$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json) Hash identifier: agxD2P2+2ApqDkYmC07t2mMU/6n73Lmr/KBoiNrrhuY= Subject key identifier: 57:D1:16:1F:60:CF:EF:99:BB:BF:83:E5:7F:CD:E4:FB:CE:CF:88:47 Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft Manifest number: 02D3 Signing time: Sat 09 Aug 2025 01:53:49 +0000 Manifest this update: Sat 09 Aug 2025 01:53:48 +0000 Manifest next update: Sat 16 Aug 2025 01:53:48 +0000 Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: UyQbkVl0gYQ6EqOnVhs4+9xCqG5HjEIfDB4HUlwH3fE=) 2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: 4DnB0bL3NG78Ric1Q/fKLIMkj23xQICVd02+1wJapuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Validity Not Before: Aug 9 01:53:48 2025 GMT Not After : Aug 16 01:53:48 2025 GMT Subject: CN=6896aa2c-e1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:34:cc:b4:7b:7c:6a:2d:cc:d6:ac:b9:04: f4:dc:e8:76:2a:78:12:5c:0e:4f:96:7c:fd:2d:b9: 48:c2:64:01:c3:33:cd:b3:a3:cd:2a:07:21:86:2a: 0b:49:27:f2:f4:81:b4:c6:0f:f6:e4:94:f6:a9:29: 90:c8:46:48:c2:1b:c4:28:b9:21:e0:80:f7:b0:a2: 48:26:0e:4f:f1:ee:12:59:9a:a4:d3:1c:70:7c:d8: de:8e:b4:1a:30:a7:36:74:25:af:f9:83:d7:ff:db: 0a:97:a3:28:51:ab:9c:7f:75:e7:58:ce:6a:4d:c6: 51:2e:ab:e5:a1:e3:ae:ce:6b:5b:60:e2:33:a2:a1: e9:b2:53:a2:7f:3c:41:2c:71:6c:f5:f4:76:1e:bd: 12:ca:78:86:eb:7d:dc:b7:0d:ec:f0:45:45:ff:31: 8f:7d:86:bd:05:f9:27:09:dd:6d:ae:ca:d2:b7:00: 1a:82:be:08:6a:26:24:09:34:cc:51:70:60:22:05: dd:3d:5c:b3:5a:10:5e:b9:77:4d:02:75:a6:13:4d: 22:85:5c:8a:31:dd:fa:f4:6a:0d:0d:3c:7f:46:34: e2:5e:99:ff:ff:f0:82:d8:66:12:77:35:56:b1:f1: 29:f0:05:1d:4e:3e:3b:8a:59:d4:63:6c:5a:d8:64: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D1:16:1F:60:CF:EF:99:BB:BF:83:E5:7F:CD:E4:FB:CE:CF:88:47 X509v3 Authority Key Identifier: keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:00:01:30:fd:4f:9c:31:cd:53:ce:44:7f:68:9a:d3:da:4c: 04:5a:2f:db:98:9c:40:e3:5a:94:ca:d9:44:a2:e6:5f:e7:ac: fc:a0:5d:a0:c1:4c:0e:c2:7e:1d:06:a9:de:5e:72:80:87:55: 15:2f:66:3b:8c:03:71:47:97:a4:22:7c:59:94:8a:e7:84:ba: 0f:f2:f6:c4:74:5f:5c:7d:f5:54:bf:b3:a7:a1:80:cc:09:3f: 22:70:49:2d:74:07:ff:04:67:6e:7d:12:8e:01:9e:25:a0:22: 35:3c:d5:a8:9c:43:8a:75:0a:4c:0c:da:35:42:57:e8:81:84: 5c:87:68:d4:8c:60:38:f5:fd:d4:79:01:d0:67:df:44:3b:93: 33:6a:bd:fe:eb:3b:8b:53:f2:b2:38:b6:e9:71:ca:f0:8a:e6: e0:31:05:96:22:5c:e4:ee:b7:d1:f5:8d:f6:26:2b:32:60:9e: 10:40:54:25:c6:dc:79:0f:89:f0:32:f8:0b:69:98:4a:2a:d2: e4:d4:24:dc:79:25:f8:ad:ba:fa:c2:3e:6a:14:0f:fa:04:c3: f6:33:b1:c9:64:c4:64:24:87:18:f8:3d:33:a8:62:3d:3a:d0: 3f:6b:28:43:33:68:b8:4f:39:80:81:ff:24:6e:3b:2f:66:f2: c4:12:5c:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZGNTkxMTAvBgNVBAUTKEY3NTVDMUUxMEZDNEFFNjg5MkQyNEFDQjg3ODJEN0U1 QzAwNDE4QjAwHhcNMjUwODA5MDE1MzQ4WhcNMjUwODE2MDE1MzQ4WjAYMRYwFAYD VQQDEw02ODk2YWEyYy1lMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZU0zLR7fGotzNasuQT03Oh2KngSXA5Plnz9LblIwmQBwzPNs6PNKgchhioL SSfy9IG0xg/25JT2qSmQyEZIwhvEKLkh4ID3sKJIJg5P8e4SWZqk0xxwfNjejrQa MKc2dCWv+YPX/9sKl6MoUaucf3XnWM5qTcZRLqvloeOuzmtbYOIzoqHpslOifzxB LHFs9fR2Hr0SyniG633ctw3s8EVF/zGPfYa9BfknCd1trsrStwAagr4IaiYkCTTM UXBgIgXdPVyzWhBeuXdNAnWmE00ihVyKMd369GoNDTx/RjTiXpn///CC2GYSdzVW sfEp8AUdTj47ilnUY2xa2GQpkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfRFh9g z++Zu7+D5X/N5PvOz4hHMB8GA1UdIwQYMBaAFPdVweEPxK5oktJKy4eC1+XABBiw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkY1OS81NzcyQUZCRUY4 NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJtaVMwa3JMaDRMWDVjQUVH TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxWEI0UV9Fcm1pUzBrckxoNExYNWNBRUdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkY1OS81NzcyQUZCRUY4NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJt aVMwa3JMaDRMWDVjQUVHTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArAAEw/U+cMc1TzkR/aJrT2kwEWi/bmJxA41qUytlEouZf56z8oF2g wUwOwn4dBqneXnKAh1UVL2Y7jANxR5ekInxZlIrnhLoP8vbEdF9cffVUv7OnoYDM CT8icEktdAf/BGdufRKOAZ4loCI1PNWonEOKdQpMDNo1QlfogYRch2jUjGA49f3U eQHQZ99EO5Mzar3+6zuLU/KyOLbpccrwiubgMQWWIlzk7rfR9Y32JisyYJ4QQFQl xtx5D4nwMvgLaZhKKtLk1CTceSX4rbr6wj5qFA/6BMP2M7HJZMRkJIcY+D0zqGI9 OtA/ayhDM2i4TzmAgf8kbjsvZvLEElyc -----END CERTIFICATE-----Generated at Sun Aug 10 16:14:02 2025 by rpki-client