$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: mDp/RKvQeAeqA7yu2pZ3+PXlUh6Z6pz2XXLZdL6vTp4= Subject key identifier: 71:A1:A9:86:36:6B:32:9B:F8:F5:D5:C4:B7:8A:92:9B:13:70:73:DE Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 01C8 Signing time: Thu 03 Jul 2025 03:03:43 +0000 Manifest this update: Thu 03 Jul 2025 03:03:43 +0000 Manifest next update: Thu 10 Jul 2025 03:03:43 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: OT3j7GLrx03y7GThNbJE9hdBH+sAjxl6G2hP+mr6ncs=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Jul 3 03:03:43 2025 GMT Not After : Jul 10 03:03:43 2025 GMT Subject: CN=6865f30f-b0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:fd:84:8e:9f:88:d1:30:27:c8:59:1c:4c: 41:d9:0e:45:7c:a5:d9:1b:f8:90:8d:4f:71:0d:2d: 19:64:53:f0:6e:87:d3:4c:3d:a4:bd:14:54:e6:c4: 1f:05:c9:18:e6:cf:26:bd:a0:70:5c:9b:63:a7:0f: ce:5f:64:3f:03:70:f8:e2:1d:a9:85:64:c9:5f:23: 68:7e:3f:d6:b7:64:4b:19:b6:4e:03:d8:29:d4:c1: 76:b4:01:c1:52:b7:f1:a1:f4:5c:97:4a:62:77:66: 51:43:b7:44:1c:fd:c1:38:91:22:d8:d3:d6:e7:9f: 09:b8:06:82:0c:d8:db:66:cc:a8:24:83:a2:33:f5: 41:5a:da:e4:73:a4:bc:7e:51:17:3d:cb:e9:5a:5d: c1:8e:80:2d:14:9f:14:91:92:ae:2b:d1:c7:d6:37: 79:be:d5:5f:43:10:0f:93:37:73:04:b5:5d:4f:c9: cb:dc:98:e8:d9:9b:e8:19:66:20:92:7f:e5:c4:d7: 5b:dd:2e:7b:5d:ff:e5:ee:73:a0:b3:8c:ca:fc:4d: ed:c3:be:a8:64:35:29:8a:9c:eb:a2:5a:60:89:91: ef:08:20:13:2b:a3:72:8f:73:36:15:4b:f7:03:b8: c5:cf:43:45:4c:eb:5a:23:c6:78:cf:2b:83:28:d8: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A1:A9:86:36:6B:32:9B:F8:F5:D5:C4:B7:8A:92:9B:13:70:73:DE X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:62:90:09:68:52:51:cc:d9:dc:ab:c7:3f:00:e7:24:14:0a: 27:69:05:10:5b:71:46:25:39:77:19:41:3a:65:16:f2:1f:22: 1d:7c:4c:65:4a:b9:fb:77:96:77:c1:5c:01:8c:8d:73:45:b5: 79:75:ae:86:c7:71:0d:7b:37:fd:5c:aa:93:2d:38:5c:ea:d1: d9:20:d2:8f:de:ab:20:cc:18:b2:52:3d:10:6b:83:0e:71:81: d3:3d:b6:b5:db:fd:2a:b4:8e:da:38:6e:2f:4a:07:20:98:ce: c5:14:ca:83:c2:58:fd:ba:0b:84:c0:e3:5a:9f:d9:8c:d5:27: 96:40:a0:b0:01:be:ff:d3:5b:e2:29:31:59:41:53:12:d2:d3: 96:7e:0b:92:28:fa:fa:cf:a9:13:ad:5a:da:ae:6a:d6:84:6d: 64:da:86:97:1b:8a:e8:32:c0:fe:d2:5c:c7:ec:01:49:ae:58: 1b:cc:29:d5:4b:7b:51:03:58:68:10:99:e8:8a:ad:c2:9c:28: 28:6c:08:ad:8a:9f:af:a7:3a:16:83:33:2d:41:4d:04:37:ed: 77:d3:63:16:d9:d4:3d:75:9e:1b:4f:42:80:b1:be:7e:e6:96: ba:5d:42:2e:04:7f:58:46:00:3f:9e:70:e4:4b:25:43:ff:fa: e0:8b:43:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUwNzAzMDMwMzQzWhcNMjUwNzEwMDMwMzQzWjAYMRYwFAYD VQQDEw02ODY1ZjMwZi1iMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7j9hI6fiNEwJ8hZHExB2Q5FfKXZG/iQjU9xDS0ZZFPwbofTTD2kvRRU5sQf BckY5s8mvaBwXJtjpw/OX2Q/A3D44h2phWTJXyNofj/Wt2RLGbZOA9gp1MF2tAHB UrfxofRcl0pid2ZRQ7dEHP3BOJEi2NPW558JuAaCDNjbZsyoJIOiM/VBWtrkc6S8 flEXPcvpWl3BjoAtFJ8UkZKuK9HH1jd5vtVfQxAPkzdzBLVdT8nL3Jjo2ZvoGWYg kn/lxNdb3S57Xf/l7nOgs4zK/E3tw76oZDUpipzrolpgiZHvCCATK6Nyj3M2FUv3 A7jFz0NFTOtaI8Z4zyuDKNiqDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGhqYY2 azKb+PXVxLeKkpsTcHPeMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+YpAJaFJRzNncq8c/AOckFAonaQUQW3FGJTl3GUE6ZRbyHyIdfExl Srn7d5Z3wVwBjI1zRbV5da6Gx3ENezf9XKqTLThc6tHZINKP3qsgzBiyUj0Qa4MO cYHTPba12/0qtI7aOG4vSgcgmM7FFMqDwlj9uguEwONan9mM1SeWQKCwAb7/01vi KTFZQVMS0tOWfguSKPr6z6kTrVrarmrWhG1k2oaXG4roMsD+0lzH7AFJrlgbzCnV S3tRA1hoEJnoiq3CnCgobAitip+vpzoWgzMtQU0EN+1302MW2dQ9dZ4bT0KAsb5+ 5pa6XUIuBH9YRgA/nnDkSyVD//rgi0ND -----END CERTIFICATE-----Generated at Fri Jul 4 00:25:00 2025 by rpki-client