$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json) Hash identifier: Fn8MPaJdQNYgyGufV5EODnTm7e8UDikngSOOmbtoTSc= Subject key identifier: 47:34:E4:63:05:D7:C8:08:FC:10:43:FF:2E:C5:A0:08:2D:6C:4D:0D Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft Manifest number: 0101 Signing time: Sat 09 Aug 2025 05:41:36 +0000 Manifest this update: Sat 09 Aug 2025 05:41:36 +0000 Manifest next update: Sat 16 Aug 2025 05:41:36 +0000 Files and hashes: 1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: meUB0Zc2v6AaI7medeoEFGOzfEFqezhAyDgtJ/oFyIU=) 2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: cLX/WlgP7K24ucXGUUtpNzmDrPk9vKJrsn64OyHEFQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Validity Not Before: Aug 9 05:41:36 2025 GMT Not After : Aug 16 05:41:36 2025 GMT Subject: CN=6896df90-89ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:44:36:98:d4:0f:1c:86:85:4a:47:f5:33: b3:9a:21:48:66:02:87:e6:1e:e3:66:b3:9e:a4:95: bf:8c:ac:ba:9c:c9:e6:aa:34:a6:fc:ef:a9:5a:55: 0e:59:b3:8f:8a:32:6a:73:60:5f:ec:1c:60:43:b4: c3:c6:96:ae:ea:e0:22:1b:19:5b:f9:61:43:39:5f: 5f:bc:a1:b8:c6:5f:4d:15:71:d4:5e:eb:11:c4:21: f6:d5:46:1e:0a:82:e6:9d:d9:e2:3a:41:be:20:fd: b0:f3:cd:c1:9c:f1:3d:c8:b1:c6:d4:ca:d9:75:b6: 8c:4e:01:e2:0d:89:eb:a5:6f:7e:87:12:e3:2f:11: fa:9d:f2:a2:d3:0b:00:36:b1:0f:a6:ce:e1:b3:75: d7:f9:b8:71:a0:b9:b2:04:49:8c:16:52:80:00:f0: dd:64:53:d1:fe:37:f4:11:be:0a:fb:76:14:75:49: 06:2e:85:97:85:96:01:95:d1:95:a4:86:7d:4f:0c: 8c:e4:00:29:e4:ae:db:aa:dc:8f:51:65:e1:4f:64: 54:96:6a:54:ff:ae:bb:cd:f3:50:d6:5a:ee:c8:2e: 36:64:dd:a6:c8:99:b2:0b:6c:b2:5a:fb:62:fb:8b: 31:dd:7e:7e:e5:03:73:24:0a:ab:6d:d9:d6:ff:38: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:34:E4:63:05:D7:C8:08:FC:10:43:FF:2E:C5:A0:08:2D:6C:4D:0D X509v3 Authority Key Identifier: keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:d8:56:21:c9:41:86:f9:f9:e2:9c:10:4a:06:3e:66:d4:48: 02:79:18:c6:19:b5:97:e8:0f:5e:2b:ce:1d:7d:20:18:d0:c1: 8d:3b:8f:51:f3:d5:7d:a7:9e:c0:0f:96:ab:6e:5c:78:fc:f7: 2c:b0:18:45:4e:75:de:30:aa:ca:7f:44:c6:91:9f:9b:08:0c: 22:c5:e6:90:07:4a:8f:30:8c:7f:11:c7:90:44:a3:4a:48:75: e9:17:a8:d4:81:fc:d0:6e:8e:c6:a1:e7:41:bc:d7:dc:5d:e2: 98:23:d1:55:d7:ee:4c:f4:2d:22:5a:a9:4a:26:42:23:40:9b: 16:f2:19:87:c9:d6:3d:19:da:50:4a:83:98:cc:98:ff:b9:d7: 7d:0a:39:36:17:8b:be:6b:6c:e0:31:2e:5f:e9:4d:24:79:ea: 15:46:0a:01:2b:60:50:0e:b3:0d:e6:4a:ff:0a:ac:e4:63:14: d1:d7:b6:87:dd:40:18:47:b6:4f:0f:3c:35:63:6e:2e:ca:2b: 39:56:ac:7c:ac:24:c9:63:82:d6:48:fb:f9:1a:d2:1b:14:54: c4:62:90:cd:64:29:1d:44:98:07:59:dc:33:03:38:c5:cd:e0: b4:1d:41:03:8e:80:4e:93:22:c7:16:9e:52:c8:c8:cc:19:6b: 03:ef:ac:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGODAxMTAvBgNVBAUTKEY0MTBDNDgzQTRDOEM5MTZGRkQ0Q0Y0MjBDNEMxMTA4 ODk3OTg4OTEwHhcNMjUwODA5MDU0MTM2WhcNMjUwODE2MDU0MTM2WjAYMRYwFAYD VQQDEw02ODk2ZGY5MC04OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ENENpjUDxyGhUpH9TOzmiFIZgKH5h7jZrOepJW/jKy6nMnmqjSm/O+pWlUO WbOPijJqc2Bf7BxgQ7TDxpau6uAiGxlb+WFDOV9fvKG4xl9NFXHUXusRxCH21UYe CoLmndniOkG+IP2w883BnPE9yLHG1MrZdbaMTgHiDYnrpW9+hxLjLxH6nfKi0wsA NrEPps7hs3XX+bhxoLmyBEmMFlKAAPDdZFPR/jf0Eb4K+3YUdUkGLoWXhZYBldGV pIZ9TwyM5AAp5K7bqtyPUWXhT2RUlmpU/667zfNQ1lruyC42ZN2myJmyC2yyWvti +4sx3X5+5QNzJAqrbdnW/zhikQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc05GMF 18gI/BBD/y7FoAgtbE0NMB8GA1UdIwQYMBaAFPQQxIOkyMkW/9TPQgxMEQiJeYiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkY4MC85NEM1NEI4MDAz OTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlSYl8xTTlDREV3UkNJbDVp SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCREVnNlRJeVJiXzFNOUNERXdSQ0lsNWlKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkY4MC85NEM1NEI4MDAzOTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlS Yl8xTTlDREV3UkNJbDVpSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs2FYhyUGG+fninBBKBj5m1EgCeRjGGbWX6A9eK84dfSAY0MGNO49R 89V9p57AD5arblx4/PcssBhFTnXeMKrKf0TGkZ+bCAwixeaQB0qPMIx/EceQRKNK SHXpF6jUgfzQbo7GoedBvNfcXeKYI9FV1+5M9C0iWqlKJkIjQJsW8hmHydY9GdpQ SoOYzJj/udd9Cjk2F4u+a2zgMS5f6U0keeoVRgoBK2BQDrMN5kr/CqzkYxTR17aH 3UAYR7ZPDzw1Y24uyis5Vqx8rCTJY4LWSPv5GtIbFFTEYpDNZCkdRJgHWdwzAzjF zeC0HUEDjoBOkyLHFp5SyMjMGWsD76zA -----END CERTIFICATE-----Generated at Mon Aug 11 04:25:43 2025 by rpki-client