$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: NETQh7UpvaTgGHsrguipLu1Yn1lvoPsVBLvouulXKVA= Subject key identifier: F0:0E:5D:2C:A6:9A:AE:A6:F7:A1:86:F4:65:4C:F3:49:0D:94:64:21 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 0205 Signing time: Sat 23 Aug 2025 02:22:29 +0000 Manifest this update: Sat 23 Aug 2025 02:22:29 +0000 Manifest next update: Sat 30 Aug 2025 02:22:29 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: bP2g2gj8pbZupdSywX7vHQjr3GCacWWdywDGw3a4SjA=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Aug 23 02:22:29 2025 GMT Not After : Aug 30 02:22:29 2025 GMT Subject: CN=68a925e5-1552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:82:9e:dc:01:6a:5b:3d:54:e1:49:20:f4: 04:e8:07:87:47:51:88:17:23:42:9c:aa:e4:32:1d: e4:b7:55:e5:51:56:68:33:6b:83:0f:cb:81:33:50: b1:63:65:66:be:9d:56:37:df:b0:5e:07:d3:db:c8: d3:85:bb:0e:6b:14:1c:08:0c:da:47:6e:70:15:b6: b4:f7:57:8c:24:c7:14:b1:00:63:2d:d5:ce:7d:15: e8:1c:51:fe:0a:20:4b:01:ae:d5:5a:60:d6:a3:c1: 40:db:a8:a6:38:a2:21:d4:bd:8f:0f:55:84:fa:9a: 4c:56:d3:25:39:aa:00:7b:0c:22:68:74:7b:6b:7d: 06:42:7b:08:62:8d:0f:1f:7b:ff:3d:53:55:46:ef: ec:ec:4e:33:28:77:4b:d3:ae:2b:c1:2f:d9:b0:13: 4c:27:4d:eb:5f:06:b9:5f:50:49:ca:a3:05:7b:c0: 5d:76:6a:9a:91:f7:e1:af:8c:a1:06:54:07:d9:b7: 11:0b:95:2d:9a:3a:e6:db:ff:6c:e5:94:02:6c:09: b8:c6:05:82:3e:b5:b0:d0:4d:23:dc:e7:7d:96:bb: 0f:ca:4a:9f:50:70:93:5a:66:84:f4:cf:fa:99:18: a4:ed:73:fc:11:6b:6d:8f:53:82:d5:a5:e7:9c:20: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0E:5D:2C:A6:9A:AE:A6:F7:A1:86:F4:65:4C:F3:49:0D:94:64:21 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:30:4e:b7:ee:d7:18:86:be:78:2d:84:50:69:5b:3c:8d:47: d3:04:21:a6:9f:83:50:3b:9f:87:26:1e:0d:94:2c:d6:98:cf: 8a:91:93:1b:ae:32:01:23:70:18:4b:e2:ee:89:bd:db:c1:1b: 83:f6:97:40:3c:c0:b9:ff:96:f8:dc:74:a2:be:bb:3c:c9:9a: 35:fa:82:e1:11:31:50:3a:7e:ee:ef:76:7f:3e:bf:7e:b4:af: be:ae:8f:7c:f9:ad:73:0a:bf:c8:de:11:77:66:2e:23:95:6c: 44:34:e1:e4:87:3f:01:e5:41:52:e0:ff:71:ff:ac:12:93:48: 86:e2:ee:da:2d:dd:14:3a:41:4e:04:0a:b5:40:61:33:0c:ee: 4d:3f:36:df:69:63:88:33:6d:9a:5c:af:d4:93:c8:7a:09:d0: 7f:52:8e:88:59:57:3d:99:e2:52:76:90:dc:c2:6a:f3:60:3f: 51:23:4a:0f:86:c6:e2:33:f0:e5:0b:5c:33:d9:b1:6f:2f:15: 44:61:1f:15:0b:60:e5:9a:19:25:5f:8f:27:0f:c9:3e:1e:9f: ff:f2:af:8a:97:e1:4d:67:49:0d:00:29:e7:58:87:50:1c:9d: 23:d6:17:22:a5:80:5e:8a:16:54:22:cc:53:4a:29:5e:8d:ab: f0:56:9a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUwODIzMDIyMjI5WhcNMjUwODMwMDIyMjI5WjAYMRYwFAYD VQQDEw02OGE5MjVlNS0xNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtImCntwBals9VOFJIPQE6AeHR1GIFyNCnKrkMh3kt1XlUVZoM2uDD8uBM1Cx Y2Vmvp1WN9+wXgfT28jThbsOaxQcCAzaR25wFba091eMJMcUsQBjLdXOfRXoHFH+ CiBLAa7VWmDWo8FA26imOKIh1L2PD1WE+ppMVtMlOaoAewwiaHR7a30GQnsIYo0P H3v/PVNVRu/s7E4zKHdL064rwS/ZsBNMJ03rXwa5X1BJyqMFe8Bddmqakffhr4yh BlQH2bcRC5Utmjrm2/9s5ZQCbAm4xgWCPrWw0E0j3Od9lrsPykqfUHCTWmaE9M/6 mRik7XP8EWttj1OC1aXnnCBQfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAOXSym mq6m96GG9GVM80kNlGQhMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJME637tcYhr54LYRQaVs8jUfTBCGmn4NQO5+HJh4NlCzWmM+KkZMb rjIBI3AYS+Luib3bwRuD9pdAPMC5/5b43HSivrs8yZo1+oLhETFQOn7u73Z/Pr9+ tK++ro98+a1zCr/I3hF3Zi4jlWxENOHkhz8B5UFS4P9x/6wSk0iG4u7aLd0UOkFO BAq1QGEzDO5NPzbfaWOIM22aXK/Uk8h6CdB/Uo6IWVc9meJSdpDcwmrzYD9RI0oP hsbiM/DlC1wz2bFvLxVEYR8VC2DlmhklX48nD8k+Hp//8q+Kl+FNZ0kNACnnWIdQ HJ0j1hcipYBeihZUIsxTSilejavwVpp9 -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:40 2025 by rpki-client