$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: UVVcF5A2AdKWwFIcy/o8fob4T/IUVdTaEOHKqzvZwxs= Subject key identifier: 4E:7E:D7:07:22:2F:B1:4C:B1:4A:11:63:AD:EB:71:3B:71:D9:AD:CD Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0C6F Signing time: Fri 08 Aug 2025 18:36:37 +0000 Manifest this update: Fri 08 Aug 2025 18:36:37 +0000 Manifest next update: Fri 15 Aug 2025 18:36:37 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: JhqrcJ/7ADWCoC9vNXc9TOJ6w7RnUmcf4G7Cu5haVuw=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lPRimtAIP991qjg2zYQ9MB+u2MSznOVIg7X2f5y/SnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: Aug 8 18:36:37 2025 GMT Not After : Aug 15 18:36:37 2025 GMT Subject: CN=689643b5-f457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7d:0f:a5:fd:eb:cb:08:61:e3:0b:10:66:30: fd:1b:d5:c3:38:98:95:ff:cf:0d:24:06:9a:81:2b: a7:79:db:34:dc:71:11:df:e5:af:53:16:c7:c2:90: 4d:ad:73:45:46:79:83:c7:86:95:dc:51:38:b5:4f: 22:fe:6e:32:95:c3:48:ac:f8:ec:34:f7:e0:59:c4: 23:e2:aa:34:5e:03:ae:fd:6e:fb:d5:b4:c1:1c:42: c0:51:e5:4b:5a:3f:33:7c:30:98:3c:ae:f5:8e:8f: a8:9f:82:fe:72:53:0d:1c:ee:d9:61:c4:8d:a0:14: d8:12:bf:9c:75:3d:5d:b1:d6:7f:7e:2b:50:ab:50: 31:a4:b1:46:34:86:14:8c:5d:6f:ac:5a:41:11:31: 0c:55:67:e8:88:03:cd:1a:e9:52:d1:9a:92:7a:c2: 94:54:41:66:e1:82:5b:c3:4c:97:0f:a3:d1:00:70: a1:39:22:d3:38:23:3a:15:98:af:bb:f8:8c:06:4a: 63:5d:3a:ef:74:4b:eb:9d:a2:14:f7:8e:80:00:3e: 79:48:70:bc:b7:69:e4:55:ed:29:77:a2:2c:8f:68: 05:d3:94:51:d9:96:dd:e0:f8:7c:ed:aa:e6:f6:fd: 84:c1:0c:dc:6b:5b:1f:40:72:27:4e:56:1e:e9:fb: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7E:D7:07:22:2F:B1:4C:B1:4A:11:63:AD:EB:71:3B:71:D9:AD:CD X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:87:6f:d1:91:fc:0e:58:e7:41:c6:08:9a:64:32:a6:de:bc: c9:9e:81:f6:ce:ac:76:7c:66:e6:ab:f9:3e:fb:82:0f:46:e1: a2:3b:02:aa:05:47:51:9e:25:7a:6d:97:6f:f4:a9:1a:a2:82: 82:21:90:5d:4e:3a:9e:96:36:61:67:07:3e:1a:24:cf:b7:0e: 56:36:9f:3d:7f:8b:30:dc:60:35:ce:a6:d9:3a:ec:5e:89:50: 54:52:7a:a8:10:99:e7:80:54:00:e1:31:c3:a4:f4:29:4c:77: 01:53:5d:5d:7d:80:8e:bb:cb:b7:7f:50:3a:43:f2:f2:6f:87: 3a:b2:6a:8d:4e:8e:6e:96:40:d8:23:5a:c5:b5:69:ef:14:7e: 3a:7b:80:4d:11:e6:d2:27:fb:cd:f4:4e:d0:c0:a0:9b:90:83: a1:e6:f7:33:92:5a:e2:d8:db:97:87:05:60:e6:e6:4b:5b:df: 7c:1d:8a:b1:3f:e6:e5:50:bc:ce:2c:fc:f5:d7:9e:95:26:72: cc:88:3b:59:12:36:c8:9e:75:0c:f7:2e:79:33:8b:4c:f9:59: c7:31:0b:f9:3b:bd:dd:0e:74:b9:6d:49:70:ce:26:09:98:43: d8:22:e2:7d:6c:21:82:e7:d3:89:cd:b4:dd:2b:3d:3e:06:56: 08:bb:dc:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjUwODA4MTgzNjM3WhcNMjUwODE1MTgzNjM3WjAYMRYwFAYD VQQDEw02ODk2NDNiNS1mNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7n0Ppf3rywhh4wsQZjD9G9XDOJiV/88NJAaagSuneds03HER3+WvUxbHwpBN rXNFRnmDx4aV3FE4tU8i/m4ylcNIrPjsNPfgWcQj4qo0XgOu/W771bTBHELAUeVL Wj8zfDCYPK71jo+on4L+clMNHO7ZYcSNoBTYEr+cdT1dsdZ/fitQq1AxpLFGNIYU jF1vrFpBETEMVWfoiAPNGulS0ZqSesKUVEFm4YJbw0yXD6PRAHChOSLTOCM6FZiv u/iMBkpjXTrvdEvrnaIU946AAD55SHC8t2nkVe0pd6Isj2gF05RR2Zbd4Ph87arm 9v2EwQzca1sfQHInTlYe6fvHpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5+1wci L7FMsUoRY63rcTtx2a3NMB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCh2/RkfwOWOdBxgiaZDKm3rzJnoH2zqx2fGbmq/k++4IPRuGiOwKq BUdRniV6bZdv9KkaooKCIZBdTjqeljZhZwc+GiTPtw5WNp89f4sw3GA1zqbZOuxe iVBUUnqoEJnngFQA4THDpPQpTHcBU11dfYCOu8u3f1A6Q/Lyb4c6smqNTo5ulkDY I1rFtWnvFH46e4BNEebSJ/vN9E7QwKCbkIOh5vczklri2NuXhwVg5uZLW998HYqx P+blULzOLPz1156VJnLMiDtZEjbInnUM9y55M4tM+VnHMQv5O73dDnS5bUlwziYJ mEPYIuJ9bCGC59OJzbTdKz0+BlYIu9wJ -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:29 2025 by rpki-client