$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: 4iNhbvQvr5AzItkF/bvCYKu4BZHR1hjLcjp+pNWQOhs= Subject key identifier: 75:9E:08:87:7C:D8:33:C1:10:60:0E:89:D0:5C:5B:FF:5E:21:E1:AC Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 014F Signing time: Sat 23 Aug 2025 04:33:53 +0000 Manifest this update: Sat 23 Aug 2025 04:33:52 +0000 Manifest next update: Sat 30 Aug 2025 04:33:52 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: oWjlzCtVsnhUH2Rj+bVy9PFS24izJVOlMpBx/XZoHm4=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Aug 23 04:33:52 2025 GMT Not After : Aug 30 04:33:52 2025 GMT Subject: CN=68a944b0-1ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:e0:55:52:94:48:04:08:e7:61:5f:1b:66: a9:9c:08:d3:a3:8b:d4:8c:66:a4:03:94:9a:cd:54: 7f:9c:29:d9:92:b0:34:49:ca:2a:1d:b5:4e:8d:d7: 17:e0:f7:95:08:5a:22:16:a6:f6:b7:b5:3c:b1:3d: cd:2f:2a:5a:d2:ac:4c:7b:ee:8a:74:5c:be:bf:40: 8b:6c:fb:13:a9:59:34:6d:34:38:f6:9c:76:73:19: a3:e0:2c:61:cb:81:38:b6:85:73:e1:56:d6:36:b5: fc:df:19:b4:14:25:8e:ed:44:e5:ff:41:5a:f4:d1: 5e:fa:a1:d4:ff:44:f3:f3:b2:d3:5f:dc:fa:ce:e0: 18:0e:eb:3d:c4:b2:d1:e1:7a:96:7f:6f:e5:c1:97: 0e:6a:8c:f9:e3:92:60:04:79:01:20:88:20:f5:20: 2d:de:a3:8e:ff:2d:d0:6c:73:ad:71:59:0b:a2:6b: 23:64:7c:77:3e:f9:ba:c4:11:cd:26:04:48:a8:bd: 48:42:72:9a:94:c1:d4:00:a3:42:7d:07:89:67:85: eb:73:6f:e7:86:fc:b4:8d:36:81:03:46:ce:e9:8e: 49:29:87:bf:cb:8a:cd:d7:9f:45:83:3d:57:01:ec: c1:89:18:2c:80:07:b5:3d:57:f7:79:22:70:cd:8c: 21:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9E:08:87:7C:D8:33:C1:10:60:0E:89:D0:5C:5B:FF:5E:21:E1:AC X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:fa:ca:d4:ec:09:9d:41:ca:48:72:4f:97:c7:a7:88:19:30: 5c:9b:9b:97:df:a9:43:b3:8f:ed:34:b9:e9:57:9a:f1:4e:0a: 53:98:ae:7e:b9:92:43:d5:46:d1:45:1c:be:af:6e:07:c9:a3: d0:d0:69:ab:c9:05:64:23:9a:85:5f:7b:33:74:86:b5:ae:75: a8:a4:d7:2b:47:d2:bc:01:1a:eb:c0:ac:37:87:47:5a:05:7b: d4:bc:82:14:00:da:18:df:8f:16:14:7e:52:6c:84:c7:e4:9b: df:63:9d:bf:98:f7:de:b8:52:90:83:a5:e8:e8:b3:ba:e0:e6: 32:07:7e:9a:4b:5e:b9:0c:8a:d2:de:97:15:24:1d:c3:8f:04: 83:b8:f5:d2:e6:2d:33:bd:ca:16:c3:1f:55:08:cb:e1:8f:70: 94:57:40:09:8a:87:e6:56:79:e5:df:33:c9:a5:0c:f7:e2:17: d2:4b:30:ef:fd:86:d0:8e:7f:90:2e:be:f6:aa:77:9a:3f:2f: f3:29:3c:e9:db:73:b1:de:b5:37:04:d0:a1:be:06:5c:0d:ee: c5:49:3a:49:13:2f:28:f7:e3:6e:5f:36:ea:00:6d:f2:de:0b: 70:82:c7:08:2d:45:dd:24:93:0f:11:ae:6a:02:bb:4d:0f:a2: fe:1a:d8:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUwODIzMDQzMzUyWhcNMjUwODMwMDQzMzUyWjAYMRYwFAYD VQQDEw02OGE5NDRiMC0xY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmTgVVKUSAQI52FfG2apnAjTo4vUjGakA5SazVR/nCnZkrA0ScoqHbVOjdcX 4PeVCFoiFqb2t7U8sT3NLypa0qxMe+6KdFy+v0CLbPsTqVk0bTQ49px2cxmj4Cxh y4E4toVz4VbWNrX83xm0FCWO7UTl/0Fa9NFe+qHU/0Tz87LTX9z6zuAYDus9xLLR 4XqWf2/lwZcOaoz545JgBHkBIIgg9SAt3qOO/y3QbHOtcVkLomsjZHx3Pvm6xBHN JgRIqL1IQnKalMHUAKNCfQeJZ4Xrc2/nhvy0jTaBA0bO6Y5JKYe/y4rN159Fgz1X AezBiRgsgAe1PVf3eSJwzYwhIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWeCId8 2DPBEGAOidBcW/9eIeGsMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH+srU7AmdQcpIck+Xx6eIGTBcm5uX36lDs4/tNLnpV5rxTgpTmK5+ uZJD1UbRRRy+r24HyaPQ0GmryQVkI5qFX3szdIa1rnWopNcrR9K8ARrrwKw3h0da BXvUvIIUANoY348WFH5SbITH5JvfY52/mPfeuFKQg6Xo6LO64OYyB36aS165DIrS 3pcVJB3DjwSDuPXS5i0zvcoWwx9VCMvhj3CUV0AJiofmVnnl3zPJpQz34hfSSzDv /YbQjn+QLr72qneaPy/zKTzp23Ox3rU3BNChvgZcDe7FSTpJEy8o9+NuXzbqAG3y 3gtwgscILUXdJJMPEa5qArtND6L+Gthh -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:26 2025 by rpki-client