$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json) Hash identifier: lfv+chM5txTCUzy3NC/4Zj2JWPI6I7taDg3oNqz3vAQ= Subject key identifier: AB:40:8E:BE:DC:07:DA:57:46:7D:48:0A:25:1F:21:2D:EA:0B:ED:90 Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft Manifest number: F9 Signing time: Sat 09 Aug 2025 05:34:56 +0000 Manifest this update: Sat 09 Aug 2025 05:34:56 +0000 Manifest next update: Sat 16 Aug 2025 05:34:56 +0000 Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: uCPS5YSqSAZ10kkooJimOLvch8XoeceJPJIA73XJvgI=) 2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: BonjniXMbmI4yDYc3ynOZLv8pgVSOdRZa/c5jpsq0Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Validity Not Before: Aug 9 05:34:56 2025 GMT Not After : Aug 16 05:34:56 2025 GMT Subject: CN=6896de00-3634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:d4:c7:df:cf:f6:d8:a0:13:6c:1e:92:03: 1f:87:bb:64:6a:b4:6c:5c:a5:22:62:fc:24:70:96: bc:71:fd:da:81:d6:f9:1d:e8:19:b1:30:71:be:fd: 87:72:7b:e7:96:3d:57:63:48:36:48:8b:0d:8a:1c: 8d:aa:9e:63:c5:37:56:f0:c1:68:35:4d:a9:cd:2f: 46:b8:e8:31:d2:69:3a:86:e2:29:90:32:18:ef:d2: d1:71:46:25:31:3b:32:87:df:80:82:a0:8f:aa:b6: 96:fd:e7:c7:65:db:08:6e:00:ce:83:45:46:fa:53: 5c:82:e3:9e:c1:d8:c5:8e:1b:9e:4e:df:bb:12:12: 83:6c:0f:f6:54:f4:07:6a:c6:be:32:f0:22:73:8a: 88:b8:b6:45:7d:c6:7b:b9:ce:9e:73:d2:b8:55:df: 8c:55:20:f6:f3:32:c5:9d:62:06:19:f3:6b:e6:95: f3:05:fa:19:be:66:cc:db:7f:de:13:99:1b:62:fd: 79:ea:e0:f4:77:83:a2:4d:55:a3:95:be:a2:3c:43: a8:8f:5e:1e:7b:90:e6:d3:c7:7d:e7:2b:b6:29:5f: 4d:32:bf:e4:fe:e5:05:54:f6:e0:72:95:e2:97:1a: fc:8a:de:06:93:1c:57:3a:e9:8d:37:f3:7d:64:56: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:40:8E:BE:DC:07:DA:57:46:7D:48:0A:25:1F:21:2D:EA:0B:ED:90 X509v3 Authority Key Identifier: keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d4:dd:18:45:6c:90:95:83:d9:ec:2b:32:d8:cb:9c:e7:3b: 39:f6:77:43:30:dc:93:72:df:e6:f4:83:4b:8b:c4:6a:8c:6d: 02:ff:3d:21:dd:2e:17:73:03:da:fb:ee:a6:ea:9c:ef:0c:b0: e5:a8:da:8f:a6:14:76:ff:3c:fa:4d:60:8b:3f:e8:a0:57:02: 12:cf:0e:2f:86:37:2b:89:60:cd:d4:da:e6:97:d8:5e:3d:19: ca:4b:ed:8b:93:45:a2:59:c3:0b:a6:09:ff:43:f5:43:c7:14: 94:43:29:6c:53:91:b4:97:d2:bf:48:e9:10:53:7a:51:a9:0c: eb:dc:70:a9:c2:ae:7d:ed:51:2c:76:65:d4:98:26:00:aa:0b: cc:c3:06:9f:94:26:33:ca:43:39:37:47:22:02:8d:0b:38:1c: 6d:c9:ed:3e:71:18:ad:42:bd:bb:c0:22:7a:52:40:0a:90:98: b6:cb:17:86:db:64:ef:d1:78:16:0b:71:ec:40:15:1b:69:41: 20:63:ef:d2:04:ba:a6:5b:2e:89:f8:25:30:d8:e7:16:81:b5: f8:32:20:03:54:4a:20:51:5f:4a:cd:55:80:11:be:5e:9b:d7: fe:9f:5a:d3:1f:55:9e:dc:ad:f3:8f:bf:f6:34:f7:2a:55:e0: bf:44:95:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNTUxMTAvBgNVBAUTKDk5OUIyRjY1MzlDMjNFQUVCNDY5RTY3NTM5RkIyREM5 MzNEOTgwNDAwHhcNMjUwODA5MDUzNDU2WhcNMjUwODE2MDUzNDU2WjAYMRYwFAYD VQQDEw02ODk2ZGUwMC0zNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWTUx9/P9tigE2wekgMfh7tkarRsXKUiYvwkcJa8cf3agdb5HegZsTBxvv2H cnvnlj1XY0g2SIsNihyNqp5jxTdW8MFoNU2pzS9GuOgx0mk6huIpkDIY79LRcUYl MTsyh9+AgqCPqraW/efHZdsIbgDOg0VG+lNcguOewdjFjhueTt+7EhKDbA/2VPQH asa+MvAic4qIuLZFfcZ7uc6ec9K4Vd+MVSD28zLFnWIGGfNr5pXzBfoZvmbM23/e E5kbYv156uD0d4OiTVWjlb6iPEOoj14ee5Dm08d95yu2KV9NMr/k/uUFVPbgcpXi lxr8it4GkxxXOumNN/N9ZFY9LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtAjr7c B9pXRn1ICiUfIS3qC+2QMB8GA1UdIwQYMBaAFJmbL2U5wj6utGnmdTn7Lckz2YBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA1NS80QUJCQzAxQ0Y1 NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1BxNjBhZVoxT2ZzdHlUUFpn RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21ac3ZaVG5DUHE2MGFlWjFPZnN0eVRQWmdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA1NS80QUJCQzAxQ0Y1NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1Bx NjBhZVoxT2ZzdHlUUFpnRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi1N0YRWyQlYPZ7Csy2Muc5zs59ndDMNyTct/m9INLi8RqjG0C/z0h 3S4XcwPa++6m6pzvDLDlqNqPphR2/zz6TWCLP+igVwISzw4vhjcriWDN1Nrml9he PRnKS+2Lk0WiWcMLpgn/Q/VDxxSUQylsU5G0l9K/SOkQU3pRqQzr3HCpwq597VEs dmXUmCYAqgvMwwaflCYzykM5N0ciAo0LOBxtye0+cRitQr27wCJ6UkAKkJi2yxeG 22Tv0XgWC3HsQBUbaUEgY+/SBLqmWy6J+CUw2OcWgbX4MiADVEogUV9KzVWAEb5e m9f+n1rTH1We3K3zj7/2NPcqVeC/RJV3 -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:45 2025 by rpki-client