$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: eYsq9JT6zGD6SaRK4eVcazCW9O5gMLK0zjsPoQevVV0= Subject key identifier: 8F:1D:B2:A4:79:EE:8A:82:FC:69:E2:8A:CE:26:14:CF:39:E5:05:0E Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: B3 Signing time: Sat 19 Jul 2025 06:11:56 +0000 Manifest this update: Sat 19 Jul 2025 06:11:55 +0000 Manifest next update: Sat 26 Jul 2025 06:11:55 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: QQzB/CKh5jl0UWjlelCp2dWDZu55vvTavFzVUZGMhjk=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: E5suk2cFemWvaevEKzcTmHU5tWd+iiNDKFUohuI1SXE=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: spLMbb3mjNqo3JOAdT4XdnGINqr0/vPrWt9FF24zq10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Jul 19 06:11:55 2025 GMT Not After : Jul 26 06:11:55 2025 GMT Subject: CN=687b372c-4965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:0d:38:10:fb:d6:14:47:1e:3c:08:2b:3a: 0e:22:27:99:88:6d:68:bc:ef:82:1b:86:26:9c:e8: 3a:ed:3c:ef:cc:91:b3:6c:e7:ab:d6:9c:58:f1:92: 33:49:b4:d4:8c:0e:fc:5d:a4:3e:2c:96:6f:78:23: 51:02:8a:bb:14:87:87:7e:bf:eb:1e:6d:e9:6e:bb: 78:ea:6b:81:cb:96:33:4e:c3:68:c9:d7:e2:23:e6: 9c:09:d3:ec:7a:98:fa:01:2d:da:ec:e1:e7:bb:e4: bb:b8:e1:91:59:83:c3:18:c5:cb:84:49:d4:a3:63: 6c:94:ab:63:ab:e3:1c:ed:e3:a7:0a:3e:a6:4b:8c: 3d:3a:8e:2b:84:c8:f4:3d:26:38:f9:a0:0b:0c:ac: 7d:d5:79:e8:ba:f8:63:c4:d3:9d:6b:59:d7:63:0d: bb:f8:5d:13:f3:a1:9a:95:6a:b9:91:c3:9b:43:04: b9:62:88:12:e1:d2:6e:77:23:ea:c6:47:0b:de:f7: 65:ef:19:40:fe:86:0b:7e:ba:00:30:a7:70:db:bb: e2:4a:42:89:44:3a:8d:25:b6:de:e5:e6:03:32:d6: 5d:cf:ce:bc:61:59:20:ce:8c:98:f1:01:70:63:5c: 04:a0:35:7c:3e:60:01:92:b0:b1:a3:58:e7:24:a5: 5a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:B2:A4:79:EE:8A:82:FC:69:E2:8A:CE:26:14:CF:39:E5:05:0E X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:16:41:12:6b:71:34:7c:52:ab:93:2b:c8:96:a8:6b:52:3f: f0:c5:3a:b4:e4:c3:e7:9f:29:3c:36:c3:15:b5:31:6c:b1:1d: ae:96:e2:46:c0:62:84:b5:11:4f:b9:14:53:08:53:6c:4c:5b: bf:17:d1:54:e8:6a:33:56:5f:78:f2:f6:d8:cb:84:47:4b:77: cd:89:e5:cc:ab:cb:49:11:c6:4e:60:bc:f3:59:52:63:c3:8f: 66:34:8b:c2:3b:0b:a8:0c:61:4f:fc:1e:50:3c:bd:ed:a4:93: 80:37:12:33:ad:f6:fa:28:be:d7:16:4d:6b:fa:3c:fd:19:9d: c5:36:8e:5f:1c:7d:3d:25:db:fc:af:15:a3:6d:61:9c:99:d5: 84:78:61:2d:8e:2a:c1:a3:1f:75:c4:a7:42:13:51:71:21:be: f2:d1:b5:e6:a1:f4:dd:d0:0e:15:81:35:e9:1d:60:af:76:43: 82:f7:2b:e4:8c:f0:03:e0:38:97:b6:4e:73:86:f2:5d:3a:7a: 70:be:11:a9:4e:01:d1:c3:28:be:1f:32:f2:cc:6c:c6:38:04: 81:f0:58:0b:a4:39:e7:a0:d5:76:fd:eb:40:ee:69:98:97:4c: 36:65:9c:1b:46:d2:6c:9d:48:30:04:0e:2c:0e:83:0c:67:04: 8d:8b:73:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUwNzE5MDYxMTU1WhcNMjUwNzI2MDYxMTU1WjAYMRYwFAYD VQQDEw02ODdiMzcyYy00OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FUNOBD71hRHHjwIKzoOIieZiG1ovO+CG4YmnOg67TzvzJGzbOer1pxY8ZIz SbTUjA78XaQ+LJZveCNRAoq7FIeHfr/rHm3pbrt46muBy5YzTsNoydfiI+acCdPs epj6AS3a7OHnu+S7uOGRWYPDGMXLhEnUo2NslKtjq+Mc7eOnCj6mS4w9Oo4rhMj0 PSY4+aALDKx91XnouvhjxNOda1nXYw27+F0T86GalWq5kcObQwS5YogS4dJudyPq xkcL3vdl7xlA/oYLfroAMKdw27viSkKJRDqNJbbe5eYDMtZdz868YVkgzoyY8QFw Y1wEoDV8PmABkrCxo1jnJKVa+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8dsqR5 7oqC/Gniis4mFM855QUOMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkFkESa3E0fFKrkyvIlqhrUj/wxTq05MPnnyk8NsMVtTFssR2uluJG wGKEtRFPuRRTCFNsTFu/F9FU6GozVl948vbYy4RHS3fNieXMq8tJEcZOYLzzWVJj w49mNIvCOwuoDGFP/B5QPL3tpJOANxIzrfb6KL7XFk1r+jz9GZ3FNo5fHH09Jdv8 rxWjbWGcmdWEeGEtjirBox91xKdCE1FxIb7y0bXmofTd0A4VgTXpHWCvdkOC9yvk jPAD4DiXtk5zhvJdOnpwvhGpTgHRwyi+HzLyzGzGOASB8FgLpDnnoNV2/etA7mmY l0w2ZZwbRtJsnUgwBA4sDoMMZwSNi3Ow -----END CERTIFICATE-----Generated at Sun Jul 20 16:50:07 2025 by rpki-client