$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: VjW5UzAX8gJV78m5esMrIDh5Gf5CU0IIZerUi0OJXHw= Subject key identifier: 16:19:81:34:FD:EA:D5:59:87:2F:A7:78:A4:5D:7A:8C:99:ED:95:97 Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 34BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 34B4 Signing time: Sun 10 Aug 2025 14:47:23 +0000 Manifest this update: Sun 10 Aug 2025 14:47:22 +0000 Manifest next update: Sun 17 Aug 2025 14:47:22 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: 5ZVGwgXtiUtUQnm5Gty66I89Ofq6vwiqZSr+Nr8OIb0=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: t/NnMy3xpmssx9DBTqRefxAqemELZw1L5Qwj8l5jaiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: Aug 10 14:47:22 2025 GMT Not After : Aug 17 14:47:22 2025 GMT Subject: CN=6898b0fb-f7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:24:71:8f:66:96:18:b2:e3:b4:01:3c:71: e2:fb:39:b7:e6:bc:61:d4:e1:84:57:2c:58:8d:d7: 76:2b:0d:aa:45:6d:35:fa:ba:85:81:a5:f7:55:db: 9e:06:58:2b:50:cf:f3:82:b2:88:c8:29:75:34:d4: bc:87:6e:be:11:bc:a0:25:b0:92:b2:7e:15:29:63: ab:4c:67:50:f0:76:42:74:a6:19:f5:a9:40:d7:d6: 85:b7:47:13:ff:94:09:bd:d9:27:a7:dd:f4:db:6a: 57:13:54:26:54:73:f8:74:dd:f0:cb:e8:ef:2b:74: 55:25:eb:06:b9:95:d9:b1:4e:c6:80:4b:93:04:4f: f2:2b:27:f3:6d:9b:83:c7:b6:c7:0d:73:bf:b1:62: e9:2f:27:d4:fb:0d:59:5d:4f:47:9f:73:70:2d:0a: 69:b8:88:e5:10:cb:8f:64:4a:e7:80:dc:b3:43:5a: 19:28:4b:86:5e:11:81:27:07:d8:37:f3:59:cb:35: 6f:ac:a3:af:ef:21:de:6b:46:71:4d:77:80:42:af: 7e:8f:51:fb:45:cc:64:97:e3:c7:aa:6b:ed:ab:df: 13:5b:ea:2b:22:40:4d:9a:39:79:41:4c:f4:43:80: 47:df:37:e4:a3:b3:ff:53:ca:fc:69:a0:a7:a2:c3: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:19:81:34:FD:EA:D5:59:87:2F:A7:78:A4:5D:7A:8C:99:ED:95:97 X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:71:7f:42:9f:2f:d4:d6:c3:43:d0:65:ff:53:34:89:4b:9e: b6:25:22:76:ca:41:22:87:56:7a:1f:89:82:0d:3e:51:76:64: b2:72:1b:63:40:65:e2:98:5f:d8:56:4f:ee:32:1e:d0:5a:77: 56:d6:85:c4:bc:fa:f5:c3:bd:b4:13:99:b7:18:c8:15:4e:53: 72:ae:22:09:2c:98:dc:bf:43:b8:9b:10:fd:f4:4d:9f:d7:78: bf:68:c3:18:58:fa:64:db:08:aa:60:e4:00:7f:f4:6d:f3:f2: 48:97:0c:00:88:bf:04:83:0a:1d:06:b7:c2:c6:28:94:07:d3: c1:da:2d:f1:22:fa:40:a1:8b:89:d3:71:95:06:f6:a8:30:bd: 9c:03:e2:47:ce:e5:3d:cb:c4:89:19:80:c3:eb:4e:bd:ca:fb: 4b:82:20:97:6c:bb:99:f8:42:2d:64:e5:d1:98:35:d2:7c:85: 2a:d2:37:23:aa:83:c1:f1:ff:51:ad:c0:bc:bf:c7:26:d5:f3: b1:1d:3a:99:99:78:9f:30:94:2c:41:97:9e:c5:5f:79:a7:4a: 9a:a1:0f:cf:65:4e:83:b5:d6:56:3d:04:b9:92:14:39:af:89: b3:af:9e:b2:83:28:ba:af:4e:ed:38:ba:30:5a:8f:ae:68:ec: 36:15:5a:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjUwODEwMTQ0NzIyWhcNMjUwODE3MTQ0NzIyWjAYMRYwFAYD VQQDEw02ODk4YjBmYi1mN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcMkcY9mlhiy47QBPHHi+zm35rxh1OGEVyxYjdd2Kw2qRW01+rqFgaX3Vdue BlgrUM/zgrKIyCl1NNS8h26+EbygJbCSsn4VKWOrTGdQ8HZCdKYZ9alA19aFt0cT /5QJvdknp93022pXE1QmVHP4dN3wy+jvK3RVJesGuZXZsU7GgEuTBE/yKyfzbZuD x7bHDXO/sWLpLyfU+w1ZXU9Hn3NwLQppuIjlEMuPZErngNyzQ1oZKEuGXhGBJwfY N/NZyzVvrKOv7yHea0ZxTXeAQq9+j1H7Rcxkl+PHqmvtq98TW+orIkBNmjl5QUz0 Q4BH3zfko7P/U8r8aaCnosNMVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYZgTT9 6tVZhy+neKRdeoyZ7ZWXMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjcX9Cny/U1sND0GX/UzSJS562JSJ2ykEih1Z6H4mCDT5RdmSychtj QGXimF/YVk/uMh7QWndW1oXEvPr1w720E5m3GMgVTlNyriIJLJjcv0O4mxD99E2f 13i/aMMYWPpk2wiqYOQAf/Rt8/JIlwwAiL8EgwodBrfCxiiUB9PB2i3xIvpAoYuJ 03GVBvaoML2cA+JHzuU9y8SJGYDD6069yvtLgiCXbLuZ+EItZOXRmDXSfIUq0jcj qoPB8f9RrcC8v8cm1fOxHTqZmXifMJQsQZeexV95p0qaoQ/PZU6DtdZWPQS5khQ5 r4mzr56ygyi6r07tOLowWo+uaOw2FVoi -----END CERTIFICATE-----Generated at Mon Aug 11 05:56:09 2025 by rpki-client