$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft File: V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json) Hash identifier: FOylnotsfvouAGklhGYREgQRYvUoIe9oWKWe1eQT6P4= Subject key identifier: 0F:00:06:0C:DB:73:6A:01:38:4D:D5:1F:3D:1E:D5:00:81:03:FA:F0 Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft Manifest number: 08C3 Signing time: Fri 22 Aug 2025 20:35:29 +0000 Manifest this update: Fri 22 Aug 2025 20:35:29 +0000 Manifest next update: Fri 29 Aug 2025 20:35:29 +0000 Files and hashes: 1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: 1/TOgbdgru5djFBJg01ZJz8Alkz1fpJOF5sbOvMbLbI=) 2: 19EF4D1ABE5A11EDAA537748C4F9AE02.roa (hash: miZMhJRep9ETR17YW7gWoj6LqwgVkbNzRlMxX+ZmBhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Validity Not Before: Aug 22 20:35:29 2025 GMT Not After : Aug 29 20:35:29 2025 GMT Subject: CN=68a8d491-7946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:7b:98:1d:c4:0e:27:25:7a:38:1f:7f:6b: b8:cb:d3:12:fc:d3:af:d2:a8:90:42:c7:1f:72:68: d2:5b:cc:70:d2:0b:5d:b4:b8:ff:8c:f2:7e:fb:cf: e9:65:c8:02:82:64:d1:f3:fd:21:a3:45:05:b9:a5: 6e:f7:91:e1:f0:2c:bf:0f:aa:aa:a1:e5:05:a3:0a: 1d:ef:c2:69:72:a4:5e:47:de:97:7a:60:21:3f:30: 61:16:52:00:0c:63:27:8a:2e:94:56:34:3e:0e:4e: cd:eb:b3:1c:cb:45:08:18:a6:a7:f3:21:98:8b:2a: 71:4f:f6:62:b7:cf:a8:df:55:7b:b9:28:df:1e:1c: 5d:cb:7a:cb:ed:ca:24:19:56:95:ee:67:0b:f7:21: f2:5a:89:18:bb:31:a5:51:08:b2:34:df:1c:d4:e2: 26:b2:4e:64:61:9f:af:fb:a1:7a:e6:10:e8:53:68: 70:6e:9f:83:40:ce:2f:1f:e8:d7:03:cf:2e:33:17: 05:c5:4b:74:1c:53:8e:5a:9d:08:84:25:90:24:bc: a9:68:bc:c5:17:8d:99:5f:24:00:7a:fa:b3:2c:bc: 72:a6:b2:44:89:d6:ca:61:ea:fe:9c:c5:65:84:d7: c3:2d:f2:2c:68:90:35:a6:8e:0a:82:7a:21:95:e8: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:00:06:0C:DB:73:6A:01:38:4D:D5:1F:3D:1E:D5:00:81:03:FA:F0 X509v3 Authority Key Identifier: keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:87:c9:84:90:34:a2:cd:a2:52:79:37:48:04:b2:3e:71:08: 22:dc:85:a6:09:29:cd:f4:43:9a:31:82:01:b5:4c:ec:b0:19: ed:db:5e:64:ec:1c:54:77:fb:b3:44:cc:7b:28:9f:42:6b:90: d5:0d:19:61:94:ae:69:51:70:d9:93:45:9d:72:d3:76:ed:3d: 1d:0e:03:92:01:ff:f5:08:5b:8c:78:ca:5f:3b:5c:dc:9f:0a: 68:fb:c6:be:bc:8e:f0:94:ff:fb:d6:18:b9:93:c0:67:1d:93: ba:9f:1a:60:0a:6d:cc:be:a0:01:3a:16:63:c2:29:8f:5c:f1: dc:96:33:18:9d:ae:22:ea:a7:50:df:2c:90:83:ed:40:d5:96: d2:97:b0:8b:a6:ed:c5:31:ab:cf:2a:9c:cd:79:7e:93:ec:6d: 02:6c:bf:41:91:28:ec:27:2e:9d:10:0e:8f:1f:c6:99:22:9f: 3e:87:b1:6b:66:a2:85:e7:cf:2a:ba:b3:e5:b9:04:a8:a1:54: e7:58:f7:95:ea:3d:cc:c4:e8:5e:b7:cd:ee:d1:29:4d:eb:65: 8f:a6:cc:66:eb:6f:7b:c3:03:e9:94:fa:e2:18:95:51:35:30: dd:8d:36:fd:55:4f:6a:5c:93:1f:cf:08:62:d2:aa:cf:f6:c8: 35:2d:0f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTcxMTAvBgNVBAUTKDU3REI0MkFCOUVCQkVGQkZFMjEwNzNGNTAwN0ZDMzc2 MkM1RkJCMDgwHhcNMjUwODIyMjAzNTI5WhcNMjUwODI5MjAzNTI5WjAYMRYwFAYD VQQDEw02OGE4ZDQ5MS03OTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2t7mB3EDiclejgff2u4y9MS/NOv0qiQQscfcmjSW8xw0gtdtLj/jPJ++8/p ZcgCgmTR8/0ho0UFuaVu95Hh8Cy/D6qqoeUFowod78JpcqReR96XemAhPzBhFlIA DGMnii6UVjQ+Dk7N67Mcy0UIGKan8yGYiypxT/Zit8+o31V7uSjfHhxdy3rL7cok GVaV7mcL9yHyWokYuzGlUQiyNN8c1OImsk5kYZ+v+6F65hDoU2hwbp+DQM4vH+jX A88uMxcFxUt0HFOOWp0IhCWQJLypaLzFF42ZXyQAevqzLLxyprJEidbKYer+nMVl hNfDLfIsaJA1po4KgnohlehJ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8ABgzb c2oBOE3VHz0e1QCBA/rwMB8GA1UdIwQYMBaAFFfbQqueu++/4hBz9QB/w3YsX7sI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5Ny8yNEVEMjE1NkJD MjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3X2lFSFAxQUhfRGRpeGZ1 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y5dENxNTY3NzdfaUVIUDFBSF9EZGl4ZnV3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5Ny8yNEVEMjE1NkJDMjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3 X2lFSFAxQUhfRGRpeGZ1d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxh8mEkDSizaJSeTdIBLI+cQgi3IWmCSnN9EOaMYIBtUzssBnt215k 7BxUd/uzRMx7KJ9Ca5DVDRlhlK5pUXDZk0WdctN27T0dDgOSAf/1CFuMeMpfO1zc nwpo+8a+vI7wlP/71hi5k8BnHZO6nxpgCm3MvqABOhZjwimPXPHcljMYna4i6qdQ 3yyQg+1A1ZbSl7CLpu3FMavPKpzNeX6T7G0CbL9BkSjsJy6dEA6PH8aZIp8+h7Fr ZqKF588qurPluQSooVTnWPeV6j3MxOhet83u0SlN62WPpsxm6297wwPplPriGJVR NTDdjTb9VU9qXJMfzwhi0qrP9sg1LQ/Z -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:17 2025 by rpki-client