$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json) Hash identifier: 8MVcG76lcRDVfylyULI6yss8rluYK1jUtEQMn+qqWq8= Subject key identifier: 6D:01:67:D2:CE:FD:B5:6C:B5:06:33:9D:FF:D7:A2:57:5C:8B:C2:CC Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft Manifest number: 027E Signing time: Sat 09 Aug 2025 02:16:50 +0000 Manifest this update: Sat 09 Aug 2025 02:16:49 +0000 Manifest next update: Sat 16 Aug 2025 02:16:49 +0000 Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: IeCeLi5iq5tHDcynmxS6aDKvgduny8duWDhg3sejAKA=) 2: 58C8DF8E1D3711ED9E2D8867C4F9AE02.roa (hash: FSYr699megaB2rJpIagzzWfYpNq6JBYAS+eCRbgyO2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Validity Not Before: Aug 9 02:16:49 2025 GMT Not After : Aug 16 02:16:49 2025 GMT Subject: CN=6896af91-a2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:e7:90:d6:47:6d:3a:b7:12:b4:74:eb:51: 1c:d0:fe:3d:44:42:8e:a8:13:cf:c3:ed:1b:b1:18: 55:71:9c:fb:64:a3:4a:44:e6:f4:23:16:fe:7a:86: e0:8c:68:5d:ea:d2:5d:bd:26:c9:38:33:6e:82:8a: 98:36:02:f2:38:a2:26:3c:36:ef:65:fd:0b:ac:b4: 0e:f9:92:7d:59:ce:eb:bd:85:69:f7:09:e4:23:6c: 64:b3:4f:20:b8:97:5a:05:7e:ac:e9:fb:36:20:e5: 68:d8:48:ae:07:b7:6b:b6:96:45:ea:ec:c9:5f:fd: de:bd:c8:48:15:7d:6b:0f:2b:eb:fd:ea:d2:9b:db: b3:56:e4:ae:95:6a:37:6a:13:12:8c:33:9d:4c:55: a2:ed:ea:7f:22:60:2f:74:b1:1d:8e:70:1f:c1:a3: 46:b1:3d:cb:2a:ee:f2:38:b5:f5:27:ad:78:ec:19: 31:0f:4f:09:fd:0a:db:ed:b8:4c:c7:f9:6b:04:44: 62:d3:70:ad:31:a5:c0:2c:a3:5a:6d:ec:ab:98:5f: dc:bd:39:cb:d8:0a:ff:05:eb:dc:4d:48:83:f3:ea: 14:aa:3a:c6:2d:ac:d0:5e:6e:36:6a:c5:6e:c7:5e: 49:2f:e1:fe:b7:1a:85:5f:ee:67:2a:e3:21:a1:83: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:01:67:D2:CE:FD:B5:6C:B5:06:33:9D:FF:D7:A2:57:5C:8B:C2:CC X509v3 Authority Key Identifier: keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2b:a7:e5:59:28:c6:14:08:53:8c:9c:7f:4d:a9:63:fa:13: 4e:ab:5a:f0:f2:8c:1f:d3:32:55:a5:47:ff:2e:41:44:c2:4e: f8:c1:35:b0:ef:7f:1d:55:f4:73:61:96:c5:e9:46:c9:46:17: a1:06:31:9b:71:83:f5:66:75:8f:3d:69:30:92:e4:b7:d1:ce: 37:cc:2e:c9:82:0e:b3:5c:6f:b3:91:9c:09:09:79:2b:6a:31: 6d:9a:4c:4c:c2:a9:d5:4d:61:49:02:7d:4b:19:6e:9b:ea:48: e0:09:82:5a:55:9e:1c:ff:6d:f7:c3:34:27:ce:13:6c:b5:90: 03:b0:f0:a3:6e:d4:0d:07:ee:54:e4:49:21:69:ab:f6:f3:43: 96:1e:62:c0:38:f8:73:fc:86:db:d9:53:23:c0:bd:af:70:a2: 4e:2f:4d:4f:df:ab:9e:b2:00:78:33:3a:89:83:e7:9b:44:af: 4a:44:85:b1:53:a3:92:60:97:2c:fe:8d:21:74:fc:a0:77:92: de:dc:1d:68:4d:12:00:12:24:68:1e:5e:bd:42:e6:ec:3f:a1: 81:09:3e:96:50:7e:23:85:5d:c0:db:38:2c:3a:ce:f8:e3:5d: 36:21:3a:41:ef:e2:fe:01:06:44:e5:ed:6d:42:ca:0c:a2:3c: e7:7a:60:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4RTkxMDBCM0NF QUIzQ0I5RkIwHhcNMjUwODA5MDIxNjQ5WhcNMjUwODE2MDIxNjQ5WjAYMRYwFAYD VQQDEw02ODk2YWY5MS1hMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkDnkNZHbTq3ErR061Ec0P49REKOqBPPw+0bsRhVcZz7ZKNKROb0Ixb+eobg jGhd6tJdvSbJODNugoqYNgLyOKImPDbvZf0LrLQO+ZJ9Wc7rvYVp9wnkI2xks08g uJdaBX6s6fs2IOVo2EiuB7drtpZF6uzJX/3evchIFX1rDyvr/erSm9uzVuSulWo3 ahMSjDOdTFWi7ep/ImAvdLEdjnAfwaNGsT3LKu7yOLX1J6147BkxD08J/Qrb7bhM x/lrBERi03CtMaXALKNabeyrmF/cvTnL2Ar/BevcTUiD8+oUqjrGLazQXm42asVu x15JL+H+txqFX+5nKuMhoYNu+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0BZ9LO /bVstQYznf/Xoldci8LMMB8GA1UdIwQYMBaAFPUSrWY6YzJjVcqNjpEAs86rPLn7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVBRC85NUJFM0JENjFE MzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1tTlZ5bzJPa1FDenpxczh1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSS3RaanBqTW1OVnlvMk9rUUN6enFzOHVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVBRC85NUJFM0JENjFEMzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1t TlZ5bzJPa1FDenpxczh1ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjK6flWSjGFAhTjJx/Talj+hNOq1rw8owf0zJVpUf/LkFEwk74wTWw 738dVfRzYZbF6UbJRhehBjGbcYP1ZnWPPWkwkuS30c43zC7Jgg6zXG+zkZwJCXkr ajFtmkxMwqnVTWFJAn1LGW6b6kjgCYJaVZ4c/233wzQnzhNstZADsPCjbtQNB+5U 5Ekhaav280OWHmLAOPhz/Ibb2VMjwL2vcKJOL01P36uesgB4MzqJg+ebRK9KRIWx U6OSYJcs/o0hdPygd5Le3B1oTRIAEiRoHl69QubsP6GBCT6WUH4jhV3A2zgsOs74 4102ITpB7+L+AQZE5e1tQsoMojznemDA -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:37 2025 by rpki-client