$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: JCYXChSfiWjRHw0MRAoYwj0w73t113ZMfnzC3ro7h6M= Subject key identifier: 08:54:41:AD:19:03:A0:A2:84:C9:B1:02:00:DA:DF:97:E8:68:D4:C7 Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 038A Signing time: Sat 23 Aug 2025 01:04:22 +0000 Manifest this update: Sat 23 Aug 2025 01:04:22 +0000 Manifest next update: Sat 30 Aug 2025 01:04:22 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: KhtsPb54M342HCbTLp83ypOQwMnW8bCUVRozOYl0aK4=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: q4NAjQjTJMFxxldl/AAiP8pDMUCdKKJhMRmCf+Jtl3M=) 3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: ICtuLoIJdvxcdfC6YrLD+/53y4ZZXc5VV+d4pptI4w0=) 4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: sTauF35xc8SZpRjcL8yNs6xEdRvTaoYQZFwMt4H/aTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Aug 23 01:04:22 2025 GMT Not After : Aug 30 01:04:22 2025 GMT Subject: CN=68a91396-ea84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:ef:f3:68:89:01:58:2b:f8:67:f9:19:72: 25:f6:24:ed:bc:f7:3f:f3:d6:e1:57:02:00:0a:e0: 58:13:07:b7:75:f5:28:8f:10:03:53:d2:ac:24:67: 79:45:4e:9d:b5:6f:6d:49:95:6d:84:17:0f:74:65: c5:07:85:df:54:5a:1f:c5:54:05:7d:3c:d0:74:fe: 5f:20:be:0e:b6:b0:6c:1c:f2:3c:e2:fc:36:7b:8d: 64:ea:7d:44:f8:a2:6e:a3:c1:23:27:69:62:41:a4: 20:7d:e5:54:e6:41:3b:59:63:ea:5b:40:8e:0a:11: 4f:c4:2a:13:85:7b:b4:43:d4:e8:47:88:5d:24:2a: 77:16:b5:18:63:36:57:ad:83:b7:bd:c8:71:cd:de: 2d:25:e1:2a:35:2d:89:44:37:f8:a1:fc:81:b2:14: a0:e4:37:a3:94:d0:f2:54:84:7f:85:aa:ff:82:37: 0f:81:2f:4e:e3:26:1b:b5:e0:73:4b:0e:67:67:a6: 67:dc:42:f7:c0:94:ee:01:50:d0:37:5f:07:34:b9: d1:9c:9a:56:19:ce:7e:71:0a:f4:4b:26:f9:e3:21: 46:3c:bd:f9:4e:32:4d:32:3e:41:88:f3:4e:39:c7: db:f9:58:2a:8f:66:b3:11:f0:d8:df:99:11:b2:80: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:54:41:AD:19:03:A0:A2:84:C9:B1:02:00:DA:DF:97:E8:68:D4:C7 X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:99:cf:d3:77:78:01:82:9a:8a:f5:f8:17:71:9e:fa:0f:d1: cf:db:f3:39:1c:b9:8a:37:40:2e:78:c1:e2:ea:dd:a5:72:45: ca:ff:86:1a:9e:29:b0:b8:0c:75:b7:ac:ca:ac:ff:f8:e4:a4: b9:98:79:55:89:33:9a:ea:c6:59:44:58:ab:ad:a2:b0:71:a9: a2:ba:bc:79:8a:67:9b:7e:62:20:26:3c:16:d7:5f:ba:2f:71: d2:cf:65:75:b0:8a:3f:3d:6c:c5:cf:99:f9:00:f0:b4:93:69: e7:55:59:37:79:3d:cf:7d:af:4f:a3:10:70:c0:37:4e:f2:71: 35:71:0d:d5:75:4e:c4:29:c6:7d:00:33:38:83:7f:f5:f6:6f: 2f:0d:82:e0:04:03:6b:86:4a:1d:ad:6f:06:89:d0:7d:ba:72: 57:0c:11:a5:52:27:37:e8:cb:6c:d3:db:3d:3d:9c:89:23:d7: a8:3c:ce:b7:6f:8b:58:77:d6:97:8a:5e:c0:c6:0c:de:fa:e1: c6:76:64:96:96:8e:f4:4f:5b:e2:ff:eb:2d:26:d5:e5:d1:61: a8:8a:61:04:27:cd:b9:68:73:ba:56:83:1c:ec:88:77:5e:08: ae:59:ac:1a:51:50:f6:76:e6:dc:4f:64:29:c2:8b:aa:77:f2: b7:20:86:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjUwODIzMDEwNDIyWhcNMjUwODMwMDEwNDIyWjAYMRYwFAYD VQQDEw02OGE5MTM5Ni1lYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFzv82iJAVgr+Gf5GXIl9iTtvPc/89bhVwIACuBYEwe3dfUojxADU9KsJGd5 RU6dtW9tSZVthBcPdGXFB4XfVFofxVQFfTzQdP5fIL4OtrBsHPI84vw2e41k6n1E +KJuo8EjJ2liQaQgfeVU5kE7WWPqW0COChFPxCoThXu0Q9ToR4hdJCp3FrUYYzZX rYO3vchxzd4tJeEqNS2JRDf4ofyBshSg5DejlNDyVIR/har/gjcPgS9O4yYbteBz Sw5nZ6Zn3EL3wJTuAVDQN18HNLnRnJpWGc5+cQr0Syb54yFGPL35TjJNMj5BiPNO Ocfb+Vgqj2azEfDY35kRsoAfSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhUQa0Z A6CihMmxAgDa35foaNTHMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCImc/Td3gBgpqK9fgXcZ76D9HP2/M5HLmKN0AueMHi6t2lckXK/4Ya nimwuAx1t6zKrP/45KS5mHlViTOa6sZZRFirraKwcamiurx5imebfmIgJjwW11+6 L3HSz2V1sIo/PWzFz5n5APC0k2nnVVk3eT3Pfa9PoxBwwDdO8nE1cQ3VdU7EKcZ9 ADM4g3/19m8vDYLgBANrhkodrW8GidB9unJXDBGlUic36Mts09s9PZyJI9eoPM63 b4tYd9aXil7Axgze+uHGdmSWlo70T1vi/+stJtXl0WGoimEEJ825aHO6VoMc7Ih3 XgiuWawaUVD2dubcT2Qpwouqd/K3IIaL -----END CERTIFICATE-----Generated at Sat Aug 23 17:55:26 2025 by rpki-client