$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft File: 9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json) Hash identifier: lkxLUccKlcZbyeOnuek91eMTnNxzz9TFSwPq+j2GBo4= Subject key identifier: 5C:83:81:CE:0E:EF:04:90:DC:33:E6:3D:19:F0:B5:39:F3:E8:CE:9E Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 Certificate issuer: /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft Manifest number: 13D6 Signing time: Wed 02 Jul 2025 19:18:12 +0000 Manifest this update: Wed 02 Jul 2025 19:18:12 +0000 Manifest next update: Wed 09 Jul 2025 19:18:12 +0000 Files and hashes: 1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: miehFtCLn/C5hlzwrq7txNFTgWaW+nCWU5U45+0j6jw=) 2: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: pBil4YvB7UVloyu8DhnduF+muuJFikEsjN7164UGvgI=) 3: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: h5frQG89R9e/TKYUgyXgA4IPep2flQE62K3sYBLnEpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Validity Not Before: Jul 2 19:18:12 2025 GMT Not After : Jul 9 19:18:12 2025 GMT Subject: CN=686585f4-8551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:12:ea:1b:1b:36:59:6c:33:ee:48:9c:5c: bc:cd:ad:a6:73:48:3a:df:60:2a:23:39:7f:69:c5: 00:10:be:8a:9b:c6:3e:64:f9:ea:91:a4:ec:b6:3c: 35:17:37:7b:4e:96:ba:7e:ab:02:96:f0:59:0c:a2: 90:a4:70:10:5e:ad:6a:24:1e:f6:a7:41:42:bc:6c: de:db:ea:4a:8e:b4:c3:f3:be:d6:fc:ab:48:4a:a8: 7a:b7:fd:fd:c5:cb:f2:94:35:b5:c7:27:01:f3:3a: df:46:e1:27:59:c8:e6:6b:e6:ce:a3:c8:1c:3a:ee: 09:f0:e9:9b:25:38:4d:f3:35:43:2f:b8:5d:49:f9: b3:c2:9d:aa:f3:45:12:f3:81:3e:4a:b6:8c:ac:c0: 76:ce:30:94:41:c2:90:ff:cc:64:10:db:d1:69:cf: 43:7a:b4:4c:0f:03:4e:c1:d1:0f:bb:8c:2c:80:59: ff:f3:7b:9e:b0:2b:3a:d9:2a:44:1a:00:22:48:0f: b4:c5:07:a1:8c:6a:ca:17:da:1a:1a:c3:55:9b:c4: c5:80:1c:60:87:43:96:6b:e2:33:ad:f2:f3:eb:ed: 01:5b:89:33:d1:6a:3b:f6:26:43:d8:57:4e:d1:18: b1:b1:39:84:5d:19:33:d8:82:30:73:e1:f3:c7:5c: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:83:81:CE:0E:EF:04:90:DC:33:E6:3D:19:F0:B5:39:F3:E8:CE:9E X509v3 Authority Key Identifier: keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:80:87:41:a7:54:a7:2c:57:ad:eb:33:96:c9:1a:31:11:d6: 7e:61:78:4b:e2:b0:fe:50:38:41:0c:f1:fb:5f:82:23:af:a7: a6:45:46:3f:ad:c0:12:81:3e:2d:ea:46:2e:59:d4:e5:02:10: ef:bc:2d:fc:22:99:57:8c:84:e6:75:7c:29:84:76:9f:38:d2: bf:ef:60:b9:64:1a:d3:b4:ac:a2:39:72:6c:06:6a:de:0d:55: 8d:49:b3:73:68:07:b0:4c:6d:2b:ae:3a:8e:78:87:e3:a4:70: 01:31:47:65:b2:cc:04:66:58:d5:ac:46:43:f1:5f:74:6a:b3: 86:80:34:5b:44:18:68:c2:79:e7:5a:2a:ef:c5:82:50:91:4a: e6:65:c2:7b:ac:f2:b6:a3:a0:af:0b:10:04:41:a0:5f:5a:33: 10:90:6d:da:ec:6b:eb:f9:ea:f9:4c:66:26:c7:31:3c:54:74: 83:83:17:80:1a:df:ad:03:78:d2:92:9f:54:67:3a:3e:2e:9e: b8:db:93:5a:3b:e3:cf:1a:bb:81:a0:85:2c:4b:89:fb:42:62: 11:96:19:9e:69:4b:b7:ba:7e:97:df:7e:1d:f8:17:e3:b2:7e: b0:a0:ba:90:e7:e4:58:3d:fc:19:d9:64:e1:29:37:84:1c:f4: 0d:00:91:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKEY2MUI0REVBNTg3OTk5Q0I2RTE1QzU0MDg5RTREQjk4 M0QwMUJCMTAwHhcNMjUwNzAyMTkxODEyWhcNMjUwNzA5MTkxODEyWjAYMRYwFAYD VQQDEw02ODY1ODVmNC04NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIoS6hsbNllsM+5InFy8za2mc0g632AqIzl/acUAEL6Km8Y+ZPnqkaTstjw1 Fzd7Tpa6fqsClvBZDKKQpHAQXq1qJB72p0FCvGze2+pKjrTD877W/KtISqh6t/39 xcvylDW1xycB8zrfRuEnWcjma+bOo8gcOu4J8OmbJThN8zVDL7hdSfmzwp2q80US 84E+SraMrMB2zjCUQcKQ/8xkENvRac9DerRMDwNOwdEPu4wsgFn/83uesCs62SpE GgAiSA+0xQehjGrKF9oaGsNVm8TFgBxgh0OWa+IzrfLz6+0BW4kz0Wo79iZD2FdO 0RixsTmEXRkz2IIwc+Hzx1wHrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyDgc4O 7wSQ3DPmPRnwtTnz6M6eMB8GA1UdIwQYMBaAFPYbTepYeZnLbhXFQInk25g9AbsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1jdHVGY1ZBaWVUYm1EMEJ1 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlodE42bGg1bWN0dUZjVkFpZVRibUQwQnV4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1j dHVGY1ZBaWVUYm1EMEJ1eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIgIdBp1SnLFet6zOWyRoxEdZ+YXhL4rD+UDhBDPH7X4Ijr6emRUY/ rcASgT4t6kYuWdTlAhDvvC38IplXjITmdXwphHafONK/72C5ZBrTtKyiOXJsBmre DVWNSbNzaAewTG0rrjqOeIfjpHABMUdlsswEZljVrEZD8V90arOGgDRbRBhownnn WirvxYJQkUrmZcJ7rPK2o6CvCxAEQaBfWjMQkG3a7Gvr+er5TGYmxzE8VHSDgxeA Gt+tA3jSkp9UZzo+Lp6425NaO+PPGruBoIUsS4n7QmIRlhmeaUu3un6X334d+Bfj sn6woLqQ5+RYPfwZ2WThKTeEHPQNAJHl -----END CERTIFICATE-----Generated at Thu Jul 3 09:23:39 2025 by rpki-client