$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: I92cdwnDynucMSkuXBqzdKfaKVZRiEEgGNmO4lK+RHQ= Subject key identifier: 06:0E:7A:31:F2:D0:97:1D:02:83:6D:D0:8C:A8:54:8C:41:80:59:0D Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0C8E Signing time: Fri 22 Aug 2025 18:20:18 +0000 Manifest this update: Fri 22 Aug 2025 18:20:17 +0000 Manifest next update: Fri 29 Aug 2025 18:20:17 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: M8iPMoFgALE0hOHNsAQhSYCyDXEG1nUBbt8TmtbTrbg=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Aug 22 18:20:17 2025 GMT Not After : Aug 29 18:20:17 2025 GMT Subject: CN=68a8b4e2-6f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ff:12:20:2c:ab:da:01:65:84:60:c9:4d:77: f7:ad:f1:49:37:8d:9c:10:36:f3:2a:4a:ed:5b:83: 4a:d0:3f:ef:f8:82:f7:dd:4d:4f:9e:ec:05:93:b8: 74:92:f2:ea:d6:f3:6e:33:a6:ce:ea:23:20:34:76: 55:39:a5:f1:f2:c2:04:58:98:45:41:f3:d7:00:dd: 18:6f:65:1a:0a:7d:7f:87:9d:c3:69:8b:4e:b9:9a: 6f:94:dd:14:22:a3:01:7f:0b:48:21:bd:cb:b0:6c: 17:c0:e9:07:53:ac:0f:df:34:a9:bc:06:a0:45:bd: ea:f5:94:c9:dc:70:56:a2:b4:ac:e8:a1:0d:e6:61: f6:1b:d5:00:5e:7e:8a:08:a7:af:23:7e:06:31:8a: db:d3:44:26:89:da:d5:ee:a7:39:35:cc:64:fc:e1: 48:4c:f1:d5:7c:40:ef:d1:68:bd:dd:e5:1a:c1:8d: 56:46:b7:6f:95:5d:80:47:64:09:07:b5:65:90:67: 9a:97:61:89:2a:af:58:c6:54:02:e4:7f:3c:c9:fc: 14:05:81:74:a0:97:2f:e3:e4:cf:a0:dc:02:0c:12: 0d:03:7f:0c:fd:b9:89:90:39:c7:80:78:e3:35:15: 20:4a:ca:0a:57:bc:81:84:87:48:7c:f9:ee:04:5d: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0E:7A:31:F2:D0:97:1D:02:83:6D:D0:8C:A8:54:8C:41:80:59:0D X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:85:6f:f5:f2:d2:bb:bc:b9:99:5f:1b:82:4e:3b:c3:b5:4a: 22:34:44:4b:a6:7c:cc:47:92:fe:72:c4:b5:63:e5:08:ee:64: 9d:f1:40:ae:32:28:6a:b0:df:57:ef:d8:33:4c:93:c1:ab:f3: eb:bb:d8:21:8a:90:d9:22:6d:15:8b:f5:6f:8f:ff:fa:d4:54: 53:9d:60:35:9b:65:be:f5:40:4f:b8:35:a4:dd:92:85:9f:5f: 9c:26:2c:18:9b:a9:f2:67:b9:cc:79:26:7c:93:d3:57:64:bb: 27:9d:4f:a0:14:ed:f5:0d:81:a1:92:12:c2:df:a9:6e:dd:a0: 01:67:35:d2:b9:84:5c:6b:85:2d:be:d0:a3:62:14:24:c9:0f: df:5c:cf:2e:4c:b5:d1:e7:3b:cb:cc:0b:29:94:90:db:e6:34: 69:13:66:f2:6f:3d:8a:00:9f:12:73:d3:5b:7a:d2:ea:fc:30: 48:15:34:eb:bd:ca:ab:d1:80:cc:7a:f8:e3:f7:4e:6e:9b:05: df:8b:be:a1:d2:2a:ca:f6:54:ef:f9:93:e6:0b:c0:f6:57:15: f0:6c:c0:80:6c:87:fe:9b:d9:fd:6c:1d:bb:77:40:62:e9:08: be:b9:e2:40:ac:40:29:52:82:08:33:5f:85:49:d6:d2:4f:e9: 6d:9e:5c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUwODIyMTgyMDE3WhcNMjUwODI5MTgyMDE3WjAYMRYwFAYD VQQDEw02OGE4YjRlMi02ZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4f8SICyr2gFlhGDJTXf3rfFJN42cEDbzKkrtW4NK0D/v+IL33U1PnuwFk7h0 kvLq1vNuM6bO6iMgNHZVOaXx8sIEWJhFQfPXAN0Yb2UaCn1/h53DaYtOuZpvlN0U IqMBfwtIIb3LsGwXwOkHU6wP3zSpvAagRb3q9ZTJ3HBWorSs6KEN5mH2G9UAXn6K CKevI34GMYrb00QmidrV7qc5Ncxk/OFITPHVfEDv0Wi93eUawY1WRrdvlV2AR2QJ B7VlkGeal2GJKq9YxlQC5H88yfwUBYF0oJcv4+TPoNwCDBINA38M/bmJkDnHgHjj NRUgSsoKV7yBhIdIfPnuBF3b/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYOejHy 0JcdAoNt0IyoVIxBgFkNMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjhW/18tK7vLmZXxuCTjvDtUoiNERLpnzMR5L+csS1Y+UI7mSd8UCu MihqsN9X79gzTJPBq/Pru9ghipDZIm0Vi/Vvj//61FRTnWA1m2W+9UBPuDWk3ZKF n1+cJiwYm6nyZ7nMeSZ8k9NXZLsnnU+gFO31DYGhkhLC36lu3aABZzXSuYRca4Ut vtCjYhQkyQ/fXM8uTLXR5zvLzAsplJDb5jRpE2bybz2KAJ8Sc9NbetLq/DBIFTTr vcqr0YDMevjj905umwXfi76h0irK9lTv+ZPmC8D2VxXwbMCAbIf+m9n9bB27d0Bi 6Qi+ueJArEApUoIIM1+FSdbST+ltnlzI -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:46 2025 by rpki-client