$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: fy/mmiy5QVmeMNawkjEd3Z4l2F+onPoZJQcJ4DxVUc8= Subject key identifier: A8:6C:2B:56:B4:5F:29:C6:DA:E5:9A:7A:34:E7:BF:04:F8:77:F5:E3 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0C86 Signing time: Wed 06 Aug 2025 18:24:41 +0000 Manifest this update: Wed 06 Aug 2025 18:24:40 +0000 Manifest next update: Wed 13 Aug 2025 18:24:40 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: NBkDqAFp2SoMTxKm+FINLRpegvsiEBKZsvySyvHtA8I=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Aug 6 18:24:40 2025 GMT Not After : Aug 13 18:24:40 2025 GMT Subject: CN=68939de8-1d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:c3:33:4f:fa:14:4c:80:45:4d:3c:36:84: 07:86:c3:38:3a:4f:17:64:dc:01:ea:e5:90:62:85: f3:4c:f9:83:86:4d:13:36:89:8e:0a:9a:20:55:27: ea:a1:53:ce:22:99:10:c9:2f:40:ff:e0:0c:df:4b: cd:71:c5:bb:5c:4d:ee:89:3c:55:15:37:78:8f:18: 94:9b:d6:0e:60:3f:b7:14:59:5b:65:1c:e6:8c:b0: 69:8d:a8:ac:c6:c7:37:1c:51:03:d0:3a:20:a6:57: 07:7a:ff:47:93:cc:62:4a:2e:ec:1f:39:b4:a3:31: ca:cc:96:1f:bc:2f:4d:fc:c7:c2:a5:4a:a3:d4:ec: 31:85:a6:e6:e7:51:a2:c8:a9:f2:87:17:72:3d:8a: e8:11:87:ab:b3:59:d7:95:d1:52:e0:9b:87:d9:b6: b4:5d:ba:8e:c9:3b:b3:5a:d8:ec:52:e9:63:b7:72: 26:72:35:ff:81:c3:0e:89:a3:03:8e:c7:61:d2:fb: 0a:d4:7a:b9:07:6e:d5:9a:65:a6:59:ab:2f:c4:b7: f6:6d:e8:5a:48:5b:72:5c:31:b9:e3:52:0f:0f:f9: de:da:eb:28:9d:8c:0f:3d:6e:8e:d1:49:40:3e:62: 0c:25:b9:63:7c:c8:60:e7:25:94:30:6f:ae:c8:7b: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6C:2B:56:B4:5F:29:C6:DA:E5:9A:7A:34:E7:BF:04:F8:77:F5:E3 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:d9:ca:6e:19:12:43:62:92:dd:5d:6b:6a:94:88:46:0a:fa: 75:ef:9f:79:9d:b9:26:48:9a:7f:2f:a1:6f:61:e9:4b:69:97: be:cd:d6:97:f6:bf:a8:ed:29:93:0a:c8:c9:23:13:35:d5:2e: 6b:ba:81:60:eb:44:f8:9d:5e:f9:dc:42:f6:ee:de:d5:03:bb: 51:35:8d:23:e9:97:72:49:b0:18:9c:58:a5:91:2b:74:04:72: 5d:6b:f4:49:a4:00:25:8a:1e:db:83:9b:54:c4:5a:48:df:34: 18:2d:9d:76:d6:3d:bd:f4:5e:9d:7d:df:1f:62:a7:60:57:08: ee:cd:b5:ee:72:15:5b:da:44:99:b4:66:c2:57:bf:e8:74:f6: a5:52:c8:d3:3e:f7:73:d0:0d:12:64:e9:05:69:5f:77:4e:24: e8:fc:1d:12:6b:6c:5d:30:fd:f6:f5:60:d9:b9:36:39:2a:ef: 6e:d3:71:80:f7:81:5a:de:e6:9e:7d:38:04:64:56:82:8c:ef: ee:4c:00:00:c6:c5:38:6a:e7:ca:7f:79:8d:5b:b2:6d:52:75: 08:20:be:4c:52:0b:99:d3:fa:cf:e1:5f:a3:1e:f7:d6:81:ff: 02:71:02:19:f4:9c:af:48:af:63:2e:53:89:6e:6d:00:d5:e9: a2:13:32:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUwODA2MTgyNDQwWhcNMjUwODEzMTgyNDQwWjAYMRYwFAYD VQQDEw02ODkzOWRlOC0xZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BDDM0/6FEyARU08NoQHhsM4Ok8XZNwB6uWQYoXzTPmDhk0TNomOCpogVSfq oVPOIpkQyS9A/+AM30vNccW7XE3uiTxVFTd4jxiUm9YOYD+3FFlbZRzmjLBpjais xsc3HFED0DogplcHev9Hk8xiSi7sHzm0ozHKzJYfvC9N/MfCpUqj1Owxhabm51Gi yKnyhxdyPYroEYers1nXldFS4JuH2ba0XbqOyTuzWtjsUuljt3ImcjX/gcMOiaMD jsdh0vsK1Hq5B27VmmWmWasvxLf2behaSFtyXDG541IPD/ne2usonYwPPW6O0UlA PmIMJbljfMhg5yWUMG+uyHt3cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhsK1a0 XynG2uWaejTnvwT4d/XjMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDI2cpuGRJDYpLdXWtqlIhGCvp17595nbkmSJp/L6FvYelLaZe+zdaX 9r+o7SmTCsjJIxM11S5ruoFg60T4nV753EL27t7VA7tRNY0j6ZdySbAYnFilkSt0 BHJda/RJpAAlih7bg5tUxFpI3zQYLZ121j299F6dfd8fYqdgVwjuzbXuchVb2kSZ tGbCV7/odPalUsjTPvdz0A0SZOkFaV93TiTo/B0Sa2xdMP329WDZuTY5Ku9u03GA 94Fa3uaefTgEZFaCjO/uTAAAxsU4aufKf3mNW7JtUnUIIL5MUguZ0/rP4V+jHvfW gf8CcQIZ9JyvSK9jLlOJbm0A1emiEzIW -----END CERTIFICATE-----Generated at Thu Aug 7 04:01:23 2025 by rpki-client