$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: RSrGtEhpXpoWojH3WOj3iFcX3d664Gpinvk57qbpAnk= Subject key identifier: 93:0A:EE:9B:A6:75:F6:46:DF:70:81:C6:2F:B1:94:CA:0E:7D:E7:CD Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 09F9 Signing time: Sat 02 Aug 2025 20:09:47 +0000 Manifest this update: Sat 02 Aug 2025 20:09:46 +0000 Manifest next update: Sat 09 Aug 2025 20:09:46 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: ZRjizZ1HQQVVzUKi3m5klwde4cjtgswxY7fOERVUSQs=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: yfdf5Mv/GJ9tUDZNlDnmM6hHiINUq2OvlkNbS0rVles=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: qU5SgxuYfj9EbloGsgp5NlU+LGZow7QsAYGZSye/EIM=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: PgZPVHxtNUmnyrhnnwVcg3kijll4dZA2GpurrS7x078=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: mCrr4AsBoN0UqBzrLZ/+kB+0BpCUxnU7wJAUdq4LZdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Aug 2 20:09:46 2025 GMT Not After : Aug 9 20:09:46 2025 GMT Subject: CN=688e708a-7231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:fe:30:26:29:c3:ff:85:f7:11:0a:8a:2b: 92:aa:dd:11:01:0f:27:dc:c9:7e:e6:cb:ab:fe:dd: da:27:80:06:29:b7:7a:70:17:9a:fd:e0:8b:94:a0: e2:23:a0:05:6c:cb:36:e2:a8:e3:20:37:2d:c6:77: 8e:63:37:f6:eb:be:fd:3e:eb:68:dc:9b:ef:46:e3: 65:98:36:97:5a:9b:fb:18:5c:80:c7:15:9d:e9:c7: 0c:bf:46:78:f0:ea:b0:d7:3b:a6:ff:10:04:7d:58: 3d:04:f0:ab:5f:f4:bb:76:77:af:c3:cd:a1:09:c2: 1f:ac:d3:b3:de:b9:27:54:a4:3b:4b:1e:1d:03:df: ac:e5:21:f3:2e:c1:41:d6:19:c4:db:89:0c:47:aa: 01:8c:a6:3e:95:cf:f8:ed:cf:77:2a:30:a2:b7:06: 93:62:6b:a2:bf:4a:d3:d4:8e:02:68:68:41:ad:8f: d2:c2:72:4d:68:8a:f8:e6:0e:b8:91:8c:d1:ea:34: d9:90:b7:85:01:34:7c:e2:7d:a8:2d:bc:5d:7c:6f: 8f:c8:fc:e0:07:71:5b:df:35:8e:b6:07:d4:15:68: 35:3c:db:06:bc:c7:d0:4b:5f:f1:47:b7:11:6c:1c: 98:9f:71:03:b6:d5:e1:9b:51:a2:67:14:21:b9:1e: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0A:EE:9B:A6:75:F6:46:DF:70:81:C6:2F:B1:94:CA:0E:7D:E7:CD X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b6:05:ac:e6:bc:35:7b:f1:17:f4:c6:c8:fe:29:79:45:15: 28:59:e8:53:66:62:e5:ea:bd:7e:ed:e1:cf:99:78:ba:f5:a7: 43:32:4d:1c:b9:cc:21:bd:de:1f:a0:05:1b:46:57:52:97:7c: 42:9e:5e:e2:1b:bb:5c:28:eb:f3:55:76:c1:97:d9:8e:23:57: 08:17:a8:76:da:d0:15:cc:1d:9b:92:9b:e4:20:95:45:c0:4d: f9:8d:0b:ec:83:ff:29:8d:0b:04:48:7a:b1:c1:c9:de:5e:34: c6:0c:73:f4:23:b6:60:25:b3:1c:80:da:ed:60:6c:5b:49:be: d8:7a:bd:dd:f6:de:21:74:1e:da:1a:82:39:8d:b0:82:31:94: 3e:1f:05:2a:12:f2:4a:fc:cf:46:2c:79:34:31:c3:3b:ff:4f: 93:23:07:2b:0d:b5:59:9d:b4:b6:48:27:2a:5f:aa:fc:98:58: 1e:b1:bc:52:8a:b4:3c:1a:a2:4b:cb:82:c4:34:6b:da:6b:1f: 9b:00:aa:ae:b3:e6:ed:98:da:99:ad:2e:2a:e1:3a:20:84:23: 09:9f:5c:40:38:f2:7c:1e:40:f3:fc:ec:31:97:91:63:01:c4: 98:a0:fe:b5:6d:76:05:c7:51:13:53:9c:d2:1c:85:47:5c:f8: ce:68:ec:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjUwODAyMjAwOTQ2WhcNMjUwODA5MjAwOTQ2WjAYMRYwFAYD VQQDEw02ODhlNzA4YS03MjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nv+MCYpw/+F9xEKiiuSqt0RAQ8n3Ml+5sur/t3aJ4AGKbd6cBea/eCLlKDi I6AFbMs24qjjIDctxneOYzf26779Puto3JvvRuNlmDaXWpv7GFyAxxWd6ccMv0Z4 8Oqw1zum/xAEfVg9BPCrX/S7dnevw82hCcIfrNOz3rknVKQ7Sx4dA9+s5SHzLsFB 1hnE24kMR6oBjKY+lc/47c93KjCitwaTYmuiv0rT1I4CaGhBrY/SwnJNaIr45g64 kYzR6jTZkLeFATR84n2oLbxdfG+PyPzgB3Fb3zWOtgfUFWg1PNsGvMfQS1/xR7cR bByYn3EDttXhm1GiZxQhuR675QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMK7pum dfZG33CBxi+xlMoOfefNMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqtgWs5rw1e/EX9MbI/il5RRUoWehTZmLl6r1+7eHPmXi69adDMk0c ucwhvd4foAUbRldSl3xCnl7iG7tcKOvzVXbBl9mOI1cIF6h22tAVzB2bkpvkIJVF wE35jQvsg/8pjQsESHqxwcneXjTGDHP0I7ZgJbMcgNrtYGxbSb7Yer3d9t4hdB7a GoI5jbCCMZQ+HwUqEvJK/M9GLHk0McM7/0+TIwcrDbVZnbS2SCcqX6r8mFgesbxS irQ8GqJLy4LENGvaax+bAKqus+btmNqZrS4q4ToghCMJn1xAOPJ8HkDz/Owxl5Fj AcSYoP61bXYFx1ETU5zSHIVHXPjOaOzr -----END CERTIFICATE-----Generated at Mon Aug 4 11:07:43 2025 by rpki-client