$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft File: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json) Hash identifier: V/jvdngC+Ntze6pUoEuqb3gvy7qNs2NapSRhvTIgWB0= Subject key identifier: DB:54:8E:9B:18:9E:AE:A3:98:32:25:90:73:4A:F3:AB:AD:D7:B4:53 Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB Certificate issuer: /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft Manifest number: 0152 Signing time: Sat 09 Aug 2025 04:32:03 +0000 Manifest this update: Sat 09 Aug 2025 04:32:02 +0000 Manifest next update: Sat 16 Aug 2025 04:32:02 +0000 Files and hashes: 1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: I9AHiXKUT2rebLuh3/Qd2aO3/rlrkxghn6OorxorvHY=) 2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: sf8Mnz1qsHdpKeF1ILemxPeqebYjdCIUvrzVLMZpW/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Validity Not Before: Aug 9 04:32:02 2025 GMT Not After : Aug 16 04:32:02 2025 GMT Subject: CN=6896cf43-dd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:7c:8c:99:d6:41:ff:87:4c:8f:9f:21:54: c2:06:b0:d0:ce:de:aa:35:77:04:3b:a7:ab:a5:9c: 4a:f7:a0:59:8d:50:ee:52:1f:2f:d7:a7:6c:17:e5: 1a:a8:2d:38:98:32:bb:da:c8:6c:f6:0c:ad:76:10: 0d:e5:34:f4:08:7d:f9:35:5b:71:8f:11:1a:ac:ec: 0c:67:89:98:2b:e6:8d:b6:cb:1d:f3:ba:13:5f:b4: 73:b9:39:d1:71:fa:d8:48:56:51:71:37:90:1a:37: 3f:46:06:ab:5a:a2:01:3d:18:31:be:ea:c3:7e:7a: 00:fd:6e:f8:63:af:01:c0:c1:de:79:07:7c:00:8a: 00:1a:e7:9a:ac:2e:17:ad:08:dd:a1:a0:bd:a9:2a: d3:e5:00:ee:3f:0c:d0:ea:94:10:16:14:04:50:1a: 8b:1c:03:40:dc:d1:5a:ae:7c:4a:fe:01:fe:a0:47: 89:69:d0:ff:40:d8:61:40:2d:94:3f:26:61:7d:43: 68:15:02:d6:60:fa:00:10:3f:9c:d9:99:27:c5:42: 2c:ba:ff:07:bf:f1:be:4e:4b:f2:de:6a:a2:28:2e: fd:fa:a4:88:df:a9:e0:2d:96:b5:b6:37:ed:9f:a9: 71:39:18:73:c2:ac:13:5e:c5:ed:ef:e5:ef:bd:0f: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:54:8E:9B:18:9E:AE:A3:98:32:25:90:73:4A:F3:AB:AD:D7:B4:53 X509v3 Authority Key Identifier: keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ea:3d:6f:96:36:91:3b:3a:d7:5f:de:57:8b:6e:04:4b:a1: 71:2e:df:a7:9a:1e:24:d3:0a:c8:dc:e2:c8:2d:d3:1b:f4:b4: 6b:f6:cc:ad:e6:38:d3:94:1c:ed:0b:db:e4:b0:3e:de:49:08: 29:a6:10:ef:46:79:05:b0:8f:e4:67:55:7a:c9:d2:07:f2:88: f9:c0:b9:ac:99:2f:e4:14:df:de:a3:ee:e4:e3:12:57:35:d9: 59:f1:70:8c:9b:96:44:1b:05:07:0f:50:f3:78:c6:4c:6b:89: 6f:48:9c:63:57:1b:25:5b:d3:82:49:aa:24:14:89:79:70:b5: 87:fd:4b:78:b5:3f:59:50:e4:61:6c:e7:f8:f8:bb:ca:e4:d0: c1:4c:cc:21:7e:ff:ae:8a:90:53:55:5c:4c:c0:14:c0:8b:c9: c7:fa:71:38:7e:3c:0b:fc:1e:1d:d7:bd:af:21:be:60:3f:45: 0a:48:1b:bf:51:72:e7:99:00:fd:9d:9b:47:78:88:68:12:18: b9:df:62:9e:7c:00:2f:d0:df:a6:51:80:a4:07:97:4c:6a:63: 8a:fb:25:e2:cc:7f:2c:63:5a:9e:5d:cb:b4:c5:cf:36:89:6c: 34:08:fd:f1:57:a5:72:19:c9:e9:01:68:98:d6:ac:02:30:1b: b3:5a:5f:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFCOUYxMTAvBgNVBAUTKEY1M0U1NjQwNzY5OEMxRkFBNzVEMjU3NjU1MTNCNTA3 NjUyQzk3QUIwHhcNMjUwODA5MDQzMjAyWhcNMjUwODE2MDQzMjAyWjAYMRYwFAYD VQQDEw02ODk2Y2Y0My1kZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8p8jJnWQf+HTI+fIVTCBrDQzt6qNXcEO6erpZxK96BZjVDuUh8v16dsF+Ua qC04mDK72shs9gytdhAN5TT0CH35NVtxjxEarOwMZ4mYK+aNtssd87oTX7RzuTnR cfrYSFZRcTeQGjc/RgarWqIBPRgxvurDfnoA/W74Y68BwMHeeQd8AIoAGuearC4X rQjdoaC9qSrT5QDuPwzQ6pQQFhQEUBqLHANA3NFarnxK/gH+oEeJadD/QNhhQC2U PyZhfUNoFQLWYPoAED+c2ZknxUIsuv8Hv/G+Tkvy3mqiKC79+qSI36ngLZa1tjft n6lxORhzwqwTXsXt7+XvvQ/c1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtUjpsY nq6jmDIlkHNK86ut17RTMB8GA1UdIwQYMBaAFPU+VkB2mMH6p10ldlUTtQdlLJer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUI5Ri81NjkyMjkwMjZF MTUxMUVFOEQ2RUQ0NThDNEY5QUUwMi85VDVXUUhhWXdmcW5YU1YyVlJPMUIyVXNs NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUNVdRSGFZd2ZxblhTVjJWUk8xQjJVc2w2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUI5Ri81NjkyMjkwMjZFMTUxMUVFOEQ2RUQ0NThDNEY5QUUwMi85VDVXUUhhWXdm cW5YU1YyVlJPMUIyVXNsNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf6j1vljaROzrXX95Xi24ES6FxLt+nmh4k0wrI3OLILdMb9LRr9syt 5jjTlBztC9vksD7eSQgpphDvRnkFsI/kZ1V6ydIH8oj5wLmsmS/kFN/eo+7k4xJX NdlZ8XCMm5ZEGwUHD1DzeMZMa4lvSJxjVxslW9OCSaokFIl5cLWH/Ut4tT9ZUORh bOf4+LvK5NDBTMwhfv+uipBTVVxMwBTAi8nH+nE4fjwL/B4d172vIb5gP0UKSBu/ UXLnmQD9nZtHeIhoEhi532KefAAv0N+mUYCkB5dMamOK+yXizH8sY1qeXcu0xc82 iWw0CP3xV6VyGcnpAWiY1qwCMBuzWl95 -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:19 2025 by rpki-client