$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json) Hash identifier: zI/hJoALkGAZcCVcbTovnlcySbaNeb+DFsWi0gViBcw= Subject key identifier: ED:7F:31:37:53:BF:8A:7C:B9:75:38:AB:4C:AE:CB:51:47:66:07:40 Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft Manifest number: A5 Signing time: Sat 09 Aug 2025 02:03:44 +0000 Manifest this update: Sat 09 Aug 2025 02:03:44 +0000 Manifest next update: Sat 16 Aug 2025 02:03:44 +0000 Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: /hWdO91nG+GzRSEY2YLrLhEGRlUGt1EInB/adnx2hWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Validity Not Before: Aug 9 02:03:44 2025 GMT Not After : Aug 16 02:03:44 2025 GMT Subject: CN=6896ac80-dfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7f:34:1c:bd:a3:6a:94:61:6d:06:0a:10:48: f4:dd:34:93:47:a3:f4:8a:f5:58:de:81:5e:c7:5e: 31:bf:b2:56:c6:5a:3e:f6:c7:bd:39:77:0e:32:65: 28:b4:07:96:4c:96:a4:84:95:6a:d0:68:86:85:50: a5:71:0b:2b:78:2c:1b:93:f8:18:f4:e1:cd:b7:e0: 24:9f:49:66:67:47:f7:ba:82:59:73:32:ec:53:f6: 28:f8:ae:2c:48:e0:4c:cc:74:8c:ed:5c:2c:66:d0: ac:0f:d7:15:14:97:5a:eb:44:cb:fa:b4:fd:77:cd: 3e:78:e6:ea:2b:11:fd:97:fb:3c:0d:ba:b2:2b:3d: 37:f1:95:d7:76:68:0a:20:9c:46:f2:96:95:82:17: 95:9c:d4:50:d9:63:5a:88:33:b1:70:99:ca:3b:4f: dc:07:b4:ff:ad:21:f3:0f:1e:e8:48:77:3e:20:35: 66:27:c1:9f:4d:26:0d:0f:38:dc:6e:fa:b1:f8:c4: 70:b7:50:71:11:28:08:de:70:94:1f:d0:0e:63:44: fb:95:c2:bf:1d:a0:17:3f:c3:e4:c1:69:d0:fd:de: 70:50:0e:6a:a2:64:17:36:a3:0b:72:d1:52:23:cd: 76:30:4c:2d:84:7c:f0:e5:ee:d4:47:99:d7:4b:b7: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7F:31:37:53:BF:8A:7C:B9:75:38:AB:4C:AE:CB:51:47:66:07:40 X509v3 Authority Key Identifier: keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:45:d5:9c:07:47:a4:12:10:aa:49:df:11:9c:ae:87:7b:af: 2f:f7:f1:c4:69:fd:09:a3:98:0b:f5:30:07:b8:9b:32:21:e8: 81:20:10:2a:3e:ef:57:04:8a:58:5f:74:5c:08:79:1a:ab:1b: be:8e:1c:1f:9d:a1:d0:dc:b1:19:9e:fb:21:22:80:dd:29:b3: c2:19:05:b8:3f:20:52:98:36:29:7a:47:01:61:18:85:e1:9c: cb:df:90:b0:88:0c:4a:d5:4c:5b:24:6e:a4:be:7c:91:0e:48: 2f:3a:07:c2:79:1d:a7:0e:3e:a3:6d:23:60:dc:e7:b5:1e:65: c4:85:fc:60:8c:2e:91:2c:a0:50:11:d0:e2:86:53:db:72:81: 8b:68:c4:7b:74:23:ac:f5:03:bf:ab:fc:a1:d5:74:59:a2:a1: b9:0d:bf:57:ca:61:64:65:c3:27:4f:36:b0:1c:69:75:18:4c: 75:24:8b:83:17:1b:0c:8f:3f:2d:fc:01:75:65:d5:d4:12:e0: 1c:bf:fe:86:f3:52:88:f4:b3:83:8d:ce:42:0f:8d:22:33:7f: 95:6f:4c:9d:28:d9:a9:95:f1:d8:cc:50:10:b6:ff:5e:9b:d2: 6c:a9:cb:df:a1:34:0b:37:c4:59:ea:72:e3:6b:80:2e:64:b4: 72:af:50:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKEQzRDc4M0VFNEM2OUJCNTA2M0ZCNUNGNUIyNjI4QkM3 QkVDMzc0OEEwHhcNMjUwODA5MDIwMzQ0WhcNMjUwODE2MDIwMzQ0WjAYMRYwFAYD VQQDEw02ODk2YWM4MC1kZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H80HL2japRhbQYKEEj03TSTR6P0ivVY3oFex14xv7JWxlo+9se9OXcOMmUo tAeWTJakhJVq0GiGhVClcQsreCwbk/gY9OHNt+Akn0lmZ0f3uoJZczLsU/Yo+K4s SOBMzHSM7VwsZtCsD9cVFJda60TL+rT9d80+eObqKxH9l/s8DbqyKz038ZXXdmgK IJxG8paVgheVnNRQ2WNaiDOxcJnKO0/cB7T/rSHzDx7oSHc+IDVmJ8GfTSYNDzjc bvqx+MRwt1BxESgI3nCUH9AOY0T7lcK/HaAXP8PkwWnQ/d5wUA5qomQXNqMLctFS I812MEwthHzw5e7UR5nXS7e5nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1/MTdT v4p8uXU4q0yuy1FHZgdAMB8GA1UdIwQYMBaAFNPXg+5MabtQY/tc9bJii8e+w3SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9BQjg1MzQ0MDdB M0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUxQmotMXoxc21LTHg3N0Rk SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9BQjg1MzQ0MDdBM0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUx QmotMXoxc21LTHg3N0RkSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3RdWcB0ekEhCqSd8RnK6He68v9/HEaf0Jo5gL9TAHuJsyIeiBIBAq Pu9XBIpYX3RcCHkaqxu+jhwfnaHQ3LEZnvshIoDdKbPCGQW4PyBSmDYpekcBYRiF 4ZzL35CwiAxK1UxbJG6kvnyRDkgvOgfCeR2nDj6jbSNg3Oe1HmXEhfxgjC6RLKBQ EdDihlPbcoGLaMR7dCOs9QO/q/yh1XRZoqG5Db9XymFkZcMnTzawHGl1GEx1JIuD FxsMjz8t/AF1ZdXUEuAcv/6G81KI9LODjc5CD40iM3+Vb0ydKNmplfHYzFAQtv9e m9JsqcvfoTQLN8RZ6nLja4AuZLRyr1DC -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:56 2025 by rpki-client