$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: 0yRZ8+uf4uuBgTpQ6uVh7Zv2nQd0v8nF2T5xsDz9rYw= Subject key identifier: 94:AF:4B:FC:5F:09:36:33:B8:F7:EE:42:34:80:C6:E8:23:57:60:DF Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: 9F Signing time: Sat 09 Aug 2025 06:42:58 +0000 Manifest this update: Sat 09 Aug 2025 06:42:58 +0000 Manifest next update: Sat 16 Aug 2025 06:42:58 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: CdrfrOKYLhgAhGpA2d43Cu5YgZSMiPsEv0Suf06+qrw=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: Aug 9 06:42:58 2025 GMT Not After : Aug 16 06:42:58 2025 GMT Subject: CN=6896edf2-d891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:bf:06:9b:d9:2e:e1:6f:79:e5:f8:72:f7:f2: 9d:6a:95:23:c5:f0:d8:c6:49:67:57:a0:44:d5:b3: d7:7e:53:87:e8:e0:b7:79:15:e4:9c:43:19:fc:66: bf:5d:07:3b:d4:3e:d6:5f:5e:6b:34:ee:cd:eb:a6: 10:0c:d3:e5:bf:c7:a4:99:a1:b6:13:ad:b2:88:1e: 88:ed:bf:1f:95:c1:d3:d9:17:0a:1b:cc:8c:89:07: 88:3f:9e:e8:1e:97:6a:99:e4:13:07:6e:61:1d:22: 27:68:e0:19:8b:a1:ba:b4:bc:76:cd:67:7c:bd:fa: 8e:a3:b0:f3:fd:24:a1:bf:07:9d:40:92:7d:d0:6b: b8:a4:71:a7:be:cd:05:55:2b:3b:1b:d6:41:d9:16: b4:01:14:c8:59:3f:5a:e4:02:0e:e2:f5:53:fb:0c: ef:9d:fa:ab:0a:09:1a:b0:d5:70:58:ee:01:aa:c2: 49:51:8f:f7:68:d1:7f:c5:75:69:33:b1:7c:bf:5c: 61:17:7a:81:44:fd:64:79:0d:09:72:9c:26:31:78: da:2d:d9:74:b8:1e:45:f5:87:18:a2:ab:6c:4d:58: 19:90:c4:c7:54:7d:f9:2d:48:1c:ef:d1:fa:2e:f3: a5:8e:7d:5f:d8:02:bd:5c:e1:07:37:11:3c:5c:1b: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AF:4B:FC:5F:09:36:33:B8:F7:EE:42:34:80:C6:E8:23:57:60:DF X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9f:4e:5a:e1:2a:54:a2:f8:1c:2b:89:36:d2:6a:0b:2d:4f: 7b:c8:db:29:b3:4c:54:3c:89:8d:fb:6f:56:9a:9a:5c:9e:a4: 8b:ac:d5:3e:ff:b6:90:a9:19:29:f3:e5:72:2c:b1:a4:2d:88: 6d:a1:b2:82:d5:08:ad:77:00:42:74:41:b6:4a:3e:cb:13:5b: ca:dd:b7:38:d1:1e:ec:7e:e0:f7:cc:ce:74:04:b6:9f:8a:00: a2:9c:3e:5f:ec:8a:80:0e:38:98:5e:d6:bc:b5:54:4a:b6:ac: 85:23:2b:1c:1b:fc:e2:c4:1b:cc:01:5e:25:a4:81:bd:f7:2c: 90:fa:28:5d:b4:60:e2:45:4a:3f:11:1c:49:cd:5d:0e:ed:96: cf:e4:97:c5:14:98:47:d0:63:99:03:91:1f:b2:c5:91:36:65: c2:e7:6d:3d:51:33:38:4c:03:f8:cf:e7:0d:de:53:83:d1:ae: ce:77:0a:fb:ce:bc:9a:0d:ac:3e:0c:bb:b2:d4:4b:c4:53:a6: 34:ff:4d:a5:19:f6:55:c4:1b:d7:86:fb:fd:37:e9:d4:02:f3: 95:64:2d:a8:fe:c4:2f:92:16:4b:db:69:a9:85:25:ac:8e:17: 3c:8d:24:a0:08:a0:48:e9:78:95:e6:64:ce:f5:ee:28:a4:0b: 14:fb:e6:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFNzIxMTAvBgNVBAUTKDczRDkwMDkyNEU3MDE1NDhFNkUzMjAzODgwRjZDMDk3 MkE0QzI5MUEwHhcNMjUwODA5MDY0MjU4WhcNMjUwODE2MDY0MjU4WjAYMRYwFAYD VQQDEw02ODk2ZWRmMi1kODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9b8Gm9ku4W955fhy9/KdapUjxfDYxklnV6BE1bPXflOH6OC3eRXknEMZ/Ga/ XQc71D7WX15rNO7N66YQDNPlv8ekmaG2E62yiB6I7b8flcHT2RcKG8yMiQeIP57o HpdqmeQTB25hHSInaOAZi6G6tLx2zWd8vfqOo7Dz/SShvwedQJJ90Gu4pHGnvs0F VSs7G9ZB2Ra0ARTIWT9a5AIO4vVT+wzvnfqrCgkasNVwWO4BqsJJUY/3aNF/xXVp M7F8v1xhF3qBRP1keQ0JcpwmMXjaLdl0uB5F9YcYoqtsTVgZkMTHVH35LUgc79H6 LvOljn1f2AK9XOEHNxE8XBvSsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSvS/xf CTYzuPfuQjSAxugjV2DfMB8GA1UdIwQYMBaAFHPZAJJOcBVI5uMgOID2wJcqTCka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU3Mi9FNkI0NDkwMjg0 ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZVam00eUE0Z1BiQWx5cE1L Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU3Mi9FNkI0NDkwMjg0ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZV am00eUE0Z1BiQWx5cE1LUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBen05a4SpUovgcK4k20moLLU97yNsps0xUPImN+29WmppcnqSLrNU+ /7aQqRkp8+VyLLGkLYhtobKC1QitdwBCdEG2Sj7LE1vK3bc40R7sfuD3zM50BLaf igCinD5f7IqADjiYXta8tVRKtqyFIyscG/zixBvMAV4lpIG99yyQ+ihdtGDiRUo/ ERxJzV0O7ZbP5JfFFJhH0GOZA5EfssWRNmXC5209UTM4TAP4z+cN3lOD0a7Odwr7 zryaDaw+DLuy1EvEU6Y0/02lGfZVxBvXhvv9N+nUAvOVZC2o/sQvkhZL22mphSWs jhc8jSSgCKBI6XiV5mTO9e4opAsU++Zk -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:49 2025 by rpki-client