$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: 4S3DQ/15DCqA3IQkUBjn+kcZGw1eZLXnug/YLJDX+EM= Subject key identifier: 67:54:EA:03:D9:68:31:02:61:9C:07:D1:EF:3B:92:C7:B1:5D:43:FF Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 155F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 1552 Signing time: Fri 22 Aug 2025 16:54:23 +0000 Manifest this update: Fri 22 Aug 2025 16:54:22 +0000 Manifest next update: Fri 29 Aug 2025 16:54:22 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: GaFGlEWlBhiEpRmfPo4SWCCUt99tjluBC5cvf5sHpns=) 2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: tCvJCiKT1CxBWkl8Ab7Cnl377oruRnl6LjKbMrrQtv8=) 3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: tik1gv8xWyjalWVShAfgsNZP/VovqqNlmgUqnA0wMDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5471 (0x155f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Aug 22 16:54:22 2025 GMT Not After : Aug 29 16:54:22 2025 GMT Subject: CN=68a8a0bf-8602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:dd:9e:7b:07:bb:9f:dd:91:59:6a:e5:bb: 85:d3:8f:b6:34:73:6f:be:fe:19:2b:c1:81:a2:70: 2e:9d:66:95:fd:9a:aa:76:4f:92:59:e5:4f:70:a0: c8:ba:8d:ed:95:4a:1c:98:e4:2a:8d:ea:8b:16:c4: e2:2b:73:9e:86:7b:da:5d:3e:b0:de:cb:52:49:0c: 45:71:81:d6:3d:60:3a:bb:ea:ea:fb:a8:90:8b:27: bf:60:4d:82:b9:ff:5c:9c:23:93:f9:da:3a:5b:b9: 1c:1e:59:8f:f4:10:4b:31:bb:67:d8:6a:59:84:bd: 36:de:5f:65:30:b7:89:65:62:33:76:98:0a:74:a8: 11:ed:5e:1e:39:fb:51:4c:2f:3c:90:e4:c4:1b:a2: 78:d8:78:6c:5a:b4:31:07:0f:3f:c9:f4:a2:80:c4: 54:e0:96:45:be:d5:a7:ac:6c:9f:ed:70:1f:f4:01: f6:2c:27:4f:12:a7:42:06:d5:0e:23:0d:19:93:5b: 07:9e:1c:2b:75:e0:64:a4:91:e7:2f:34:8a:ff:66: fb:2c:2c:99:66:20:ec:da:7b:3d:ef:df:75:c6:0a: f6:a2:04:5b:11:68:ef:99:b6:1e:88:e2:ee:5e:d9: 0a:03:02:96:81:9d:97:12:23:40:c9:fc:22:5c:51: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:54:EA:03:D9:68:31:02:61:9C:07:D1:EF:3B:92:C7:B1:5D:43:FF X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:86:a7:8a:42:8b:0d:1a:36:fa:14:5d:05:98:2e:cf:ca:de: 49:3b:08:fe:fe:3c:5f:83:1f:8b:32:c9:d0:45:a0:6c:6e:e0: 55:67:16:7f:8e:59:ac:d1:9f:85:1c:5a:9a:10:fe:bc:c7:0a: f6:4e:a6:78:80:c8:02:61:e8:a5:5d:1b:e4:5b:a2:2a:94:fb: 9a:59:e9:92:19:a3:b7:e8:76:be:00:da:c6:9a:c3:a9:2e:a6: 5d:0d:72:fa:7e:53:e8:f2:da:9a:e3:dd:e3:bf:6f:06:97:84: 99:d5:68:01:9f:5e:89:c1:69:4f:65:43:43:03:65:62:48:af: 6c:08:b8:2e:35:2a:94:96:f8:11:3e:84:39:a7:f6:06:90:5f: 73:d0:e6:b2:04:6d:22:da:63:c7:ea:3e:ca:d4:98:1c:e2:48: 81:95:3d:52:de:c6:e1:ae:5d:21:5f:42:8d:7b:c2:73:4e:2f: c2:a1:c4:bf:85:b6:7a:57:8b:a2:43:dc:b4:53:48:ec:49:31: 32:d4:6c:5a:36:0f:64:3e:48:34:f8:66:ee:94:d2:8f:bc:c9: 7e:94:b1:ec:e3:ca:49:e5:7a:9e:55:e7:22:d4:95:6f:c9:c9: f8:7e:01:a2:dc:c0:b0:9f:10:4d:68:77:12:69:31:54:3e:bc: 52:6c:85:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwODIyMTY1NDIyWhcNMjUwODI5MTY1NDIyWjAYMRYwFAYD VQQDEw02OGE4YTBiZi04NjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvo/dnnsHu5/dkVlq5buF04+2NHNvvv4ZK8GBonAunWaV/Zqqdk+SWeVPcKDI uo3tlUocmOQqjeqLFsTiK3OehnvaXT6w3stSSQxFcYHWPWA6u+rq+6iQiye/YE2C uf9cnCOT+do6W7kcHlmP9BBLMbtn2GpZhL023l9lMLeJZWIzdpgKdKgR7V4eOftR TC88kOTEG6J42HhsWrQxBw8/yfSigMRU4JZFvtWnrGyf7XAf9AH2LCdPEqdCBtUO Iw0Zk1sHnhwrdeBkpJHnLzSK/2b7LCyZZiDs2ns97991xgr2ogRbEWjvmbYeiOLu XtkKAwKWgZ2XEiNAyfwiXFFsGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdU6gPZ aDECYZwH0e87ksexXUP/MB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzhqeKQosNGjb6FF0FmC7Pyt5JOwj+/jxfgx+LMsnQRaBsbuBVZxZ/ jlms0Z+FHFqaEP68xwr2TqZ4gMgCYeilXRvkW6IqlPuaWemSGaO36Ha+ANrGmsOp LqZdDXL6flPo8tqa493jv28Gl4SZ1WgBn16JwWlPZUNDA2ViSK9sCLguNSqUlvgR PoQ5p/YGkF9z0OayBG0i2mPH6j7K1Jgc4kiBlT1S3sbhrl0hX0KNe8JzTi/CocS/ hbZ6V4uiQ9y0U0jsSTEy1GxaNg9kPkg0+GbulNKPvMl+lLHs48pJ5XqeVeci1JVv ycn4fgGi3MCwnxBNaHcSaTFUPrxSbIUW -----END CERTIFICATE-----Generated at Sun Aug 24 02:33:09 2025 by rpki-client