$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: 5bKMzN2Tt3YqkCYcOR1XYGkOTGhR2FzQMFAn69Zu8ns= Subject key identifier: CC:4C:25:68:A0:1C:F8:2C:26:1E:31:80:B2:1D:A8:E4:77:5C:AF:11 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 07F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 07E6 Signing time: Fri 22 Aug 2025 21:11:34 +0000 Manifest this update: Fri 22 Aug 2025 21:11:34 +0000 Manifest next update: Fri 29 Aug 2025 21:11:34 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: 6v2lHVeHokyfjllm0BLKHpkVhquei90jvAisgwU/70E=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: ipH52NvI6j7Qm3VJ3UEcq9yvGVo2LC48K1opbVhCFvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Aug 22 21:11:34 2025 GMT Not After : Aug 29 21:11:34 2025 GMT Subject: CN=68a8dd06-673e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:14:44:9b:69:e0:fc:c9:f9:7c:6b:30:e1: fe:21:f6:63:a7:77:e8:57:6b:3f:2d:bb:37:1a:ce: 19:5b:a0:8e:f3:ee:07:e7:f1:e3:cc:e8:e8:ea:a5: 15:ba:b5:f6:10:73:41:35:7f:21:8d:b3:21:37:9a: ab:3c:e4:a2:5a:5c:bd:ec:1c:07:55:a2:6c:af:30: 74:65:40:87:49:c1:e5:be:bb:2b:0a:18:b4:ce:a6: 18:44:1d:ed:c4:b6:b3:7b:2f:03:db:7c:83:02:e2: 3e:bd:e3:ad:64:09:14:ff:aa:55:7a:ed:31:5c:78: 6d:07:74:f3:41:31:52:5d:11:92:bc:7b:1d:0e:56: 8b:29:72:38:ec:d8:48:5a:c9:63:bd:95:47:d3:6b: 57:b1:8a:39:71:e5:81:03:c9:b5:4e:8f:96:c7:e8: 55:40:b0:57:38:7c:a2:24:fd:a2:c4:87:b5:18:c2: 7b:bb:65:8c:97:9e:3a:dc:e3:1b:8d:82:6c:72:33: 3b:ec:1d:b5:a5:52:f5:3c:ba:32:27:16:5a:0f:48: 3a:ae:1e:06:f7:cd:fe:68:01:8c:64:3e:f5:bd:db: 88:f1:0b:6f:dd:a3:fe:2e:d1:f7:11:d2:a3:2b:6f: f3:10:6a:0f:8e:28:03:4d:c2:f5:7f:2b:1d:b2:45: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4C:25:68:A0:1C:F8:2C:26:1E:31:80:B2:1D:A8:E4:77:5C:AF:11 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:48:11:a6:de:b1:dd:af:3b:09:6a:bc:f4:48:cd:5b:22:3f: 28:c8:c5:99:95:31:a9:81:ad:3b:36:e9:d2:cf:6f:9e:ea:6a: ac:2c:bd:a7:64:75:d8:55:95:07:a9:8e:73:03:f8:e3:8d:9a: 1b:2b:f8:2e:b0:91:37:bd:43:71:e8:25:a3:ac:fe:64:db:d0: 5f:af:9c:f1:1a:96:21:b5:0e:9f:18:9c:19:54:71:5f:d4:75: ec:97:1f:89:5a:73:4b:8f:ac:df:2a:5c:07:71:0d:d8:28:51: 84:c0:88:c8:3f:88:6d:f4:bf:72:80:d6:8c:20:ee:2a:4c:73: b8:af:06:c0:4c:28:8b:b2:8b:c3:0d:bf:6e:fb:4d:cc:1f:d5: 13:c6:c8:4f:bd:34:19:81:a7:4d:12:ff:78:8f:2d:ab:a6:6c: 48:17:e1:8b:3a:61:7e:3d:76:26:e6:ff:f0:78:5d:46:35:5b: ac:61:ec:11:bd:a4:a7:50:6e:c8:3e:ca:9c:dd:ac:01:4d:f5: d0:f6:98:07:48:71:ef:4b:ec:26:6d:c3:12:2d:68:42:c3:5c: 43:cb:df:f5:20:2f:ff:64:dd:16:03:e3:ed:f5:21:10:24:69: 30:95:ab:00:cf:ce:5e:38:09:bb:5b:a2:a1:1b:0d:4b:df:cc: 19:9d:07:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjUwODIyMjExMTM0WhcNMjUwODI5MjExMTM0WjAYMRYwFAYD VQQDEw02OGE4ZGQwNi02NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmUURJtp4PzJ+XxrMOH+IfZjp3foV2s/Lbs3Gs4ZW6CO8+4H5/HjzOjo6qUV urX2EHNBNX8hjbMhN5qrPOSiWly97BwHVaJsrzB0ZUCHScHlvrsrChi0zqYYRB3t xLazey8D23yDAuI+veOtZAkU/6pVeu0xXHhtB3TzQTFSXRGSvHsdDlaLKXI47NhI WsljvZVH02tXsYo5ceWBA8m1To+Wx+hVQLBXOHyiJP2ixIe1GMJ7u2WMl5463OMb jYJscjM77B21pVL1PLoyJxZaD0g6rh4G983+aAGMZD71vduI8Qtv3aP+LtH3EdKj K2/zEGoPjigDTcL1fysdskUYQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxMJWig HPgsJh4xgLIdqOR3XK8RMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVSBGm3rHdrzsJarz0SM1bIj8oyMWZlTGpga07NunSz2+e6mqsLL2n ZHXYVZUHqY5zA/jjjZobK/gusJE3vUNx6CWjrP5k29Bfr5zxGpYhtQ6fGJwZVHFf 1HXslx+JWnNLj6zfKlwHcQ3YKFGEwIjIP4ht9L9ygNaMIO4qTHO4rwbATCiLsovD Db9u+03MH9UTxshPvTQZgadNEv94jy2rpmxIF+GLOmF+PXYm5v/weF1GNVusYewR vaSnUG7IPsqc3awBTfXQ9pgHSHHvS+wmbcMSLWhCw1xDy9/1IC//ZN0WA+Pt9SEQ JGkwlasAz85eOAm7W6KhGw1L38wZnQd+ -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:32 2025 by rpki-client