$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: FJwIxK82RCeuqrJVWnQ7xd1Qp7NAck7lFAWUT7A1Uhw= Subject key identifier: CB:08:7B:AC:54:E7:D4:ED:3F:B1:22:C9:BE:CC:2A:03:8E:5B:02:67 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0C73 Signing time: Mon 30 Jun 2025 18:26:43 +0000 Manifest this update: Mon 30 Jun 2025 18:26:42 +0000 Manifest next update: Mon 07 Jul 2025 18:26:42 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: Ew61IhWrE0SzQPu0FmTcWP4kNItNDmNGKLx+eGk+y7Q=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Jun 30 18:26:42 2025 GMT Not After : Jul 7 18:26:42 2025 GMT Subject: CN=6862d6e3-c62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:de:c6:1c:0e:6b:5f:e8:18:53:e5:40:27: c5:23:5a:b3:a3:c7:4d:6c:dc:46:9d:79:83:c9:2e: e8:43:5f:d1:6b:b4:b1:ea:ae:11:ee:87:5a:b1:e9: b3:7a:72:d3:01:11:39:bb:8f:3a:ee:e2:9d:4f:25: c1:2a:c9:1b:00:f6:4d:90:b7:5b:92:c0:e4:00:e8: a3:6a:b9:3a:b1:7b:e9:21:99:9a:ee:1e:75:db:0e: 43:82:00:72:87:1a:3d:86:9e:36:5a:44:ff:f9:35: 26:71:bd:b5:ca:95:50:5d:07:fc:37:6c:dd:66:19: 41:6a:e6:a3:aa:16:f0:58:b1:00:05:36:79:b6:93: 78:1a:0f:88:6c:a2:b3:31:88:ef:d1:f7:25:73:1b: c1:51:07:66:27:a8:f0:73:3c:0b:3d:43:a5:06:34: a5:d1:e9:22:da:34:ae:86:8b:c1:d3:c2:9f:83:7b: 9c:34:55:85:1a:5a:3b:ed:eb:15:6a:fa:f5:d7:79: 3e:ef:ce:cd:e1:ee:14:ef:54:46:48:b4:fb:8c:8c: c0:40:26:2a:4d:d7:eb:d1:3b:1c:ea:f7:32:6b:de: 41:df:39:9c:a7:10:4e:9c:99:b5:d3:bb:a5:27:4b: 61:2d:ad:ed:2c:30:7f:4d:0f:50:a2:b0:76:81:d8: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:08:7B:AC:54:E7:D4:ED:3F:B1:22:C9:BE:CC:2A:03:8E:5B:02:67 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:20:31:5b:2a:ab:0f:9a:9b:3a:60:6b:c1:26:e6:65:48:29: 15:ab:7e:a5:ba:b4:49:72:ea:60:13:6c:02:b3:fa:b8:63:d6: 02:71:1d:28:f9:3e:9f:00:f6:61:c7:79:a2:91:b5:8d:28:96: 07:65:eb:9f:c1:3a:50:ce:20:8a:79:54:21:c4:b0:73:72:bf: f8:84:d0:1b:88:79:2f:7d:6d:b5:4f:a9:9f:c8:65:fd:9c:6e: fe:a7:c7:e0:bc:50:66:a5:d5:93:90:4a:43:a5:b3:0b:49:0d: 51:16:d8:4c:40:a0:76:7d:78:36:c7:f9:c4:78:9a:bf:d2:44: 78:13:39:6f:15:5e:00:52:82:5d:8c:03:3d:01:9c:61:10:af: 8a:6a:d2:46:b1:8f:30:75:20:15:02:ed:2f:a1:1a:4c:c6:4a: 34:3d:4b:44:ab:7b:42:bd:43:55:08:e4:8d:f2:09:06:4c:68: 07:dc:a3:40:69:75:6f:08:9b:72:d2:ff:a5:a5:64:50:22:11: 00:54:c7:b8:63:38:04:d2:b5:e6:36:b6:fd:cf:94:e5:2f:71: 40:20:68:37:0f:cb:c5:63:be:77:fc:35:c7:be:03:fe:1c:e0: c0:06:1f:85:3c:70:3f:6e:ac:cc:8a:d9:db:e3:11:05:fa:42: 86:e9:7d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUwNjMwMTgyNjQyWhcNMjUwNzA3MTgyNjQyWjAYMRYwFAYD VQQDEw02ODYyZDZlMy1jNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslzexhwOa1/oGFPlQCfFI1qzo8dNbNxGnXmDyS7oQ1/Ra7Sx6q4R7odasemz enLTARE5u4867uKdTyXBKskbAPZNkLdbksDkAOijark6sXvpIZma7h512w5DggBy hxo9hp42WkT/+TUmcb21ypVQXQf8N2zdZhlBauajqhbwWLEABTZ5tpN4Gg+IbKKz MYjv0fclcxvBUQdmJ6jwczwLPUOlBjSl0eki2jSuhovB08Kfg3ucNFWFGlo77esV avr113k+787N4e4U71RGSLT7jIzAQCYqTdfr0Tsc6vcya95B3zmcpxBOnJm107ul J0thLa3tLDB/TQ9QorB2gdiPwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsIe6xU 59TtP7Eiyb7MKgOOWwJnMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3IDFbKqsPmps6YGvBJuZlSCkVq36lurRJcupgE2wCs/q4Y9YCcR0o +T6fAPZhx3mikbWNKJYHZeufwTpQziCKeVQhxLBzcr/4hNAbiHkvfW21T6mfyGX9 nG7+p8fgvFBmpdWTkEpDpbMLSQ1RFthMQKB2fXg2x/nEeJq/0kR4EzlvFV4AUoJd jAM9AZxhEK+KatJGsY8wdSAVAu0voRpMxko0PUtEq3tCvUNVCOSN8gkGTGgH3KNA aXVvCJty0v+lpWRQIhEAVMe4YzgE0rXmNrb9z5TlL3FAIGg3D8vFY753/DXHvgP+ HODABh+FPHA/bqzMitnb4xEF+kKG6X1R -----END CERTIFICATE-----Generated at Tue Jul 1 14:03:31 2025 by rpki-client