$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: TgDtTxzxW7nroDrHrjuvTk1SE0+HjWR3A7GV2Hs+E7Q= Subject key identifier: F4:C0:83:94:B9:39:DB:55:7D:6D:56:C6:BC:B0:B4:68:B6:D6:3B:39 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 01FC Signing time: Tue 05 Aug 2025 02:47:52 +0000 Manifest this update: Tue 05 Aug 2025 02:47:52 +0000 Manifest next update: Tue 12 Aug 2025 02:47:52 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: ThUEKTlDa1T5j8TACmHtP1XIKUt9uvzdqB1RoJ/OL40=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Aug 5 02:47:52 2025 GMT Not After : Aug 12 02:47:52 2025 GMT Subject: CN=689170d8-dce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:9d:f3:03:4b:2d:17:0c:a1:45:da:b1:9e: 15:96:90:30:1d:a0:bf:86:18:96:31:e1:32:b0:11: 1d:98:2a:62:b5:ad:f5:08:02:60:4c:53:5f:f1:c3: 9a:32:40:d1:11:cc:d4:5b:2a:3a:76:05:1c:e6:a3: fa:9e:2f:58:22:98:ff:88:21:da:6d:26:3e:5c:26: ca:8d:8d:e3:12:8a:75:4a:c7:36:3a:c6:30:54:5f: d5:08:32:5d:74:a9:de:39:eb:e3:9b:ce:5e:68:88: 45:20:d1:6c:ea:4e:c3:4b:19:21:17:fd:01:62:96: 14:a2:fc:67:40:53:ad:c0:17:8a:a1:96:88:b8:ec: 18:e6:13:74:72:0b:79:2c:7a:14:6a:ab:fd:33:d4: 71:89:b8:e7:bf:91:a3:31:ec:28:1f:0b:a1:56:2d: 3d:08:b4:be:ce:cb:f8:1f:0f:f9:32:12:0d:35:2e: f2:ff:d7:b4:48:87:c5:e0:71:d6:c5:e7:54:74:c6: 92:96:0a:94:1d:a0:5b:4e:9b:41:1c:76:69:00:79: e3:4a:40:b4:2e:b4:07:24:4b:8a:d4:f9:ff:14:4f: d0:bf:34:05:ee:bd:40:6a:f7:39:65:1b:cf:34:2f: c4:a2:2b:85:48:85:91:3a:35:8f:70:94:d4:9d:79: f6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C0:83:94:B9:39:DB:55:7D:6D:56:C6:BC:B0:B4:68:B6:D6:3B:39 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:96:55:f1:c5:e4:3f:4b:a1:31:34:04:d6:d2:12:f6:4d:f2: da:5b:a3:d6:d0:5f:fd:d8:75:e1:bb:34:7c:45:c4:0a:0a:37: 6e:13:92:8d:28:20:ec:b5:e7:4a:85:c7:a3:11:ee:cf:29:11: 68:23:08:d4:65:e2:c0:17:5b:90:10:fc:e1:56:3c:b4:50:c4: f7:01:ec:c3:b6:45:21:14:35:34:c1:a6:e1:17:fd:d0:8d:ac: 1d:73:e0:2c:6e:25:a4:dc:ac:b7:51:3a:64:21:63:61:b4:6a: 5b:31:b4:c2:ff:f3:3b:2e:b3:04:63:30:cf:87:d7:cb:a4:9c: cd:a0:bb:5c:82:b6:95:c2:c5:37:f2:94:49:46:6f:fd:69:4b: ae:c0:72:33:b1:03:5a:9c:9e:dd:29:f2:3f:54:09:ce:59:17: 42:44:01:7c:98:00:07:aa:37:7f:b4:fc:e0:68:8d:23:27:64: 4a:0b:89:36:8e:ad:db:b6:0a:5d:b6:ce:82:bb:a7:d7:e9:98: 17:97:58:f8:46:9f:83:33:c2:fc:af:5b:ba:00:6b:92:16:e7: f3:a2:90:5c:7d:e5:8c:dc:65:9c:4f:b2:32:af:c7:76:6a:10: 05:6c:3f:dd:a4:2b:b8:98:3f:3e:99:d8:74:ee:cb:71:e4:37: be:2c:33:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUwODA1MDI0NzUyWhcNMjUwODEyMDI0NzUyWjAYMRYwFAYD VQQDEw02ODkxNzBkOC1kY2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYyd8wNLLRcMoUXasZ4VlpAwHaC/hhiWMeEysBEdmCpita31CAJgTFNf8cOa MkDREczUWyo6dgUc5qP6ni9YIpj/iCHabSY+XCbKjY3jEop1Ssc2OsYwVF/VCDJd dKneOevjm85eaIhFINFs6k7DSxkhF/0BYpYUovxnQFOtwBeKoZaIuOwY5hN0cgt5 LHoUaqv9M9Rxibjnv5GjMewoHwuhVi09CLS+zsv4Hw/5MhINNS7y/9e0SIfF4HHW xedUdMaSlgqUHaBbTptBHHZpAHnjSkC0LrQHJEuK1Pn/FE/QvzQF7r1Aavc5ZRvP NC/EoiuFSIWROjWPcJTUnXn28wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTAg5S5 OdtVfW1WxrywtGi21js5MB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApllXxxeQ/S6ExNATW0hL2TfLaW6PW0F/92HXhuzR8RcQKCjduE5KN KCDstedKhcejEe7PKRFoIwjUZeLAF1uQEPzhVjy0UMT3AezDtkUhFDU0wabhF/3Q jawdc+AsbiWk3Ky3UTpkIWNhtGpbMbTC//M7LrMEYzDPh9fLpJzNoLtcgraVwsU3 8pRJRm/9aUuuwHIzsQNanJ7dKfI/VAnOWRdCRAF8mAAHqjd/tPzgaI0jJ2RKC4k2 jq3btgpdts6Cu6fX6ZgXl1j4Rp+DM8L8r1u6AGuSFufzopBcfeWM3GWcT7Iyr8d2 ahAFbD/dpCu4mD8+mdh07stx5De+LDPK -----END CERTIFICATE-----Generated at Tue Aug 5 20:16:38 2025 by rpki-client