$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: uENqqmP14xrOJOBb6bd2qI9ipxwKXMeqZPd7k1pH/Y4= Subject key identifier: D6:3D:99:56:D5:4A:04:6B:E6:AA:4B:A9:2A:91:2A:40:35:9F:BB:AE Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 155A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 154D Signing time: Tue 12 Aug 2025 16:53:50 +0000 Manifest this update: Tue 12 Aug 2025 16:53:50 +0000 Manifest next update: Tue 19 Aug 2025 16:53:50 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: 1jWDthc54awN8xb3VvcwtTIqXkEhWhI4iDqszIGatFM=) 2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: tCvJCiKT1CxBWkl8Ab7Cnl377oruRnl6LjKbMrrQtv8=) 3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: tik1gv8xWyjalWVShAfgsNZP/VovqqNlmgUqnA0wMDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5466 (0x155a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Aug 12 16:53:50 2025 GMT Not After : Aug 19 16:53:50 2025 GMT Subject: CN=689b719e-59f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a0:71:a4:18:32:29:7a:33:61:d4:31:78:eb: e5:72:34:f0:15:04:39:0a:df:21:a1:cb:9f:fd:17: 54:74:d7:3a:d0:f6:cf:0a:5b:ff:9a:f1:66:16:35: ea:b5:c0:51:ea:1e:13:1c:32:5a:8a:cd:42:da:71: ac:97:07:b5:c4:4e:35:7e:85:35:ee:ed:ff:df:90: c2:7a:5c:26:a1:3d:aa:0a:7a:1b:5d:6b:a7:c2:3a: 65:22:40:0b:e5:61:0b:b7:64:19:ce:43:0a:49:0d: 6e:49:f5:fc:98:cc:d3:7e:b9:1d:d9:a0:8a:01:1f: 0c:98:bc:fd:9b:8f:f6:53:16:a4:13:41:03:33:7e: 74:06:e8:35:42:5a:cc:06:0b:55:0a:cf:da:5f:e6: 4f:3e:0c:83:00:45:5e:aa:eb:1c:09:9d:4d:c6:56: a9:59:f9:59:e2:f0:ce:60:f1:a3:7a:b9:8f:a2:fb: 72:35:17:8e:54:1e:9d:22:da:73:60:3b:86:6f:02: de:69:3f:6b:c0:19:fe:2e:2a:5a:9b:a1:0e:25:8c: 90:8d:fc:ab:4d:90:84:ec:e8:b0:f8:97:41:d5:16: 8a:78:ba:09:1a:3b:e4:4b:c8:e7:99:10:66:41:b0: ca:ca:9e:a0:da:9e:66:0b:2c:a5:34:da:2b:8c:34: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3D:99:56:D5:4A:04:6B:E6:AA:4B:A9:2A:91:2A:40:35:9F:BB:AE X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:df:66:9e:8e:2a:17:eb:d5:75:8f:e7:87:bf:a0:06:c3:5b: 92:c7:5e:a3:62:bd:bb:88:16:8d:a4:2a:34:bb:6d:4f:8f:3e: 17:7e:db:25:52:a4:94:4b:97:10:24:ab:2b:13:a2:b8:40:4e: bc:d4:08:e8:fa:8d:25:52:73:49:cf:28:ba:5d:51:ab:e4:b1: 7a:49:b2:8a:7c:4d:3b:8c:90:77:05:d4:e8:aa:1f:d9:07:f3: bf:69:cb:de:47:79:06:ea:78:e7:fa:aa:d8:c1:6d:4c:ec:6c: f8:dd:c8:47:32:f1:86:8b:18:32:80:69:ad:ce:ab:8a:92:35: e3:40:ca:97:83:51:b1:79:1a:f1:82:7c:09:ab:36:6c:bc:1c: 45:a8:bf:33:db:76:12:ee:29:48:c6:92:c2:db:51:8e:b6:40: ba:f7:a2:3b:36:54:1a:81:75:9b:5a:b3:d6:6f:93:2b:a1:35: 2e:5f:7f:27:ea:1c:99:58:1d:1a:9b:63:1a:73:5d:5f:6a:a3: c9:bf:46:a8:6b:d8:3b:a3:8d:07:eb:dd:53:1a:14:a6:db:56: c7:83:c0:2f:36:5d:75:5b:e0:1f:97:29:39:f3:e5:d2:77:dc: 8c:4b:7b:89:ad:b0:3b:cb:aa:f9:c5:88:93:17:6a:1a:f4:fa: 6e:13:7a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwODEyMTY1MzUwWhcNMjUwODE5MTY1MzUwWjAYMRYwFAYD VQQDEw02ODliNzE5ZS01OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qBxpBgyKXozYdQxeOvlcjTwFQQ5Ct8hocuf/RdUdNc60PbPClv/mvFmFjXq tcBR6h4THDJais1C2nGslwe1xE41foU17u3/35DCelwmoT2qCnobXWunwjplIkAL 5WELt2QZzkMKSQ1uSfX8mMzTfrkd2aCKAR8MmLz9m4/2UxakE0EDM350Bug1QlrM BgtVCs/aX+ZPPgyDAEVequscCZ1NxlapWflZ4vDOYPGjermPovtyNReOVB6dItpz YDuGbwLeaT9rwBn+Lipam6EOJYyQjfyrTZCE7Oiw+JdB1RaKeLoJGjvkS8jnmRBm QbDKyp6g2p5mCyylNNorjDRIRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNY9mVbV SgRr5qpLqSqRKkA1n7uuMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF32aejioX69V1j+eHv6AGw1uSx16jYr27iBaNpCo0u21Pjz4Xftsl UqSUS5cQJKsrE6K4QE681Ajo+o0lUnNJzyi6XVGr5LF6SbKKfE07jJB3BdToqh/Z B/O/acveR3kG6njn+qrYwW1M7Gz43chHMvGGixgygGmtzquKkjXjQMqXg1GxeRrx gnwJqzZsvBxFqL8z23YS7ilIxpLC21GOtkC696I7NlQagXWbWrPWb5MroTUuX38n 6hyZWB0am2Mac11faqPJv0aoa9g7o40H691TGhSm21bHg8AvNl11W+Aflyk58+XS d9yMS3uJrbA7y6r5xYiTF2oa9PpuE3qt -----END CERTIFICATE-----Generated at Tue Aug 12 19:08:07 2025 by rpki-client