$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json) Hash identifier: WiFlm7TfMZauh0dMYd6yNqRGBTF3qBb++EkJNJ2fHVA= Subject key identifier: C8:D4:43:BB:C8:D4:89:9A:5C:AE:55:B0:C5:19:F1:EE:E4:13:29:27 Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft Manifest number: 0B0C Signing time: Fri 22 Aug 2025 19:28:07 +0000 Manifest this update: Fri 22 Aug 2025 19:28:07 +0000 Manifest next update: Fri 29 Aug 2025 19:28:07 +0000 Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: woP8rfZ/3b7BhddcqNnKssxzRaF4v3ZDEqWNCAMm+lM=) 2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=) 3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2842 (0xb1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: Aug 22 19:28:07 2025 GMT Not After : Aug 29 19:28:07 2025 GMT Subject: CN=68a8c4c7-ca31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:9d:95:c7:a2:f8:e0:41:b5:60:eb:1e:14: b3:6a:b9:3c:aa:96:de:be:7b:e0:8e:73:b0:47:f6: b0:fc:91:3b:d6:f3:b8:62:2b:67:db:db:33:d4:4b: 31:20:00:d8:65:13:08:57:b6:88:e5:40:51:ea:c3: 5d:a7:d7:6d:e9:6a:a3:7f:9c:bc:46:d1:97:00:f3: d5:72:44:ff:75:45:42:cb:4b:af:0b:03:ec:e2:d6: 48:54:51:bf:7d:c9:db:a4:5b:22:e6:9b:bc:0a:ca: 92:e6:fc:31:cb:f0:ae:9d:ac:b8:55:c1:82:eb:b2: 61:77:71:74:95:f6:15:1a:e0:cb:f1:5e:d3:44:56: 63:5d:e4:2f:6b:55:b2:77:7b:49:c1:d1:9b:96:c0: 19:0e:e9:92:1f:b4:c8:20:88:7d:c0:81:8a:d4:ab: 19:19:22:10:5b:37:a3:99:61:4b:60:82:56:45:9b: f2:b7:ae:21:fa:a3:23:96:e9:cf:bc:f7:af:82:3d: 27:d2:a6:d0:00:95:fd:66:68:02:bd:52:e1:be:35: 36:8d:0a:91:5f:e9:ab:a7:90:9f:90:e4:f8:90:db: 24:bf:eb:fe:ec:57:9c:11:bb:d4:2f:fa:88:44:96: 80:b7:a0:5e:ae:1c:20:74:af:82:4a:a7:63:48:dc: f0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D4:43:BB:C8:D4:89:9A:5C:AE:55:B0:C5:19:F1:EE:E4:13:29:27 X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7f:1f:3e:8f:41:7e:5e:6c:a5:e0:34:72:1a:a3:6c:72:d8: a7:df:39:f4:91:18:c9:ee:32:fb:c3:61:b0:4e:35:c6:8e:1e: 69:ad:8d:54:e5:a8:81:a8:b3:82:51:15:62:65:6d:bc:61:77: 10:e9:f0:86:db:bf:ff:37:bb:47:96:1f:0c:62:f0:61:21:02: 23:01:f2:67:5d:64:00:d5:e8:0f:83:59:29:1d:99:2d:48:73: 68:eb:58:f1:4d:73:b3:15:b0:25:b4:17:7b:48:5f:c9:89:77: a9:46:18:6d:e2:6b:41:bd:99:81:99:8d:6d:8d:e6:80:c2:ab: 4a:be:cd:83:ab:f5:ab:4c:7a:73:6d:2f:9e:3a:18:cc:ba:ed: ad:62:c6:e0:63:2d:64:3a:f8:34:f2:c7:d4:27:b2:aa:e0:97: 8d:6c:76:95:4b:a4:f2:1f:ca:c9:13:e7:b7:70:92:e6:95:71: 23:28:a6:57:a7:e7:a1:53:76:fa:76:3f:92:e0:e3:9a:9f:5d: 13:a7:4f:ef:bb:f4:35:32:a1:b0:fa:f7:84:61:cf:38:7f:1e: 1d:0d:db:16:52:e7:09:84:1e:97:cd:c6:ae:47:01:a9:2d:ef: 78:43:91:0b:40:37:4b:af:ca:f7:d2:9c:3a:2b:90:f0:cf:28: 18:10:cf:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjUwODIyMTkyODA3WhcNMjUwODI5MTkyODA3WjAYMRYwFAYD VQQDEw02OGE4YzRjNy1jYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0udlcei+OBBtWDrHhSzark8qpbevnvgjnOwR/aw/JE71vO4Yitn29sz1Esx IADYZRMIV7aI5UBR6sNdp9dt6Wqjf5y8RtGXAPPVckT/dUVCy0uvCwPs4tZIVFG/ fcnbpFsi5pu8CsqS5vwxy/Cunay4VcGC67Jhd3F0lfYVGuDL8V7TRFZjXeQva1Wy d3tJwdGblsAZDumSH7TIIIh9wIGK1KsZGSIQWzejmWFLYIJWRZvyt64h+qMjlunP vPevgj0n0qbQAJX9ZmgCvVLhvjU2jQqRX+mrp5CfkOT4kNskv+v+7FecEbvUL/qI RJaAt6BerhwgdK+CSqdjSNzwXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjUQ7vI 1ImaXK5VsMUZ8e7kEyknMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT djZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsfx8+j0F+Xmyl4DRyGqNsctin3zn0kRjJ7jL7w2GwTjXGjh5prY1U 5aiBqLOCURViZW28YXcQ6fCG27//N7tHlh8MYvBhIQIjAfJnXWQA1egPg1kpHZkt SHNo61jxTXOzFbAltBd7SF/JiXepRhht4mtBvZmBmY1tjeaAwqtKvs2Dq/WrTHpz bS+eOhjMuu2tYsbgYy1kOvg08sfUJ7Kq4JeNbHaVS6TyH8rJE+e3cJLmlXEjKKZX p+ehU3b6dj+S4OOan10Tp0/vu/Q1MqGw+veEYc84fx4dDdsWUucJhB6XzcauRwGp Le94Q5ELQDdLr8r30pw6K5DwzygYEM+t -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:50 2025 by rpki-client