$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json) Hash identifier: qKcxgyhdNrscr8pAt19AWLlXS948W02/0F2a7zE6rZI= Subject key identifier: A9:20:84:C7:FF:53:00:E2:97:88:0D:8B:B0:E8:CD:5D:E8:BA:7F:82 Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft Manifest number: 0333 Signing time: Tue 01 Jul 2025 01:41:35 +0000 Manifest this update: Tue 01 Jul 2025 01:41:34 +0000 Manifest next update: Tue 08 Jul 2025 01:41:34 +0000 Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: O0yGz1vXVPhAVIGRGZN/1lCYvLfMMmCYo+awAAIRC8U=) 2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: C1ezUxuL3ClkX3BgQjjS1dTVihRitOogxbbsy9SR+JY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Validity Not Before: Jul 1 01:41:34 2025 GMT Not After : Jul 8 01:41:34 2025 GMT Subject: CN=68633ccf-8655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:09:d6:ac:04:da:d0:ca:38:aa:9d:3f:42: f4:2c:bc:54:96:8d:6b:77:cc:bb:f5:7b:a7:d9:ae: 98:63:09:77:93:3d:ff:e5:86:d0:30:58:ed:22:06: 9e:2d:7d:79:bc:d6:5d:d4:b2:14:30:28:29:6c:4b: 93:46:ce:bc:6d:1d:56:e4:69:67:6f:74:09:f8:f8: 3e:c8:75:5f:42:3c:33:41:67:4e:bd:1b:e9:a2:c1: b9:fb:8b:ff:5e:16:35:ef:31:ef:d5:bc:de:fd:01: 96:06:cb:97:42:97:a0:86:8a:af:9e:4f:75:05:7a: d0:da:98:2a:51:f2:31:16:15:15:0d:43:53:e8:d2: 5c:93:36:cd:27:10:2c:cc:a7:64:72:f7:60:40:b2: 63:21:29:33:f3:a9:be:ac:b6:ca:48:48:36:64:8f: a5:01:e7:a8:c3:ef:8c:5a:3d:71:ae:ed:44:a8:01: 33:54:8d:78:6d:b6:3d:d1:87:1c:8f:c5:e8:a1:36: 82:b7:ad:00:2f:f9:4a:98:34:f6:4b:6f:72:7b:45: eb:8b:ac:c3:35:a9:d4:f4:ed:3a:18:a5:c2:a2:33: a0:f9:00:f7:59:2d:56:2b:c7:67:f5:db:6a:78:3e: 19:30:7c:55:73:5b:ff:ed:bc:bb:78:cc:08:b4:19: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:20:84:C7:FF:53:00:E2:97:88:0D:8B:B0:E8:CD:5D:E8:BA:7F:82 X509v3 Authority Key Identifier: keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:21:9a:12:72:d9:f6:2f:1e:46:67:95:cf:6b:54:c9:06:7f: 9f:0d:01:6b:81:14:2b:86:bc:81:92:8f:b7:fe:13:06:f5:01: 07:a7:94:8b:07:e3:cb:e5:dc:bc:aa:9f:6b:cf:61:88:7f:a4: ec:17:8d:57:fd:d7:62:25:d7:d6:ed:c3:a7:3a:e1:d4:a6:39: 16:97:97:af:8b:dd:c3:a9:ba:82:10:09:b2:2e:27:21:b0:23: 36:00:39:fe:ae:17:96:b5:6f:4a:ce:b8:ae:d3:06:81:03:9f: 96:b5:c0:1e:76:44:a2:ea:29:0d:cd:d1:fc:dd:22:e9:8f:6d: 82:ba:73:e2:3c:0e:22:2e:9b:50:1a:b1:96:98:33:33:78:1e: 90:ad:3f:cb:51:36:2c:3f:68:f2:62:45:16:3f:5e:0a:b5:52: 17:cb:2c:5c:48:cf:6d:d6:49:ce:d1:82:34:4d:a5:11:78:04: 3e:ab:23:3b:d7:84:56:31:ef:35:f6:25:8f:ac:cb:99:cc:ae: 9b:d0:d6:b6:bb:f0:77:e6:1a:c9:2d:a4:7c:f9:1d:c1:2e:b8: 8d:b5:38:2d:7b:f8:55:a4:88:ea:52:82:9e:19:63:5e:ce:94: ac:e4:5c:d9:34:10:4c:3b:e8:36:85:04:7a:cd:71:f6:3d:c7: 41:6e:37:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy MUYwQTUxMzUwHhcNMjUwNzAxMDE0MTM0WhcNMjUwNzA4MDE0MTM0WjAYMRYwFAYD VQQDEw02ODYzM2NjZi04NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxQJ1qwE2tDKOKqdP0L0LLxUlo1rd8y79Xun2a6YYwl3kz3/5YbQMFjtIgae LX15vNZd1LIUMCgpbEuTRs68bR1W5Glnb3QJ+Pg+yHVfQjwzQWdOvRvposG5+4v/ XhY17zHv1bze/QGWBsuXQpeghoqvnk91BXrQ2pgqUfIxFhUVDUNT6NJckzbNJxAs zKdkcvdgQLJjISkz86m+rLbKSEg2ZI+lAeeow++MWj1xru1EqAEzVI14bbY90Ycc j8XooTaCt60AL/lKmDT2S29ye0Xri6zDNanU9O06GKXCojOg+QD3WS1WK8dn9dtq eD4ZMHxVc1v/7by7eMwItBkHLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkghMf/ UwDil4gNi7DozV3oun+CMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP UndMZktmSFUzUFVoOEtVVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5IZoSctn2Lx5GZ5XPa1TJBn+fDQFrgRQrhryBko+3/hMG9QEHp5SL B+PL5dy8qp9rz2GIf6TsF41X/ddiJdfW7cOnOuHUpjkWl5evi93DqbqCEAmyLich sCM2ADn+rheWtW9Kzriu0waBA5+WtcAedkSi6ikNzdH83SLpj22CunPiPA4iLptQ GrGWmDMzeB6QrT/LUTYsP2jyYkUWP14KtVIXyyxcSM9t1knO0YI0TaUReAQ+qyM7 14RWMe819iWPrMuZzK6b0Na2u/B35hrJLaR8+R3BLriNtTgte/hVpIjqUoKeGWNe zpSs5FzZNBBMO+g2hQR6zXH2PcdBbjej -----END CERTIFICATE-----Generated at Thu Jul 3 00:17:05 2025 by rpki-client