$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json) Hash identifier: VrVh8e/HfeaUFmypwxbCvfYtAaFR60HghHuiLbp8U4E= Subject key identifier: 07:29:D5:7B:F3:C5:B5:07:5B:45:53:0D:69:E0:CB:03:B3:E5:65:CF Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft Manifest number: 49 Signing time: Sun 03 Aug 2025 07:47:46 +0000 Manifest this update: Sun 03 Aug 2025 07:47:45 +0000 Manifest next update: Sun 10 Aug 2025 07:47:45 +0000 Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: 4ymOwXrHBXz/IU7Tdqf8gkJfbrmGQLqVRaoGcc/4Nu8=) 2: 16B651C6048411F094895C27C4F9AE02.roa (hash: OgiLwS+wM43XPTUlA+FtXtKx1I6fbzOSjezQMzWQe7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Validity Not Before: Aug 3 07:47:45 2025 GMT Not After : Aug 10 07:47:45 2025 GMT Subject: CN=688f1421-e04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:68:5d:4f:72:f4:f9:7d:d0:d8:2b:76:1a: fb:88:de:40:e1:3d:31:23:01:c8:8e:fb:92:71:3d: 77:87:1d:82:6e:eb:d9:e7:ea:f5:78:b3:da:70:39: 8a:de:30:9e:bf:e0:a5:cb:9d:32:33:2d:e1:f0:26: 8f:e6:03:2e:e0:67:68:cf:30:6e:19:ab:1d:2a:47: 1c:a8:20:f0:44:0d:d7:cc:db:ff:20:f8:40:64:d0: 21:42:2e:2d:84:85:38:1e:9b:fc:17:22:a9:f1:6b: 68:e0:88:9b:35:ec:86:6f:8e:be:2d:29:e1:f6:b6: f1:98:c1:07:32:c0:7f:76:0d:cf:14:68:27:3e:74: fe:fc:0f:6a:9b:9e:98:e7:4d:ce:c1:e0:00:36:ea: fd:8d:46:f8:40:7d:5a:43:e9:ad:e9:5d:8c:c2:87: 02:fa:9c:95:2b:61:8f:49:8f:1c:8b:5a:17:f3:4e: 94:5b:1f:ef:56:31:f4:e0:50:8d:1a:b4:93:ad:43: 1a:ad:0f:f0:4f:e5:da:49:96:ea:3a:d4:12:f7:f8: 53:9f:84:a4:13:8b:30:d9:80:cb:3b:41:9d:d9:b4: cd:2d:05:ba:ca:1c:c7:39:a9:48:67:5c:d2:98:d5: 63:d6:6c:55:af:0b:62:b0:6c:3e:a2:a1:07:5c:3c: b2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:29:D5:7B:F3:C5:B5:07:5B:45:53:0D:69:E0:CB:03:B3:E5:65:CF X509v3 Authority Key Identifier: keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:58:e8:22:67:d5:08:e5:37:b4:37:db:d5:2c:a4:b0:87:3f: cb:b0:79:3c:44:c2:d0:64:61:d2:24:9b:5a:a9:4f:3a:79:41: e5:6c:10:8a:d1:32:7a:6b:aa:71:08:a5:b0:c4:7a:01:d6:bb: 49:e2:37:d4:1d:78:a7:d7:f2:b0:c8:a6:d8:99:a1:1e:c0:aa: a5:c8:63:35:ac:76:d6:98:56:5a:25:af:0b:a3:c2:97:d4:24: af:4d:2c:a3:13:44:bb:11:1a:22:76:08:4b:b3:85:62:5d:d2: 3c:0a:6c:e4:20:08:9a:3d:98:c1:f1:e2:ed:ea:d5:ad:87:02: 76:6e:0d:1c:06:15:a5:ed:9f:db:a3:c4:2d:24:8b:07:c3:8a: 86:21:72:0d:0a:39:51:32:d6:9e:51:3d:d5:9d:4a:b4:82:64: 23:0a:5e:84:76:6e:6b:32:06:f3:33:ad:0a:da:ba:ce:71:fb: 97:9a:8e:88:68:96:2d:58:e9:10:29:fb:dd:ad:7e:41:7c:6a: 10:d8:77:03:c9:68:c8:f1:cd:7a:f3:3b:38:75:34:28:61:ff: 8f:a4:ac:d1:97:f1:e3:75:0b:ba:ae:0f:03:3a:6b:b8:37:0d: 65:bd:d5:53:e0:56:39:6c:8a:4a:e7:e0:52:87:f1:dc:84:f7: 18:2c:40:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTVGOTExMC8GA1UEBRMoRjVCQkFFODVDNkZGQjM2MENFRDQwODBEMTEzNkEyQkZE M0E5N0ZEMTAeFw0yNTA4MDMwNzQ3NDVaFw0yNTA4MTAwNzQ3NDVaMBgxFjAUBgNV BAMTDTY4OGYxNDIxLWUwNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTb2hdT3L0+X3Q2Ct2GvuI3kDhPTEjAciO+5JxPXeHHYJu69nn6vV4s9pwOYre MJ6/4KXLnTIzLeHwJo/mAy7gZ2jPMG4Zqx0qRxyoIPBEDdfM2/8g+EBk0CFCLi2E hTgem/wXIqnxa2jgiJs17IZvjr4tKeH2tvGYwQcywH92Dc8UaCc+dP78D2qbnpjn Tc7B4AA26v2NRvhAfVpD6a3pXYzChwL6nJUrYY9JjxyLWhfzTpRbH+9WMfTgUI0a tJOtQxqtD/BP5dpJluo61BL3+FOfhKQTizDZgMs7QZ3ZtM0tBbrKHMc5qUhnXNKY 1WPWbFWvC2KwbD6ioQdcPLLhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBynVe/PF tQdbRVMNaeDLA7PlZc8wHwYDVR0jBBgwFoAU9buuhcb/s2DO1AgNETaiv9Opf9Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNUY5LzY5MjBDNzRBMDQ4 MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJETzFBZ05FVGFpdjlPcGY5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWJ1dWhjYl9zMkRPMUFnTkVUYWl2OU9wZjlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NUY5LzY5MjBDNzRBMDQ4MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJE TzFBZ05FVGFpdjlPcGY5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBY6CJn1QjlN7Q329UspLCHP8uweTxEwtBkYdIkm1qpTzp5QeVsEIrR MnprqnEIpbDEegHWu0niN9QdeKfX8rDIptiZoR7AqqXIYzWsdtaYVlolrwujwpfU JK9NLKMTRLsRGiJ2CEuzhWJd0jwKbOQgCJo9mMHx4u3q1a2HAnZuDRwGFaXtn9uj xC0kiwfDioYhcg0KOVEy1p5RPdWdSrSCZCMKXoR2bmsyBvMzrQraus5x+5eajoho li1Y6RAp+92tfkF8ahDYdwPJaMjxzXrzOzh1NChh/4+krNGX8eN1C7quDwM6a7g3 DWW91VPgVjlsikrn4FKH8dyE9xgsQIY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:38 2025 by rpki-client