$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft File: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json) Hash identifier: iQnY0GMTCh4f8aesI2Br3DmWyfpOO3UsARKtWrcDLeY= Subject key identifier: 5D:7D:3E:D5:B5:66:6B:A6:49:4A:AB:3C:26:EB:67:A8:D5:9A:6D:0C Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Certificate serial: 076A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft Manifest number: 0765 Signing time: Fri 08 Aug 2025 21:59:12 +0000 Manifest this update: Fri 08 Aug 2025 21:59:12 +0000 Manifest next update: Fri 15 Aug 2025 21:59:12 +0000 Files and hashes: 1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: 8ngMlggbVzb7HN7C9KfenTQwresQFuWosneJ98znyfA=) 2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: oXfgRMCkFYhKUKORBUUeo77MRVn7Mx2xxFkJ1oK4WsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1898 (0x76a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Validity Not Before: Aug 8 21:59:12 2025 GMT Not After : Aug 15 21:59:12 2025 GMT Subject: CN=68967330-48d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:ad:51:77:19:bf:fc:31:ce:eb:58:e1:39: 76:0a:12:25:e2:91:0e:1e:93:08:25:a0:78:90:ff: f2:e1:27:e2:bf:01:70:8d:37:df:37:ea:c6:dc:fe: ac:b0:0e:c8:48:06:d2:1a:ae:5e:03:20:85:32:6e: f8:62:36:ee:fd:89:35:52:3d:54:7d:c4:ee:57:ea: 2c:fb:e7:ee:15:db:ad:76:99:02:b0:14:21:cb:0e: 12:95:01:62:48:59:ff:10:85:7d:68:53:f8:a4:8e: 08:63:23:b2:12:4a:67:22:af:2d:4f:32:65:22:33: 26:df:e5:4f:ae:80:b7:a3:ac:6e:02:f1:a5:6c:72: 06:ff:c0:f1:08:78:7f:48:fd:35:d7:51:8d:39:3f: f0:8a:bd:58:81:78:f9:05:0a:79:3d:4c:1e:55:e7: 90:dd:1b:d3:be:9d:77:80:8d:dd:2a:99:ca:d7:a7: eb:7d:b8:c8:bd:8e:b2:35:f7:1c:b2:49:35:bc:8a: 99:9f:41:b5:b3:ed:4a:f0:62:e0:a1:ec:2c:03:1e: c4:0c:e9:ae:93:ed:cf:3f:71:16:2d:2b:70:62:bf: 6b:13:55:99:b6:fd:1b:bd:d0:79:50:35:c5:45:4d: 18:05:ab:09:68:2b:1b:63:71:fb:62:4e:b2:c9:1d: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:3E:D5:B5:66:6B:A6:49:4A:AB:3C:26:EB:67:A8:D5:9A:6D:0C X509v3 Authority Key Identifier: keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:72:1c:24:c7:ed:7f:e6:a7:bf:a7:09:21:8a:da:98:5e:a5: df:c1:46:04:eb:b6:11:8e:57:78:eb:85:b0:6a:e1:b5:68:c0: f8:6f:71:dd:5a:8c:be:2e:d7:05:f7:5f:31:23:2d:3d:09:6b: 6f:a2:29:36:71:94:6c:cb:0c:12:d3:c5:05:a4:3c:04:e1:10: 3b:a6:76:d9:f2:77:38:ca:df:dd:ec:b8:59:74:c0:f9:2d:ea: 5f:dd:04:e1:a5:dd:55:4b:8d:a6:34:a8:1e:20:d9:2a:dc:d1: a5:80:78:84:bc:50:8f:e9:c2:05:b0:90:41:2f:49:c2:7f:b2: 1a:d8:36:3e:80:c2:b1:52:22:06:04:d0:3c:ff:2a:7d:a9:e0: a7:b9:16:96:4c:27:a0:8f:a0:ee:ac:2a:30:73:95:70:e9:87: 8d:45:a0:18:d7:e5:98:e7:ad:a4:1e:59:31:12:b7:49:b0:f3: fa:95:61:eb:9e:4c:9c:5b:8b:ff:b3:f7:7d:7d:46:0f:9a:9a: ce:21:83:c8:32:91:ab:42:bc:ce:24:48:05:3b:51:ae:62:59: ad:cb:f3:18:eb:d8:ef:fc:93:1c:79:4d:c3:56:3f:46:17:f3: 8c:dd:6e:cb:3c:47:ff:99:3f:74:2a:b6:32:81:bd:2f:22:7e: 1f:ca:d7:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzNkUxMTAvBgNVBAUTKEY3MzQzMzNCNUJCNTRGQkE4ODJCMjMyRkQyNTMyNTJF N0VBMEJCQzAwHhcNMjUwODA4MjE1OTEyWhcNMjUwODE1MjE1OTEyWjAYMRYwFAYD VQQDEw02ODk2NzMzMC00OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8QqtUXcZv/wxzutY4Tl2ChIl4pEOHpMIJaB4kP/y4SfivwFwjTffN+rG3P6s sA7ISAbSGq5eAyCFMm74Yjbu/Yk1Uj1UfcTuV+os++fuFdutdpkCsBQhyw4SlQFi SFn/EIV9aFP4pI4IYyOyEkpnIq8tTzJlIjMm3+VProC3o6xuAvGlbHIG/8DxCHh/ SP0111GNOT/wir1YgXj5BQp5PUweVeeQ3RvTvp13gI3dKpnK16frfbjIvY6yNfcc skk1vIqZn0G1s+1K8GLgoewsAx7EDOmuk+3PP3EWLStwYr9rE1WZtv0bvdB5UDXF RU0YBasJaCsbY3H7Yk6yyR28ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF19PtW1 ZmumSUqrPCbrZ6jVmm0MMB8GA1UdIwQYMBaAFPc0MztbtU+6iCsjL9JTJS5+oLvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTM2RS9BNkQ3NDhGQTI5 RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3cUlLeU12MGxNbExuNmd1 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl6UXpPMXUxVDdxSUt5TXYwbE1sTG42Z3U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTM2RS9BNkQ3NDhGQTI5RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3 cUlLeU12MGxNbExuNmd1OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/chwkx+1/5qe/pwkhitqYXqXfwUYE67YRjld464WwauG1aMD4b3Hd Woy+LtcF918xIy09CWtvoik2cZRsywwS08UFpDwE4RA7pnbZ8nc4yt/d7LhZdMD5 Lepf3QThpd1VS42mNKgeINkq3NGlgHiEvFCP6cIFsJBBL0nCf7Ia2DY+gMKxUiIG BNA8/yp9qeCnuRaWTCegj6DurCowc5Vw6YeNRaAY1+WY562kHlkxErdJsPP6lWHr nkycW4v/s/d9fUYPmprOIYPIMpGrQrzOJEgFO1GuYlmty/MY69jv/JMceU3DVj9G F/OM3W7LPEf/mT90KrYygb0vIn4fytff -----END CERTIFICATE-----Generated at Sun Aug 10 21:01:55 2025 by rpki-client