$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: ITUtDVxa40zbLr5mpSYNCr9rjGxK2VUniA3ZFyh/sP0= Subject key identifier: A6:AC:9A:4B:1B:07:B5:78:5C:5A:61:DE:84:C7:B6:45:BB:54:DA:51 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 01F1 Signing time: Mon 21 Jul 2025 02:35:39 +0000 Manifest this update: Mon 21 Jul 2025 02:35:39 +0000 Manifest next update: Mon 28 Jul 2025 02:35:39 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: 5Fqhg2GwhArfuzTGAwz8lI63iZlruF2kI2bDHrTb4sY=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Jul 21 02:35:39 2025 GMT Not After : Jul 28 02:35:39 2025 GMT Subject: CN=687da77b-adce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:7d:1b:ec:52:30:4f:68:8f:0b:c6:06:63: 43:3f:c1:9b:3d:d2:62:7a:f1:cb:63:fb:a1:b7:24: 8d:ec:fc:b4:75:54:cf:07:39:e6:28:0a:c4:c9:82: e0:72:e5:53:67:b4:7a:df:9e:ea:40:54:b1:ec:8c: db:96:da:c5:50:f3:28:b5:20:c3:c3:28:65:db:72: 91:9e:8f:c1:44:0b:73:58:df:be:23:57:6b:af:b2: 2f:0e:37:d5:69:e8:a8:d7:f5:34:67:33:b8:b7:d1: 26:36:93:b8:48:02:64:51:48:09:a2:25:4a:fd:ee: 7e:57:3b:a5:07:93:47:81:da:d5:20:82:e1:c3:40: 66:ba:fa:08:84:86:2f:bb:eb:b6:e9:81:33:84:d4: a1:bf:45:7d:0e:3c:79:74:6a:4a:1a:33:b6:69:ee: 8a:4b:1b:c1:67:6b:90:28:2a:46:85:8b:3b:4c:03: 98:69:78:ae:de:b9:ee:d3:bd:f6:d5:ea:ac:a0:95: 57:47:25:b2:00:2f:46:cb:7a:1d:d5:54:16:7a:76: d4:8a:e7:f3:59:70:d6:ae:73:ab:cf:14:2b:8c:cc: ef:18:c9:6a:04:6f:42:a4:9a:84:50:d1:17:b3:a5: 3e:8e:54:74:b1:52:b7:83:f9:5c:bb:b8:e8:c5:fc: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AC:9A:4B:1B:07:B5:78:5C:5A:61:DE:84:C7:B6:45:BB:54:DA:51 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e8:aa:fe:82:a5:76:a7:00:20:78:95:8d:bf:6e:c6:30:32: 2b:b4:2e:37:63:a3:96:43:35:17:d9:84:fe:17:ce:02:24:4c: 51:39:66:2f:1d:ec:34:42:42:5a:b2:06:8d:00:56:17:fe:f2: 4e:98:02:d7:99:ba:37:3f:c8:22:bf:1a:34:08:ee:a3:cd:d4: 59:48:4c:fd:16:f5:a9:9f:02:9a:4f:0b:28:16:17:7b:7b:0a: e4:f4:f8:8b:91:15:aa:0e:da:35:64:a1:71:7f:a4:22:5b:76: 44:b5:a3:6f:c7:4b:d8:31:45:7f:c9:c2:89:0c:cc:90:e0:be: 36:d1:c2:ac:b6:d9:63:20:64:ad:95:f6:2c:eb:a1:f4:ae:2c: 0c:79:1f:c0:2a:66:8d:56:81:24:58:11:93:c2:2c:72:c6:9c: bc:b9:f1:1b:7f:e3:60:34:4f:bd:31:4b:d2:84:71:d7:ea:16: 6f:88:df:89:ae:d8:1f:cf:65:ae:3a:d4:de:36:1d:fb:e7:fc: de:1a:6c:f8:09:56:89:64:c9:5b:bf:26:2b:e2:8c:fa:93:f0: bd:15:58:40:ae:08:95:9d:71:a6:7f:2d:16:4e:da:83:61:76: 27:58:72:17:24:79:2b:5f:57:13:33:0c:11:19:5b:72:80:45: 38:23:2a:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwNzIxMDIzNTM5WhcNMjUwNzI4MDIzNTM5WjAYMRYwFAYD VQQDEw02ODdkYTc3Yi1hZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszZ9G+xSME9ojwvGBmNDP8GbPdJievHLY/uhtySN7Py0dVTPBznmKArEyYLg cuVTZ7R6357qQFSx7IzbltrFUPMotSDDwyhl23KRno/BRAtzWN++I1drr7IvDjfV aeio1/U0ZzO4t9EmNpO4SAJkUUgJoiVK/e5+VzulB5NHgdrVIILhw0BmuvoIhIYv u+u26YEzhNShv0V9Djx5dGpKGjO2ae6KSxvBZ2uQKCpGhYs7TAOYaXiu3rnu0732 1eqsoJVXRyWyAC9Gy3od1VQWenbUiufzWXDWrnOrzxQrjMzvGMlqBG9CpJqEUNEX s6U+jlR0sVK3g/lcu7joxfxHCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKasmksb B7V4XFph3oTHtkW7VNpRMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH6Kr+gqV2pwAgeJWNv27GMDIrtC43Y6OWQzUX2YT+F84CJExROWYv Hew0QkJasgaNAFYX/vJOmALXmbo3P8givxo0CO6jzdRZSEz9FvWpnwKaTwsoFhd7 ewrk9PiLkRWqDto1ZKFxf6QiW3ZEtaNvx0vYMUV/ycKJDMyQ4L420cKsttljIGSt lfYs66H0riwMeR/AKmaNVoEkWBGTwixyxpy8ufEbf+NgNE+9MUvShHHX6hZviN+J rtgfz2WuOtTeNh375/zeGmz4CVaJZMlbvyYr4oz6k/C9FVhArgiVnXGmfy0WTtqD YXYnWHIXJHkrX1cTMwwRGVtygEU4IypL -----END CERTIFICATE-----Generated at Mon Jul 21 12:48:05 2025 by rpki-client