$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json) Hash identifier: raChJaHQ+/GVwa9DDmvYrAKq7dbqH8D5YOjcUfSnzyo= Subject key identifier: B0:70:03:F6:09:FA:49:61:58:C6:FD:0C:E0:14:E0:E6:C8:1E:8A:B9 Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft Manifest number: 09 Signing time: Tue 05 Aug 2025 08:51:41 +0000 Manifest this update: Tue 05 Aug 2025 08:51:40 +0000 Manifest next update: Tue 12 Aug 2025 08:51:40 +0000 Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: FMvglJ2tWx4fBprbb3VzWscZu2hJe5uR2nfgiOx13/k=) 2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: IhK2cshQpEX+npxu/NN0aCUzUVi2L+34EqYhm+54jyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Validity Not Before: Aug 5 08:51:40 2025 GMT Not After : Aug 12 08:51:40 2025 GMT Subject: CN=6891c61c-e6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:a5:11:38:11:3f:04:87:ef:5a:0b:58:6c: ce:40:9c:2c:f9:c2:fe:72:7b:45:52:77:73:dd:1a: 28:04:a7:e9:d2:57:1e:bc:81:99:30:76:1e:5c:74: b4:27:1c:b7:0d:4d:64:d0:9e:75:15:54:ef:ad:b1: 14:8f:db:39:51:bf:bb:ab:69:cd:b9:66:b7:0a:18: ed:6f:c6:12:01:f9:2e:92:e5:59:da:63:42:44:bc: 49:14:55:e8:34:8c:00:c0:d5:28:d6:31:51:b7:d5: 43:1a:02:b8:9a:c3:19:32:59:1c:01:0f:63:6f:b0: 82:65:a5:21:21:69:08:14:51:cf:21:5b:d6:ea:6c: af:92:f2:56:eb:93:18:92:e1:da:ac:1e:38:9d:d1: 54:bf:c3:f7:66:a9:2f:be:78:5f:dc:4a:e9:ec:90: 81:37:8d:37:fb:fb:4d:4b:81:10:3f:67:8c:76:15: e7:17:b2:34:16:e3:d6:db:52:b0:f1:4f:84:bc:ad: b0:88:b0:d4:dc:fe:f0:aa:33:2f:40:d0:cf:28:b2: 53:13:dc:ec:bb:09:e6:81:76:21:85:04:9b:b3:f0: 61:e9:a6:18:04:ff:5e:22:0c:6b:21:fe:db:eb:53: b4:f3:6b:01:c5:8b:7e:71:34:a0:e9:9a:d5:76:b6: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:70:03:F6:09:FA:49:61:58:C6:FD:0C:E0:14:E0:E6:C8:1E:8A:B9 X509v3 Authority Key Identifier: keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c7:72:c3:3a:b8:1e:9b:7e:d4:d9:62:58:63:6d:48:67:84: 66:cd:86:8d:17:02:c8:8c:a6:71:85:4d:85:cb:40:d8:1a:35: b9:ed:5a:98:ad:75:78:f2:7c:d1:8d:71:72:9d:0d:f1:ee:34: 9c:53:d7:d1:57:4f:00:1d:43:8e:59:fe:af:1d:43:ff:ae:58: af:72:7d:4d:8f:ec:50:6b:3d:c2:cb:9d:19:4d:d4:20:8e:d2: 85:5e:6c:9f:a7:cb:12:ec:82:e2:c7:07:dd:1a:3a:1e:58:c2: 4c:f0:f7:7f:12:ac:1c:e9:ba:50:fa:e7:3c:d5:33:11:29:30: ca:0d:5c:4a:a8:98:cf:82:d8:32:50:90:d2:c6:56:36:4c:6f: 1b:fa:84:ee:45:60:02:f7:72:ad:c6:06:bf:d6:18:38:8a:16: 09:c9:5f:b1:0a:34:14:9f:1a:c7:aa:d8:9e:1c:a1:df:78:2b: 0c:c3:b8:d2:5d:dc:e7:12:22:a7:44:fa:ab:df:bb:fc:0e:e8: ce:3a:56:4a:6a:76:70:d3:38:72:eb:00:25:b9:a9:f8:8a:3d: 3f:d2:c8:fe:5c:c0:85:06:42:c6:04:c1:c9:09:61:0f:ed:23: 97:d9:55:d2:71:c2:85:c8:1f:ed:b2:99:ca:08:4f:01:ea:07: f8:30:2c:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjgyMDExMC8GA1UEBRMoRkNBQzZGQTgzMUU4RjVBMjg0MTM0Qzk1QThEMDIwRkNC QzhFQzlGMjAeFw0yNTA4MDUwODUxNDBaFw0yNTA4MTIwODUxNDBaMBgxFjAUBgNV BAMTDTY4OTFjNjFjLWU2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH5KUROBE/BIfvWgtYbM5AnCz5wv5ye0VSd3PdGigEp+nSVx68gZkwdh5cdLQn HLcNTWTQnnUVVO+tsRSP2zlRv7urac25ZrcKGO1vxhIB+S6S5VnaY0JEvEkUVeg0 jADA1SjWMVG31UMaAriawxkyWRwBD2NvsIJlpSEhaQgUUc8hW9bqbK+S8lbrkxiS 4dqsHjid0VS/w/dmqS++eF/cSunskIE3jTf7+01LgRA/Z4x2FecXsjQW49bbUrDx T4S8rbCIsNTc/vCqMy9A0M8oslMT3Oy7CeaBdiGFBJuz8GHpphgE/14iDGsh/tvr U7TzawHFi35xNKDpmtV2tgeHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsHAD9gn6 SWFYxv0M4BTg5sgeirkwHwYDVR0jBBgwFoAU/KxvqDHo9aKEE0yVqNAg/LyOyfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCODIwLzkwQThCMDhBNjg0 MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFLRUUweVZxTkFnX0x5T3lm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX0t4dnFESG85YUtFRTB5VnFOQWdfTHlPeWZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC ODIwLzkwQThCMDhBNjg0MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFL RUUweVZxTkFnX0x5T3lmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGPHcsM6uB6bftTZYlhjbUhnhGbNho0XAsiMpnGFTYXLQNgaNbntWpit dXjyfNGNcXKdDfHuNJxT19FXTwAdQ45Z/q8dQ/+uWK9yfU2P7FBrPcLLnRlN1CCO 0oVebJ+nyxLsguLHB90aOh5Ywkzw938SrBzpulD65zzVMxEpMMoNXEqomM+C2DJQ kNLGVjZMbxv6hO5FYAL3cq3GBr/WGDiKFgnJX7EKNBSfGseq2J4cod94KwzDuNJd 3OcSIqdE+qvfu/wO6M46VkpqdnDTOHLrACW5qfiKPT/SyP5cwIUGQsYEwckJYQ/t I5fZVdJxwoXIH+2ymcoITwHqB/gwLJM= -----END CERTIFICATE-----Generated at Wed Aug 6 10:16:36 2025 by rpki-client