$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft File: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json) Hash identifier: lxE02g8Pvmoq0g5Uoj90GqlfoIv0p2ebTAk+GCmDCQE= Subject key identifier: 17:39:A8:DA:F1:E9:50:D7:5A:7E:95:C7:16:5B:0B:14:B5:1D:45:EF Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft Manifest number: 076C Signing time: Fri 22 Aug 2025 21:43:07 +0000 Manifest this update: Fri 22 Aug 2025 21:43:07 +0000 Manifest next update: Fri 29 Aug 2025 21:43:07 +0000 Files and hashes: 1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: JKuGWBax9fxEIbDLI2A8NmLEg8LKVe1CoVFbhsl1wtw=) 2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: oXfgRMCkFYhKUKORBUUeo77MRVn7Mx2xxFkJ1oK4WsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Validity Not Before: Aug 22 21:43:07 2025 GMT Not After : Aug 29 21:43:07 2025 GMT Subject: CN=68a8e46b-e8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:e6:bd:a5:06:03:98:b8:cb:83:7b:38:9d: c7:2c:57:32:f5:e5:f7:97:f1:7d:e2:46:15:c9:42: dc:57:98:fb:5f:fa:16:05:95:1c:f0:e5:85:2f:4e: 52:47:7d:c0:fe:b5:33:dc:20:f1:1c:b1:13:1e:b2: b3:89:19:c9:82:c7:0d:58:f4:5a:1d:c8:d8:a2:db: 6d:1d:fd:7f:31:7e:c2:d4:03:b8:c8:78:74:4f:89: 1d:1b:1a:36:40:31:d4:d7:d5:ff:6b:90:20:63:53: 1c:41:5f:66:10:05:9f:f4:71:a4:cd:4c:0d:af:ea: b7:bf:ff:32:f5:74:66:a2:f4:2d:3c:44:28:80:4a: cc:3b:e9:c9:22:c5:30:df:34:20:ab:71:0a:0a:4d: d2:a0:5c:29:f5:9a:73:a7:2f:22:9b:82:d9:c0:9f: 7a:ea:61:9b:2a:28:da:44:ca:86:8b:66:75:b1:fb: b7:44:3b:4c:02:26:34:8c:92:77:43:7b:45:ea:20: 3c:1e:e6:b5:72:c1:a3:65:b1:c7:a2:6f:1e:ba:3e: bc:ad:f9:59:53:2d:0b:af:38:8a:bd:4d:29:f3:24: 73:11:de:94:ce:5e:b8:de:88:bf:5d:8a:fa:20:cf: 0d:81:b8:be:be:04:0b:de:c8:db:99:b9:6d:e2:be: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:39:A8:DA:F1:E9:50:D7:5A:7E:95:C7:16:5B:0B:14:B5:1D:45:EF X509v3 Authority Key Identifier: keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:47:62:6c:db:6b:39:a5:cd:d2:fc:88:d1:4f:0b:12:a6:40: 26:2c:d2:aa:08:b1:da:06:e3:e0:7c:ee:f2:e6:dd:88:e2:17: c7:8e:c0:64:a5:6f:d0:65:c2:c8:cc:0b:6d:b1:6f:5a:c1:87: 89:6b:47:b7:7a:35:ae:05:53:ab:29:9b:b8:10:d9:8c:c0:58: f9:3d:bd:7f:9b:8d:cb:5c:67:85:0a:38:c1:56:df:c8:7e:0b: e8:71:d8:60:7e:85:aa:6a:73:ec:22:66:f9:cc:49:04:95:04: 87:ef:eb:d4:56:5d:d1:a8:65:7f:6f:f9:92:f4:09:9d:4d:87: c3:91:ad:0e:c1:e7:65:f1:16:32:dc:d2:f2:8f:88:41:65:b9: 26:23:6b:97:7e:d2:99:9b:52:d8:b1:2f:00:7d:a4:8a:79:4b: 1b:50:2b:44:d6:bf:01:ca:ce:8d:ec:85:35:95:90:51:f7:53: 3d:8a:c1:5c:db:e1:14:9b:29:b3:cb:0a:91:99:a6:67:c9:c7: 65:e4:53:d5:e3:44:7d:e4:80:fe:91:65:bf:8e:fc:ef:75:2d: 9b:2e:df:69:24:63:db:74:b8:84:ac:48:6d:70:e5:6f:d3:23: 13:70:b4:1b:52:74:04:cf:8a:f8:69:04:c0:47:64:52:e2:39: 29:04:8e:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzNkUxMTAvBgNVBAUTKEY3MzQzMzNCNUJCNTRGQkE4ODJCMjMyRkQyNTMyNTJF N0VBMEJCQzAwHhcNMjUwODIyMjE0MzA3WhcNMjUwODI5MjE0MzA3WjAYMRYwFAYD VQQDEw02OGE4ZTQ2Yi1lOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6/mvaUGA5i4y4N7OJ3HLFcy9eX3l/F94kYVyULcV5j7X/oWBZUc8OWFL05S R33A/rUz3CDxHLETHrKziRnJgscNWPRaHcjYotttHf1/MX7C1AO4yHh0T4kdGxo2 QDHU19X/a5AgY1McQV9mEAWf9HGkzUwNr+q3v/8y9XRmovQtPEQogErMO+nJIsUw 3zQgq3EKCk3SoFwp9Zpzpy8im4LZwJ966mGbKijaRMqGi2Z1sfu3RDtMAiY0jJJ3 Q3tF6iA8Hua1csGjZbHHom8euj68rflZUy0LrziKvU0p8yRzEd6Uzl643oi/XYr6 IM8Ngbi+vgQL3sjbmblt4r5ngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBc5qNrx 6VDXWn6VxxZbCxS1HUXvMB8GA1UdIwQYMBaAFPc0MztbtU+6iCsjL9JTJS5+oLvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTM2RS9BNkQ3NDhGQTI5 RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3cUlLeU12MGxNbExuNmd1 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl6UXpPMXUxVDdxSUt5TXYwbE1sTG42Z3U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTM2RS9BNkQ3NDhGQTI5RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3 cUlLeU12MGxNbExuNmd1OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxR2Js22s5pc3S/IjRTwsSpkAmLNKqCLHaBuPgfO7y5t2I4hfHjsBk pW/QZcLIzAttsW9awYeJa0e3ejWuBVOrKZu4ENmMwFj5Pb1/m43LXGeFCjjBVt/I fgvocdhgfoWqanPsImb5zEkElQSH7+vUVl3RqGV/b/mS9AmdTYfDka0Owedl8RYy 3NLyj4hBZbkmI2uXftKZm1LYsS8AfaSKeUsbUCtE1r8Bys6N7IU1lZBR91M9isFc 2+EUmymzywqRmaZnycdl5FPV40R95ID+kWW/jvzvdS2bLt9pJGPbdLiErEhtcOVv 0yMTcLQbUnQEz4r4aQTAR2RS4jkpBI6H -----END CERTIFICATE-----Generated at Sun Aug 24 04:44:39 2025 by rpki-client