$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft File: 9h2bowrjVcgD-A3M8sQV3gB9eVM.mft (raw, json) Hash identifier: 5QeKlWO+mr/29x38jIkphivcULD6dqN/s3j7ruIdUZI= Subject key identifier: 7F:BF:BA:7C:56:CE:32:B6:B8:1D:44:F1:33:94:65:24:49:D0:9C:50 Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 Certificate issuer: /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953 Certificate serial: 08EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft Manifest number: 08CF Signing time: Fri 08 Aug 2025 20:50:38 +0000 Manifest this update: Fri 08 Aug 2025 20:50:37 +0000 Manifest next update: Fri 15 Aug 2025 20:50:37 +0000 Files and hashes: 1: 9h2bowrjVcgD-A3M8sQV3gB9eVM.crl (hash: bmQauQvHJqeGgh3XDYLYSaWCMOjkX6FY0CJJO5XhN9c=) 2: F84E14F6F7A411EC88E84259C4F9AE02.roa (hash: P/auEJgutUVl8dFubgi2n2lxk6hlWtNvdq3SLvKI4fQ=) 3: 4652763C54D711F0BE7D9523C4F9AE02.roa (hash: lV6WFCqQt9admURsFpKQ1GE7MVk7UBnghFNSUG+Idv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2282 (0x8ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC510, serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953 Validity Not Before: Aug 8 20:50:37 2025 GMT Not After : Aug 15 20:50:37 2025 GMT Subject: CN=6896631e-e430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e0:82:a8:25:64:cb:af:5e:59:76:73:55:ab: 48:01:b0:0d:d9:86:60:79:bd:37:57:d4:49:d8:bf: 0b:3e:03:f7:d8:8c:9f:27:dc:f1:6e:1d:36:e4:69: f4:f7:ad:6f:0a:b8:7b:72:c1:4f:dc:e0:4f:8e:d4: aa:91:4a:fb:1f:7f:93:6a:58:ac:73:4b:4a:e8:87: d7:08:b6:b7:95:16:4a:dc:40:b6:56:ca:6d:92:b2: a4:ac:68:b5:2f:93:5f:f2:5b:95:50:4f:62:ce:c0: c9:0e:4c:64:ba:1f:6c:79:7a:94:c4:9f:28:e2:3c: 17:9a:40:2f:05:01:98:3b:31:db:2c:17:6e:e6:bb: e6:2f:b9:f0:f4:12:2f:f4:40:8d:5e:ae:a3:2c:d8: 42:c5:0d:64:cc:65:dc:26:6e:7f:56:85:54:e9:9d: c4:89:66:86:db:cb:9b:9d:5b:a5:e8:50:79:ee:29: f2:07:e7:f1:f7:27:4f:fd:78:1c:d3:84:26:40:00: d9:56:e1:ae:e2:99:ac:fc:92:5f:76:c5:44:dc:e7: 72:35:ab:7f:20:6c:90:c8:6f:05:03:c4:84:4b:de: 7d:de:17:65:b9:2d:a8:88:c1:77:4c:9b:b9:b6:1a: cd:2f:81:b3:89:3c:41:a2:66:53:35:30:95:8f:fc: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BF:BA:7C:56:CE:32:B6:B8:1D:44:F1:33:94:65:24:49:D0:9C:50 X509v3 Authority Key Identifier: keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:02:65:c7:6d:c5:04:81:40:8b:4e:f9:1b:7e:93:6b:2b:97: 8e:a2:2f:4f:8f:47:5d:c2:5f:04:1f:ad:c2:f6:38:60:49:0e: a9:dc:79:8c:fe:5f:86:1b:12:f4:f0:36:37:95:3b:00:d0:e4: 36:6d:74:2f:22:dd:eb:bb:bb:b2:e1:bc:cc:5d:a7:27:cb:96: 3a:cb:2d:a5:b0:ad:49:aa:a5:91:b2:94:64:e3:b8:47:e9:16: 65:f4:6c:71:ce:fe:52:74:95:8a:4e:7e:63:2b:4d:63:1e:30: ff:b3:e7:b1:7d:0d:7c:e2:b3:b1:e5:cc:45:2e:59:b9:73:80: a7:d6:e0:b7:a8:f7:3c:1a:08:91:79:3e:fd:f6:09:39:53:b5: 29:b8:d6:60:29:97:84:1d:83:5a:87:f1:e7:a5:90:34:68:a5: b9:8d:fe:b2:3b:ab:06:3f:6f:52:53:0a:44:78:14:76:4f:6f: ab:fd:9c:f2:3a:2c:70:63:11:e7:c0:77:7a:24:bf:22:38:7e: a0:b1:d5:61:45:eb:cc:f8:6a:28:8d:f5:c9:3b:38:27:09:3b: ae:f8:e1:86:7d:56:b4:02:ac:9a:3f:38:6d:d1:9f:54:fc:fe: 6b:0a:72:e8:21:95:28:d1:4e:35:6e:41:46:b8:8c:d0:e2:06: 3d:d3:75:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1MTAxMTAvBgNVBAUTKEY2MUQ5QkEzMEFFMzU1QzgwM0Y4MERDQ0YyQzQxNURF MDA3RDc5NTMwHhcNMjUwODA4MjA1MDM3WhcNMjUwODE1MjA1MDM3WjAYMRYwFAYD VQQDEw02ODk2NjMxZS1lNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOCCqCVky69eWXZzVatIAbAN2YZgeb03V9RJ2L8LPgP32IyfJ9zxbh025Gn0 961vCrh7csFP3OBPjtSqkUr7H3+Talisc0tK6IfXCLa3lRZK3EC2VsptkrKkrGi1 L5Nf8luVUE9izsDJDkxkuh9seXqUxJ8o4jwXmkAvBQGYOzHbLBdu5rvmL7nw9BIv 9ECNXq6jLNhCxQ1kzGXcJm5/VoVU6Z3EiWaG28ubnVul6FB57inyB+fx9ydP/Xgc 04QmQADZVuGu4pms/JJfdsVE3OdyNat/IGyQyG8FA8SES9593hdluS2oiMF3TJu5 thrNL4GziTxBomZTNTCVj/wHbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+/unxW zjK2uB1E8TOUZSRJ0JxQMB8GA1UdIwQYMBaAFPYdm6MK41XIA/gNzPLEFd4AfXlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzUxMC9FQzMxRTI1OEJE MTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZjZ0QtQTNNOHNRVjNnQjll Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloMmJvd3JqVmNnRC1BM004c1FWM2dCOWVWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzUxMC9FQzMxRTI1OEJEMTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZj Z0QtQTNNOHNRVjNnQjllVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8AmXHbcUEgUCLTvkbfpNrK5eOoi9Pj0ddwl8EH63C9jhgSQ6p3HmM /l+GGxL08DY3lTsA0OQ2bXQvIt3ru7uy4bzMXacny5Y6yy2lsK1JqqWRspRk47hH 6RZl9Gxxzv5SdJWKTn5jK01jHjD/s+exfQ184rOx5cxFLlm5c4Cn1uC3qPc8GgiR eT799gk5U7UpuNZgKZeEHYNah/HnpZA0aKW5jf6yO6sGP29SUwpEeBR2T2+r/Zzy OixwYxHnwHd6JL8iOH6gsdVhRevM+GoojfXJOzgnCTuu+OGGfVa0AqyaPzht0Z9U /P5rCnLoIZUo0U41bkFGuIzQ4gY903Uw -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:28 2025 by rpki-client