$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft File: 09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json) Hash identifier: FcjaXsA5EokBiPKXDxQmsJt25MFmH7bXxySGWX2onpo= Subject key identifier: 19:84:4A:2A:11:0F:97:6D:E0:0B:BF:A8:3D:54:F2:AC:1C:FD:84:80 Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft Manifest number: B5 Signing time: Sat 09 Aug 2025 06:30:31 +0000 Manifest this update: Sat 09 Aug 2025 06:30:31 +0000 Manifest next update: Sat 16 Aug 2025 06:30:31 +0000 Files and hashes: 1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: aC2bqp3Ld6eqISQHerNdfC/3R/gHVjWI9mpWbU5BJqQ=) 2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: xlsUk+nBjbtHnwZ4MERgcwqdT/rxsOcTBiheef/VMVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Validity Not Before: Aug 9 06:30:31 2025 GMT Not After : Aug 16 06:30:31 2025 GMT Subject: CN=6896eb07-67ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:ec:51:5b:f5:62:5e:a7:f5:85:75:d0:4d: e4:0f:07:35:ef:15:d7:3d:a3:d2:8f:b7:4e:61:70: 0c:23:b4:de:4d:cd:c1:9a:a0:2e:af:de:7a:51:2b: 48:13:02:08:94:a4:72:c8:91:c2:a2:af:99:10:1f: a8:61:35:7c:d5:32:97:91:10:5d:ba:e0:a7:c2:0c: 36:b7:64:ce:49:67:3e:6b:54:e1:d0:5c:30:5b:f0: 99:22:de:51:7e:4e:29:ac:21:39:3f:e3:96:2d:f7: 7d:f8:81:6a:53:03:be:2a:f4:11:a9:68:3a:36:59: c6:25:02:9f:3f:01:b6:87:26:f8:3d:a4:7a:8d:09: 9a:6a:02:8b:21:ff:53:91:03:1f:19:60:ab:4c:19: 96:82:9f:0a:7f:78:01:a7:7a:f6:d5:3e:26:23:76: 40:8d:d0:dd:7e:63:04:98:25:24:11:43:ac:23:4e: c8:33:6f:fb:26:c3:ff:d9:16:1a:c5:76:d5:2d:ef: f3:ae:68:72:51:2a:94:4e:b4:91:a6:08:da:9a:9f: 7a:e6:d7:b0:da:4c:44:8a:be:83:af:b9:34:c1:ab: 26:19:e6:7d:fe:37:f0:2f:27:63:cc:b1:7a:ec:2f: 32:4f:2a:bd:5e:a9:85:a5:ee:1f:8b:2e:51:f4:d5: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:84:4A:2A:11:0F:97:6D:E0:0B:BF:A8:3D:54:F2:AC:1C:FD:84:80 X509v3 Authority Key Identifier: keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b3:5f:8d:5e:92:68:99:15:b3:a2:e7:13:b8:56:96:56:c9: 87:ca:c8:b0:51:13:cb:1f:69:ee:7c:f0:c1:90:18:1d:6d:4b: ea:12:0e:52:6c:89:16:5d:55:ef:1e:35:2e:f2:62:ca:0e:3d: 78:f9:e8:75:1e:d3:f6:86:61:74:3c:cc:0f:ed:15:b5:fc:7a: 2c:a6:21:2c:45:66:f8:e2:73:ad:91:be:ea:ab:fa:be:5f:8d: 73:2d:69:b3:8e:b9:44:3f:df:c9:c8:a1:af:2a:83:3f:12:b2: da:22:9f:ad:0c:a7:41:32:a7:89:b6:fd:bf:f4:a8:d9:00:3b: c8:6a:13:22:de:3e:7d:58:96:89:ce:70:46:77:d4:2a:76:79: 97:e1:46:e7:ae:62:fe:3d:c6:01:4c:bd:46:f8:bc:f4:e2:40: 04:31:31:f1:fa:01:3b:1e:9e:9d:2b:9e:1c:cb:9b:bf:2b:10: 0b:ab:7a:76:64:c9:08:7f:db:7a:0d:54:66:ed:8d:53:e2:d0: b7:47:8d:31:16:6a:2b:14:dc:5d:4a:ef:95:77:ea:49:48:03: 9c:98:34:c5:7f:54:58:ec:a2:02:21:85:5e:2a:6d:e0:b6:ea: 0f:3f:a7:8e:65:8e:0a:d2:2e:ea:d1:41:03:37:83:90:83:08: 0c:f3:e8:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD OENDQzcwNDYwHhcNMjUwODA5MDYzMDMxWhcNMjUwODE2MDYzMDMxWjAYMRYwFAYD VQQDEw02ODk2ZWIwNy02N2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxvsUVv1Yl6n9YV10E3kDwc17xXXPaPSj7dOYXAMI7TeTc3BmqAur956UStI EwIIlKRyyJHCoq+ZEB+oYTV81TKXkRBduuCnwgw2t2TOSWc+a1Th0FwwW/CZIt5R fk4prCE5P+OWLfd9+IFqUwO+KvQRqWg6NlnGJQKfPwG2hyb4PaR6jQmaagKLIf9T kQMfGWCrTBmWgp8Kf3gBp3r21T4mI3ZAjdDdfmMEmCUkEUOsI07IM2/7JsP/2RYa xXbVLe/zrmhyUSqUTrSRpgjamp965tew2kxEir6Dr7k0wasmGeZ9/jfwLydjzLF6 7C8yTyq9XqmFpe4fiy5R9NXnAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmESioR D5dt4Au/qD1U8qwc/YSAMB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5 MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q3NC8zNzhEOUEwQTY5MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXox MzRBRS1NWlpmN0xJek1jRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAls1+NXpJomRWzoucTuFaWVsmHysiwURPLH2nufPDBkBgdbUvqEg5S bIkWXVXvHjUu8mLKDj14+eh1HtP2hmF0PMwP7RW1/HospiEsRWb44nOtkb7qq/q+ X41zLWmzjrlEP9/JyKGvKoM/ErLaIp+tDKdBMqeJtv2/9KjZADvIahMi3j59WJaJ znBGd9QqdnmX4UbnrmL+PcYBTL1G+Lz04kAEMTHx+gE7Hp6dK54cy5u/KxALq3p2 ZMkIf9t6DVRm7Y1T4tC3R40xFmorFNxdSu+Vd+pJSAOcmDTFf1RY7KICIYVeKm3g tuoPP6eOZY4K0i7q0UEDN4OQgwgM8+jv -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:44 2025 by rpki-client