$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: kFKN7HdqrS77QiHpJjYRHN3Ivsa74aUFK0ID9dNObaM= Subject key identifier: C0:F4:BD:60:E6:24:3E:0D:87:31:8D:4D:1C:20:47:81:26:B0:3B:C8 Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 020B Signing time: Sat 19 Jul 2025 02:36:52 +0000 Manifest this update: Sat 19 Jul 2025 02:36:51 +0000 Manifest next update: Sat 26 Jul 2025 02:36:51 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: QcGi8pE3Fl9yJLRNItWGIj4ORbe8BgAhRihJZk1XxRU=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Jul 19 02:36:51 2025 GMT Not After : Jul 26 02:36:51 2025 GMT Subject: CN=687b04c3-14a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:64:41:41:02:a0:dd:47:e3:db:cf:f4:17: bf:25:46:4b:37:b8:81:c8:11:76:35:45:65:6f:67: aa:1e:17:23:1e:ed:03:f4:61:2d:a4:46:98:f7:5b: ba:52:84:b7:8c:02:6c:9b:d1:9d:2a:a5:1f:f7:61: 0d:b2:c7:10:d6:70:a3:13:38:f9:35:8a:9a:7a:49: 37:c4:7e:f6:42:10:16:6b:06:e1:b4:63:ab:9b:00: d5:ec:b7:66:be:4e:59:13:e4:2d:5d:bb:58:e4:3e: 28:dd:0f:43:2a:24:e3:ae:dd:aa:51:df:b1:9e:91: 81:a8:24:91:22:b0:d3:72:c4:12:a5:39:ab:3f:22: 95:e0:fb:8b:a7:b1:ea:67:af:4b:0f:94:11:73:5a: b3:f5:ad:c0:9d:b2:f0:f8:01:c1:d8:e3:51:3b:99: 13:ce:d7:f8:21:b8:ab:93:4b:a0:3c:7a:37:ef:94: 82:c7:44:bb:c8:4d:41:57:11:0d:30:9a:f5:04:82: 9b:87:87:88:e4:53:23:85:3a:6f:d3:d7:ca:bd:1e: eb:52:5a:57:a0:03:f4:1b:6c:dd:1e:63:f4:f9:0d: 8b:b2:6b:92:45:3f:dd:95:a4:19:6e:79:11:9c:86: 92:d2:a0:67:06:6b:bf:13:31:6d:30:e1:a7:da:07: aa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F4:BD:60:E6:24:3E:0D:87:31:8D:4D:1C:20:47:81:26:B0:3B:C8 X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4f:d7:5b:3d:4a:bd:12:25:e3:69:69:a0:03:01:17:e9:94: 90:78:5e:1f:72:40:db:8d:76:de:ba:44:b0:a3:e7:c2:33:9e: c4:bb:79:cc:19:aa:da:ce:be:22:1e:19:05:07:77:68:3e:bc: 34:dc:b9:06:a9:9b:b4:4b:9f:49:95:a8:22:8f:fd:ec:cf:86: 2b:a1:76:94:57:a8:dd:87:8d:e6:79:be:c7:63:79:6a:30:ed: 89:4a:3e:af:93:15:9b:f4:3d:c7:99:66:90:95:05:bf:0d:f6: 28:a8:3a:e3:29:cf:ee:cc:a7:a1:a4:f2:b2:25:84:0e:b2:af: 91:94:ac:92:e6:b9:43:c7:da:a5:e1:01:af:ff:0c:a1:93:6a: 49:91:6f:e4:e6:97:31:cd:f3:8f:9a:f0:6a:a1:29:cf:04:e8: 0a:d3:c0:b5:98:1f:3b:98:4c:d2:3e:62:7e:62:f5:96:bb:89: 9a:b7:6c:32:2c:3c:4a:f0:9a:1f:7f:45:e7:69:db:6d:a1:4d: 15:b5:ed:95:a0:7b:82:81:9f:2c:d5:70:e2:56:44:39:d1:14: 1c:95:5e:d5:e3:74:dd:2b:15:78:e3:32:37:df:aa:e1:03:bf: c1:80:17:ee:46:d8:9b:e4:56:c7:eb:ce:a5:65:d3:da:bc:69: 60:94:59:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUwNzE5MDIzNjUxWhcNMjUwNzI2MDIzNjUxWjAYMRYwFAYD VQQDEw02ODdiMDRjMy0xNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVhkQUECoN1H49vP9Be/JUZLN7iByBF2NUVlb2eqHhcjHu0D9GEtpEaY91u6 UoS3jAJsm9GdKqUf92ENsscQ1nCjEzj5NYqaekk3xH72QhAWawbhtGOrmwDV7Ldm vk5ZE+QtXbtY5D4o3Q9DKiTjrt2qUd+xnpGBqCSRIrDTcsQSpTmrPyKV4PuLp7Hq Z69LD5QRc1qz9a3AnbLw+AHB2ONRO5kTztf4Ibirk0ugPHo375SCx0S7yE1BVxEN MJr1BIKbh4eI5FMjhTpv09fKvR7rUlpXoAP0G2zdHmP0+Q2LsmuSRT/dlaQZbnkR nIaS0qBnBmu/EzFtMOGn2geqEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD0vWDm JD4NhzGNTRwgR4EmsDvIMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/T9dbPUq9EiXjaWmgAwEX6ZSQeF4fckDbjXbeukSwo+fCM57Eu3nM Garazr4iHhkFB3doPrw03LkGqZu0S59Jlagij/3sz4YroXaUV6jdh43meb7HY3lq MO2JSj6vkxWb9D3HmWaQlQW/DfYoqDrjKc/uzKehpPKyJYQOsq+RlKyS5rlDx9ql 4QGv/wyhk2pJkW/k5pcxzfOPmvBqoSnPBOgK08C1mB87mEzSPmJ+YvWWu4mat2wy LDxK8Joff0XnadttoU0Vte2VoHuCgZ8s1XDiVkQ50RQclV7V43TdKxV44zI336rh A7/BgBfuRtib5FbH686lZdPavGlglFmC -----END CERTIFICATE-----Generated at Sun Jul 20 12:01:37 2025 by rpki-client