$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json) Hash identifier: xKQY4sWwsRXIw181wYZ7yysXGZct5g0li610ITNkZjw= Subject key identifier: 73:EE:55:A1:F8:F0:59:20:A1:72:F9:B9:9F:42:8F:DB:2E:E0:F0:E5 Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft Manifest number: 09E5 Signing time: Sun 10 Aug 2025 19:56:29 +0000 Manifest this update: Sun 10 Aug 2025 19:56:29 +0000 Manifest next update: Sun 17 Aug 2025 19:56:29 +0000 Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: WeDqfZ51zWurjCwYNKtkWlAAIt1wJ8Vw5WCcGazaUUc=) 2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: OT+54b9b887njSEqmuExUbEj0TJJUhjKtfKkhce9QUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 19:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Validity Not Before: Aug 10 19:56:29 2025 GMT Not After : Aug 17 19:56:29 2025 GMT Subject: CN=6898f96d-2f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:76:b2:dc:5e:fa:59:8f:b0:7f:58:9f:26:84: 13:84:b2:92:8e:41:1a:2a:60:1e:13:fd:15:3b:69: 43:ff:90:d8:87:42:8f:3d:e4:9a:a5:5b:c4:9d:42: bd:22:11:9e:7c:6d:18:8b:3f:da:7c:f4:81:b8:dc: dd:d2:8f:07:bf:14:11:d3:42:f9:05:cd:c8:06:a4: 4e:aa:b2:58:c9:dd:91:42:f6:8c:59:5a:d3:d1:08: 7b:ef:6b:c5:84:38:25:34:29:f1:5e:d8:29:b3:cf: 07:4a:ff:c2:c1:48:d4:db:73:4c:7d:20:80:ec:2d: 4b:e9:82:71:6e:77:75:15:ca:6a:47:85:eb:33:50: 90:9a:e0:9d:46:91:cf:f1:5d:7b:32:26:04:80:8c: 64:d6:77:1f:72:29:d1:fc:81:f3:eb:e4:b3:7e:94: d8:4f:f1:e7:8f:63:8c:5c:79:7b:42:76:7c:aa:9d: a9:1e:73:30:6f:0d:7b:50:ea:43:ac:f1:b2:fc:5d: 8f:42:0c:48:05:f1:2a:7f:5e:25:12:35:85:a5:38: 72:2b:d7:c2:70:54:da:1a:6e:b6:65:f6:8b:0f:ff: fa:68:f4:97:2d:a6:aa:e5:10:c6:99:7e:e6:c2:31: 65:9d:a2:75:15:8d:a2:62:4a:9b:b5:97:10:60:56: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EE:55:A1:F8:F0:59:20:A1:72:F9:B9:9F:42:8F:DB:2E:E0:F0:E5 X509v3 Authority Key Identifier: keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:85:7b:af:64:06:f9:3b:a9:e3:52:79:ba:4f:79:ad:de:c0: b3:0d:60:a9:e2:a7:ef:49:1e:3a:79:ae:41:e2:ad:a7:9f:d1: 62:ab:37:52:64:78:a7:6c:35:d4:15:3b:aa:41:0a:2f:c8:81: 45:2e:ad:41:cf:98:28:f3:f6:40:b4:25:4f:0f:cf:4c:a4:9f: a2:8e:e6:64:70:3b:a0:22:d5:28:9d:f0:e5:cc:59:b1:84:50: 0a:33:df:bc:5f:28:d2:8c:37:0c:83:cf:b1:d5:20:f2:ff:0f: 4b:c5:19:2a:02:da:48:66:92:5f:26:12:b6:85:43:3e:1c:6b: 82:52:09:61:f7:49:82:e0:0f:d7:55:39:c4:2c:72:68:9a:c7: b7:3f:65:85:c1:6d:c0:60:12:81:75:c8:f1:13:3b:21:2d:13: c8:34:01:9c:17:04:ae:6d:7a:73:57:10:f3:a9:ad:81:ba:86: ed:e6:ca:24:6e:6c:7d:a5:68:43:33:f5:d9:77:8f:33:5d:fe: af:9d:8b:6a:1a:da:f6:05:5c:c1:02:60:03:a6:b4:66:54:41: 89:f0:1a:10:24:ed:b5:7e:09:43:c1:27:97:f9:82:54:97:a9: 22:e5:d3:9a:8d:82:b5:ce:5c:fe:a9:8a:94:e8:a1:6c:d6:34: b4:8e:b1:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU0MDQ3RDI3Q0VGNzM0NkY0MTc1RUZBQzczNDQ5NEFE QkIwNTdCNTUwHhcNMjUwODEwMTk1NjI5WhcNMjUwODE3MTk1NjI5WjAYMRYwFAYD VQQDEw02ODk4Zjk2ZC0yZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43ay3F76WY+wf1ifJoQThLKSjkEaKmAeE/0VO2lD/5DYh0KPPeSapVvEnUK9 IhGefG0Yiz/afPSBuNzd0o8HvxQR00L5Bc3IBqROqrJYyd2RQvaMWVrT0Qh772vF hDglNCnxXtgps88HSv/CwUjU23NMfSCA7C1L6YJxbnd1FcpqR4XrM1CQmuCdRpHP 8V17MiYEgIxk1ncfcinR/IHz6+SzfpTYT/Hnj2OMXHl7QnZ8qp2pHnMwbw17UOpD rPGy/F2PQgxIBfEqf14lEjWFpThyK9fCcFTaGm62ZfaLD//6aPSXLaaq5RDGmX7m wjFlnaJ1FY2iYkqbtZcQYFbngwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPuVaH4 8FkgoXL5uZ9Cj9su4PDlMB8GA1UdIwQYMBaAFFQEfSfO9zRvQXXvrHNElK27BXtV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS81MzQ0NzJDQzgz QjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05HOUJkZS1zYzBTVXJic0Zl MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBUjlKODczTkc5QmRlLXNjMFNVcmJzRmUxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS81MzQ0NzJDQzgzQjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05H OUJkZS1zYzBTVXJic0ZlMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5hXuvZAb5O6njUnm6T3mt3sCzDWCp4qfvSR46ea5B4q2nn9FiqzdS ZHinbDXUFTuqQQovyIFFLq1Bz5go8/ZAtCVPD89MpJ+ijuZkcDugItUonfDlzFmx hFAKM9+8XyjSjDcMg8+x1SDy/w9LxRkqAtpIZpJfJhK2hUM+HGuCUglh90mC4A/X VTnELHJomse3P2WFwW3AYBKBdcjxEzshLRPINAGcFwSubXpzVxDzqa2Buobt5sok bmx9pWhDM/XZd48zXf6vnYtqGtr2BVzBAmADprRmVEGJ8BoQJO21fglDwSeX+YJU l6ki5dOajYK1zlz+qYqU6KFs1jS0jrHC -----END CERTIFICATE-----Generated at Tue Aug 12 14:02:09 2025 by rpki-client