$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: 43gtSGp7fqZqLsEZ2CWrk1FjZa6Jc8I3+y5bNXWGIsU= Subject key identifier: F4:A1:F7:F6:F7:A8:89:32:1F:BD:40:F4:6B:1F:4A:2C:D7:8E:B4:47 Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 0367 Signing time: Sat 23 Aug 2025 01:10:21 +0000 Manifest this update: Sat 23 Aug 2025 01:10:21 +0000 Manifest next update: Sat 30 Aug 2025 01:10:21 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: a5DjPdyAqAfzL0ac/i+bggDysO9TlC7UTDH+4j70jTw=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: AvM4EHFc35a+/i0JOm+PYVnypM/t1zc/v7lGdHSDzQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: Aug 23 01:10:21 2025 GMT Not After : Aug 30 01:10:21 2025 GMT Subject: CN=68a914fd-8909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3c:c9:53:9f:37:d1:f3:42:75:e5:0b:88:37: 53:1f:c8:9b:46:c9:3f:c8:f9:6b:8e:b9:ea:da:e1: 6c:45:65:41:63:7f:2a:a0:80:cd:3e:7c:59:e2:11: 9d:76:bd:4a:30:cf:38:3d:64:f0:dc:55:31:e5:84: c9:46:db:13:16:d5:1a:5f:30:52:81:dd:26:09:67: f3:f7:08:29:d3:68:57:b3:af:9e:ab:a2:9b:63:bb: 0c:65:0b:8d:e0:93:35:e2:ed:f8:7a:7f:78:34:8a: 13:b9:23:e6:c4:47:50:ae:25:45:36:f6:27:f5:93: 92:b5:c6:fc:4d:7f:22:8d:ce:1b:93:c5:7c:6b:7a: 73:fb:91:18:a7:83:68:55:43:90:32:ef:ee:f5:45: 74:65:b4:23:e8:4d:59:d1:f6:52:60:28:72:43:ab: ee:a9:fd:dc:24:f8:5f:60:0d:2a:06:6d:73:71:d9: dd:6e:e3:93:b0:6b:9b:10:04:52:57:e1:36:f2:e9: 50:ca:40:8d:b8:fe:30:2a:47:b2:4a:83:51:d7:66: 1b:51:f8:50:e3:bb:f6:a6:bd:38:66:f9:ad:5c:f0: 9f:a2:02:17:41:43:d5:b4:f3:c6:7b:4f:d2:2d:33: 18:4c:e3:10:e9:d4:db:87:e3:57:13:99:72:45:3d: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A1:F7:F6:F7:A8:89:32:1F:BD:40:F4:6B:1F:4A:2C:D7:8E:B4:47 X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3b:76:02:4f:17:7f:60:ce:b9:68:7f:85:3e:ed:72:18:b6: 9b:60:87:21:0b:43:2e:32:74:4a:b6:66:6c:5d:0d:28:b8:73: 93:ca:97:a3:c4:ba:8c:54:81:8d:58:65:18:d3:e0:ae:72:46: 75:2e:d0:71:a6:c7:1d:de:e7:50:4a:f8:22:a9:e7:1f:26:76: 0b:fd:48:b4:aa:5e:fe:03:7e:9f:80:60:cc:45:f5:7d:8f:a2: 04:65:9f:4e:57:68:22:3e:ef:ea:43:0a:82:5a:83:94:4e:ad: 51:a2:68:fd:c4:35:15:65:f8:65:d2:35:51:f0:6f:97:45:1c: 69:59:e2:94:bd:14:9d:24:3c:f6:4f:20:03:54:40:c9:c5:a0: 58:fd:08:9b:65:ed:48:c0:08:d0:cf:bc:4b:36:d8:1e:e7:d3: 6d:6f:cf:ac:be:89:86:6b:e0:cd:c4:6e:69:ec:51:4c:4f:87: e4:89:17:a8:b1:64:18:0f:8a:63:24:5b:8d:e4:04:9f:e8:6d: 89:c1:a2:72:ca:68:d6:c5:da:55:78:66:ff:c8:77:f4:53:21: 6a:18:f7:e6:64:78:9d:ee:b6:a9:53:f1:fd:ef:e8:30:24:df: 4a:c8:e1:72:00:06:11:af:48:2b:89:c3:3a:5d:e5:0f:58:6a: b3:09:f5:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjUwODIzMDExMDIxWhcNMjUwODMwMDExMDIxWjAYMRYwFAYD VQQDEw02OGE5MTRmZC04OTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jzJU5830fNCdeULiDdTH8ibRsk/yPlrjrnq2uFsRWVBY38qoIDNPnxZ4hGd dr1KMM84PWTw3FUx5YTJRtsTFtUaXzBSgd0mCWfz9wgp02hXs6+eq6KbY7sMZQuN 4JM14u34en94NIoTuSPmxEdQriVFNvYn9ZOStcb8TX8ijc4bk8V8a3pz+5EYp4No VUOQMu/u9UV0ZbQj6E1Z0fZSYChyQ6vuqf3cJPhfYA0qBm1zcdndbuOTsGubEARS V+E28ulQykCNuP4wKkeySoNR12YbUfhQ47v2pr04ZvmtXPCfogIXQUPVtPPGe0/S LTMYTOMQ6dTbh+NXE5lyRT03/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSh9/b3 qIkyH71A9GsfSizXjrRHMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIO3YCTxd/YM65aH+FPu1yGLabYIchC0MuMnRKtmZsXQ0ouHOTypej xLqMVIGNWGUY0+CuckZ1LtBxpscd3udQSvgiqecfJnYL/Ui0ql7+A36fgGDMRfV9 j6IEZZ9OV2giPu/qQwqCWoOUTq1Romj9xDUVZfhl0jVR8G+XRRxpWeKUvRSdJDz2 TyADVEDJxaBY/QibZe1IwAjQz7xLNtge59Ntb8+svomGa+DNxG5p7FFMT4fkiReo sWQYD4pjJFuN5ASf6G2JwaJyymjWxdpVeGb/yHf0UyFqGPfmZHid7rapU/H97+gw JN9KyOFyAAYRr0gricM6XeUPWGqzCfUo -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:30 2025 by rpki-client