$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: CwjFkSrJXh4oJSmRpKyvrBNumxxQhU3hzm7po5hiKnc= Subject key identifier: DB:8A:D7:B9:56:92:40:1F:F9:C1:0E:AF:F5:0D:F6:7B:B3:AA:95:4C Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 036F Signing time: Tue 01 Jul 2025 01:30:24 +0000 Manifest this update: Tue 01 Jul 2025 01:30:23 +0000 Manifest next update: Tue 08 Jul 2025 01:30:23 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: 3oPiehXZfRdCHx4oIP/eTSDe8Q6MxSPtoGCKC9qOllk=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: q4NAjQjTJMFxxldl/AAiP8pDMUCdKKJhMRmCf+Jtl3M=) 3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: ICtuLoIJdvxcdfC6YrLD+/53y4ZZXc5VV+d4pptI4w0=) 4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: sTauF35xc8SZpRjcL8yNs6xEdRvTaoYQZFwMt4H/aTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Jul 1 01:30:23 2025 GMT Not After : Jul 8 01:30:23 2025 GMT Subject: CN=68633a2f-be53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:25:f3:73:9f:e0:f2:d1:1a:70:69:1c:12:fa: 0f:eb:0e:84:14:5c:c9:21:6f:ed:b9:3c:53:84:6b: a3:a1:7c:4b:c0:21:05:2a:08:03:82:07:87:18:53: f9:4f:d3:24:5c:b1:2e:79:63:ae:33:99:b7:2e:4d: 84:11:d0:14:4c:c8:df:db:d9:7d:0a:12:dc:94:ea: e8:cd:f3:e5:3c:0c:33:0f:5a:2e:19:ac:3f:1b:7f: ba:94:ec:ba:f8:6c:9f:09:be:76:b0:34:35:b8:fe: 36:1f:17:52:95:29:78:63:96:d3:7f:d9:89:40:34: 1a:a4:ea:0a:17:9d:10:a2:64:fe:4b:56:a2:6c:98: 4b:d3:b0:68:5d:0a:a0:0a:ca:e5:c5:8e:11:06:ee: bc:0b:98:ac:ee:3e:ca:ce:84:6d:aa:1f:a3:31:33: 28:f4:c6:cc:79:a1:83:97:06:f7:29:a4:f6:86:20: 84:09:85:54:ea:b2:0a:c8:a1:64:ec:ff:48:fa:6d: 22:4b:47:91:96:85:33:c7:de:b5:69:3e:a6:7f:e1: 6b:d7:ef:fb:40:c7:c4:5b:6f:51:ad:3a:60:e4:df: 4a:9d:99:cc:11:cb:bc:88:45:39:75:85:1d:4a:52: 81:13:78:fe:33:c2:ad:d7:18:56:e0:40:93:22:33: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8A:D7:B9:56:92:40:1F:F9:C1:0E:AF:F5:0D:F6:7B:B3:AA:95:4C X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:3e:18:10:8a:5e:77:83:0b:46:10:66:76:34:e4:ae:97:5e: 1d:ec:72:a8:db:6b:97:fe:96:34:7a:32:59:db:85:2a:53:e0: ed:1c:30:f5:a4:a6:78:64:7e:51:9c:4d:33:61:21:72:9c:cb: 80:5a:1d:42:14:8a:b3:49:14:5e:85:43:dc:7c:93:20:01:68: 6c:13:d5:ee:2d:3f:62:dd:1c:7a:7f:77:dc:c7:5a:1a:eb:dc: 96:c7:bc:c2:67:30:0f:16:31:92:c0:e3:2a:d3:0e:18:fd:14: 8e:93:bb:15:11:4b:9b:07:e8:ee:9d:04:36:bb:29:dd:e0:ae: 8e:9a:9d:bf:26:5a:f4:1b:9a:71:02:01:4a:d1:42:26:df:ef: 47:d1:83:f7:90:ee:4b:7e:62:7e:d0:8e:b3:c4:51:80:d5:99: b1:9a:ac:b3:a1:2e:de:d3:1b:00:f4:5a:51:ea:78:b2:1a:67: 5e:b8:0e:56:22:3e:9d:48:82:0e:02:47:75:43:ea:9c:e7:4a: 59:ef:9c:45:f3:74:f8:b4:16:b2:e6:77:49:1f:bf:ad:59:04: f2:85:7d:5e:94:9e:24:47:e3:04:2f:3f:d6:43:9e:56:75:e6: ff:52:b9:a0:be:fc:f3:5a:70:fa:c6:a9:44:42:34:35:04:d2: d8:70:a6:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjUwNzAxMDEzMDIzWhcNMjUwNzA4MDEzMDIzWjAYMRYwFAYD VQQDEw02ODYzM2EyZi1iZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCXzc5/g8tEacGkcEvoP6w6EFFzJIW/tuTxThGujoXxLwCEFKggDggeHGFP5 T9MkXLEueWOuM5m3Lk2EEdAUTMjf29l9ChLclOrozfPlPAwzD1ouGaw/G3+6lOy6 +GyfCb52sDQ1uP42HxdSlSl4Y5bTf9mJQDQapOoKF50QomT+S1aibJhL07BoXQqg CsrlxY4RBu68C5is7j7KzoRtqh+jMTMo9MbMeaGDlwb3KaT2hiCECYVU6rIKyKFk 7P9I+m0iS0eRloUzx961aT6mf+Fr1+/7QMfEW29RrTpg5N9KnZnMEcu8iEU5dYUd SlKBE3j+M8Kt1xhW4ECTIjOqfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuK17lW kkAf+cEOr/UN9nuzqpVMMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiPhgQil53gwtGEGZ2NOSul14d7HKo22uX/pY0ejJZ24UqU+DtHDD1 pKZ4ZH5RnE0zYSFynMuAWh1CFIqzSRRehUPcfJMgAWhsE9XuLT9i3Rx6f3fcx1oa 69yWx7zCZzAPFjGSwOMq0w4Y/RSOk7sVEUubB+junQQ2uynd4K6Omp2/Jlr0G5px AgFK0UIm3+9H0YP3kO5LfmJ+0I6zxFGA1ZmxmqyzoS7e0xsA9FpR6niyGmdeuA5W Ij6dSIIOAkd1Q+qc50pZ75xF83T4tBay5ndJH7+tWQTyhX1elJ4kR+MELz/WQ55W deb/UrmgvvzzWnD6xqlEQjQ1BNLYcKYj -----END CERTIFICATE-----Generated at Tue Jul 1 05:16:33 2025 by rpki-client