$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: pqCfhNppyPoHIQN8B/LxWfxKFLgpnVD4XmPBAqKxBhU= Subject key identifier: C7:38:F8:BE:86:95:B3:4F:C6:55:F9:2E:BE:E2:59:1B:71:DA:04:20 Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: 8C Signing time: Thu 03 Jul 2025 06:42:01 +0000 Manifest this update: Thu 03 Jul 2025 06:42:00 +0000 Manifest next update: Thu 10 Jul 2025 06:42:00 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: bbatF1GOkAwXw5T9hNi6ESE8kdl/DGWPiQYIXnvGbgc=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: Jul 3 06:42:00 2025 GMT Not After : Jul 10 06:42:00 2025 GMT Subject: CN=68662638-4f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:4c:44:af:bc:c3:4f:4a:47:6c:e6:ca:7f: 7a:68:6c:dd:7e:7c:aa:c6:94:9f:4d:17:e0:69:ad: 4d:10:31:47:2b:3a:77:0f:1c:ed:db:6b:bd:27:16: 0f:02:14:f7:1d:41:e1:bc:ef:ff:95:13:0e:26:5d: cc:7a:b2:76:8c:47:37:0f:f2:9a:9e:8d:61:c2:66: 58:d6:f5:af:7b:da:0d:d8:70:8f:fa:aa:28:5c:6c: cc:d3:3d:af:4d:1c:76:b1:74:bf:ed:eb:f2:5f:83: 5d:b1:dc:1c:e4:f5:5d:61:7c:13:b0:79:18:f4:d0: 92:fc:9e:6a:66:60:2b:63:e6:28:7d:73:73:07:49: d3:69:2a:ed:19:f2:24:90:1b:01:1d:7d:86:cb:4e: 02:db:22:4e:30:cf:de:6d:7c:c9:e0:ce:cb:a4:7e: d5:8e:16:1b:7f:b6:52:63:4f:44:27:ec:0d:78:06: b6:d4:05:61:5f:b4:76:e9:94:fc:42:88:ed:ce:ad: 29:b6:0e:ff:3a:da:ec:8a:37:0b:46:bb:8f:f7:a4: 87:3d:04:31:78:e4:39:09:a4:0b:2b:9e:e4:49:05: 3b:21:cd:fb:c8:31:c4:06:1a:c7:06:39:a4:f4:b0: 4a:ff:18:b2:e5:56:a6:b2:3e:72:1b:d6:f7:c6:ac: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:38:F8:BE:86:95:B3:4F:C6:55:F9:2E:BE:E2:59:1B:71:DA:04:20 X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ef:4a:57:2f:3b:99:6f:e8:92:45:12:16:36:5f:7b:0d:1c: a5:94:c2:54:1a:71:23:6f:79:ae:54:79:8e:9e:6f:aa:75:ec: a0:20:97:ea:c0:3e:fa:b9:35:fe:53:02:42:3c:33:7d:0a:d1: 6b:28:1b:9e:bd:58:56:08:c8:78:55:ee:9b:d7:13:44:06:82: 7c:7e:bb:8c:cc:6f:46:a9:40:24:17:f8:3f:b0:4b:80:f3:1b: 96:9a:1e:be:6d:6b:1e:22:c7:b6:56:38:9b:5b:ac:4f:71:db: 8b:b4:e4:37:db:f4:12:29:4e:e3:5a:3c:3d:a4:aa:21:68:5d: 5e:39:38:d2:c2:29:11:58:0b:f0:a5:96:55:08:7f:52:2b:43: d2:73:8f:5a:95:ae:99:be:40:2f:3b:a6:1d:09:50:62:ee:04: 72:ef:a1:5d:99:49:d7:8e:1c:54:04:3f:84:a3:9a:51:d9:e3: 87:12:ff:2e:c7:c2:d0:5b:2e:a1:39:de:8d:42:40:3b:d4:da: 90:fc:5f:16:d3:1b:b5:aa:7a:2d:c8:fe:e4:6c:e2:9b:c6:57: 66:99:4e:7c:97:18:17:52:db:d9:be:70:b8:65:9f:97:b2:8c: 53:8d:ca:1b:01:0c:cc:4b:f6:4a:be:1b:67:ad:c6:79:88:9b: 50:9c:41:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFNzIxMTAvBgNVBAUTKDczRDkwMDkyNEU3MDE1NDhFNkUzMjAzODgwRjZDMDk3 MkE0QzI5MUEwHhcNMjUwNzAzMDY0MjAwWhcNMjUwNzEwMDY0MjAwWjAYMRYwFAYD VQQDEw02ODY2MjYzOC00ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5pMRK+8w09KR2zmyn96aGzdfnyqxpSfTRfgaa1NEDFHKzp3Dxzt22u9JxYP AhT3HUHhvO//lRMOJl3MerJ2jEc3D/Kano1hwmZY1vWve9oN2HCP+qooXGzM0z2v TRx2sXS/7evyX4Ndsdwc5PVdYXwTsHkY9NCS/J5qZmArY+YofXNzB0nTaSrtGfIk kBsBHX2Gy04C2yJOMM/ebXzJ4M7LpH7VjhYbf7ZSY09EJ+wNeAa21AVhX7R26ZT8 Qojtzq0ptg7/OtrsijcLRruP96SHPQQxeOQ5CaQLK57kSQU7Ic37yDHEBhrHBjmk 9LBK/xiy5Vamsj5yG9b3xqwoswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMc4+L6G lbNPxlX5Lr7iWRtx2gQgMB8GA1UdIwQYMBaAFHPZAJJOcBVI5uMgOID2wJcqTCka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU3Mi9FNkI0NDkwMjg0 ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZVam00eUE0Z1BiQWx5cE1L Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU3Mi9FNkI0NDkwMjg0ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZV am00eUE0Z1BiQWx5cE1LUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm70pXLzuZb+iSRRIWNl97DRyllMJUGnEjb3muVHmOnm+qdeygIJfq wD76uTX+UwJCPDN9CtFrKBuevVhWCMh4Ve6b1xNEBoJ8fruMzG9GqUAkF/g/sEuA 8xuWmh6+bWseIse2VjibW6xPcduLtOQ32/QSKU7jWjw9pKohaF1eOTjSwikRWAvw pZZVCH9SK0PSc49ala6ZvkAvO6YdCVBi7gRy76FdmUnXjhxUBD+Eo5pR2eOHEv8u x8LQWy6hOd6NQkA71NqQ/F8W0xu1qnotyP7kbOKbxldmmU58lxgXUtvZvnC4ZZ+X soxTjcobAQzMS/ZKvhtnrcZ5iJtQnEHW -----END CERTIFICATE-----Generated at Thu Jul 3 09:05:18 2025 by rpki-client