$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: lctW7xtrcyHXWp0kHM95jPmFkVp7TSaBYyBqtnG7Utg= Subject key identifier: 40:A9:E4:26:35:7C:E9:A7:FA:13:5C:90:65:F7:C1:B2:6D:F2:46:8B Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 01E3 Signing time: Tue 17 Jun 2025 01:46:22 +0000 Manifest this update: Tue 17 Jun 2025 01:46:21 +0000 Manifest next update: Tue 24 Jun 2025 01:46:21 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: vgzR8n2cXd3hRKPco4LRe3AR6KWSbC77c00z0m1uPas=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Jun 17 01:46:21 2025 GMT Not After : Jun 24 01:46:21 2025 GMT Subject: CN=6850c8ee-9652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:ba:f4:3c:f5:62:e2:c0:1b:b6:c1:26:79: f8:8f:b0:d3:a7:1f:7d:3f:36:85:58:43:15:03:d0: f1:16:cc:93:f6:fc:8a:60:d2:f5:bd:4e:55:88:58: 59:73:ce:82:de:ea:9a:9f:56:e1:10:50:cf:90:85: 1a:41:5c:32:8c:db:e4:89:20:b9:5f:12:82:01:17: 98:36:6e:fd:ae:00:97:b1:63:4a:46:ee:32:33:d1: 42:61:fb:79:61:30:35:89:b3:57:02:5a:d9:40:33: 2c:0f:0c:4a:0c:b5:13:54:3f:e7:f4:fc:b2:2c:db: 81:95:b6:99:3f:4c:c4:a7:52:1d:cf:80:c9:3d:88: e6:31:c6:d1:71:23:a5:9c:2a:7a:8a:52:c5:04:4c: f8:1b:75:a1:05:76:7f:03:ca:fc:d7:ed:d4:3a:1d: 83:53:9a:b2:fd:b5:47:ac:77:47:6a:d2:f0:8d:05: 15:aa:38:88:dd:ec:2b:b8:ac:27:aa:2a:87:45:78: e1:ff:2f:d8:d7:a4:9d:45:e0:34:e3:39:e6:7e:fb: 87:dd:7d:97:3b:45:06:6f:92:99:17:cc:3a:16:ab: e5:b5:5d:c4:03:7f:73:50:a6:91:0a:4e:da:1f:1f: ce:db:fd:96:d8:cf:5e:03:9d:70:f0:8b:ea:0f:8b: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A9:E4:26:35:7C:E9:A7:FA:13:5C:90:65:F7:C1:B2:6D:F2:46:8B X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:7f:cb:9d:dd:36:86:3d:3b:f6:0e:b0:44:03:33:03:2c:da: 48:2f:65:e1:d6:02:50:b0:36:a2:83:5d:36:5a:37:c0:ab:36: 52:7b:da:71:e2:01:c4:81:83:6a:ae:8d:96:bb:48:4b:cd:8f: 0b:35:a2:3e:82:ca:e0:5a:30:19:c8:05:b3:6a:d0:5a:70:0d: 4c:93:c9:05:2f:3f:da:a8:ed:9e:02:cf:68:65:a4:fc:88:59: 9e:9e:60:cb:3b:37:56:9b:8d:a2:35:4a:a4:0d:28:b4:d8:66: 99:b0:1c:4f:02:21:6a:d9:a9:02:a8:fe:24:30:6d:e3:76:ab: 7c:1a:d6:e5:30:d3:e3:d6:8d:e5:8f:9b:a3:e3:39:f9:a5:64: d0:3f:d6:7e:7f:2e:32:09:d4:f4:77:b0:fd:ef:a3:03:1b:07: 7b:97:3b:f0:fd:2f:2d:08:f7:cd:2b:2c:18:11:3d:d9:51:b4: ef:44:6b:f2:e0:c7:1f:5b:7f:25:e0:1c:05:56:9d:f5:6e:7e: d8:b1:75:41:34:86:90:5a:0c:d2:42:a4:6f:28:e6:00:79:bb: 76:6b:16:43:93:b8:11:f3:7a:54:04:5d:d7:76:67:b8:df:56: 8c:93:5a:6c:69:4f:47:bd:ce:b1:0f:2a:ea:47:ef:d3:bf:71: 3d:53:20:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUwNjE3MDE0NjIxWhcNMjUwNjI0MDE0NjIxWjAYMRYwFAYD VQQDEw02ODUwYzhlZS05NjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KS69Dz1YuLAG7bBJnn4j7DTpx99PzaFWEMVA9DxFsyT9vyKYNL1vU5ViFhZ c86C3uqan1bhEFDPkIUaQVwyjNvkiSC5XxKCAReYNm79rgCXsWNKRu4yM9FCYft5 YTA1ibNXAlrZQDMsDwxKDLUTVD/n9PyyLNuBlbaZP0zEp1Idz4DJPYjmMcbRcSOl nCp6ilLFBEz4G3WhBXZ/A8r81+3UOh2DU5qy/bVHrHdHatLwjQUVqjiI3ewruKwn qiqHRXjh/y/Y16SdReA04znmfvuH3X2XO0UGb5KZF8w6FqvltV3EA39zUKaRCk7a Hx/O2/2W2M9eA51w8IvqD4s1IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECp5CY1 fOmn+hNckGX3wbJt8kaLMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUf8ud3TaGPTv2DrBEAzMDLNpIL2Xh1gJQsDaig102WjfAqzZSe9px 4gHEgYNqro2Wu0hLzY8LNaI+gsrgWjAZyAWzatBacA1Mk8kFLz/aqO2eAs9oZaT8 iFmenmDLOzdWm42iNUqkDSi02GaZsBxPAiFq2akCqP4kMG3jdqt8GtblMNPj1o3l j5uj4zn5pWTQP9Z+fy4yCdT0d7D976MDGwd7lzvw/S8tCPfNKywYET3ZUbTvRGvy 4McfW38l4BwFVp31bn7YsXVBNIaQWgzSQqRvKOYAebt2axZDk7gR83pUBF3Xdme4 31aMk1psaU9Hvc6xDyrqR+/Tv3E9UyCt -----END CERTIFICATE-----Generated at Wed Jun 18 05:27:41 2025 by rpki-client