$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft File: fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json) Hash identifier: i8KuxdbUS2Z1sS0ERWqTvI7OylICZp2/sB6qMv0wSGo= Subject key identifier: BC:B8:B9:69:95:1F:AE:C2:12:17:08:88:8F:4B:A5:52:69:CB:08:BC Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft Manifest number: 0195 Signing time: Sat 23 Aug 2025 03:37:11 +0000 Manifest this update: Sat 23 Aug 2025 03:37:10 +0000 Manifest next update: Sat 30 Aug 2025 03:37:10 +0000 Files and hashes: 1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: XGFIAW+o9W4ubQQeeTRmUrIkdZB0dD3gmVZILWDWvro=) 2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: A4DVK+hVAcm077tOI0UtMRITW1ft4Rq073mjOE1b4lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Validity Not Before: Aug 23 03:37:10 2025 GMT Not After : Aug 30 03:37:10 2025 GMT Subject: CN=68a93766-c448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:90:af:2f:c1:af:56:49:12:fd:8e:fe:35: 92:f6:18:bb:4b:2b:dd:13:b9:5b:e5:4b:4a:55:be: 91:88:19:71:8e:60:a0:f4:dd:f8:0e:96:3d:c7:ac: e2:83:ce:0d:41:34:f7:93:f7:5a:2c:44:42:c9:c5: a0:3d:c4:05:27:43:0e:72:18:5a:4d:64:64:48:d7: 2e:5b:76:80:90:aa:0e:96:0d:96:e7:be:3c:b7:58: 68:04:33:5a:a7:ee:5b:a5:54:21:ce:6c:7b:07:41: ed:72:d7:c6:22:47:7a:62:af:e2:43:11:ca:05:04: 6f:16:71:7a:97:85:90:d8:a2:87:55:81:37:68:4f: a6:08:45:26:1b:df:67:c4:02:6c:5e:48:b3:df:1d: 67:33:72:67:a3:3b:cf:f4:66:54:6a:26:cd:45:79: ff:bb:14:15:a9:b9:93:9a:5f:49:87:31:4d:44:83: 32:91:89:a0:e5:68:1f:0a:73:5c:ce:04:2c:f7:d0: 80:3e:50:d3:74:c7:17:3e:58:d3:51:85:9d:f3:49: 40:36:c6:4c:43:4c:80:ad:79:73:4d:10:50:e6:d7: 39:b5:7a:6e:df:f7:a0:75:6d:58:26:31:62:d2:5f: 00:de:43:60:7b:1b:d9:44:9c:ee:f7:8f:a6:04:d6: 0b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:B9:69:95:1F:AE:C2:12:17:08:88:8F:4B:A5:52:69:CB:08:BC X509v3 Authority Key Identifier: keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0c:92:89:36:fe:62:97:10:8c:f5:aa:0b:98:5b:1f:28:70: 94:44:1f:21:ee:88:a3:18:bb:69:6b:16:43:d2:8c:fa:13:39: 28:ff:8e:6f:45:7e:d9:bc:db:a8:83:18:18:7c:41:d3:04:f5: 62:f2:db:24:d0:e0:dd:46:f2:b1:fd:ae:57:ab:fa:44:6e:ef: 4e:df:4a:ac:80:7b:45:cb:3f:31:31:67:b6:72:e0:6c:be:79: 8d:dd:4d:f4:9a:84:48:14:5a:2d:a0:d4:35:9f:c5:d8:94:78: 75:40:2c:50:85:83:e2:ed:be:d4:ef:a1:83:d6:3b:d6:59:4d: 86:22:6c:74:24:85:9c:dd:ba:a6:4c:84:da:42:5c:8b:d0:0f: 69:53:a4:4d:92:62:87:5d:88:d5:81:d7:95:55:c4:90:81:c5: 36:41:35:19:f7:d7:20:94:35:ad:6a:ba:7b:54:c4:0c:4f:b2: 53:2b:20:cb:64:38:8e:9a:df:d3:6d:cf:37:5a:dd:a1:5f:1d: 50:8c:15:71:62:99:d8:29:dd:c1:22:74:c4:4d:22:8b:d2:15: 12:79:1a:85:25:85:4a:da:5d:3c:85:3c:0b:82:27:ef:5f:83: 36:0c:c1:1f:71:f6:d5:1c:04:c5:fd:6a:97:46:63:2e:e6:0f: 0e:91:3d:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3QUQxMTAvBgNVBAUTKDdDOUY3MjIyOUVEMTEyNTk0Qzc3MjJEM0MyMUI1MTA1 RTI5RkM0OEEwHhcNMjUwODIzMDMzNzEwWhcNMjUwODMwMDMzNzEwWjAYMRYwFAYD VQQDEw02OGE5Mzc2Ni1jNDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArheQry/Br1ZJEv2O/jWS9hi7SyvdE7lb5UtKVb6RiBlxjmCg9N34DpY9x6zi g84NQTT3k/daLERCycWgPcQFJ0MOchhaTWRkSNcuW3aAkKoOlg2W5748t1hoBDNa p+5bpVQhzmx7B0HtctfGIkd6Yq/iQxHKBQRvFnF6l4WQ2KKHVYE3aE+mCEUmG99n xAJsXkiz3x1nM3JnozvP9GZUaibNRXn/uxQVqbmTml9JhzFNRIMykYmg5WgfCnNc zgQs99CAPlDTdMcXPljTUYWd80lANsZMQ0yArXlzTRBQ5tc5tXpu3/egdW1YJjFi 0l8A3kNgexvZRJzu94+mBNYLBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy4uWmV H67CEhcIiI9LpVJpywi8MB8GA1UdIwQYMBaAFHyfciKe0RJZTHci08IbUQXin8SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdBRC9DRTZDMjM3QTIw QTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVsbE1keUxUd2h0UkJlS2Z4 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKOXlJcDdSRWxsTWR5TFR3aHRSQmVLZnhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdBRC9DRTZDMjM3QTIwQTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVs bE1keUxUd2h0UkJlS2Z4SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4DJKJNv5ilxCM9aoLmFsfKHCURB8h7oijGLtpaxZD0oz6Ezko/45v RX7ZvNuogxgYfEHTBPVi8tsk0ODdRvKx/a5Xq/pEbu9O30qsgHtFyz8xMWe2cuBs vnmN3U30moRIFFotoNQ1n8XYlHh1QCxQhYPi7b7U76GD1jvWWU2GImx0JIWc3bqm TITaQlyL0A9pU6RNkmKHXYjVgdeVVcSQgcU2QTUZ99cglDWtarp7VMQMT7JTKyDL ZDiOmt/Tbc83Wt2hXx1QjBVxYpnYKd3BInTETSKL0hUSeRqFJYVK2l08hTwLgifv X4M2DMEfcfbVHATF/WqXRmMu5g8OkT0O -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:32 2025 by rpki-client