$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: Tr9GTykUu1vjCt13T3JeEj8goMu0ziaiQ0txaEmb/1A= Subject key identifier: 6B:58:DE:98:DE:09:1D:0B:5C:44:11:06:D2:28:7A:B9:D5:50:CA:83 Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 034D Signing time: Thu 03 Jul 2025 01:21:48 +0000 Manifest this update: Thu 03 Jul 2025 01:21:48 +0000 Manifest next update: Thu 10 Jul 2025 01:21:48 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: pI8esyFY5xLCTyvC2d7cslMcns4sXLVsyhL4vTbMlEM=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: AvM4EHFc35a+/i0JOm+PYVnypM/t1zc/v7lGdHSDzQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: Jul 3 01:21:48 2025 GMT Not After : Jul 10 01:21:48 2025 GMT Subject: CN=6865db2c-71da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0e:c6:97:f9:b1:69:22:08:00:9b:e4:d7:1b: 47:7c:91:57:a8:b8:70:c4:c2:39:ad:2a:d6:ad:b0: 73:3f:a7:95:fe:f0:8a:79:29:76:b4:6e:65:46:39: 31:01:30:0b:f9:51:2b:92:26:22:93:77:62:76:ca: 1b:8b:05:73:22:f9:24:2b:2b:d3:89:76:62:b8:6c: cc:8b:ec:30:7b:b8:a0:bc:ee:90:0f:1b:dc:6c:3d: 61:1e:0c:c6:94:b0:04:1e:f4:7f:85:51:d2:11:d5: 93:a5:d0:48:8a:df:dc:1d:20:a3:06:f3:8d:cf:13: b8:37:db:30:0b:d3:75:2c:ae:e5:02:c3:5e:0f:f1: 0c:55:40:89:7f:ad:3e:29:ec:d3:18:5a:ad:c1:9c: 8e:1c:d0:76:74:45:f4:d1:18:b1:ce:e6:49:1c:a0: c7:1e:ce:53:ca:99:67:db:ad:7f:7c:fe:d1:16:79: 4a:e5:87:c7:36:d3:17:0f:64:57:8b:9f:ca:ad:d1: a7:58:6e:79:86:fa:65:9f:57:48:a6:74:9b:e3:9d: cb:3a:cd:2a:ab:69:40:ee:be:ff:cd:63:73:13:d3: f1:f7:9e:04:fb:2a:61:55:63:28:16:44:f7:6b:ca: 83:53:10:3c:07:ab:f4:3d:17:26:43:81:b5:52:1e: 9f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:58:DE:98:DE:09:1D:0B:5C:44:11:06:D2:28:7A:B9:D5:50:CA:83 X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e1:8c:f2:49:65:b0:94:6f:59:b8:3f:f6:4a:44:10:69:0e: b7:70:ba:42:64:38:b2:af:e2:3e:9c:51:cb:50:38:27:17:87: 3c:50:68:98:ea:6c:4e:79:aa:6e:77:16:79:a6:7c:54:c6:2c: e7:d2:46:a1:27:fb:d2:24:1b:38:a8:d9:19:d4:59:9b:cf:ae: 41:4d:e1:70:e1:ad:bd:92:1c:d6:f8:92:77:e1:74:2f:bd:5a: 41:63:53:89:fe:a4:ce:5a:42:20:b5:74:15:d7:b8:9c:68:7c: 52:96:90:2f:44:0b:7e:25:00:62:4e:80:ce:c1:15:5c:58:80: 30:dc:75:05:fa:40:25:a4:1a:36:48:74:ab:77:d4:d2:f0:25: 61:26:82:72:c5:e7:31:8e:67:a2:a0:0d:95:b6:9e:cc:d8:98: f0:ce:ad:bb:e8:19:92:ad:e1:d9:12:2a:2f:d4:dc:ca:29:0f: f4:22:87:45:11:5c:94:11:ab:c7:d7:b0:ea:23:8f:bd:87:4f: 0a:f6:df:55:28:62:b7:98:62:1d:43:af:b3:b2:9d:07:9c:19: 9f:2a:bf:c6:42:99:18:01:fb:82:2a:81:ef:f2:37:e3:57:f5: 6f:e5:f9:c3:70:79:87:a0:b8:dd:ec:16:00:c2:08:c1:97:f3: 2a:ae:4b:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjUwNzAzMDEyMTQ4WhcNMjUwNzEwMDEyMTQ4WjAYMRYwFAYD VQQDEw02ODY1ZGIyYy03MWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4A7Gl/mxaSIIAJvk1xtHfJFXqLhwxMI5rSrWrbBzP6eV/vCKeSl2tG5lRjkx ATAL+VErkiYik3didsobiwVzIvkkKyvTiXZiuGzMi+wwe7igvO6QDxvcbD1hHgzG lLAEHvR/hVHSEdWTpdBIit/cHSCjBvONzxO4N9swC9N1LK7lAsNeD/EMVUCJf60+ KezTGFqtwZyOHNB2dEX00RixzuZJHKDHHs5Typln261/fP7RFnlK5YfHNtMXD2RX i5/KrdGnWG55hvpln1dIpnSb453LOs0qq2lA7r7/zWNzE9Px954E+yphVWMoFkT3 a8qDUxA8B6v0PRcmQ4G1Uh6fMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtY3pje CR0LXEQRBtIoernVUMqDMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA4YzySWWwlG9ZuD/2SkQQaQ63cLpCZDiyr+I+nFHLUDgnF4c8UGiY 6mxOeapudxZ5pnxUxizn0kahJ/vSJBs4qNkZ1Fmbz65BTeFw4a29khzW+JJ34XQv vVpBY1OJ/qTOWkIgtXQV17icaHxSlpAvRAt+JQBiToDOwRVcWIAw3HUF+kAlpBo2 SHSrd9TS8CVhJoJyxecxjmeioA2Vtp7M2Jjwzq276BmSreHZEiov1NzKKQ/0IodF EVyUEavH17DqI4+9h08K9t9VKGK3mGIdQ6+zsp0HnBmfKr/GQpkYAfuCKoHv8jfj V/Vv5fnDcHmHoLjd7BYAwgjBl/MqrksX -----END CERTIFICATE-----Generated at Thu Jul 3 06:50:35 2025 by rpki-client