$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json) Hash identifier: 0zo1AISXgcW+cjBljt0mj5GkBP2WlHhjZA8Uu4IKnqE= Subject key identifier: E3:CA:20:E0:30:30:07:F6:60:17:DF:91:82:A6:D8:5F:3F:78:D4:61 Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft Manifest number: 2C Signing time: Thu 07 Aug 2025 08:21:22 +0000 Manifest this update: Thu 07 Aug 2025 08:21:22 +0000 Manifest next update: Thu 14 Aug 2025 08:21:22 +0000 Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: rasAzewrFLTRaf8twkwDyFwI06rQ31ILM0PWLHuL3FM=) 2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: C2osSUSGXaoVQWIdcbrfsnLCIsFQre/GUrWQUTRuHn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Validity Not Before: Aug 7 08:21:22 2025 GMT Not After : Aug 14 08:21:22 2025 GMT Subject: CN=68946202-0477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:9e:6e:a6:b7:e7:3d:a1:1c:72:e8:29:8f: 18:cd:3d:8c:e3:9a:a9:f5:8f:2b:e7:92:b5:82:bb: 76:c0:bc:ab:1d:14:df:2c:2c:21:ab:00:14:5a:da: 6b:67:a5:8a:4b:82:0f:22:38:55:39:c9:67:33:5b: 16:f5:6d:84:cb:3f:c0:f3:18:e6:07:74:97:7b:29: 0e:b3:70:1f:a8:90:31:d5:cb:1b:19:45:de:59:eb: c9:df:e1:1b:95:9d:a0:f2:ee:3c:27:a2:dd:45:ad: fa:50:4a:91:bb:a0:27:e4:c1:1f:1a:71:f4:42:7a: 89:f6:10:2c:1f:82:ea:2f:dd:f3:a0:6c:38:e4:f5: f7:62:fb:1d:f7:37:27:8f:18:21:03:9d:cc:77:be: 13:36:10:68:ca:52:40:f3:71:c5:7f:25:d9:b6:3a: fc:3b:f1:6a:d8:37:4b:da:92:33:90:d7:67:82:2b: ba:a0:72:33:e7:fc:e3:19:58:29:43:c8:68:84:d0: 6b:61:76:60:49:4e:d2:5b:a6:e8:bb:3d:75:51:b6: 72:fd:6c:f0:2d:e7:f1:f6:fb:4a:80:88:91:26:e6: 1f:5b:ac:d2:44:c3:6b:79:51:55:64:6b:79:c4:39: a3:d9:a1:07:65:ae:23:bd:2c:f9:7e:29:6f:a6:22: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CA:20:E0:30:30:07:F6:60:17:DF:91:82:A6:D8:5F:3F:78:D4:61 X509v3 Authority Key Identifier: keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:4e:b1:6a:2a:4b:9d:23:77:2c:b5:d9:5c:90:17:90:87:2c: 23:65:5a:2b:6a:04:d7:92:68:6e:86:25:0d:84:4f:ca:30:44: ae:a2:fe:48:3f:e6:3b:83:11:82:0f:3a:b5:0f:e0:f4:9d:33: 6b:b0:dc:cd:33:e5:8b:93:39:e3:72:ef:b2:98:dc:fb:4a:80: a5:73:2b:3f:0a:fb:24:10:a7:8b:f0:ec:d2:b6:ac:63:66:ad: 82:94:33:ab:e6:5f:93:93:b8:fd:b6:c0:c4:9c:a5:86:e2:b3: 3c:81:c7:f9:b5:ed:e5:ab:ab:d0:7f:10:6c:84:8d:ed:22:41: ed:30:8e:96:4d:f2:67:4f:8f:39:a8:ad:e7:db:57:6d:66:d4: 2e:bc:be:f1:3a:c3:c5:83:d3:5d:7f:40:97:bd:30:59:c3:01: c7:30:9f:b0:55:f6:6c:48:d4:0f:8e:e7:33:00:ce:98:3e:ca: 32:d9:b8:92:89:2c:58:8a:62:e7:b7:18:e3:82:c5:6b:50:07: 3b:6e:50:0c:fb:36:3d:ce:e3:a6:54:e7:2f:45:3e:8b:01:26: bf:23:e6:a8:54:1a:dc:64:0a:35:72:62:09:ea:71:0f:f0:e5: 22:14:0d:07:ff:74:a7:3d:fa:13:34:a7:c2:ec:54:52:90:17: 14:a1:ca:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRjExMC8GA1UEBRMoMEZGRjcxNzk4MkQ5RTFEOTZGNEQ3RkM1MzExRUQzMjMy MzZCQTA5MzAeFw0yNTA4MDcwODIxMjJaFw0yNTA4MTQwODIxMjJaMBgxFjAUBgNV BAMTDTY4OTQ2MjAyLTA0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Ap5uprfnPaEccugpjxjNPYzjmqn1jyvnkrWCu3bAvKsdFN8sLCGrABRa2mtn pYpLgg8iOFU5yWczWxb1bYTLP8DzGOYHdJd7KQ6zcB+okDHVyxsZRd5Z68nf4RuV naDy7jwnot1FrfpQSpG7oCfkwR8acfRCeon2ECwfguov3fOgbDjk9fdi+x33NyeP GCEDncx3vhM2EGjKUkDzccV/Jdm2Ovw78WrYN0vakjOQ12eCK7qgcjPn/OMZWClD yGiE0GthdmBJTtJbpui7PXVRtnL9bPAt5/H2+0qAiJEm5h9brNJEw2t5UVVka3nE OaPZoQdlriO9LPl+KW+mIky3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU48og4DAw B/ZgF9+RgqbYXz941GEwHwYDVR0jBBgwFoAUD/9xeYLZ4dlvTX/FMR7TIyNroJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNGLzAxMzkzNDk2MzEy RDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9K TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRF85eGVZTFo0ZGx2VFhfRk1SN1RJeU5yb0pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNGLzAxMzkzNDk2MzEyRDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRs dlRYX0ZNUjdUSXlOcm9KTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALdOsWoqS50jdyy12VyQF5CHLCNlWitqBNeSaG6GJQ2ET8owRK6i/kg/ 5juDEYIPOrUP4PSdM2uw3M0z5YuTOeNy77KY3PtKgKVzKz8K+yQQp4vw7NK2rGNm rYKUM6vmX5OTuP22wMScpYbiszyBx/m17eWrq9B/EGyEje0iQe0wjpZN8mdPjzmo refbV21m1C68vvE6w8WD011/QJe9MFnDAccwn7BV9mxI1A+O5zMAzpg+yjLZuJKJ LFiKYue3GOOCxWtQBztuUAz7Nj3O46ZU5y9FPosBJr8j5qhUGtxkCjVyYgnqcQ/w 5SIUDQf/dKc9+hM0p8LsVFKQFxShyho= -----END CERTIFICATE-----Generated at Sat Aug 9 01:18:35 2025 by rpki-client