$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: QatXrliOL67a+KxOdIEeWIRi/+P8KJ3dDMo4hKrvXic= Subject key identifier: 46:D4:17:35:3F:86:7E:14:77:D5:1E:76:B5:B5:51:25:7F:3E:0A:A2 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 102C Signing time: Fri 22 Aug 2025 17:47:16 +0000 Manifest this update: Fri 22 Aug 2025 17:47:16 +0000 Manifest next update: Fri 29 Aug 2025 17:47:16 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: 42rASAHuJ/QZOEfBy5Ho81GuLaZKby10nOrlFZuUO6w=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: MZyOtnzSYRn5H5siK78kl2QRZxsNV35INBP6UfbHk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Aug 22 17:47:16 2025 GMT Not After : Aug 29 17:47:16 2025 GMT Subject: CN=68a8ad24-81dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:ee:77:c5:2f:af:71:be:99:2c:26:df:d2: 70:98:09:a8:0e:d3:75:da:d7:7d:ca:5a:af:6e:4b: cb:28:03:3c:27:b6:ae:53:3e:a5:a5:f6:6b:1a:19: 74:df:59:e1:78:68:b2:3a:ed:83:02:53:44:64:f3: 5d:db:89:8f:d7:d0:d3:62:2c:e2:0c:83:94:05:2c: 9b:93:b4:fb:0f:dd:2b:cf:9c:b0:6c:a8:70:d5:71: c1:b9:32:7b:cd:40:4b:f0:23:82:19:77:e6:b7:09: 41:0d:fd:2b:ad:9c:64:e3:a6:8d:0c:81:6d:76:35: 00:47:47:69:d2:3d:19:1d:41:12:bb:82:99:e9:d0: 03:da:a1:4b:79:a5:ba:19:62:da:1a:8e:1f:6a:d8: e4:ab:ba:65:7c:6d:d0:ef:f6:1c:39:b4:bb:01:ce: 1a:44:44:8a:63:91:d6:89:90:15:33:f2:10:1d:5d: 72:21:c7:78:7f:57:19:4f:f0:80:fe:eb:95:8d:03: 60:0a:42:ff:29:a5:54:de:1b:e8:25:a2:a5:83:fb: b6:fa:5a:99:ac:64:92:ed:ea:61:76:af:2b:0b:2c: ea:f8:bb:4f:39:17:d8:03:65:9f:71:b9:c1:d8:c4: 89:fb:24:00:c9:82:3e:83:6f:5e:9a:b4:c0:b5:74: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D4:17:35:3F:86:7E:14:77:D5:1E:76:B5:B5:51:25:7F:3E:0A:A2 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8d:d6:f8:05:73:e1:89:40:5f:e8:62:3a:34:5b:5b:7a:39: e6:68:1f:8b:fb:e2:a1:be:12:24:7d:c9:79:c2:44:cc:a5:7b: e9:b6:44:a8:0e:7d:0d:f9:90:a1:a6:72:96:49:6c:29:8e:29: fa:8e:de:57:44:4a:bb:a8:10:52:4a:a4:3a:17:97:42:41:89: d0:80:7b:04:33:70:de:4d:9c:5a:6c:3c:34:95:5b:31:8c:14: a2:a0:c0:06:e5:ba:50:2a:cb:45:86:de:85:7e:64:db:6b:ed: ab:bb:71:0d:14:c0:79:10:37:3e:5f:bd:90:6d:13:bb:44:cd: 6b:90:37:47:3e:e0:64:0d:fb:c1:97:d7:10:08:c8:2f:2a:04: 2a:0f:aa:dc:16:94:b1:59:c7:79:59:da:b2:74:82:87:3b:fb: d6:dd:bb:0b:56:f2:5f:34:5d:9b:87:80:67:9d:61:bc:f5:e3: 14:95:34:8f:25:43:83:e5:86:3a:21:55:6d:d9:25:40:ad:7e: 33:8d:61:69:2b:68:04:03:d6:31:09:43:38:37:9d:6b:e2:f0: 36:62:f4:cb:db:7e:3f:73:91:50:b7:58:20:6e:78:a0:72:c2: fe:e1:26:69:5e:eb:de:57:bd:11:35:f9:df:d4:03:9f:19:67: bc:36:c5:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUwODIyMTc0NzE2WhcNMjUwODI5MTc0NzE2WjAYMRYwFAYD VQQDEw02OGE4YWQyNC04MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArR3ud8Uvr3G+mSwm39JwmAmoDtN12td9ylqvbkvLKAM8J7auUz6lpfZrGhl0 31nheGiyOu2DAlNEZPNd24mP19DTYiziDIOUBSybk7T7D90rz5ywbKhw1XHBuTJ7 zUBL8COCGXfmtwlBDf0rrZxk46aNDIFtdjUAR0dp0j0ZHUESu4KZ6dAD2qFLeaW6 GWLaGo4fatjkq7plfG3Q7/YcObS7Ac4aRESKY5HWiZAVM/IQHV1yIcd4f1cZT/CA /uuVjQNgCkL/KaVU3hvoJaKlg/u2+lqZrGSS7ephdq8rCyzq+LtPORfYA2WfcbnB 2MSJ+yQAyYI+g29emrTAtXT+VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbUFzU/ hn4Ud9UedrW1USV/PgqiMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBujdb4BXPhiUBf6GI6NFtbejnmaB+L++KhvhIkfcl5wkTMpXvptkSo Dn0N+ZChpnKWSWwpjin6jt5XREq7qBBSSqQ6F5dCQYnQgHsEM3DeTZxabDw0lVsx jBSioMAG5bpQKstFht6FfmTba+2ru3ENFMB5EDc+X72QbRO7RM1rkDdHPuBkDfvB l9cQCMgvKgQqD6rcFpSxWcd5WdqydIKHO/vW3bsLVvJfNF2bh4BnnWG89eMUlTSP JUOD5YY6IVVt2SVArX4zjWFpK2gEA9YxCUM4N51r4vA2YvTL234/c5FQt1ggbnig csL+4SZpXuveV70RNfnf1AOfGWe8NsXK -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:23 2025 by rpki-client