$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: rOFockcKp4bsQTbzZil4hlcJsNmaCFeiZDZQMDltFrA= Subject key identifier: 18:EA:5B:FD:15:97:D3:9B:1C:CA:CF:27:BD:AA:53:F8:9B:64:CB:11 Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 038D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 0380 Signing time: Sun 03 Aug 2025 01:25:12 +0000 Manifest this update: Sun 03 Aug 2025 01:25:11 +0000 Manifest next update: Sun 10 Aug 2025 01:25:11 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: GEg4JABoaDojr3yTx7luW5dK3jGPD9rRu7CTncBaRsg=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: q4NAjQjTJMFxxldl/AAiP8pDMUCdKKJhMRmCf+Jtl3M=) 3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: ICtuLoIJdvxcdfC6YrLD+/53y4ZZXc5VV+d4pptI4w0=) 4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: sTauF35xc8SZpRjcL8yNs6xEdRvTaoYQZFwMt4H/aTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Aug 3 01:25:11 2025 GMT Not After : Aug 10 01:25:11 2025 GMT Subject: CN=688eba78-7fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:79:ab:30:68:61:6e:08:38:34:37:00:8b:b4: 71:88:68:0f:3e:ac:03:00:75:7d:b7:f1:6c:d8:81: 34:8b:d6:d0:c6:45:01:99:14:68:d5:4e:28:b4:b0: 89:f7:bf:78:63:44:4f:ba:15:09:ef:99:6d:10:e8: 6e:1b:a1:6a:94:1e:ac:b1:83:7e:56:c2:3d:ed:d4: 05:d1:60:af:7c:5e:d2:1e:16:bf:a6:71:2c:51:47: 45:02:01:a7:ea:c6:89:f4:77:b9:aa:93:ca:93:76: d5:75:03:84:0c:eb:90:7e:93:a4:ff:7a:2e:ac:9b: 80:36:19:48:ed:58:44:8c:76:6c:ed:6a:ec:34:4d: ca:23:f2:9b:69:2e:ba:08:27:50:94:7e:c9:f0:ef: 80:3c:09:50:ac:80:87:87:28:fa:e1:44:84:ad:bc: 36:2e:58:e7:26:86:d9:3a:b7:92:42:14:88:4b:5c: f4:fa:70:a5:72:30:62:2a:9e:fc:e5:74:27:df:db: 40:b1:fc:34:9f:06:3f:2f:5d:97:dd:9b:70:8b:2b: e4:ff:26:e3:42:62:9f:d4:6f:02:de:ae:db:0f:7e: f9:87:9c:44:73:4f:e1:de:21:83:26:e1:bd:ae:13: 93:51:62:19:d5:33:bf:29:a9:fc:64:bf:07:96:33: 43:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EA:5B:FD:15:97:D3:9B:1C:CA:CF:27:BD:AA:53:F8:9B:64:CB:11 X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:58:cc:b7:d1:14:4f:97:99:63:2b:02:3b:79:8f:e4:ec:d5: 85:ab:19:9b:79:5e:a2:34:37:05:56:ed:62:db:d0:30:5a:6a: a5:a6:e9:fd:6f:c1:84:49:f2:43:9c:30:7d:83:72:c9:fd:72: 75:93:eb:9a:10:c5:13:7d:b1:f3:dc:5c:33:aa:09:2f:f4:1d: ce:04:8e:f7:5b:47:02:c4:e9:4c:27:b5:39:0c:36:21:2e:d7: 35:f4:8f:71:7b:de:23:24:85:e2:e1:f4:31:18:ab:d4:d2:95: 45:e7:0a:fe:92:d4:93:7b:5f:92:81:ec:c5:63:73:10:0a:5e: 6b:7f:1c:9f:91:03:d4:dd:b1:fa:9f:a9:7d:9f:a3:d4:29:b0: 21:d1:f2:ad:6f:63:4b:e7:4c:2e:b2:9f:53:2a:e6:7b:b0:16: 0e:cb:83:f3:8c:85:45:df:05:8a:36:8c:11:e0:55:5b:d4:cd: 0a:00:af:96:8b:06:eb:84:4f:e8:be:a7:8c:18:5f:c6:cb:fb: ba:2d:b2:2d:47:c5:71:74:f4:ea:9c:41:81:e3:6c:66:61:e9: fe:0b:63:44:b5:13:db:ba:a7:ee:39:9c:e8:9c:05:a5:5f:5c: 7b:2d:25:41:8a:1e:98:31:79:ab:34:28:41:29:0f:56:bf:5e: 86:da:0d:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjUwODAzMDEyNTExWhcNMjUwODEwMDEyNTExWjAYMRYwFAYD VQQDEw02ODhlYmE3OC03ZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HmrMGhhbgg4NDcAi7RxiGgPPqwDAHV9t/Fs2IE0i9bQxkUBmRRo1U4otLCJ 9794Y0RPuhUJ75ltEOhuG6FqlB6ssYN+VsI97dQF0WCvfF7SHha/pnEsUUdFAgGn 6saJ9He5qpPKk3bVdQOEDOuQfpOk/3ourJuANhlI7VhEjHZs7WrsNE3KI/KbaS66 CCdQlH7J8O+APAlQrICHhyj64USErbw2LljnJobZOreSQhSIS1z0+nClcjBiKp78 5XQn39tAsfw0nwY/L12X3Ztwiyvk/ybjQmKf1G8C3q7bD375h5xEc0/h3iGDJuG9 rhOTUWIZ1TO/Kan8ZL8HljNDfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjqW/0V l9ObHMrPJ72qU/ibZMsRMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzWMy30RRPl5ljKwI7eY/k7NWFqxmbeV6iNDcFVu1i29AwWmqlpun9 b8GESfJDnDB9g3LJ/XJ1k+uaEMUTfbHz3Fwzqgkv9B3OBI73W0cCxOlMJ7U5DDYh Ltc19I9xe94jJIXi4fQxGKvU0pVF5wr+ktSTe1+SgezFY3MQCl5rfxyfkQPU3bH6 n6l9n6PUKbAh0fKtb2NL50wusp9TKuZ7sBYOy4PzjIVF3wWKNowR4FVb1M0KAK+W iwbrhE/ovqeMGF/Gy/u6LbItR8VxdPTqnEGB42xmYen+C2NEtRPbuqfuOZzonAWl X1x7LSVBih6YMXmrNChBKQ9Wv16G2g2X -----END CERTIFICATE-----Generated at Mon Aug 4 16:08:49 2025 by rpki-client