$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: jWQK1Klwbn9OYtLPwQp53VGYL+QXyBrFS6CBJJuBhdU= Subject key identifier: 28:52:29:85:11:F7:EF:B7:DD:D7:F4:17:18:47:6A:3D:1D:A3:A1:46 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: 95 Signing time: Tue 01 Jul 2025 07:06:29 +0000 Manifest this update: Tue 01 Jul 2025 07:06:28 +0000 Manifest next update: Tue 08 Jul 2025 07:06:28 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: 5MczogxELcORVNwqkWYKm/KCHxQhYY2LXi3yzOdIEoU=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: hF0cvJ5WGf8hjnk2FrHWwiuqbgTh6n818KkJ7xF10xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Jul 1 07:06:28 2025 GMT Not After : Jul 8 07:06:28 2025 GMT Subject: CN=686388f5-4ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:9c:da:a9:00:3e:41:45:0e:43:ca:34:86: 37:97:a6:08:9f:d1:2f:68:96:14:52:83:45:46:50: 5d:a5:5e:f1:8f:cf:77:81:31:8c:a5:2c:8d:72:86: 30:cd:fb:45:07:ab:36:25:3f:96:5c:40:b5:f0:e2: a3:a8:40:1c:13:1e:da:3f:af:81:49:4b:ab:1b:db: 50:e8:48:0f:14:93:7a:2f:9f:f7:cc:57:1d:64:52: 00:ac:83:d8:e6:90:fb:fb:2b:60:f7:6e:ef:57:93: a2:5c:fd:cb:6c:55:d9:1f:2d:e5:0e:4a:81:e6:21: 3d:fb:67:6a:35:fc:a8:49:95:66:58:66:c8:39:7e: f9:f6:d8:32:4c:40:e4:72:c3:54:cb:c7:5c:59:ca: db:17:e8:50:e1:74:fe:d9:8b:d9:f3:58:8b:5a:f8: 2e:64:63:d6:59:83:40:19:51:13:5c:6d:b1:0a:23: 94:d3:42:e9:70:64:3d:f0:90:f5:63:09:da:f5:07: 9a:8a:7f:76:e9:d0:8e:b8:93:48:6e:5e:a1:08:74: c9:dd:a0:d7:86:af:b8:9d:ab:9a:2d:45:ea:a3:ce: dc:e2:be:95:ee:38:0c:65:e8:97:e7:d7:c7:43:05: 68:31:2b:0f:f8:99:1e:a2:bd:81:20:81:fd:89:7e: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:52:29:85:11:F7:EF:B7:DD:D7:F4:17:18:47:6A:3D:1D:A3:A1:46 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:72:be:9b:4e:40:1b:08:f2:55:64:c8:1c:c1:44:93:f1:91: 7c:d8:d7:00:ee:91:2b:bd:20:f2:a7:34:1b:a6:78:e6:48:7a: de:a9:d7:2b:c1:72:77:c8:0d:9a:3c:66:87:ac:19:72:75:9d: a3:04:f3:86:de:45:39:f4:51:60:1b:d6:ad:12:57:73:7d:5c: 35:6d:84:df:93:5b:bb:61:33:e5:72:52:60:1f:da:f5:77:2e: d7:6e:39:bd:9d:b3:34:cb:c5:d0:bf:00:8f:f9:90:8e:d5:5c: 41:b8:1a:d1:8c:2f:e7:62:2e:9b:94:d7:b8:73:7a:d9:f2:94: 9c:14:a9:32:7a:bf:0b:dd:c6:9d:06:53:a2:21:9b:ac:ff:7d: 3a:bf:a5:7f:21:3c:e7:b0:e5:c3:4a:eb:6a:89:6c:1e:39:51: 26:c2:9f:4b:16:72:a1:ed:f2:b9:48:c4:11:9b:12:af:ff:e1: e2:08:22:67:a5:d7:cf:b5:a6:2f:4e:83:ab:ac:ea:a2:f7:b7: 0d:f7:c6:b5:81:5c:14:9d:f1:87:a9:37:40:46:ba:83:60:42: 1b:8b:6a:e1:d7:ed:2e:fb:62:b1:c8:93:bb:e9:68:38:ef:87: 4b:9f:b1:e9:7d:96:3b:24:01:19:32:ae:6f:92:cc:b0:65:0b: ee:9d:fd:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjUwNzAxMDcwNjI4WhcNMjUwNzA4MDcwNjI4WjAYMRYwFAYD VQQDEw02ODYzODhmNS00ZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18mc2qkAPkFFDkPKNIY3l6YIn9EvaJYUUoNFRlBdpV7xj893gTGMpSyNcoYw zftFB6s2JT+WXEC18OKjqEAcEx7aP6+BSUurG9tQ6EgPFJN6L5/3zFcdZFIArIPY 5pD7+ytg927vV5OiXP3LbFXZHy3lDkqB5iE9+2dqNfyoSZVmWGbIOX759tgyTEDk csNUy8dcWcrbF+hQ4XT+2YvZ81iLWvguZGPWWYNAGVETXG2xCiOU00LpcGQ98JD1 Ywna9Qeain926dCOuJNIbl6hCHTJ3aDXhq+4nauaLUXqo87c4r6V7jgMZeiX59fH QwVoMSsP+Jkeor2BIIH9iX49CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChSKYUR 9++33df0FxhHaj0do6FGMB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArcr6bTkAbCPJVZMgcwUST8ZF82NcA7pErvSDypzQbpnjmSHreqdcr wXJ3yA2aPGaHrBlydZ2jBPOG3kU59FFgG9atEldzfVw1bYTfk1u7YTPlclJgH9r1 dy7Xbjm9nbM0y8XQvwCP+ZCO1VxBuBrRjC/nYi6blNe4c3rZ8pScFKkyer8L3cad BlOiIZus/306v6V/ITznsOXDSutqiWweOVEmwp9LFnKh7fK5SMQRmxKv/+HiCCJn pdfPtaYvToOrrOqi97cN98a1gVwUnfGHqTdARrqDYEIbi2rh1+0u+2KxyJO76Wg4 74dLn7HpfZY7JAEZMq5vksywZQvunf1h -----END CERTIFICATE-----Generated at Tue Jul 1 22:45:26 2025 by rpki-client