$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: 52ZM5WlBenFzocAtp2Bb7ECWMJ0Iwr2+QtjR53/Fabo= Subject key identifier: 02:DD:01:6A:03:5A:41:2E:D3:FE:95:3A:11:53:46:93:19:12:24:A5 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 9F Signing time: Thu 07 Aug 2025 06:54:48 +0000 Manifest this update: Thu 07 Aug 2025 06:54:47 +0000 Manifest next update: Thu 14 Aug 2025 06:54:47 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: w8XPQFgM7HY39vPMIeANOOlCD01N2H395x53k7R+WAY=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Aug 7 06:54:47 2025 GMT Not After : Aug 14 06:54:47 2025 GMT Subject: CN=68944db8-322d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:1a:e2:8e:4c:39:50:85:c7:33:32:52:a9: a6:b4:80:9a:fc:1e:04:f4:ba:84:3c:ee:bc:e7:42: f2:d6:31:e2:d6:55:a9:34:f8:1a:c6:fa:be:99:9f: 4a:92:98:b8:3f:4f:61:33:92:82:56:ba:4f:50:30: 9c:dc:31:57:a1:4c:ab:cd:d1:14:2f:cf:71:eb:6a: c7:91:22:15:bf:bb:f8:b9:54:b4:fb:32:a5:66:3a: 75:8e:42:ae:e8:62:73:c9:95:d7:a2:a5:bb:b1:b7: 2d:9e:a4:8c:39:9d:a2:a6:c2:f1:8d:e0:d1:7a:4a: 8f:af:1e:83:d7:1d:ab:9b:10:96:84:06:07:d8:70: 05:a4:7e:53:f4:eb:17:0f:66:4b:bf:27:01:5a:2d: 2c:90:0e:5c:31:54:26:cd:16:db:d0:44:1f:7f:92: a3:47:7d:ac:d1:24:e6:c7:b1:9c:2f:95:86:21:31: 21:88:f2:78:7c:1d:48:42:93:7b:29:e6:dc:2c:8a: f3:ef:2a:f0:f4:66:ca:68:a8:a8:d2:7c:fe:29:91: 08:84:ed:8c:13:cf:5f:2e:fb:56:ac:bf:c3:9c:2e: cd:b3:0d:73:5c:9b:15:b4:77:0d:ea:c2:05:6f:73: 38:79:b3:55:d7:54:fb:d0:d4:d2:94:89:67:e0:33: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DD:01:6A:03:5A:41:2E:D3:FE:95:3A:11:53:46:93:19:12:24:A5 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:09:dd:ee:6b:2b:92:8d:54:d4:7f:24:7f:8e:8e:ac:7e:c0: 89:7e:57:91:0b:11:b8:54:ac:b8:04:0a:fa:7e:bf:1e:9c:9b: 02:61:81:da:d4:ce:17:02:02:47:59:26:95:9a:71:74:26:96: c5:d5:1c:e4:15:d2:06:0a:87:f5:0c:0e:69:0c:bf:12:60:5b: 85:d0:59:cb:4a:65:5b:43:ac:94:8f:e0:77:e6:b4:45:81:4c: 09:34:5a:36:70:9a:54:4a:a5:8f:7c:ae:1b:17:9a:24:72:7c: 63:c6:ca:34:08:05:ed:12:ea:01:a1:d3:a0:7d:c6:2a:1d:84: 16:31:e4:59:9e:58:9d:a7:46:0e:10:98:7a:bc:c9:de:4e:55: 17:63:e3:a6:18:ff:c1:85:b2:47:7a:2a:88:13:26:06:bc:5c: 59:06:b5:b9:e5:3f:c6:eb:a9:aa:d0:ea:88:ae:f9:f2:ed:97: 6f:f1:f9:62:28:4c:ec:ee:f1:98:4f:f8:c0:f4:42:33:03:ec: 32:2b:a6:8d:8f:b0:fb:08:da:23:a6:9e:bd:e3:bf:62:60:40: 48:2b:f9:1d:f4:5c:df:45:d6:6d:43:7b:b7:7c:de:9b:af:1f: 1f:cd:98:4a:11:fa:11:ef:ea:b5:1e:7f:6a:ea:35:75:fd:e2: 67:69:11:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjUwODA3MDY1NDQ3WhcNMjUwODE0MDY1NDQ3WjAYMRYwFAYD VQQDEw02ODk0NGRiOC0zMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9Ea4o5MOVCFxzMyUqmmtICa/B4E9LqEPO6850Ly1jHi1lWpNPgaxvq+mZ9K kpi4P09hM5KCVrpPUDCc3DFXoUyrzdEUL89x62rHkSIVv7v4uVS0+zKlZjp1jkKu 6GJzyZXXoqW7sbctnqSMOZ2ipsLxjeDRekqPrx6D1x2rmxCWhAYH2HAFpH5T9OsX D2ZLvycBWi0skA5cMVQmzRbb0EQff5KjR32s0STmx7GcL5WGITEhiPJ4fB1IQpN7 KebcLIrz7yrw9GbKaKio0nz+KZEIhO2ME89fLvtWrL/DnC7Nsw1zXJsVtHcN6sIF b3M4ebNV11T70NTSlIln4DPxSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALdAWoD WkEu0/6VOhFTRpMZEiSlMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzCd3uayuSjVTUfyR/jo6sfsCJfleRCxG4VKy4BAr6fr8enJsCYYHa 1M4XAgJHWSaVmnF0JpbF1RzkFdIGCof1DA5pDL8SYFuF0FnLSmVbQ6yUj+B35rRF gUwJNFo2cJpUSqWPfK4bF5okcnxjxso0CAXtEuoBodOgfcYqHYQWMeRZnlidp0YO EJh6vMneTlUXY+OmGP/BhbJHeiqIEyYGvFxZBrW55T/G66mq0OqIrvny7Zdv8fli KEzs7vGYT/jA9EIzA+wyK6aNj7D7CNojpp69479iYEBIK/kd9FzfRdZtQ3u3fN6b rx8fzZhKEfoR7+q1Hn9q6jV1/eJnaRFk -----END CERTIFICATE-----Generated at Fri Aug 8 20:54:49 2025 by rpki-client