$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft File: 9h2bowrjVcgD-A3M8sQV3gB9eVM.mft (raw, json) Hash identifier: FcBrptyZV699rDIHuwNbaqDtnEAKEj3Zl4PklU9Ad54= Subject key identifier: DF:25:40:A8:5B:1F:DC:B1:59:15:C5:C3:10:6B:A7:DC:90:18:44:96 Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 Certificate issuer: /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953 Certificate serial: 08D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft Manifest number: 08BC Signing time: Wed 02 Jul 2025 20:48:36 +0000 Manifest this update: Wed 02 Jul 2025 20:48:35 +0000 Manifest next update: Wed 09 Jul 2025 20:48:35 +0000 Files and hashes: 1: 9h2bowrjVcgD-A3M8sQV3gB9eVM.crl (hash: BfJuGht6u2x9A60rACTIKDxXWnpDRJy9TzkCn9cblcY=) 2: F84E14F6F7A411EC88E84259C4F9AE02.roa (hash: P/auEJgutUVl8dFubgi2n2lxk6hlWtNvdq3SLvKI4fQ=) 3: 4652763C54D711F0BE7D9523C4F9AE02.roa (hash: lV6WFCqQt9admURsFpKQ1GE7MVk7UBnghFNSUG+Idv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2263 (0x8d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC510, serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953 Validity Not Before: Jul 2 20:48:35 2025 GMT Not After : Jul 9 20:48:35 2025 GMT Subject: CN=68659b23-49b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:10:3d:0d:72:fb:ba:66:00:64:09:fc:44: 62:ac:1d:37:b5:5a:d3:de:d8:e2:6e:69:03:d5:a2: 80:f5:4d:e1:c9:ac:5c:bc:b0:91:83:11:4b:59:65: 30:12:cc:01:20:8c:13:82:1e:b0:0a:f7:9a:e3:d9: b2:2a:aa:2a:d9:08:66:e2:73:0e:4f:b5:83:3c:43: 41:07:ee:81:b0:20:44:bf:b6:a2:9f:e7:b2:9e:f9: 6e:69:cf:3a:b1:52:fd:2f:ea:d5:9e:7b:e6:cf:b7: ed:e9:7b:04:e8:32:1b:31:df:0f:7e:48:a4:af:13: 47:6b:6e:7d:4b:de:91:9e:e9:d9:e7:61:3c:62:ee: 82:bd:eb:6e:2e:1d:59:4f:57:2b:34:39:ce:b0:89: b8:47:d0:85:87:98:a2:af:7f:b4:6e:af:d3:39:6f: bc:d8:d5:20:5a:fd:ac:7c:4f:0e:33:88:d5:c0:e0: 7c:d7:27:31:26:27:b4:9f:51:b8:f0:49:b8:b4:4a: 67:9d:b6:6f:27:12:ed:4e:65:6c:8a:b9:f6:d5:55: c8:34:ee:28:3e:a2:0a:60:0a:7b:68:7f:52:19:7e: 2a:4b:24:2a:e7:19:3f:7b:a7:c4:c7:cc:37:26:c6: 81:6f:0f:39:f8:7d:6a:20:fd:9d:40:63:d3:41:5e: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:25:40:A8:5B:1F:DC:B1:59:15:C5:C3:10:6B:A7:DC:90:18:44:96 X509v3 Authority Key Identifier: keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:91:14:b8:d9:4b:90:9b:c5:5c:93:38:31:7c:17:7b:e9:e3: eb:c4:69:bf:cb:b2:a7:02:27:ba:c5:93:84:cc:33:04:1e:c2: 6f:95:4e:fa:d3:39:4b:8a:1c:47:aa:46:8b:8d:06:a8:4c:d3: 17:1f:17:24:28:a5:e9:bc:d6:d5:64:eb:f6:ce:95:99:54:de: 60:fd:85:ee:92:9b:53:33:16:94:0b:54:4d:7e:40:4e:42:1d: a7:e1:80:0c:a9:35:04:11:14:f1:6e:8a:44:15:60:69:ba:ea: be:9e:ab:2e:a7:27:0b:3d:6f:48:49:73:28:26:7b:78:80:18: 22:a5:54:f5:d1:6f:43:ea:fa:58:04:48:81:aa:8e:8f:a5:73: 4a:3a:c9:28:ce:12:cd:fc:1b:de:56:8c:e7:b4:e7:97:36:48: a7:28:d0:0b:46:d6:00:8b:13:b8:14:71:2b:b1:89:be:bd:ae: 3e:80:a4:20:78:62:ae:77:fb:28:22:09:8d:0a:48:90:45:47: cb:f6:4b:c8:d3:06:d6:af:c6:ce:08:7b:a4:c3:e2:a9:a7:1f: e1:6c:53:95:53:a5:a3:fb:5b:a2:07:ba:7f:4b:0e:c1:20:5a: a9:94:a6:d7:9e:57:16:fd:e9:1f:3d:9d:2d:de:09:5d:3b:f0: 7d:c3:3b:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1MTAxMTAvBgNVBAUTKEY2MUQ5QkEzMEFFMzU1QzgwM0Y4MERDQ0YyQzQxNURF MDA3RDc5NTMwHhcNMjUwNzAyMjA0ODM1WhcNMjUwNzA5MjA0ODM1WjAYMRYwFAYD VQQDEw02ODY1OWIyMy00OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVcQPQ1y+7pmAGQJ/ERirB03tVrT3tjibmkD1aKA9U3hyaxcvLCRgxFLWWUw EswBIIwTgh6wCvea49myKqoq2Qhm4nMOT7WDPENBB+6BsCBEv7ain+eynvluac86 sVL9L+rVnnvmz7ft6XsE6DIbMd8PfkikrxNHa259S96RnunZ52E8Yu6CvetuLh1Z T1crNDnOsIm4R9CFh5iir3+0bq/TOW+82NUgWv2sfE8OM4jVwOB81ycxJie0n1G4 8Em4tEpnnbZvJxLtTmVsirn21VXINO4oPqIKYAp7aH9SGX4qSyQq5xk/e6fEx8w3 JsaBbw85+H1qIP2dQGPTQV6+0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8lQKhb H9yxWRXFwxBrp9yQGESWMB8GA1UdIwQYMBaAFPYdm6MK41XIA/gNzPLEFd4AfXlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzUxMC9FQzMxRTI1OEJE MTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZjZ0QtQTNNOHNRVjNnQjll Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloMmJvd3JqVmNnRC1BM004c1FWM2dCOWVWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzUxMC9FQzMxRTI1OEJEMTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZj Z0QtQTNNOHNRVjNnQjllVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOkRS42UuQm8VckzgxfBd76ePrxGm/y7KnAie6xZOEzDMEHsJvlU76 0zlLihxHqkaLjQaoTNMXHxckKKXpvNbVZOv2zpWZVN5g/YXukptTMxaUC1RNfkBO Qh2n4YAMqTUEERTxbopEFWBpuuq+nqsupycLPW9ISXMoJnt4gBgipVT10W9D6vpY BEiBqo6PpXNKOskozhLN/BveVozntOeXNkinKNALRtYAixO4FHErsYm+va4+gKQg eGKud/soIgmNCkiQRUfL9kvI0wbWr8bOCHukw+Kppx/hbFOVU6Wj+1uiB7p/Sw7B IFqplKbXnlcW/ekfPZ0t3gldO/B9wzug -----END CERTIFICATE-----Generated at Thu Jul 3 10:37:41 2025 by rpki-client