$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json) Hash identifier: tHxNSJJhxcuvn/UHu6UjHl8V2jH5pu0H3NpxmbS35hw= Subject key identifier: D1:7B:87:EB:09:6B:B6:41:CA:F8:90:D0:7D:17:E8:AC:0B:7B:03:55 Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Certificate serial: 0958 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft Manifest number: 0952 Signing time: Fri 22 Aug 2025 20:18:46 +0000 Manifest this update: Fri 22 Aug 2025 20:18:45 +0000 Manifest next update: Fri 29 Aug 2025 20:18:45 +0000 Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: 3Xvmc0tR3hbiTzB8HHNWomtRYckJfP3QKpgSXwOCP3M=) 2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: CHvHnzrsNRtyF0f1bsjGZNNk/7bOq09fS+B9V5tsdBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2392 (0x958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Validity Not Before: Aug 22 20:18:45 2025 GMT Not After : Aug 29 20:18:45 2025 GMT Subject: CN=68a8d0a5-e7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:ee:e7:25:92:db:6b:01:bc:0d:c9:9c:55: 25:29:4c:00:fb:ae:a8:f0:be:80:16:f9:ac:e1:34: cf:2c:90:9b:4d:0f:f7:ec:e6:b5:a5:c9:b7:2f:17: 1f:76:87:44:b0:25:25:7c:58:55:74:5d:95:66:a2: 6b:5f:1b:10:01:10:8b:74:68:72:0c:a9:56:b2:fd: 08:77:e8:a0:8d:3b:d8:2c:8d:63:0b:a0:81:f4:f6: fe:c1:0d:29:de:b9:30:0f:35:cd:6c:40:1b:51:a6: 89:49:67:31:15:dc:f3:2e:14:fe:48:8c:4b:9c:2d: 6d:34:bc:e4:74:12:68:dc:a6:85:f7:f0:12:0e:29: 4a:7b:95:a1:bc:53:ae:06:19:24:a2:de:34:30:b5: 68:0e:4f:5d:d6:4e:39:7a:36:46:a6:06:32:b6:2a: 02:f2:cd:25:6d:37:c5:9d:64:9a:ac:26:d1:66:61: b8:09:d3:6d:2c:0d:7b:6c:fc:35:fc:c9:46:17:f8: 88:97:e0:84:f8:87:89:f9:0d:b6:14:86:cc:ad:e8: a1:90:09:b8:37:74:bd:df:3a:1b:44:6d:b8:4b:3e: cd:9d:8e:f1:36:66:2d:67:fe:15:00:87:0a:c4:8d: a6:cb:8d:90:59:b9:64:7f:3c:98:35:88:dd:a7:00: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7B:87:EB:09:6B:B6:41:CA:F8:90:D0:7D:17:E8:AC:0B:7B:03:55 X509v3 Authority Key Identifier: keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:cd:b5:6e:09:a4:95:8a:b2:9d:50:75:f4:22:22:aa:22:37: 0d:49:45:3c:aa:38:da:fd:28:5c:cb:50:49:1c:6a:b0:ce:2b: 20:e4:62:d6:2a:18:ab:6d:9e:5b:2e:06:a4:09:eb:22:46:6e: 24:24:f7:a1:65:0f:b5:3b:46:04:dd:d1:af:7a:bc:a6:95:5d: 6d:ce:fb:58:7e:dc:f2:0f:d3:c0:c2:7c:0c:b7:01:1d:a7:6a: ad:38:f3:56:bc:92:bf:93:f3:d1:11:7f:a6:98:0a:e3:fc:2b: de:59:af:08:31:f0:3f:70:91:ac:b8:b3:5b:ac:92:24:61:6c: 75:58:65:60:cf:c6:5e:d5:cc:cd:4d:b4:8a:53:67:c7:9a:bd: 38:26:51:22:a1:d3:3e:e9:22:db:e9:15:19:6d:cb:d8:e6:06: 01:e2:78:d2:f9:0b:c1:83:f0:74:b0:4a:b1:38:f5:d8:74:7a: 4d:cb:14:19:01:d7:39:dc:41:b1:75:5d:9f:70:bb:ef:51:8c: 99:84:2b:61:0a:17:e3:10:43:46:80:25:6f:fd:a3:cf:20:97: 1e:24:a2:95:fe:80:70:f6:aa:00:74:8f:58:14:78:c3:42:72: c0:16:ec:17:27:bf:60:a8:11:c0:58:11:70:43:5c:40:4e:6a: 3e:b1:fc:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0 Njg2NTVCMDYwHhcNMjUwODIyMjAxODQ1WhcNMjUwODI5MjAxODQ1WjAYMRYwFAYD VQQDEw02OGE4ZDBhNS1lN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKru5yWS22sBvA3JnFUlKUwA+66o8L6AFvms4TTPLJCbTQ/37Oa1pcm3Lxcf dodEsCUlfFhVdF2VZqJrXxsQARCLdGhyDKlWsv0Id+igjTvYLI1jC6CB9Pb+wQ0p 3rkwDzXNbEAbUaaJSWcxFdzzLhT+SIxLnC1tNLzkdBJo3KaF9/ASDilKe5WhvFOu Bhkkot40MLVoDk9d1k45ejZGpgYytioC8s0lbTfFnWSarCbRZmG4CdNtLA17bPw1 /MlGF/iIl+CE+IeJ+Q22FIbMreihkAm4N3S93zobRG24Sz7NnY7xNmYtZ/4VAIcK xI2my42QWblkfzyYNYjdpwAqZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF7h+sJ a7ZByviQ0H0X6KwLewNVMB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2zbVuCaSVirKdUHX0IiKqIjcNSUU8qjja/Shcy1BJHGqwzisg5GLW KhirbZ5bLgakCesiRm4kJPehZQ+1O0YE3dGverymlV1tzvtYftzyD9PAwnwMtwEd p2qtOPNWvJK/k/PREX+mmArj/CveWa8IMfA/cJGsuLNbrJIkYWx1WGVgz8Ze1czN TbSKU2fHmr04JlEiodM+6SLb6RUZbcvY5gYB4njS+QvBg/B0sEqxOPXYdHpNyxQZ Adc53EGxdV2fcLvvUYyZhCthChfjEENGgCVv/aPPIJceJKKV/oBw9qoAdI9YFHjD QnLAFuwXJ79gqBHAWBFwQ1xATmo+sfwJ -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:19 2025 by rpki-client