$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: dV3aC4CQuXfv7OXScDsK48VS1sBln0LpPI3M4j/N0Xw= Subject key identifier: 1C:7C:06:66:93:3B:91:02:6C:2E:35:CC:3E:AA:70:51:3A:35:8C:FF Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 0857 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 0845 Signing time: Sun 20 Jul 2025 20:50:52 +0000 Manifest this update: Sun 20 Jul 2025 20:50:52 +0000 Manifest next update: Sun 27 Jul 2025 20:50:52 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: QRTVrXUvnfiHtQ6v01MZ1TQr7unhg0rduwt3myDTcsU=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2135 (0x857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Jul 20 20:50:52 2025 GMT Not After : Jul 27 20:50:52 2025 GMT Subject: CN=687d56ac-7b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:8a:de:2c:96:f8:5b:8c:3c:0c:4e:46:4d: 8d:5d:e0:c4:15:7b:a0:d5:c7:64:6b:43:1e:b5:7d: ef:f7:fa:5a:ed:4d:a4:fc:c8:f7:28:6f:6b:60:97: a8:57:63:64:c2:03:a1:25:57:18:b4:98:61:ab:45: d3:7f:a9:fc:c2:c7:03:49:49:f4:95:43:d9:7b:d4: d4:f3:52:ce:ee:f5:04:6c:76:15:56:0a:5a:00:ea: 16:61:94:d9:eb:ad:b0:49:2f:44:8f:59:f6:68:59: 94:b4:5e:f2:6b:1a:95:86:d2:dc:02:3d:f1:2d:18: 71:37:eb:ec:fa:df:78:0d:47:c7:cd:a2:fe:9b:b8: 71:63:a3:ae:15:d1:30:6c:31:ba:db:31:5c:a8:4d: 44:b8:51:5e:01:a8:69:dc:41:96:20:9c:dd:6c:fe: 92:f4:52:6e:cd:f8:e9:16:ad:99:5f:a7:71:45:af: 0a:eb:55:ec:d7:5c:54:78:70:fb:fc:1d:54:63:f7: 88:1d:9d:c2:3a:33:ee:1d:af:f5:d0:03:03:f7:7b: ed:a0:3c:59:3c:eb:3c:23:ff:1e:16:ca:ed:87:34: 2d:d8:46:f9:96:67:7f:5f:6c:5f:42:98:3d:0a:3c: bd:20:49:45:b6:ad:cf:0e:42:ca:27:ed:e0:99:95: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7C:06:66:93:3B:91:02:6C:2E:35:CC:3E:AA:70:51:3A:35:8C:FF X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f4:99:b3:fb:55:39:10:fe:ef:f2:22:e8:84:29:ce:53:87: e4:46:ac:1b:3b:a9:6e:46:0c:23:ce:47:31:5a:7e:cd:49:a8: ac:71:4e:c0:27:e0:dc:37:00:65:ea:ff:65:79:48:d6:9e:6d: 36:e7:d1:1e:e2:eb:46:01:4b:6d:32:ef:77:d6:aa:37:1a:5a: 8f:ed:e3:0e:80:da:bf:19:82:c1:cd:40:4d:0a:d9:92:84:ae: 5f:65:2b:b2:67:8d:0b:f4:85:37:c0:d1:60:a5:56:3a:8e:09: 46:8f:e2:17:ef:00:43:33:10:8f:ad:f7:3f:9b:4f:0e:00:06: 7c:6d:f6:1a:d8:ee:e7:34:44:65:c5:ca:c3:19:b4:57:9f:0e: d2:2f:2b:f1:4a:3b:5b:ac:f0:90:10:e9:6d:8a:fa:04:69:8f: 88:2e:7c:a4:6a:f0:da:a2:97:5e:c3:14:62:55:10:bf:5f:c9: ef:bd:9e:e7:0d:c9:2b:62:c1:3d:6f:9b:92:90:12:37:15:8a: aa:7e:92:1e:e1:5f:15:1a:c9:31:a2:ec:65:bc:aa:74:91:6f: 36:82:cd:7c:0f:d9:14:34:41:2e:9d:39:3f:b9:ec:be:9d:80: 90:22:9f:82:0b:08:18:ca:77:30:88:21:5c:b2:b4:8a:4e:da: 85:91:4d:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjUwNzIwMjA1MDUyWhcNMjUwNzI3MjA1MDUyWjAYMRYwFAYD VQQDEw02ODdkNTZhYy03YjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwKK3iyW+FuMPAxORk2NXeDEFXug1cdka0MetX3v9/pa7U2k/Mj3KG9rYJeo V2NkwgOhJVcYtJhhq0XTf6n8wscDSUn0lUPZe9TU81LO7vUEbHYVVgpaAOoWYZTZ 662wSS9Ej1n2aFmUtF7yaxqVhtLcAj3xLRhxN+vs+t94DUfHzaL+m7hxY6OuFdEw bDG62zFcqE1EuFFeAahp3EGWIJzdbP6S9FJuzfjpFq2ZX6dxRa8K61Xs11xUeHD7 /B1UY/eIHZ3COjPuHa/10AMD93vtoDxZPOs8I/8eFsrthzQt2Eb5lmd/X2xfQpg9 Cjy9IElFtq3PDkLKJ+3gmZUY9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBx8BmaT O5ECbC41zD6qcFE6NYz/MB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX9Jmz+1U5EP7v8iLohCnOU4fkRqwbO6luRgwjzkcxWn7NSaiscU7A J+DcNwBl6v9leUjWnm0259Ee4utGAUttMu931qo3GlqP7eMOgNq/GYLBzUBNCtmS hK5fZSuyZ40L9IU3wNFgpVY6jglGj+IX7wBDMxCPrfc/m08OAAZ8bfYa2O7nNERl xcrDGbRXnw7SLyvxSjtbrPCQEOltivoEaY+ILnykavDaopdewxRiVRC/X8nvvZ7n DckrYsE9b5uSkBI3FYqqfpIe4V8VGskxouxlvKp0kW82gs18D9kUNEEunTk/uey+ nYCQIp+CCwgYyncwiCFcsrSKTtqFkU3a -----END CERTIFICATE-----Generated at Tue Jul 22 00:00:21 2025 by rpki-client