$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: BUaLCONnBNtzSTSDKuUl2SoNizwPM3gXRmUQxrSG4Jg= Subject key identifier: E2:76:88:BD:1B:70:2A:82:D2:F9:4F:A6:C1:F4:1F:FF:EC:85:58:EC Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 09F4 Signing time: Wed 02 Jul 2025 20:07:59 +0000 Manifest this update: Wed 02 Jul 2025 20:07:58 +0000 Manifest next update: Wed 09 Jul 2025 20:07:58 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: 4QtaPPba8ljJEBpPnlgL6QVV/bPnuqnqorg/sQFany4=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: r8n2MjMUHYmVdEJ+7Xp+vud9daXi0fU7s6dyyzC3DT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Jul 2 20:07:58 2025 GMT Not After : Jul 9 20:07:58 2025 GMT Subject: CN=6865919e-75fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:6d:93:4a:a1:43:9f:fd:c1:37:06:da:0c: 49:2b:44:43:df:16:04:ca:48:5c:bf:14:28:3d:83: c4:48:c8:1a:1e:a0:36:d6:22:80:f7:a3:ca:75:53: 36:0a:f9:71:16:9f:72:e5:e8:51:db:66:91:51:a3: 70:fb:75:60:e0:51:2d:ea:82:61:37:2a:f6:c5:33: e7:0a:f4:b6:74:f9:c0:09:7e:50:d3:12:9c:1d:69: 6c:9c:e7:a1:9e:3b:d9:37:a8:ef:e4:c2:20:ee:1d: 0e:59:f6:c1:d6:f3:c7:75:a6:44:8e:82:6c:4f:37: 03:6e:66:96:ff:36:83:fc:2f:4e:ae:2c:10:18:5b: a1:27:63:74:56:51:ea:02:81:fa:dc:2a:29:ec:15: c3:4b:b6:5a:f1:6c:af:b3:b6:a0:f4:6e:9b:7d:7f: 5d:cd:47:7f:fb:61:d5:a9:23:23:9a:7f:9e:8e:37: ff:0b:b4:f1:7f:bc:c2:57:4e:6e:eb:96:c8:e0:5b: d3:c9:af:74:4e:76:3d:dc:f6:24:8c:41:8f:69:cf: 9a:6b:e1:f5:98:28:27:dd:85:34:0f:12:56:43:4e: 25:e6:de:5a:e3:a1:17:7f:0b:f4:52:4c:70:65:9c: a8:11:7b:5c:02:64:28:64:ad:80:e5:ad:bc:e3:b8: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:76:88:BD:1B:70:2A:82:D2:F9:4F:A6:C1:F4:1F:FF:EC:85:58:EC X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:52:12:65:07:77:43:5a:b8:50:28:05:91:6d:34:dd:f7:45: 43:6c:d5:e6:f2:f8:b8:67:70:e0:ed:d8:50:3e:8b:fb:bf:8b: 34:8b:c6:c1:41:37:6a:1a:79:93:7a:c8:ba:03:d8:c3:4a:74: 94:1b:b4:3f:c5:d6:51:40:c1:5f:47:80:6a:1c:eb:39:f0:29: ba:26:02:a2:4d:78:9f:c9:4c:e1:e2:8a:f1:7c:56:2f:76:6e: 52:c6:fc:b2:eb:30:e9:af:64:69:7d:c9:65:cc:84:6e:b1:df: 1f:fa:da:4a:3a:37:90:c3:21:f1:fb:17:0a:c7:17:82:35:d2: 05:6d:4d:27:21:f8:85:f0:29:3e:1b:8f:48:f7:5e:6a:af:49: 95:41:e7:05:be:88:58:1a:87:c5:e2:71:7b:b1:a7:ad:cd:2e: 5e:e8:8f:55:f1:81:9b:02:da:13:71:0f:26:c9:8b:a3:4a:e0: b5:61:23:62:1b:b4:8a:89:ed:f7:f7:7b:6c:aa:54:44:67:b0: 9b:b5:b8:e8:e1:48:2b:99:9d:eb:0a:2b:9b:e0:f1:79:21:f2: b0:3a:0e:96:3b:07:0e:61:97:df:3e:82:d9:34:0c:19:b5:1b: 6d:97:94:a8:42:53:f4:8f:4f:84:b6:f3:19:57:1b:a2:ec:4f: 35:37:97:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUwNzAyMjAwNzU4WhcNMjUwNzA5MjAwNzU4WjAYMRYwFAYD VQQDEw02ODY1OTE5ZS03NWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbptk0qhQ5/9wTcG2gxJK0RD3xYEykhcvxQoPYPESMgaHqA21iKA96PKdVM2 CvlxFp9y5ehR22aRUaNw+3Vg4FEt6oJhNyr2xTPnCvS2dPnACX5Q0xKcHWlsnOeh njvZN6jv5MIg7h0OWfbB1vPHdaZEjoJsTzcDbmaW/zaD/C9OriwQGFuhJ2N0VlHq AoH63Cop7BXDS7Za8Wyvs7ag9G6bfX9dzUd/+2HVqSMjmn+ejjf/C7Txf7zCV05u 65bI4FvTya90TnY93PYkjEGPac+aa+H1mCgn3YU0DxJWQ04l5t5a46EXfwv0Ukxw ZZyoEXtcAmQoZK2A5a2847ht3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJ2iL0b cCqC0vlPpsH0H//shVjsMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3UhJlB3dDWrhQKAWRbTTd90VDbNXm8vi4Z3Dg7dhQPov7v4s0i8bB QTdqGnmTesi6A9jDSnSUG7Q/xdZRQMFfR4BqHOs58Cm6JgKiTXifyUzh4orxfFYv dm5Sxvyy6zDpr2RpfcllzIRusd8f+tpKOjeQwyHx+xcKxxeCNdIFbU0nIfiF8Ck+ G49I915qr0mVQecFvohYGofF4nF7saetzS5e6I9V8YGbAtoTcQ8myYujSuC1YSNi G7SKie3393tsqlREZ7Cbtbjo4UgrmZ3rCiub4PF5IfKwOg6WOwcOYZffPoLZNAwZ tRttl5SoQlP0j0+EtvMZVxui7E81N5co -----END CERTIFICATE-----Generated at Thu Jul 3 23:11:58 2025 by rpki-client