$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: 1S2Jye3NcMkSJpckhz2LNpwSrftgbl7tCVEVz8EM23g= Subject key identifier: 03:C3:8C:30:18:C9:AF:5A:CA:4C:1F:57:63:4B:9E:5D:FA:65:88:28 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 07D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 07CB Signing time: Mon 30 Jun 2025 21:20:16 +0000 Manifest this update: Mon 30 Jun 2025 21:20:15 +0000 Manifest next update: Mon 07 Jul 2025 21:20:15 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: /MPfnrmsLRKq9JyF9/3toxnZrbKbDRKUqIHQXtgCaz8=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: ipH52NvI6j7Qm3VJ3UEcq9yvGVo2LC48K1opbVhCFvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2005 (0x7d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Jun 30 21:20:15 2025 GMT Not After : Jul 7 21:20:15 2025 GMT Subject: CN=6862ff90-e61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:d3:7d:41:48:84:b2:1a:77:9a:ce:5c:5f: c9:45:56:c8:65:3e:49:58:e8:46:97:87:87:7e:a3: 21:25:9d:be:f3:f4:dc:9e:a1:97:1c:ce:8d:ef:cf: ea:45:7b:f0:a8:b9:8f:4d:53:14:47:e9:03:8f:17: af:4a:e4:04:fb:94:68:50:44:36:e8:29:54:85:5a: c8:6b:75:32:21:4f:c2:5a:8f:81:6c:16:29:1e:9f: 06:57:d9:03:6f:b8:5c:47:92:1f:33:69:72:b5:d0: 96:e8:16:24:a2:d2:25:03:4c:5f:ea:74:58:cc:07: 5a:d0:22:a8:cd:16:cf:31:31:05:fe:30:ff:48:b2: 68:49:2a:e0:77:73:de:2e:59:22:90:7f:df:bc:a0: eb:d2:43:0b:87:70:c8:e2:2a:c4:8b:4c:7e:9e:aa: da:e2:a6:7d:34:ad:87:ed:c5:72:1e:c4:56:f7:8c: d4:5d:ee:6b:a7:5d:8e:21:e9:1f:dd:12:ea:b8:d7: d0:b8:27:4b:2e:12:79:da:1f:67:0c:2a:03:ce:0f: 88:5d:0d:bc:ac:6d:98:0f:93:c0:57:c4:48:98:77: 37:55:de:a0:12:92:2f:4d:dc:82:73:cb:24:f3:2f: b6:49:07:b5:3e:85:48:58:61:8a:1b:64:a4:0e:49: 2e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C3:8C:30:18:C9:AF:5A:CA:4C:1F:57:63:4B:9E:5D:FA:65:88:28 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:57:1c:27:47:1b:8c:6b:39:a2:6d:1a:98:6a:7f:03:e8:c6: 2e:8f:cc:31:e8:f0:ba:fd:67:94:fd:55:e6:73:71:e5:35:31: 00:39:91:83:58:bb:dd:8a:78:2f:fc:db:e0:ac:70:11:c5:da: fd:55:bb:98:72:a3:c0:d1:a7:cb:0e:a7:71:46:de:87:b1:61: a4:89:1c:d0:48:b6:2c:84:e5:b1:a5:b8:85:4a:0b:e1:ba:ac: 8d:3f:5c:31:94:80:dd:b2:f9:cd:e1:87:db:eb:65:d6:60:4a: a8:80:f0:17:df:25:aa:08:af:90:19:26:20:0d:dc:a1:a2:55: ee:8b:bd:91:f8:f9:8b:14:6a:42:3b:78:82:f2:d6:e6:48:41: 1b:8b:39:71:fb:c1:fc:63:7c:89:0a:75:e2:77:6c:13:d5:b2: 59:61:9c:f3:3b:da:a3:d2:7d:6f:6a:a4:cd:45:4b:1b:0c:97: 53:34:47:0c:51:b5:92:12:f7:94:45:d3:4e:b9:29:bb:ec:b7: ca:99:2f:16:d3:ad:6d:6f:25:c1:90:fc:cd:62:25:64:28:4b: 8e:50:63:77:ca:b4:f8:6d:51:d9:4d:2e:bf:99:b4:6b:32:66: 68:57:a6:9b:f6:d3:3f:b0:6b:23:77:a7:1f:db:ca:b0:53:f2: ae:3b:45:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjUwNjMwMjEyMDE1WhcNMjUwNzA3MjEyMDE1WjAYMRYwFAYD VQQDEw02ODYyZmY5MC1lNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD7TfUFIhLIad5rOXF/JRVbIZT5JWOhGl4eHfqMhJZ2+8/TcnqGXHM6N78/q RXvwqLmPTVMUR+kDjxevSuQE+5RoUEQ26ClUhVrIa3UyIU/CWo+BbBYpHp8GV9kD b7hcR5IfM2lytdCW6BYkotIlA0xf6nRYzAda0CKozRbPMTEF/jD/SLJoSSrgd3Pe LlkikH/fvKDr0kMLh3DI4irEi0x+nqra4qZ9NK2H7cVyHsRW94zUXe5rp12OIekf 3RLquNfQuCdLLhJ52h9nDCoDzg+IXQ28rG2YD5PAV8RImHc3Vd6gEpIvTdyCc8sk 8y+2SQe1PoVIWGGKG2SkDkkuJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPDjDAY ya9aykwfV2NLnl36ZYgoMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdVxwnRxuMazmibRqYan8D6MYuj8wx6PC6/WeU/VXmc3HlNTEAOZGD WLvdingv/NvgrHARxdr9VbuYcqPA0afLDqdxRt6HsWGkiRzQSLYshOWxpbiFSgvh uqyNP1wxlIDdsvnN4Yfb62XWYEqogPAX3yWqCK+QGSYgDdyholXui72R+PmLFGpC O3iC8tbmSEEbizlx+8H8Y3yJCnXid2wT1bJZYZzzO9qj0n1vaqTNRUsbDJdTNEcM UbWSEveURdNOuSm77LfKmS8W061tbyXBkPzNYiVkKEuOUGN3yrT4bVHZTS6/mbRr MmZoV6ab9tM/sGsjd6cf28qwU/KuO0UQ -----END CERTIFICATE-----Generated at Wed Jul 2 13:06:58 2025 by rpki-client