$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: 6mZ90Av4MAZBJ6VGmhZRypzaVOZv4lp1FV2Xp5Lwx/0= Subject key identifier: 65:16:37:77:B2:12:98:40:8B:73:90:C5:15:AE:DE:FB:BB:75:5D:D9 Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 01E2 Signing time: Sat 23 Aug 2025 02:48:52 +0000 Manifest this update: Sat 23 Aug 2025 02:48:51 +0000 Manifest next update: Sat 30 Aug 2025 02:48:51 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: P60nQmaPloY97sTO/V11iI48yTGhg9OmQTS5gViOwrY=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Aug 23 02:48:51 2025 GMT Not After : Aug 30 02:48:51 2025 GMT Subject: CN=68a92c13-fc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c3:97:24:6f:6d:d7:a1:69:92:93:bc:87:da: af:7c:3d:86:d0:b6:20:13:7e:80:13:11:76:48:bb: 44:4d:04:16:5f:b4:4e:42:d9:69:7a:01:e6:d0:df: 8b:5b:7c:b0:aa:ac:3b:46:fd:fd:17:ce:4d:df:12: ff:4a:0c:9c:2f:c0:fa:df:ec:ca:bc:41:64:e6:f7: 00:70:b0:7a:e5:08:00:5d:4b:5e:01:4d:09:36:7b: cd:72:a8:ce:8a:0f:44:97:59:92:43:44:31:e3:93: f3:bc:cf:fd:67:fb:05:40:d2:f2:8b:22:9e:79:6a: 3e:2f:b0:5f:13:f8:fa:ad:d9:f0:49:d5:bc:68:2c: e8:85:ca:ba:81:7f:d0:36:b7:67:c8:13:a0:42:eb: 6e:72:c0:de:f1:0b:08:45:88:50:3e:62:06:96:88: fc:35:09:bb:7c:49:06:b0:64:d7:b6:46:c7:6d:51: 0c:81:ce:49:c4:2b:71:cc:55:90:a2:82:fe:a7:33: a4:04:a2:79:a3:3e:9f:24:85:31:88:bf:8c:5f:c2: d9:ff:30:29:44:ce:cc:99:f3:30:26:94:04:2d:5b: 34:e3:f6:76:41:e4:fa:97:76:4d:6c:c1:5d:b7:c7: b4:8b:b0:85:28:4d:34:da:ae:6d:e1:7a:8f:29:83: 96:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:16:37:77:B2:12:98:40:8B:73:90:C5:15:AE:DE:FB:BB:75:5D:D9 X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ff:dd:6b:e2:6f:18:e7:86:6c:e4:6b:a1:c4:16:91:1a:18: 1d:f4:91:2c:28:d4:4a:66:65:24:b7:c0:41:e6:3a:68:0d:f6: c6:d6:f3:33:12:48:45:e5:be:a4:c3:17:75:c5:fe:c2:cf:eb: 64:26:72:b6:f1:7c:83:52:f5:6e:71:c1:05:ee:bb:ce:9c:8d: b9:fc:e7:2e:56:29:d0:03:47:52:14:fc:90:37:ad:29:23:56: c5:ef:60:07:da:ee:4c:af:47:94:dd:a3:e0:81:ce:bf:9d:31: 1c:df:7d:8b:e6:5b:c4:41:04:f9:bb:dd:34:4c:2c:13:10:62: 8a:1f:c8:ca:fc:e4:b2:3f:9a:68:b4:b3:f3:07:eb:2a:ce:c0: 4c:61:10:e8:58:16:52:8c:b1:c9:9e:da:6e:dd:e1:59:49:ea: 7d:aa:1d:b2:56:11:77:65:f2:55:2e:17:4f:0e:e3:7f:80:43: e3:0e:3b:ee:90:3a:10:bf:7e:0e:46:78:a3:72:7a:4c:3c:10: 80:19:44:9f:af:57:94:71:7a:96:2d:7d:95:77:c1:c7:2a:98: 12:ed:88:3c:ed:55:98:9c:31:43:ce:ed:16:96:8f:b7:e7:23: dd:be:83:72:41:57:73:3a:65:69:c8:07:66:c6:78:08:eb:8d: 87:b9:bd:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUwODIzMDI0ODUxWhcNMjUwODMwMDI0ODUxWjAYMRYwFAYD VQQDEw02OGE5MmMxMy1mYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+8OXJG9t16FpkpO8h9qvfD2G0LYgE36AExF2SLtETQQWX7ROQtlpegHm0N+L W3ywqqw7Rv39F85N3xL/SgycL8D63+zKvEFk5vcAcLB65QgAXUteAU0JNnvNcqjO ig9El1mSQ0Qx45PzvM/9Z/sFQNLyiyKeeWo+L7BfE/j6rdnwSdW8aCzohcq6gX/Q NrdnyBOgQutucsDe8QsIRYhQPmIGloj8NQm7fEkGsGTXtkbHbVEMgc5JxCtxzFWQ ooL+pzOkBKJ5oz6fJIUxiL+MX8LZ/zApRM7MmfMwJpQELVs04/Z2QeT6l3ZNbMFd t8e0i7CFKE002q5t4XqPKYOWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUWN3ey EphAi3OQxRWu3vu7dV3ZMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU/91r4m8Y54Zs5GuhxBaRGhgd9JEsKNRKZmUkt8BB5jpoDfbG1vMz EkhF5b6kwxd1xf7Cz+tkJnK28XyDUvVuccEF7rvOnI25/OcuVinQA0dSFPyQN60p I1bF72AH2u5Mr0eU3aPggc6/nTEc332L5lvEQQT5u900TCwTEGKKH8jK/OSyP5po tLPzB+sqzsBMYRDoWBZSjLHJntpu3eFZSep9qh2yVhF3ZfJVLhdPDuN/gEPjDjvu kDoQv34ORnijcnpMPBCAGUSfr1eUcXqWLX2Vd8HHKpgS7Yg87VWYnDFDzu0Wlo+3 5yPdvoNyQVdzOmVpyAdmxngI642Hub1A -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:06 2025 by rpki-client