$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json) Hash identifier: m26wdMR1LsWs4kN5kYNPcerQE4WSvtQFcqzTK+az6ZQ= Subject key identifier: 7C:DF:96:48:F3:8E:88:1F:61:46:0A:CF:C1:9F:4B:0B:36:A1:15:BF Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft Manifest number: 87 Signing time: Sat 09 Aug 2025 07:06:56 +0000 Manifest this update: Sat 09 Aug 2025 07:06:56 +0000 Manifest next update: Sat 16 Aug 2025 07:06:56 +0000 Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: FOkszS4UZz+oT3b22BC0Fot9P0khmNJvicFPXrRsnZE=) 2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C Validity Not Before: Aug 9 07:06:56 2025 GMT Not After : Aug 16 07:06:56 2025 GMT Subject: CN=6896f390-ed22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:d6:82:99:8a:55:76:89:16:94:f9:44:06: d4:e1:92:1d:fd:2f:88:3f:34:81:d7:d9:f7:12:ce: 25:07:b0:6c:ed:06:ab:2f:4e:e0:2e:0e:b4:da:f5: ff:65:e8:c6:7f:a9:16:90:8a:13:29:65:08:9a:a5: 71:d8:7e:94:97:6a:a7:ec:08:73:5f:a7:91:42:d4: 5b:56:20:93:10:94:f8:b4:07:f6:52:be:4a:e4:65: b9:cc:9c:8d:c4:53:58:d5:6f:be:af:7d:5a:ed:47: c2:fe:eb:73:9a:c1:cb:75:45:dd:a0:b4:49:95:3e: ca:7d:0f:32:99:d7:a1:b8:92:54:5a:49:b6:21:8b: af:a1:d5:a9:a1:cd:6f:8f:04:a7:2f:c0:1a:27:d3: 94:b4:23:82:9c:7e:9d:e3:87:53:5a:3f:85:51:f6: 78:67:02:aa:a4:61:e0:76:ca:8f:6f:4e:12:02:db: 2b:81:8d:ee:a7:52:dd:45:16:a0:d9:5d:93:78:b6: af:a5:35:3a:f6:9b:3e:7e:89:0c:fe:3a:65:34:7d: 24:79:3a:7a:c9:5b:da:5f:ea:fe:56:22:cf:ab:64: 1b:da:e7:55:f6:ba:3c:f5:21:16:f7:00:60:47:bb: 08:ff:dc:85:cd:fe:b5:2c:be:97:b8:c4:e0:c0:25: 93:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DF:96:48:F3:8E:88:1F:61:46:0A:CF:C1:9F:4B:0B:36:A1:15:BF X509v3 Authority Key Identifier: keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:99:d4:f9:51:83:66:1f:1e:fb:99:46:38:69:58:3a:60:c7: e0:bc:fb:41:e3:a5:28:cb:ce:a9:7d:13:b9:b8:6e:91:7b:bd: c0:ed:ff:59:e1:ea:21:27:5f:e9:8c:88:6d:3d:3b:7b:58:e5: 27:72:f5:ff:1d:77:11:1d:fe:01:ae:98:f7:e0:db:38:4f:5c: 38:05:76:80:ca:3b:4d:a0:7a:38:c9:fa:bc:79:9f:46:04:f5: 0c:b2:da:78:92:bb:51:d3:9b:74:1b:29:85:5a:18:8f:c6:c8: 12:a8:f8:66:93:7e:2d:0e:40:63:59:a3:61:cf:0b:e2:d9:ed: d0:ab:6c:23:5b:11:3c:00:0f:0e:98:c6:9c:29:a4:23:3a:ef: 04:a4:70:f2:d2:55:8d:2d:a9:07:7e:35:4e:df:60:6e:a8:a3: 6a:a8:5d:f4:b2:c9:a4:73:e3:c1:75:78:93:ea:48:ef:11:e5: 48:b3:14:c7:85:83:41:6c:d5:63:f8:04:4c:83:e8:9f:f6:51: 92:d5:ff:6c:e4:a5:b0:1d:35:09:8f:ea:d8:12:92:ab:6b:0d: c2:e3:d4:7e:a1:f8:15:a3:61:5a:b7:67:83:63:87:0f:ec:d1: 0d:0e:23:16:25:1d:b1:d6:cd:6b:07:b0:2d:49:cd:07:35:23: 94:ad:0d:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIxQUUxMTAvBgNVBAUTKEY2RDM3OTMwMjc3NTFDNjJGOEFCQjkwODg2RUE5M0Y0 OUIzM0Y2NEMwHhcNMjUwODA5MDcwNjU2WhcNMjUwODE2MDcwNjU2WjAYMRYwFAYD VQQDEw02ODk2ZjM5MC1lZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufrWgpmKVXaJFpT5RAbU4ZId/S+IPzSB19n3Es4lB7Bs7QarL07gLg602vX/ ZejGf6kWkIoTKWUImqVx2H6Ul2qn7AhzX6eRQtRbViCTEJT4tAf2Ur5K5GW5zJyN xFNY1W++r31a7UfC/utzmsHLdUXdoLRJlT7KfQ8ymdehuJJUWkm2IYuvodWpoc1v jwSnL8AaJ9OUtCOCnH6d44dTWj+FUfZ4ZwKqpGHgdsqPb04SAtsrgY3up1LdRRag 2V2TeLavpTU69ps+fokM/jplNH0keTp6yVvaX+r+ViLPq2Qb2udV9ro89SEW9wBg R7sI/9yFzf61LL6XuMTgwCWT8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzflkjz jogfYUYKz8GfSws2oRW/MB8GA1UdIwQYMBaAFPbTeTAndRxi+Ku5CIbqk/SbM/ZM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS82QzcwNDhBNkFD NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhHTDRxN2tJaHVxVDlKc3o5 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzl0TjVNQ2QxSEdMNHE3a0lodXFUOUpzejlrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjFBRS82QzcwNDhBNkFDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhH TDRxN2tJaHVxVDlKc3o5a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxmdT5UYNmHx77mUY4aVg6YMfgvPtB46Uoy86pfRO5uG6Re73A7f9Z 4eohJ1/pjIhtPTt7WOUncvX/HXcRHf4Brpj34Ns4T1w4BXaAyjtNoHo4yfq8eZ9G BPUMstp4krtR05t0GymFWhiPxsgSqPhmk34tDkBjWaNhzwvi2e3Qq2wjWxE8AA8O mMacKaQjOu8EpHDy0lWNLakHfjVO32BuqKNqqF30ssmkc+PBdXiT6kjvEeVIsxTH hYNBbNVj+ARMg+if9lGS1f9s5KWwHTUJj+rYEpKraw3C49R+ofgVo2Fat2eDY4cP 7NENDiMWJR2x1s1rB7AtSc0HNSOUrQ2j -----END CERTIFICATE-----Generated at Sun Aug 10 18:26:43 2025 by rpki-client