$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: 7QfczKTZf/PyfDji8a6RS9BibZF05kY63+tINd4BEhU= Subject key identifier: EB:17:13:9F:8D:8D:EA:BA:AD:AD:2C:C3:67:38:E7:40:71:14:F5:F6 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 0FF5 Signing time: Wed 02 Jul 2025 17:53:58 +0000 Manifest this update: Wed 02 Jul 2025 17:53:57 +0000 Manifest next update: Wed 09 Jul 2025 17:53:57 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: gDJ38Cx+5Qqc+0IoUbdqNyQXHLYhd8C9W28ICMGPRUE=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: fxHGOyOyuB7YI5nNfKWHUK5b4ic8LKYtMZ7wxSPfXXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Jul 2 17:53:57 2025 GMT Not After : Jul 9 17:53:57 2025 GMT Subject: CN=68657235-bae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:20:d4:3d:52:b6:09:c7:f0:4f:22:16:e8: df:06:3f:2a:f9:24:38:bb:5d:91:eb:4c:66:8a:8a: 4d:f9:cc:7c:87:d3:4a:e5:64:2b:bc:98:5e:e2:96: 29:e1:73:ac:08:87:79:8a:6e:94:63:15:86:34:33: 1b:10:0d:dd:6d:30:d9:a3:d4:04:a1:9c:5c:be:34: 4c:e5:8f:ae:a0:53:c7:21:68:29:3f:c4:5b:66:a9: 7f:0b:aa:8d:ad:8a:3d:cc:ee:bb:a3:9d:74:44:53: f4:87:00:df:5b:29:68:4c:81:02:1e:fc:9d:6e:40: cf:c6:88:c4:f8:67:7b:17:0b:5f:aa:7f:b8:97:0f: d3:07:dc:fa:22:2c:7f:b3:6c:66:89:a1:a6:29:ae: ec:30:2c:9d:b7:33:e7:95:17:75:ea:25:a9:6f:64: 3a:7e:89:4e:cc:62:4c:76:3f:55:2d:9a:c3:32:5c: 38:d9:60:71:aa:30:c2:9c:4d:9f:9d:d6:8f:89:70: 57:3d:c7:b2:ec:95:93:97:32:df:92:9b:a7:5b:35: d2:aa:3c:9e:88:25:05:91:96:b6:f6:57:a4:40:57: fe:96:45:8f:7e:7d:f6:e6:2b:02:89:b3:ac:1d:1b: 25:2e:19:42:6a:4d:e5:70:75:8b:38:59:79:a6:a3: 66:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:17:13:9F:8D:8D:EA:BA:AD:AD:2C:C3:67:38:E7:40:71:14:F5:F6 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3c:9b:62:04:7a:50:6e:6d:03:74:77:38:7e:f6:a1:6c:7f: f9:8b:fb:0b:c0:b6:60:66:46:72:4e:a4:90:f7:e1:b0:bd:96: 6e:da:00:77:2d:0f:7b:25:d8:be:fb:d3:ad:dc:da:2f:f0:c7: 30:0c:c2:70:ff:87:fc:a1:2a:65:74:6c:96:ae:02:7e:41:de: 19:49:52:2b:12:60:30:4b:39:9b:bd:65:78:a3:c8:ea:7c:0d: 2b:55:9f:ba:21:77:97:fa:34:f2:42:5f:78:ba:39:56:3b:33: 48:e2:6d:91:fc:9d:d3:a7:a5:8e:7e:3b:53:a2:67:04:0c:97: c7:01:53:02:84:b0:36:7f:36:c3:35:38:48:2d:a1:a6:c4:7c: af:bc:6b:2c:87:89:3a:84:38:47:e5:5c:84:af:1b:9e:d0:7e: fb:77:ce:9a:be:93:23:46:eb:71:2a:78:d3:f8:45:98:16:f4: 16:ca:5c:9b:ae:f4:4f:c4:59:53:b7:ae:14:62:e0:30:e6:52: 73:0d:96:fc:15:47:6c:77:00:7c:42:df:1a:74:29:42:1e:77: 29:fe:77:1a:78:ac:d9:5f:da:69:5a:0a:f4:51:85:a5:8f:df: 3a:a2:05:37:c3:fc:0b:ce:1c:df:37:ad:7e:89:f1:2f:61:05: 7b:1e:68:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUwNzAyMTc1MzU3WhcNMjUwNzA5MTc1MzU3WjAYMRYwFAYD VQQDEw02ODY1NzIzNS1iYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOEg1D1StgnH8E8iFujfBj8q+SQ4u12R60xmiopN+cx8h9NK5WQrvJhe4pYp 4XOsCId5im6UYxWGNDMbEA3dbTDZo9QEoZxcvjRM5Y+uoFPHIWgpP8RbZql/C6qN rYo9zO67o510RFP0hwDfWyloTIECHvydbkDPxojE+Gd7Fwtfqn+4lw/TB9z6Iix/ s2xmiaGmKa7sMCydtzPnlRd16iWpb2Q6folOzGJMdj9VLZrDMlw42WBxqjDCnE2f ndaPiXBXPcey7JWTlzLfkpunWzXSqjyeiCUFkZa29lekQFf+lkWPfn325isCibOs HRslLhlCak3lcHWLOFl5pqNmHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsXE5+N jeq6ra0sw2c450BxFPX2MB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpPJtiBHpQbm0DdHc4fvahbH/5i/sLwLZgZkZyTqSQ9+GwvZZu2gB3 LQ97Jdi++9Ot3Nov8McwDMJw/4f8oSpldGyWrgJ+Qd4ZSVIrEmAwSzmbvWV4o8jq fA0rVZ+6IXeX+jTyQl94ujlWOzNI4m2R/J3Tp6WOfjtTomcEDJfHAVMChLA2fzbD NThILaGmxHyvvGssh4k6hDhH5VyErxue0H77d86avpMjRutxKnjT+EWYFvQWylyb rvRPxFlTt64UYuAw5lJzDZb8FUdsdwB8Qt8adClCHncp/ncaeKzZX9ppWgr0UYWl j986ogU3w/wLzhzfN61+ifEvYQV7Hmjp -----END CERTIFICATE-----Generated at Fri Jul 4 14:59:43 2025 by rpki-client