$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft File: 1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json) Hash identifier: 6p/IMmedrtUM5IU2lUg/7QCLUNbGscETCVXwoBwXwaE= Subject key identifier: C1:9C:FC:0F:F0:FC:89:EB:57:1A:9E:5B:A0:8C:C7:BA:64:81:94:C9 Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF Certificate issuer: /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF Certificate serial: 0402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft Manifest number: 03FA Signing time: Sat 09 Aug 2025 01:00:37 +0000 Manifest this update: Sat 09 Aug 2025 01:00:37 +0000 Manifest next update: Sat 16 Aug 2025 01:00:37 +0000 Files and hashes: 1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: LMDJd7LDHm5xAovvYGaS81WMgZWFglwKqvX+DDDILP8=) 2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: DgFh0007lZzBIY6/Uazy8v7Lvih8jtP3rAyQ1LouyMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7E29, serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF Validity Not Before: Aug 9 01:00:37 2025 GMT Not After : Aug 16 01:00:37 2025 GMT Subject: CN=68969db5-6baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:3a:33:d0:35:2c:cd:c5:1f:4f:85:85:8b: 9c:d4:6f:f1:65:98:83:c8:8d:50:40:46:41:e0:3c: da:84:3d:6b:a3:86:83:15:77:ec:45:23:3c:9e:c3: fb:7d:57:24:c5:97:fd:77:c0:ae:94:2b:e1:0f:cc: f1:a7:ba:f2:6e:18:60:3e:6e:32:8a:fe:bf:9d:e0: a3:97:7e:d8:d7:5b:1e:93:dc:5d:38:9b:d7:a4:87: 1d:a7:26:37:54:79:f4:dc:8b:d1:62:ae:78:7f:72: 96:28:9c:07:7c:78:df:62:b9:01:19:da:02:0a:f4: 78:b7:49:8b:8f:74:ea:6d:ba:bc:52:4e:82:a9:57: 4f:55:f4:d2:4f:87:d6:cc:26:a2:06:3b:d8:8e:4b: 09:4f:e2:84:65:b2:4e:47:51:a4:0d:12:14:6d:87: 94:6e:a1:7f:ee:e7:2c:22:f2:19:27:84:47:9a:40: 70:9c:05:3f:6f:19:c2:6a:a4:44:a4:8e:50:b2:c8: 3f:73:35:25:f8:a9:f0:d7:34:66:f3:06:02:cd:ad: cb:84:34:90:22:9c:ee:f2:2d:73:b3:d1:67:23:74: 65:7b:1e:36:84:39:ad:99:ac:e2:b3:a9:26:7b:1d: de:5e:e2:b6:d8:5a:a4:76:34:51:98:17:d4:7e:d5: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9C:FC:0F:F0:FC:89:EB:57:1A:9E:5B:A0:8C:C7:BA:64:81:94:C9 X509v3 Authority Key Identifier: keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c6:d5:8f:27:ea:dd:11:92:da:69:59:e8:83:2f:59:27:f5: 83:3a:a9:a5:d3:07:09:82:18:8c:2d:8f:e4:46:c5:8c:b4:b7: cc:24:7b:d9:49:a4:45:8f:98:28:fc:9d:cb:c2:2c:03:70:ba: 20:ca:d4:d7:81:e8:35:19:4b:b0:de:a7:fe:ad:2b:91:c8:0c: 1c:6c:e9:c3:b6:f2:fe:e2:72:2a:97:ec:81:a1:dc:10:c7:29: b2:f2:34:df:13:3d:58:bc:b4:7e:38:8a:4e:74:66:12:0a:d8: f9:67:a1:4e:b4:76:8c:c5:eb:31:51:f8:fc:e5:85:aa:76:fa: 5c:86:2e:f0:76:a9:7c:09:2b:f4:5c:15:46:63:33:7a:e0:cd: 31:ca:ce:5e:93:40:2d:66:74:70:56:c0:bb:15:af:97:ed:d6: 39:2f:08:14:dd:70:dc:97:d7:44:59:0e:58:b2:dc:cb:94:a6: 09:a4:8b:20:94:fb:57:46:c0:be:03:b9:b0:96:8a:0d:6f:26: 3a:fe:23:1c:f0:6e:4e:a3:36:72:58:21:81:37:69:3c:71:fa: 76:90:f3:38:3f:05:6f:ca:d2:7c:d7:38:0a:e1:d3:3e:a8:6f: 4f:f8:f8:b9:ec:95:79:98:08:1b:1d:d9:e8:99:44:8e:11:e9: f3:e2:c7:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFMjkxMTAvBgNVBAUTKEQ1RkY0NUM4MDU4MTI1QzI3MkRGMDQ2REMwQjhFMDZG QUEzMDRGQ0YwHhcNMjUwODA5MDEwMDM3WhcNMjUwODE2MDEwMDM3WjAYMRYwFAYD VQQDEw02ODk2OWRiNS02YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHc6M9A1LM3FH0+FhYuc1G/xZZiDyI1QQEZB4DzahD1ro4aDFXfsRSM8nsP7 fVckxZf9d8CulCvhD8zxp7rybhhgPm4yiv6/neCjl37Y11sek9xdOJvXpIcdpyY3 VHn03IvRYq54f3KWKJwHfHjfYrkBGdoCCvR4t0mLj3Tqbbq8Uk6CqVdPVfTST4fW zCaiBjvYjksJT+KEZbJOR1GkDRIUbYeUbqF/7ucsIvIZJ4RHmkBwnAU/bxnCaqRE pI5Qssg/czUl+Knw1zRm8wYCza3LhDSQIpzu8i1zs9FnI3Rlex42hDmtmazis6km ex3eXuK22FqkdjRRmBfUftVXhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGc/A/w /InrVxqeW6CMx7pkgZTJMB8GA1UdIwQYMBaAFNX/RcgFgSXCct8EbcC44G+qME/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0UyOS81NkYxQzUzMjg3 OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpjSnkzd1J0d0xqZ2I2b3dU ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmOUZ5QVdCSmNKeTN3UnR3TGpnYjZvd1Q4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0UyOS81NkYxQzUzMjg3OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpj Snkzd1J0d0xqZ2I2b3dUODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIxtWPJ+rdEZLaaVnogy9ZJ/WDOqml0wcJghiMLY/kRsWMtLfMJHvZ SaRFj5go/J3LwiwDcLogytTXgeg1GUuw3qf+rSuRyAwcbOnDtvL+4nIql+yBodwQ xymy8jTfEz1YvLR+OIpOdGYSCtj5Z6FOtHaMxesxUfj85YWqdvpchi7wdql8CSv0 XBVGYzN64M0xys5ek0AtZnRwVsC7Fa+X7dY5LwgU3XDcl9dEWQ5YstzLlKYJpIsg lPtXRsC+A7mwlooNbyY6/iMc8G5OozZyWCGBN2k8cfp2kPM4PwVvytJ81zgK4dM+ qG9P+Pi57JV5mAgbHdnomUSOEenz4sfw -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:56 2025 by rpki-client