$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: wdGE0OAsf1cUUO15Yw2QpM7Wl3IE7RAlgK8+zwvR1GQ= Subject key identifier: 79:F3:4E:57:68:79:04:01:E9:70:1A:AF:80:69:B7:94:6B:02:8A:4D Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: 83 Signing time: Thu 07 Aug 2025 07:32:53 +0000 Manifest this update: Thu 07 Aug 2025 07:32:53 +0000 Manifest next update: Thu 14 Aug 2025 07:32:53 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: k1Ko/TKw3AsBn2IC12BI+JOAkwfX92kBnj8KN5PkNvQ=) 2: D14C1FE06AB211F0976F001AC4F9AE02.roa (hash: CNFybG+1Rnqg1iljhEw8ck5HDJaCoHmMcCeBkIlBTRM=) 3: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=) 4: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: SlcZUPBC731CkDPBH5QtG+XBH8C8VdxLmEudErYJG5E=) 5: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=) 6: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: uy/I264zUdcH+IRLmqiohdKtdvR7J47WP3QRFGOJOqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Aug 7 07:32:53 2025 GMT Not After : Aug 14 07:32:53 2025 GMT Subject: CN=689456a5-8aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:12:ab:d7:85:4a:6f:b3:cd:89:b5:90:6d: 9f:c0:62:6f:86:7c:90:e0:d8:b0:de:ce:9d:dd:3f: 5f:87:92:6a:b4:5b:d0:c4:00:00:06:f9:23:23:64: 42:ff:e6:ba:8f:3c:0b:d7:f1:85:13:11:2b:14:31: 0d:63:ff:6b:3f:32:0e:b7:94:14:56:b6:23:c7:46: d4:00:1c:58:b8:97:cc:5a:ec:92:7e:2d:6d:a2:9d: 81:73:ff:5c:4e:19:4a:6d:6d:5a:d2:c5:86:6a:ec: 74:e8:d0:ac:d3:23:3f:ac:20:d6:3e:82:38:25:ef: 3a:71:83:76:4b:6d:94:93:11:46:41:b1:73:80:25: 48:8d:84:15:80:c1:36:d3:a0:be:84:c9:11:a9:34: ef:7d:39:f1:41:f3:16:31:0e:c8:39:1e:0a:3e:ba: 1f:cf:23:d4:f8:6a:05:ab:c8:ab:28:ba:98:2b:f2: 69:16:69:2a:a8:26:b0:83:ef:52:f6:d3:18:e1:e0: 68:1d:65:23:f2:d3:4f:3d:40:52:29:ae:2b:90:4e: da:95:bc:53:f0:81:d0:b8:d6:aa:fc:9a:b1:49:39: d7:ea:57:4f:a9:2c:aa:80:ef:6a:81:75:7a:02:b5: 91:13:4b:3a:a1:8e:a6:16:3a:56:ca:1a:da:7e:e2: e7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F3:4E:57:68:79:04:01:E9:70:1A:AF:80:69:B7:94:6B:02:8A:4D X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:49:c2:0d:9a:b3:8f:48:31:72:e7:7f:53:e0:ab:4d:2e:b2: 89:9b:0e:7b:db:a5:a1:35:b1:a2:cd:14:ec:40:3d:7a:c2:08: c3:db:54:35:f2:fd:03:c1:83:08:d5:51:5c:b8:6b:5a:d0:a9: bb:98:9c:91:4f:1d:c6:e4:8b:04:03:9d:17:9d:3a:8e:3b:68: 5a:37:af:9b:57:57:5e:f0:03:d3:7e:f1:33:79:a2:67:02:65: 3b:09:a9:9e:d5:f5:f9:f4:c9:82:5a:a9:3a:cf:b8:bd:c2:2d: 15:97:81:9e:43:12:5d:df:19:66:07:80:c7:b0:2d:b3:f3:18: 8f:25:60:8a:7e:2b:91:a3:fb:47:09:71:b2:96:91:75:a9:bb: 1b:55:13:b7:94:f6:ba:4b:d2:33:ae:99:11:89:05:d1:a8:00: 5b:e2:19:c0:d0:55:93:31:45:f1:a6:23:3b:d9:8f:bc:25:6d: db:79:35:50:0b:6c:4a:4b:ee:bc:0b:17:1e:93:13:be:02:a0: cc:f4:ca:b9:c8:11:bc:fc:cf:0d:63:36:16:97:c6:db:3e:81: 1e:79:41:91:96:71:11:28:da:75:7a:59:57:c5:34:a9:58:01: 7e:e3:e0:7b:fe:94:6d:b2:e1:18:af:85:41:91:d6:6d:af:9f: 8c:75:fd:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjUwODA3MDczMjUzWhcNMjUwODE0MDczMjUzWjAYMRYwFAYD VQQDEw02ODk0NTZhNS04YWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUESq9eFSm+zzYm1kG2fwGJvhnyQ4Niw3s6d3T9fh5JqtFvQxAAABvkjI2RC /+a6jzwL1/GFExErFDENY/9rPzIOt5QUVrYjx0bUABxYuJfMWuySfi1top2Bc/9c ThlKbW1a0sWGaux06NCs0yM/rCDWPoI4Je86cYN2S22UkxFGQbFzgCVIjYQVgME2 06C+hMkRqTTvfTnxQfMWMQ7IOR4KProfzyPU+GoFq8irKLqYK/JpFmkqqCawg+9S 9tMY4eBoHWUj8tNPPUBSKa4rkE7albxT8IHQuNaq/JqxSTnX6ldPqSyqgO9qgXV6 ArWRE0s6oY6mFjpWyhrafuLn6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnzTldo eQQB6XAar4Bpt5RrAopNMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFU Qjk3R0NKYVFZd2RMYVA5Y28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAScINmrOPSDFy539T4KtNLrKJmw5726WhNbGizRTsQD16wgjD21Q1 8v0DwYMI1VFcuGta0Km7mJyRTx3G5IsEA50XnTqOO2haN6+bV1de8APTfvEzeaJn AmU7Came1fX59MmCWqk6z7i9wi0Vl4GeQxJd3xlmB4DHsC2z8xiPJWCKfiuRo/tH CXGylpF1qbsbVRO3lPa6S9IzrpkRiQXRqABb4hnA0FWTMUXxpiM72Y+8JW3beTVQ C2xKS+68CxcekxO+AqDM9Mq5yBG8/M8NYzYWl8bbPoEeeUGRlnERKNp1ellXxTSp WAF+4+B7/pRtsuEYr4VBkdZtr5+Mdf0z -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:09 2025 by rpki-client