$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json) Hash identifier: bb6u40OsU2RZ1lAEOXffoZx8/+XewHHMRhLLPN/BxP0= Subject key identifier: 5D:95:22:99:48:7C:40:9B:7A:00:1E:9D:95:85:BB:9F:7C:95:83:7E Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Certificate serial: 0EDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft Manifest number: 0ED0 Signing time: Sun 10 Aug 2025 17:39:26 +0000 Manifest this update: Sun 10 Aug 2025 17:39:25 +0000 Manifest next update: Sun 17 Aug 2025 17:39:25 +0000 Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: q6YPkjKlG7RIzo/M6JLJkbUbmPux0lkiwgqvCJUB9+U=) 2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: az5u8maauMT/Sx2+Phgo1Z/ovh8gwvsYIRukSLKNLEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3805 (0xedd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Validity Not Before: Aug 10 17:39:25 2025 GMT Not After : Aug 17 17:39:25 2025 GMT Subject: CN=6898d94e-f1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:55:68:61:01:55:32:53:b6:90:f5:ef:d4: cc:d5:e7:b1:ca:02:d3:cd:e6:38:23:58:5c:7d:8a: 31:ad:7b:9b:5e:65:72:5f:92:68:7f:2f:4a:bc:03: 9d:f7:39:0f:e8:f2:97:b9:20:8a:a0:09:03:7f:e1: c9:a1:42:23:89:b4:36:50:12:91:8c:30:65:ed:40: 70:7a:58:59:b0:d0:3b:b4:db:4a:db:94:40:be:01: 69:be:10:cc:2d:8f:2a:09:1a:1a:67:df:31:22:02: 7c:56:30:af:9c:34:04:e8:0c:11:4e:ea:a6:73:c6: 5f:cd:42:bd:64:ab:f9:4a:8a:cb:bc:8a:5d:87:a6: 3d:79:83:d1:c5:a5:9f:9f:22:e2:c1:fb:14:88:f5: 9a:93:25:dc:0a:3a:2c:2a:b3:6c:4f:4c:6d:94:33: 5c:25:06:ed:9c:96:1a:4b:95:74:21:69:83:ca:d0: 88:8a:42:c9:f5:46:fb:b6:a8:50:3e:9b:c2:fc:a1: 1f:e5:a7:00:bc:9e:ee:37:56:8e:89:b7:8c:ce:5b: a4:a8:25:e6:6b:f5:f3:8e:70:5c:ea:85:18:38:54: 44:fb:94:98:dd:43:a5:92:3a:45:43:14:5d:18:ed: ca:9e:e8:17:d7:5b:52:1d:a0:af:da:c3:cf:fa:24: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:95:22:99:48:7C:40:9B:7A:00:1E:9D:95:85:BB:9F:7C:95:83:7E X509v3 Authority Key Identifier: keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:8c:7a:4f:91:4c:46:59:24:ef:46:e0:b4:60:4b:cc:00:f3: 52:1a:ef:41:38:30:c9:ba:c2:c8:47:4c:5a:4d:63:2f:4f:6c: 6e:03:59:95:6e:43:ae:f5:4c:c3:5e:bd:1e:cd:82:54:06:70: 53:91:f6:ba:43:89:ce:2d:24:d4:d6:17:a7:ec:6b:51:0b:7e: 04:56:58:68:55:c6:10:02:c3:65:34:8b:4e:1d:02:71:ca:7b: 1d:58:49:2a:e2:73:d9:bb:40:ed:d6:05:1f:99:c3:b1:06:fb: a5:41:25:2d:ea:b6:81:f2:9d:11:1b:4f:c2:c4:13:90:79:e8: 23:97:c0:27:51:03:f3:15:10:5e:2a:29:fe:a0:32:c7:47:7e: 78:76:d6:78:ed:83:9a:46:19:d8:fb:09:9b:59:07:10:c7:34: 20:97:4d:19:bc:b5:ea:96:3f:5f:81:e6:72:8f:31:73:43:83: 04:19:df:05:cc:b2:2f:db:8f:d9:da:c1:26:b8:d5:80:9d:9a: fe:bc:8f:93:2e:5b:95:4d:ed:c8:e8:0f:56:35:42:38:68:f4: 16:e8:1e:48:da:4e:f8:79:c3:7d:b3:76:fa:9e:34:3c:86:b0: 5e:af:f9:6d:32:cd:1b:91:2d:04:7f:61:9b:83:77:4c:4c:19: d7:d7:55:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYzMUMxMTAvBgNVBAUTKEY3MkU3RDVFMUJCNDU0MkFCN0ZGNzc3MzY1ODgzQzE2 MDEwMzRERTkwHhcNMjUwODEwMTczOTI1WhcNMjUwODE3MTczOTI1WjAYMRYwFAYD VQQDEw02ODk4ZDk0ZS1mMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ5VaGEBVTJTtpD179TM1eexygLTzeY4I1hcfYoxrXubXmVyX5Jofy9KvAOd 9zkP6PKXuSCKoAkDf+HJoUIjibQ2UBKRjDBl7UBwelhZsNA7tNtK25RAvgFpvhDM LY8qCRoaZ98xIgJ8VjCvnDQE6AwRTuqmc8ZfzUK9ZKv5SorLvIpdh6Y9eYPRxaWf nyLiwfsUiPWakyXcCjosKrNsT0xtlDNcJQbtnJYaS5V0IWmDytCIikLJ9Ub7tqhQ PpvC/KEf5acAvJ7uN1aOibeMzlukqCXma/XzjnBc6oUYOFRE+5SY3UOlkjpFQxRd GO3KnugX11tSHaCv2sPP+iTcewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2VIplI fECbegAenZWFu598lYN+MB8GA1UdIwQYMBaAFPcufV4btFQqt/93c2WIPBYBA03p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjMxQy9BOUMzMTcwNDhD MjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZDcTNfM2R6WllnOEZnRURU ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5NTlYaHUwVkNxM18zZHpaWWc4RmdFRFRlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjMxQy9BOUMzMTcwNDhDMjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZD cTNfM2R6WllnOEZnRURUZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJjHpPkUxGWSTvRuC0YEvMAPNSGu9BODDJusLIR0xaTWMvT2xuA1mV bkOu9UzDXr0ezYJUBnBTkfa6Q4nOLSTU1hen7GtRC34EVlhoVcYQAsNlNItOHQJx ynsdWEkq4nPZu0Dt1gUfmcOxBvulQSUt6raB8p0RG0/CxBOQeegjl8AnUQPzFRBe Kin+oDLHR354dtZ47YOaRhnY+wmbWQcQxzQgl00ZvLXqlj9fgeZyjzFzQ4MEGd8F zLIv24/Z2sEmuNWAnZr+vI+TLluVTe3I6A9WNUI4aPQW6B5I2k74ecN9s3b6njQ8 hrBer/ltMs0bkS0Ef2Gbg3dMTBnX11XO -----END CERTIFICATE-----Generated at Mon Aug 11 04:22:41 2025 by rpki-client