$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: kTYwVSrcATFwc4y7e4hI4wKYu56uWwBnHP6RCBh4s4k= Subject key identifier: E0:9E:52:1C:F4:C5:EA:11:20:AC:38:DD:54:25:B7:93:9D:EB:8C:1B Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0CB7 Signing time: Fri 08 Aug 2025 18:23:19 +0000 Manifest this update: Fri 08 Aug 2025 18:23:19 +0000 Manifest next update: Fri 15 Aug 2025 18:23:19 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: /DT/hy+ho1P2hBOEf5Fw00GlvgkK1SHZJESYTCesk7A=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: Aug 8 18:23:19 2025 GMT Not After : Aug 15 18:23:19 2025 GMT Subject: CN=68964097-92cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:22:f9:a6:08:36:ec:97:51:4a:32:e2:db: d8:ad:6e:8a:4b:23:38:78:1c:17:e1:19:56:d5:f9: d5:34:14:e7:59:03:72:34:bf:cc:e1:35:13:89:b7: f7:c7:57:53:29:54:86:45:50:f2:f3:58:e1:d9:e6: fa:df:d6:93:f3:d2:6e:0d:3b:09:25:4e:06:bd:a0: 08:9b:47:db:22:26:37:e6:77:f0:0f:bf:6b:09:f5: 1f:21:19:b6:16:38:82:1e:4b:9e:3a:6a:d7:d7:48: 9a:d4:ce:96:c0:7c:2e:40:64:34:87:b1:df:93:a4: 1b:30:a8:56:fc:5e:37:5d:11:19:b3:e8:80:1f:9d: 84:19:26:26:1d:6e:11:4b:14:c8:89:65:6a:62:6c: 41:74:be:a3:f0:46:dd:e2:78:9b:75:1c:cf:7d:90: 1d:38:98:3b:3b:cf:1d:75:38:03:48:e9:e5:c6:b3: 1e:26:d1:60:b9:79:25:40:71:c5:fa:9d:fc:f1:e6: cc:e2:9c:cf:ca:f7:10:d0:f8:c9:47:e7:3a:0b:8c: 9f:a3:7a:c5:22:b2:5c:8c:1e:f6:48:97:a6:17:53: 7c:d1:dc:39:2a:75:87:53:16:1f:c9:05:e2:ed:9c: d4:9a:c3:03:8b:93:70:d6:1d:bc:5b:d3:ca:a6:36: e1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9E:52:1C:F4:C5:EA:11:20:AC:38:DD:54:25:B7:93:9D:EB:8C:1B X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:0e:82:5c:51:de:ed:9d:8d:05:05:e0:04:05:18:7f:6d:fc: 2e:20:54:32:5b:80:23:d6:4f:b4:72:7b:4b:a5:19:2e:db:0d: 42:ba:0c:68:07:cf:b4:9c:47:2e:0e:74:7d:e0:43:05:15:a3: 56:3d:22:f7:a2:a1:1b:6f:a4:e3:ea:29:29:56:88:01:9b:ec: ed:6e:98:44:6d:d5:fa:40:c4:27:23:86:2c:38:b8:77:e1:e2: b0:12:95:a6:cd:d9:55:14:27:2b:d1:9f:d3:9a:49:f0:c8:82: 72:0f:92:58:30:f6:9b:bb:32:75:6b:96:df:75:e7:08:9e:c3: b5:f0:d4:06:b6:8d:3b:dd:05:8b:52:b7:31:68:ed:61:47:7e: bc:74:39:55:58:42:b7:5b:a7:08:61:1d:6d:dd:17:58:09:f4: 14:6e:5f:6c:9d:19:4a:6b:9f:31:98:b8:c6:75:ee:90:be:70: 41:61:73:e9:5d:ec:24:3d:13:2c:02:0a:b4:c7:4a:96:29:27: 79:c9:7d:17:ef:8a:06:8e:d4:28:ca:17:b2:c3:85:43:9d:7e: c6:12:92:12:89:b7:2e:fa:0f:5d:f1:b8:19:4f:62:fd:d0:f2: f5:d7:89:96:3f:87:18:30:d4:05:bc:7a:05:b4:3e:00:b0:17: 84:04:99:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjUwODA4MTgyMzE5WhcNMjUwODE1MTgyMzE5WjAYMRYwFAYD VQQDEw02ODk2NDA5Ny05MmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWoi+aYINuyXUUoy4tvYrW6KSyM4eBwX4RlW1fnVNBTnWQNyNL/M4TUTibf3 x1dTKVSGRVDy81jh2eb639aT89JuDTsJJU4GvaAIm0fbIiY35nfwD79rCfUfIRm2 FjiCHkueOmrX10ia1M6WwHwuQGQ0h7Hfk6QbMKhW/F43XREZs+iAH52EGSYmHW4R SxTIiWVqYmxBdL6j8Ebd4nibdRzPfZAdOJg7O88ddTgDSOnlxrMeJtFguXklQHHF +p388ebM4pzPyvcQ0PjJR+c6C4yfo3rFIrJcjB72SJemF1N80dw5KnWHUxYfyQXi 7ZzUmsMDi5Nw1h28W9PKpjbhAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCeUhz0 xeoRIKw43VQlt5Od64wbMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXDoJcUd7tnY0FBeAEBRh/bfwuIFQyW4Aj1k+0cntLpRku2w1Cugxo B8+0nEcuDnR94EMFFaNWPSL3oqEbb6Tj6ikpVogBm+ztbphEbdX6QMQnI4YsOLh3 4eKwEpWmzdlVFCcr0Z/TmknwyIJyD5JYMPabuzJ1a5bfdecInsO18NQGto073QWL UrcxaO1hR368dDlVWEK3W6cIYR1t3RdYCfQUbl9snRlKa58xmLjGde6QvnBBYXPp XewkPRMsAgq0x0qWKSd5yX0X74oGjtQoyheyw4VDnX7GEpISibcu+g9d8bgZT2L9 0PL114mWP4cYMNQFvHoFtD4AsBeEBJnW -----END CERTIFICATE-----Generated at Sun Aug 10 18:21:45 2025 by rpki-client