$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: x96eFycP4LkvUIWlbbIFWysc0Xp96V/5tkD2oOYQirM= Subject key identifier: 44:46:48:44:D2:67:4A:05:B9:DA:CB:6C:BA:6D:86:AC:D5:A1:B2:48 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 08E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 08B8 Signing time: Wed 02 Jul 2025 20:48:29 +0000 Manifest this update: Wed 02 Jul 2025 20:48:28 +0000 Manifest next update: Wed 09 Jul 2025 20:48:28 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: YLyvTSaMc5eKBzKuwiaYfpWRBEmifYCjS8ol7YiRXVU=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2278 (0x8e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Jul 2 20:48:28 2025 GMT Not After : Jul 9 20:48:28 2025 GMT Subject: CN=68659b1d-a0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:04:86:21:06:0e:34:5a:8a:ba:61:9c:2a: 88:94:de:b6:bf:8c:43:ff:8a:13:9c:72:e2:23:a6: 31:98:31:58:79:2c:a7:d3:b8:1a:07:49:79:74:12: 93:06:cd:23:51:3e:06:42:7e:91:5d:93:62:37:fa: 7f:6e:b8:2c:3c:ac:95:bc:dd:db:af:c9:d8:a3:28: 24:36:38:da:91:f0:c2:50:3c:9e:27:96:78:72:63: c3:24:64:7c:b6:d7:bf:e1:69:8a:c7:a7:00:3c:36: 7a:45:52:53:aa:d9:1d:ef:73:a5:61:c0:f9:ad:4a: f6:36:2f:b9:31:4b:12:6c:db:11:d8:4b:01:86:7e: 18:1d:ad:94:f2:e0:9f:ca:0f:da:12:b3:b6:ba:75: bb:58:b5:d1:c6:fc:b0:c5:54:3e:1b:ee:f1:65:ce: c3:12:09:e6:83:45:75:c1:5b:2b:80:77:3d:7e:1a: 83:06:90:98:15:85:cb:c1:93:6a:99:1b:c3:30:bc: 70:48:95:cb:d7:75:63:e9:71:5d:f7:d5:12:cc:d6: 9c:32:c2:ab:0b:95:5b:f2:27:1e:ab:f9:7c:54:8b: cf:42:01:f7:35:4d:65:f1:c8:50:09:c8:0c:62:f8: 80:03:3f:e3:58:08:ed:c1:4f:27:50:48:f6:52:4f: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:46:48:44:D2:67:4A:05:B9:DA:CB:6C:BA:6D:86:AC:D5:A1:B2:48 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:87:3a:85:72:64:e1:eb:78:15:1c:0c:19:d6:b4:26:08:1a: 94:66:75:ff:6e:47:49:e8:32:81:5d:b2:91:2b:34:c9:d8:37: b9:41:8a:f3:e6:4e:f0:0b:71:57:2c:2a:fc:88:5f:8c:09:60: ff:79:aa:19:e6:c6:fe:90:e3:32:87:1d:c7:49:fd:43:37:90: 7c:ed:02:c5:f4:3c:32:8e:8e:9b:1e:61:8f:bf:a0:d6:e5:2f: 05:05:43:0d:39:37:3a:f9:4d:12:e3:5d:fd:a6:7c:56:2b:08: a5:71:86:6f:60:57:60:f0:8f:44:95:dd:77:0d:a9:29:2d:f7: 0f:c5:23:74:1d:92:a7:60:45:19:94:d6:18:0e:95:b5:2c:ee: 21:7b:89:df:bc:c4:64:9c:eb:dd:9c:4a:97:79:cd:73:81:ce: d1:c6:c0:17:c5:a1:3d:d5:4d:3f:d1:f6:f1:4e:d4:7a:dc:a2: c9:87:2c:75:c1:d0:80:61:7e:82:87:9d:b8:d9:75:93:4a:8e: f8:77:b5:8a:f6:47:7a:c3:9a:86:fa:6e:27:4c:cf:25:89:bc: e9:8a:19:6d:67:6b:18:34:97:47:fc:00:7b:59:8e:92:83:44: de:a3:d7:44:02:f1:b0:01:25:6b:8e:a6:5b:13:7d:e6:98:49: 6c:95:d1:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwNzAyMjA0ODI4WhcNMjUwNzA5MjA0ODI4WjAYMRYwFAYD VQQDEw02ODY1OWIxZC1hMGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqoEhiEGDjRairphnCqIlN62v4xD/4oTnHLiI6YxmDFYeSyn07gaB0l5dBKT Bs0jUT4GQn6RXZNiN/p/brgsPKyVvN3br8nYoygkNjjakfDCUDyeJ5Z4cmPDJGR8 tte/4WmKx6cAPDZ6RVJTqtkd73OlYcD5rUr2Ni+5MUsSbNsR2EsBhn4YHa2U8uCf yg/aErO2unW7WLXRxvywxVQ+G+7xZc7DEgnmg0V1wVsrgHc9fhqDBpCYFYXLwZNq mRvDMLxwSJXL13Vj6XFd99USzNacMsKrC5Vb8iceq/l8VIvPQgH3NU1l8chQCcgM YviAAz/jWAjtwU8nUEj2Uk+NHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERGSETS Z0oFudrLbLpthqzVobJIMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAshzqFcmTh63gVHAwZ1rQmCBqUZnX/bkdJ6DKBXbKRKzTJ2De5QYrz 5k7wC3FXLCr8iF+MCWD/eaoZ5sb+kOMyhx3HSf1DN5B87QLF9Dwyjo6bHmGPv6DW 5S8FBUMNOTc6+U0S4139pnxWKwilcYZvYFdg8I9Eld13DakpLfcPxSN0HZKnYEUZ lNYYDpW1LO4he4nfvMRknOvdnEqXec1zgc7RxsAXxaE91U0/0fbxTtR63KLJhyx1 wdCAYX6Ch5242XWTSo74d7WK9kd6w5qG+m4nTM8libzpihltZ2sYNJdH/AB7WY6S g0Teo9dEAvGwASVrjqZbE33mmElsldE5 -----END CERTIFICATE-----Generated at Thu Jul 3 04:28:17 2025 by rpki-client