:ad:58:bf:20:04:a0:00:44:32:1e:1b:73:b4:7f:0d:9a:c8: 3d:de:07:7e:0b:fb:36:e4:81:bc:e3:ee:0a:cb:c8:6a:b5:3b: 8f:02:c6:12:db:e5:c1:f6:3a:e0:53:47:86:4d:c2:f4:8f:8c: 6c:23:d6:96:b6:df:ee:2e:9e:9c:ef:77:8d:24:b4:a5:29:23: 53:51:e6:4d:6f:2e:1a:27:16:2f:a5:1e:3a:cc:86:4a:5d:e6: 32:7a:3e:0d:9b:d7:2b:10:2e:09:b5:de:5a:a1:00:dc:6a:c0: b0:11:df:e7:fe:33:68:35:83:35:6f:a0:d6:3e:ed:19:f0:c1: 12:7a:f0:dc:dc:d5:b9:77:06:d4:4a:3c:44:a5:3e:37:d7:21: 33:59:48:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1RkMxMTAvBgNVBAUTKDU3NEY2RDU2NjRFQTlCREYzMTVDRjY0QzhFNUU2N0Qy NjM4M0MyMDUwHhcNMjUwNzAyMTkzNjQ3WhcNMjUwNzA5MTkzNjQ3WjAYMRYwFAYD VQQDEw02ODY1OGE0Zi1kODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpHJUxKiNPnRzARcOEDQ/aRbWjt7JtOFscpnrMyaQLeX24iZSj3g5tP5spsC zgC3OVXF59JJcv/kQ3vlbaWW7f7aUxrJ32zMS4lcWNg0cZ0LVirix4z5hBFSx7Rw FuAQyxqvIv+3UiP9Z+YxtoG0fJKIzaHEh5QsXokHddqYFWct9aSaMPusDRBJNvZX XQaDYqpEakmNA4Wfp+/bIbUAqHdcX/V2X20Wjg8xH5EL3Rp64NLMpnd6i9ZazzVS 4ZQAoBJynUBo5DCBVgPx97GUQhZoID6nt3nVbhUiK5CC9r6oJrMkb1fsOaFxFBWq AWQ3KXrwrmP6SXrCtnuLEge0kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVyIp9v TfJFU1fMUYu0jPjn28CvMB8GA1UdIwQYMBaAFFdPbVZk6pvfMVz2TI5eZ9Jjg8IF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVGQy84ODE2RUZGODQ5 MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05OHhYUFpNamw1bjBtT0R3 Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwOXRWbVRxbTk4eFhQWk1qbDVuMG1PRHdnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVGQy84ODE2RUZGODQ5MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05 OHhYUFpNamw1bjBtT0R3Z1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPjVv+aFi7KEQ5zAfd+QbQA3luyR0khJVt49L9mu8hh2CPXj9VqmMK 8zwZ9EN570l4+djAQpAo6DIsasnDgV2BRXg8kIhcYU1ZMBCV84iJOgz8ft+7Vn0k H9JRd34MmH55ufo3IfO3rMNqSCmDrVi/IASgAEQyHhtztH8Nmsg93gd+C/s25IG8 4+4Ky8hqtTuPAsYS2+XB9jrgU0eGTcL0j4xsI9aWtt/uLp6c73eNJLSlKSNTUeZN by4aJxYvpR46zIZKXeYyej4Nm9crEC4Jtd5aoQDcasCwEd/n/jNoNYM1b6DWPu0Z 8MESevDc3NW5dwbUSjxEpT431yEzWUiJ -----END CERTIFICATE-----Generated at Thu Jul 3 08:46:29 2025 by rpki-client