$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: KPSAk0ftBp2OLvlLi5kdUccYBj6cSw3343+Km5g0Mdo= Subject key identifier: 9B:B1:1C:2B:F7:58:A5:10:28:B3:BE:31:A0:1D:A0:85:BD:AA:23:2D Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 34A0 Signing time: Wed 02 Jul 2025 14:51:01 +0000 Manifest this update: Wed 02 Jul 2025 14:51:00 +0000 Manifest next update: Wed 09 Jul 2025 14:51:00 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: RaMOETUzVPkike+ENA7H5C/6SLpXcim3qendSfGnIXg=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: t/NnMy3xpmssx9DBTqRefxAqemELZw1L5Qwj8l5jaiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: Jul 2 14:51:00 2025 GMT Not After : Jul 9 14:51:00 2025 GMT Subject: CN=68654755-cd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:a6:f6:6d:95:60:bc:bf:b0:23:e2:03:87: ec:82:ac:62:f4:4f:b6:76:30:da:a7:3a:e9:bc:21: e2:c6:b4:29:95:11:e0:98:7c:e8:6e:89:3e:f9:a6: 99:2d:0a:5f:87:8c:35:cc:2d:af:e5:70:01:dc:f8: 5d:da:8b:9e:25:12:4c:bb:3f:21:36:80:ff:da:56: 56:df:90:0b:78:b4:b9:a9:9d:38:65:b2:55:26:3e: a3:fe:f8:d6:49:22:8f:96:a3:8b:11:80:58:98:64: 28:88:28:60:9c:89:8e:75:a2:15:6d:a2:a4:fd:69: 78:97:da:92:04:7f:e8:bc:c7:f9:32:53:d1:86:97: 75:9d:05:f7:b0:13:4c:c4:47:ef:3d:28:3d:69:a8: 1e:14:54:2e:1c:9f:86:4f:ff:59:e9:90:ae:ce:2f: a9:0b:3a:3f:ae:f0:72:bc:e9:70:04:50:93:cb:1e: 2c:04:a6:07:21:c4:ad:67:52:fa:ea:5b:7e:94:0f: 3e:96:50:b8:bb:27:46:19:9a:c6:fc:5c:bb:ae:fa: b1:cd:80:a2:d2:8d:cc:e5:a1:c8:58:42:4d:92:59: 5d:d5:20:f6:1b:6f:af:c7:96:e1:0d:09:91:ed:0c: c3:44:a8:b2:4f:26:ff:cc:6d:8f:52:df:c8:3a:b6: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:1C:2B:F7:58:A5:10:28:B3:BE:31:A0:1D:A0:85:BD:AA:23:2D X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2d:9f:17:e8:f2:9d:9a:04:b3:94:82:0c:3e:88:ee:cc:ac: 4d:08:7b:5b:3d:07:7a:e3:16:38:2e:1e:a8:88:ac:10:d3:57: f8:ad:44:0c:e1:c5:87:8d:44:bf:16:87:db:c3:28:03:16:db: b3:83:f0:10:43:d0:8c:66:cb:72:3b:67:e7:7b:fb:5f:80:0f: db:21:ee:10:5f:a9:77:37:5a:bd:4f:c0:d3:28:56:3a:d5:af: c5:5d:f7:c3:b2:b2:b3:03:69:6e:70:e6:ef:f0:97:4f:ce:8f: 10:5d:d9:10:1d:82:f3:d2:f5:4b:fd:7a:02:ca:22:c4:51:2e: 2c:0f:bf:f6:b0:ff:54:82:7c:eb:89:77:17:d7:af:50:d3:3d: 4b:8b:09:c1:8a:10:02:16:79:3b:93:c2:49:50:01:8f:4e:be: f8:d7:4f:1a:71:7e:ad:03:b4:ad:85:73:a2:ef:70:8f:05:17: 0e:bf:2a:24:94:66:78:56:0c:b6:4e:1d:52:ec:ac:59:11:c4: d6:16:ff:76:41:86:88:5c:0a:59:50:62:7d:9f:da:ab:c4:f5: 57:3a:93:56:74:39:15:4a:01:86:dc:88:e1:7b:4c:3c:4c:e0: ff:37:53:cc:4f:97:23:1c:15:69:75:fa:01:67:79:cd:97:0b: 61:f3:15:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjUwNzAyMTQ1MTAwWhcNMjUwNzA5MTQ1MTAwWjAYMRYwFAYD VQQDEw02ODY1NDc1NS1jZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xCm9m2VYLy/sCPiA4fsgqxi9E+2djDapzrpvCHixrQplRHgmHzobok++aaZ LQpfh4w1zC2v5XAB3Phd2oueJRJMuz8hNoD/2lZW35ALeLS5qZ04ZbJVJj6j/vjW SSKPlqOLEYBYmGQoiChgnImOdaIVbaKk/Wl4l9qSBH/ovMf5MlPRhpd1nQX3sBNM xEfvPSg9aageFFQuHJ+GT/9Z6ZCuzi+pCzo/rvByvOlwBFCTyx4sBKYHIcStZ1L6 6lt+lA8+llC4uydGGZrG/Fy7rvqxzYCi0o3M5aHIWEJNklld1SD2G2+vx5bhDQmR 7QzDRKiyTyb/zG2PUt/IOrZt6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuxHCv3 WKUQKLO+MaAdoIW9qiMtMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNLZ8X6PKdmgSzlIIMPojuzKxNCHtbPQd64xY4Lh6oiKwQ01f4rUQM 4cWHjUS/FofbwygDFtuzg/AQQ9CMZstyO2fne/tfgA/bIe4QX6l3N1q9T8DTKFY6 1a/FXffDsrKzA2lucObv8JdPzo8QXdkQHYLz0vVL/XoCyiLEUS4sD7/2sP9Ugnzr iXcX169Q0z1LiwnBihACFnk7k8JJUAGPTr74108acX6tA7SthXOi73CPBRcOvyok lGZ4Vgy2Th1S7KxZEcTWFv92QYaIXApZUGJ9n9qrxPVXOpNWdDkVSgGG3Ijhe0w8 TOD/N1PMT5cjHBVpdfoBZ3nNlwth8xVm -----END CERTIFICATE-----Generated at Thu Jul 3 23:31:52 2025 by rpki-client