$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: tBg9Zgs7yFw6k3k7xRf1uKVCVahIPtIayFBq439J53g= Subject key identifier: BC:3A:A5:AC:FC:84:31:82:D9:9D:36:91:95:7E:80:25:4B:6A:22:B5 Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0C5C Signing time: Wed 02 Jul 2025 18:37:43 +0000 Manifest this update: Wed 02 Jul 2025 18:37:43 +0000 Manifest next update: Wed 09 Jul 2025 18:37:43 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: Kq1iqozaVl7V7bE5t0gZIZ4XZWKQn7PWRSYG7WoQZWc=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lPRimtAIP991qjg2zYQ9MB+u2MSznOVIg7X2f5y/SnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: Jul 2 18:37:43 2025 GMT Not After : Jul 9 18:37:43 2025 GMT Subject: CN=68657c77-3e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:66:29:37:d6:ba:cc:a6:5c:79:7b:f5:cb: b1:df:15:bc:05:c7:79:4a:8b:12:16:ac:22:60:8c: d4:bb:0e:c8:0e:d2:7d:a4:4a:29:28:13:60:43:11: 90:37:ba:fd:de:1b:31:1b:fa:82:50:0a:5f:fa:ce: 86:a4:7c:79:4c:c1:c5:fb:95:8b:f1:1e:9d:93:64: de:41:d6:24:55:4e:91:f9:e3:63:4a:8b:0f:05:66: 22:f0:a2:da:26:17:c9:de:59:de:e1:65:b7:58:f3: 4c:6f:7a:e5:e7:ab:17:4e:06:41:bd:89:39:49:7f: 18:5a:b4:ae:7c:17:26:27:a3:9c:59:98:01:41:f9: 89:d1:ca:a2:c6:7e:42:9a:8c:77:fd:62:5b:5c:05: 33:ba:ea:da:15:02:dc:1f:5d:e4:4b:ab:06:f4:83: 9a:2b:96:0a:de:83:8f:29:d9:b9:46:62:9c:32:bb: 11:2d:67:2e:95:f8:9f:e6:ef:4d:70:e3:18:34:21: e3:20:89:2b:71:3d:56:fb:a2:53:df:c6:80:66:e7: 55:78:94:98:9f:e2:88:d9:17:9a:f7:9b:91:ab:6b: 65:a3:59:25:63:de:df:c9:d8:d5:bf:e3:84:f6:e0: 04:98:a2:15:93:a4:23:95:a7:ae:0d:74:ab:13:50: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3A:A5:AC:FC:84:31:82:D9:9D:36:91:95:7E:80:25:4B:6A:22:B5 X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b7:55:1a:a4:32:84:b8:40:40:9f:0a:0e:e5:39:f8:78:ca: 93:9f:65:9d:d1:e1:35:ad:6a:8d:ad:55:f2:52:fa:4b:28:1d: 8c:94:2e:20:b8:49:e0:b3:d2:fd:5d:71:4d:21:f7:ae:fd:bd: a5:66:26:6e:f2:6f:82:bd:31:6f:1c:da:af:b4:87:a3:7d:46: 5f:c3:8b:c4:94:5a:68:30:28:fc:88:e6:21:51:52:5c:77:3e: 3d:d0:26:6f:26:06:e3:ec:39:21:a8:28:78:37:4e:1d:62:9f: 3c:a9:b5:59:77:0e:67:26:a2:e1:76:f9:fc:7f:1a:c0:d0:52: 77:18:66:54:be:42:ba:53:6c:cc:48:fa:72:04:06:fc:51:29: 13:94:59:fd:ff:5c:79:4b:97:c9:6c:6b:af:75:c3:d9:7c:64: 67:32:a8:88:d3:e3:ac:3d:36:d1:21:5a:d0:8e:46:d9:ef:ca: fe:bf:df:95:d8:7a:58:6c:47:e3:e6:ce:85:79:f9:53:6e:c9: f2:77:07:94:1a:09:46:c6:0b:3d:18:ee:ad:1b:52:11:11:c3: 67:3c:46:c0:b8:e9:ed:88:56:1e:26:1f:84:5b:f7:b8:bf:fd: 76:fa:4a:98:eb:c5:8e:fd:97:97:3d:6e:d3:6d:4a:8e:f2:ea: 76:5e:25:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjUwNzAyMTgzNzQzWhcNMjUwNzA5MTgzNzQzWjAYMRYwFAYD VQQDEw02ODY1N2M3Ny0zZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnapmKTfWusymXHl79cux3xW8Bcd5SosSFqwiYIzUuw7IDtJ9pEopKBNgQxGQ N7r93hsxG/qCUApf+s6GpHx5TMHF+5WL8R6dk2TeQdYkVU6R+eNjSosPBWYi8KLa JhfJ3lne4WW3WPNMb3rl56sXTgZBvYk5SX8YWrSufBcmJ6OcWZgBQfmJ0cqixn5C mox3/WJbXAUzuuraFQLcH13kS6sG9IOaK5YK3oOPKdm5RmKcMrsRLWculfif5u9N cOMYNCHjIIkrcT1W+6JT38aAZudVeJSYn+KI2Rea95uRq2tlo1klY97fydjVv+OE 9uAEmKIVk6QjlaeuDXSrE1D8cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLw6paz8 hDGC2Z02kZV+gCVLaiK1MB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHt1UapDKEuEBAnwoO5Tn4eMqTn2Wd0eE1rWqNrVXyUvpLKB2MlC4g uEngs9L9XXFNIfeu/b2lZiZu8m+CvTFvHNqvtIejfUZfw4vElFpoMCj8iOYhUVJc dz490CZvJgbj7DkhqCh4N04dYp88qbVZdw5nJqLhdvn8fxrA0FJ3GGZUvkK6U2zM SPpyBAb8USkTlFn9/1x5S5fJbGuvdcPZfGRnMqiI0+OsPTbRIVrQjkbZ78r+v9+V 2HpYbEfj5s6FeflTbsnydweUGglGxgs9GO6tG1IREcNnPEbAuOntiFYeJh+EW/e4 v/12+kqY68WO/ZeXPW7TbUqO8up2XiV9 -----END CERTIFICATE-----Generated at Fri Jul 4 14:03:31 2025 by rpki-client