$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: sME0ad045NZB2TAccmRejaaKTMjPnGkhTy9uvhr0SnE= Subject key identifier: 0F:EB:BF:07:34:87:A3:54:57:B6:2F:A1:CB:3A:0A:F9:1D:E2:03:28 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 1545 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 1538 Signing time: Wed 02 Jul 2025 16:57:48 +0000 Manifest this update: Wed 02 Jul 2025 16:57:47 +0000 Manifest next update: Wed 09 Jul 2025 16:57:47 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: p2gZcdqmoEomr+nFrxARS5tpfYUh0wHOGo7axvLHwyE=) 2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: tCvJCiKT1CxBWkl8Ab7Cnl377oruRnl6LjKbMrrQtv8=) 3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: tik1gv8xWyjalWVShAfgsNZP/VovqqNlmgUqnA0wMDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5445 (0x1545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Jul 2 16:57:47 2025 GMT Not After : Jul 9 16:57:47 2025 GMT Subject: CN=6865650c-914b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:f6:12:3e:73:57:cc:b4:67:bc:bf:d4:19: b4:d6:88:cf:0f:9e:de:c3:c8:59:ba:f8:51:8c:9a: 06:1c:12:e0:05:32:c2:a9:ee:35:dd:b6:45:d8:02: da:ca:e4:6d:5f:b5:0d:04:6e:3f:6f:00:8c:3b:d2: 12:48:7e:61:5a:b7:59:1b:fb:30:77:05:d6:bb:a6: c2:d8:97:05:1e:c9:26:d2:d4:87:98:56:1a:a7:db: 29:ee:f7:97:7f:16:e1:26:5a:e3:72:f7:f6:05:c5: 68:89:e1:a3:16:ed:16:d6:89:82:3b:07:df:a0:57: d1:fb:99:51:76:ed:49:9a:72:94:49:a2:b0:0c:54: e8:b6:e1:f1:db:e3:f6:05:ff:f4:5a:de:ef:61:ac: 95:75:51:cc:a0:9e:3b:e0:c5:e3:14:7b:0b:84:dc: ef:ce:e9:d4:1f:38:60:f4:98:d4:68:4c:3d:af:cc: bb:fd:ac:50:2d:50:55:dd:b4:f9:f8:4f:ee:7d:1e: 98:be:7e:c2:03:a5:e8:3a:e6:14:04:f1:7d:88:9c: f7:d9:b6:24:01:6e:63:c3:b1:99:78:c7:05:0c:3d: b9:87:33:63:e6:28:ce:15:d7:9c:e0:d4:b3:0a:d7: 33:59:36:9d:5c:fb:5e:f5:92:7b:9e:84:7a:24:78: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EB:BF:07:34:87:A3:54:57:B6:2F:A1:CB:3A:0A:F9:1D:E2:03:28 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:13:c2:a7:ba:c0:b7:99:09:22:3d:23:28:28:9a:ad:c9:5e: 82:5c:67:be:43:65:e5:e0:b6:71:fb:7a:ea:e0:92:c5:47:91: d8:a0:0d:3d:3d:37:36:65:eb:ad:99:34:7b:17:cb:d4:8c:f9: 29:a5:23:3a:dc:07:4c:e8:d5:18:d9:0c:bd:21:d3:50:8f:db: 80:c0:6f:db:a8:1a:65:c7:18:69:c7:18:fb:3f:5b:6b:a7:90: f1:cf:63:e1:5e:32:2f:54:2c:45:69:02:c5:ae:5d:5f:ae:05: 63:ae:47:10:b7:20:f5:72:55:a8:9c:2d:4b:e5:e6:d0:51:40: 80:5e:47:07:0b:80:e5:08:88:9f:58:01:3f:db:4c:97:02:62: 52:b7:a1:76:04:d3:03:03:14:1a:0b:f8:80:5e:d3:a4:7f:cf: 49:e0:0e:1e:76:c8:72:d0:9b:b6:ea:b8:b1:f3:62:1e:8f:a5: 11:74:9d:2a:8c:bd:cd:00:e0:12:8a:fb:1c:d4:3f:8f:97:51: ea:61:3b:41:40:a2:0b:da:7d:92:ea:31:e4:d5:23:de:90:30: 6a:ec:a0:6b:e0:1e:c4:75:11:84:a2:a8:4b:66:89:37:80:94: fb:a8:20:cd:f5:5e:c8:7e:ec:49:44:a0:9a:46:b0:be:e9:17: 84:8a:55:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwNzAyMTY1NzQ3WhcNMjUwNzA5MTY1NzQ3WjAYMRYwFAYD VQQDEw02ODY1NjUwYy05MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/32Ej5zV8y0Z7y/1Bm01ojPD57ew8hZuvhRjJoGHBLgBTLCqe413bZF2ALa yuRtX7UNBG4/bwCMO9ISSH5hWrdZG/swdwXWu6bC2JcFHskm0tSHmFYap9sp7veX fxbhJlrjcvf2BcVoieGjFu0W1omCOwffoFfR+5lRdu1JmnKUSaKwDFTotuHx2+P2 Bf/0Wt7vYayVdVHMoJ474MXjFHsLhNzvzunUHzhg9JjUaEw9r8y7/axQLVBV3bT5 +E/ufR6Yvn7CA6XoOuYUBPF9iJz32bYkAW5jw7GZeMcFDD25hzNj5ijOFdec4NSz CtczWTadXPte9ZJ7noR6JHhLKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/rvwc0 h6NUV7Yvocs6Cvkd4gMoMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjE8KnusC3mQkiPSMoKJqtyV6CXGe+Q2Xl4LZx+3rq4JLFR5HYoA09 PTc2ZeutmTR7F8vUjPkppSM63AdM6NUY2Qy9IdNQj9uAwG/bqBplxxhpxxj7P1tr p5Dxz2PhXjIvVCxFaQLFrl1frgVjrkcQtyD1clWonC1L5ebQUUCAXkcHC4DlCIif WAE/20yXAmJSt6F2BNMDAxQaC/iAXtOkf89J4A4edshy0Ju26rix82Iej6URdJ0q jL3NAOASivsc1D+Pl1HqYTtBQKIL2n2S6jHk1SPekDBq7KBr4B7EdRGEoqhLZok3 gJT7qCDN9V7IfuxJRKCaRrC+6ReEilVI -----END CERTIFICATE-----Generated at Fri Jul 4 07:46:28 2025 by rpki-client