$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: O5vBrMRywn2AtfePVxyXLmA2zvBxcIaJoFM1qVAMsYI= Subject key identifier: 3F:E3:60:D2:42:A8:29:3B:BE:75:B7:3F:0E:81:93:A9:E3:0E:30:27 Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0CC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0CBE Signing time: Fri 22 Aug 2025 18:16:42 +0000 Manifest this update: Fri 22 Aug 2025 18:16:41 +0000 Manifest next update: Fri 29 Aug 2025 18:16:41 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: zLm57qLS4BGeq5MPTOVrxDz85eW96P4oXG5MSGFfJgU=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3269 (0xcc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: Aug 22 18:16:41 2025 GMT Not After : Aug 29 18:16:41 2025 GMT Subject: CN=68a8b409-0dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:5e:8b:18:54:0d:8b:8d:a8:9c:12:20:6f: 27:03:30:78:28:ad:8c:ed:4c:fb:4c:d7:da:98:14: c0:7b:20:df:b8:ae:6c:d8:7e:73:b5:d5:e8:cd:a6: 1f:a3:bc:e2:d2:38:f9:5b:e0:92:0a:a9:9e:29:90: 4a:41:25:e6:87:58:5a:fd:d8:a6:44:f7:9c:c9:2f: 41:47:11:ff:4d:c9:5d:b4:c7:30:14:50:b2:4f:06: f2:6e:3c:89:5a:3c:30:7d:49:b5:ee:13:01:b6:1f: 5d:9d:c5:37:88:25:c6:b6:54:a0:d7:62:45:26:0d: b5:16:96:d1:eb:22:eb:be:5a:58:e7:47:57:b1:2a: 6c:b5:ee:9d:d6:54:0f:d6:d6:b3:17:fc:b6:bd:18: de:e1:dc:ee:4f:57:09:2a:8b:ad:39:f5:5f:0b:0c: 4b:5d:e1:bc:75:95:19:d3:39:1e:07:4d:ce:d6:4a: 81:7e:4e:8d:4c:a5:da:1c:42:6d:5c:fd:79:a2:f0: e6:ae:33:60:1c:26:8c:b1:8a:a4:1a:12:29:65:2b: a2:68:2f:df:fc:57:8c:12:87:d9:81:25:88:a5:1f: 17:64:8f:c2:c6:0f:b5:b0:2e:c6:1e:84:24:71:4a: 2c:f8:58:ac:4f:46:02:cd:b5:d6:76:ac:d4:4a:6f: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E3:60:D2:42:A8:29:3B:BE:75:B7:3F:0E:81:93:A9:E3:0E:30:27 X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:50:71:7e:d9:81:ee:d7:e8:d0:3a:ef:73:38:58:1c:df:02: d4:bc:7d:ef:6c:7b:0a:27:dc:91:4f:be:a9:16:71:2d:aa:04: d2:1d:d1:93:2b:4f:d3:c4:87:88:d9:60:d1:59:45:d5:a1:91: 24:72:2b:51:0a:df:82:7b:b0:0f:16:73:f5:1e:70:a4:7c:11: a0:e7:3e:9d:3a:a6:b3:ff:0d:19:94:b0:78:63:56:4d:22:22: f6:fe:a9:7c:a0:e2:93:5c:db:4d:cb:af:9f:73:2d:ed:ea:3e: 64:15:37:89:3c:a6:94:41:75:8b:9c:e2:57:a7:9b:96:93:1c: cf:86:3c:5a:3d:5c:90:91:68:b8:23:30:7d:01:aa:d3:db:2b: c2:de:86:8f:4a:7a:37:7c:79:35:1d:1a:7b:60:44:50:22:4f: 3d:cb:4a:f6:7d:81:d2:ab:a9:48:16:fe:36:7c:a3:1d:d8:1a: 11:0b:ab:60:d9:d7:d1:03:2f:31:3d:a2:03:0e:99:65:a0:17: b6:87:cb:3f:ba:b8:82:0f:f6:71:95:1b:39:70:2a:9b:8a:f7: b1:60:69:27:c2:44:d6:af:40:a7:c0:19:a8:9a:82:a8:ac:bb: 16:41:1a:fb:6e:f3:c0:38:ff:71:b5:4f:a6:3a:c2:c8:b5:6c: 40:e2:1e:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjUwODIyMTgxNjQxWhcNMjUwODI5MTgxNjQxWjAYMRYwFAYD VQQDEw02OGE4YjQwOS0wZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjJeixhUDYuNqJwSIG8nAzB4KK2M7Uz7TNfamBTAeyDfuK5s2H5ztdXozaYf o7zi0jj5W+CSCqmeKZBKQSXmh1ha/dimRPecyS9BRxH/TcldtMcwFFCyTwbybjyJ WjwwfUm17hMBth9dncU3iCXGtlSg12JFJg21FpbR6yLrvlpY50dXsSpste6d1lQP 1tazF/y2vRje4dzuT1cJKoutOfVfCwxLXeG8dZUZ0zkeB03O1kqBfk6NTKXaHEJt XP15ovDmrjNgHCaMsYqkGhIpZSuiaC/f/FeMEofZgSWIpR8XZI/Cxg+1sC7GHoQk cUos+FisT0YCzbXWdqzUSm+zRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/jYNJC qCk7vnW3Pw6Bk6njDjAnMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClUHF+2YHu1+jQOu9zOFgc3wLUvH3vbHsKJ9yRT76pFnEtqgTSHdGT K0/TxIeI2WDRWUXVoZEkcitRCt+Ce7APFnP1HnCkfBGg5z6dOqaz/w0ZlLB4Y1ZN IiL2/ql8oOKTXNtNy6+fcy3t6j5kFTeJPKaUQXWLnOJXp5uWkxzPhjxaPVyQkWi4 IzB9AarT2yvC3oaPSno3fHk1HRp7YERQIk89y0r2fYHSq6lIFv42fKMd2BoRC6tg 2dfRAy8xPaIDDplloBe2h8s/uriCD/ZxlRs5cCqbivexYGknwkTWr0CnwBmomoKo rLsWQRr7bvPAOP9xtU+mOsLItWxA4h4z -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:35 2025 by rpki-client