$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: cJj+gThRff6dZ8oXmT9mxHrAloUz0EpQkh8TqS4lQOw= Subject key identifier: 64:DC:F3:3B:5C:B3:E8:73:02:45:CA:0F:96:C3:23:7B:AE:0C:45:4D Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 0654 Signing time: Mon 04 Aug 2025 23:02:59 +0000 Manifest this update: Mon 04 Aug 2025 23:02:59 +0000 Manifest next update: Mon 11 Aug 2025 23:02:58 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: d1t1p0uiS8lY/9jgOLg4FDGeMXu2/JrWE3b7Cz8dPEI=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: 6bWPYL9HlnXbgKm1pf8hjZDzf0KdOhZ+kEEuV8xvMnc=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: GSq2aTh4Ighs8Kd5WfNm9bR33IhLvfkn/9rz4nvZ37o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Aug 4 23:02:59 2025 GMT Not After : Aug 11 23:02:58 2025 GMT Subject: CN=68913c23-ca2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:b3:c4:0f:03:67:36:04:61:46:f6:1d:35: b9:a7:95:07:09:21:40:6c:97:29:d9:44:9b:0b:25: 83:37:aa:d4:5c:58:d0:c7:a5:d9:e1:b6:75:d0:0a: 16:79:5e:32:a8:7d:fc:b1:0a:54:d0:a9:22:da:5f: 97:a0:4c:d1:8e:3c:20:bf:e6:21:53:23:d1:f0:f8: 0d:6e:84:f0:67:99:f9:b8:f4:01:4d:d2:be:fc:c1: f2:cc:37:a6:02:4b:67:49:db:55:6a:c1:6f:1d:5f: 9d:e6:d8:ca:ef:10:46:08:e9:cf:97:9b:89:0a:83: a5:dc:d7:70:11:cb:10:c9:3a:c2:7b:67:b3:c8:46: df:9b:29:7c:85:95:d0:e8:13:4a:11:b8:20:37:5c: 74:52:27:17:b1:f1:93:95:2e:fd:f6:1f:64:7f:69: 2f:f8:4c:c3:31:ac:ea:28:3c:c2:ac:f4:81:87:42: 91:78:4b:e1:ab:61:ca:30:12:c1:c5:40:a7:ca:11: 17:c5:f6:2a:b6:4d:42:10:6c:c8:c5:2b:22:83:31: c2:63:97:0c:18:38:3f:ce:d5:57:4b:cc:30:47:da: 7d:9d:9a:0d:84:46:53:a4:ea:2a:c5:c2:fc:14:e6: 4e:13:18:f8:21:8d:0d:df:f7:a2:52:2d:b7:b5:da: 01:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DC:F3:3B:5C:B3:E8:73:02:45:CA:0F:96:C3:23:7B:AE:0C:45:4D X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c7:d4:2b:3e:49:04:a6:08:07:be:f4:ed:56:b5:0f:4c:fb: 0c:43:e1:8f:72:53:66:d5:f7:ca:50:22:5b:55:3f:e8:a0:85: 50:62:1c:87:85:4b:37:bc:fe:11:e1:6b:4c:34:d5:42:3c:d4: 06:9d:f1:24:e3:fb:07:cc:e6:56:21:ef:87:0f:f5:40:64:0e: 72:48:25:fe:02:3b:c7:9d:a1:0c:ae:08:5f:85:dd:92:7b:3b: d7:ba:a6:f9:94:a8:e9:9f:de:ef:95:91:06:54:79:ec:69:ee: 3b:59:1d:0f:12:ab:e3:e6:25:f6:a0:2f:9c:23:22:95:db:7c: 01:aa:fb:9b:e5:40:06:6b:b0:bf:af:bc:29:d7:f4:94:8c:9b: 46:73:69:f7:b5:42:4c:a3:80:d0:07:06:9f:a7:a5:bb:5b:84: e9:46:4c:b9:7a:b0:2f:08:7d:2c:c8:0f:96:32:6f:81:a3:21: f8:e5:bf:53:60:54:e4:f5:f9:66:e7:51:73:f1:b5:f6:9c:fc: ed:d5:0b:ce:a2:75:3a:e5:1d:50:63:e4:dc:bb:25:9b:92:5c: 14:4d:3e:66:b5:f1:60:54:34:bb:f7:24:6e:55:52:8d:86:7f: f8:6a:88:e9:33:d1:74:7b:dc:18:c0:d0:68:da:29:48:15:b1: 61:ce:2a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjUwODA0MjMwMjU5WhcNMjUwODExMjMwMjU4WjAYMRYwFAYD VQQDEw02ODkxM2MyMy1jYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoSzxA8DZzYEYUb2HTW5p5UHCSFAbJcp2USbCyWDN6rUXFjQx6XZ4bZ10AoW eV4yqH38sQpU0Kki2l+XoEzRjjwgv+YhUyPR8PgNboTwZ5n5uPQBTdK+/MHyzDem AktnSdtVasFvHV+d5tjK7xBGCOnPl5uJCoOl3NdwEcsQyTrCe2ezyEbfmyl8hZXQ 6BNKEbggN1x0UicXsfGTlS799h9kf2kv+EzDMazqKDzCrPSBh0KReEvhq2HKMBLB xUCnyhEXxfYqtk1CEGzIxSsigzHCY5cMGDg/ztVXS8wwR9p9nZoNhEZTpOoqxcL8 FOZOExj4IY0N3/eiUi23tdoBYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTc8ztc s+hzAkXKD5bDI3uuDEVNMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChx9QrPkkEpggHvvTtVrUPTPsMQ+GPclNm1ffKUCJbVT/ooIVQYhyH hUs3vP4R4WtMNNVCPNQGnfEk4/sHzOZWIe+HD/VAZA5ySCX+AjvHnaEMrghfhd2S ezvXuqb5lKjpn97vlZEGVHnsae47WR0PEqvj5iX2oC+cIyKV23wBqvub5UAGa7C/ r7wp1/SUjJtGc2n3tUJMo4DQBwafp6W7W4TpRky5erAvCH0syA+WMm+BoyH45b9T YFTk9flm51Fz8bX2nPzt1QvOonU65R1QY+TcuyWbklwUTT5mtfFgVDS79yRuVVKN hn/4aojpM9F0e9wYwNBo2ilIFbFhziry -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:53 2025 by rpki-client