$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json) Hash identifier: QGyZ8DhAWdqu7WnFaT8yqEO/e0TVMIeFX1/wcbteZBw= Subject key identifier: F5:0E:2E:3D:A4:A9:55:54:9C:2E:54:99:1D:37:4D:C3:CE:43:69:F7 Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 112E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft Manifest number: 1111 Signing time: Fri 18 Jul 2025 17:26:42 +0000 Manifest this update: Fri 18 Jul 2025 17:26:42 +0000 Manifest next update: Fri 25 Jul 2025 17:26:42 +0000 Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: PPI/2TTmnV6jbveAm8rVRt7lxwPD1OaQe66QCKVT1VU=) 2: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: b6hr7IhNuFUDMwuO8Nb6ge3GDbb3DEInCX/HHEiFoVM=) 3: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: skRP+9UcVz6p99ItfpkcWdsCVMpTNN+fUT0lptapL6Y=) 4: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: ShmWGPi16fistc8ldhgNj0wn72/E+SCOVnORBpUTPkI=) 5: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: Z7+3DvwJtElz8GyUhaEbEO58MPBIQdKLUzyM58gm72k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4398 (0x112e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Validity Not Before: Jul 18 17:26:42 2025 GMT Not After : Jul 25 17:26:42 2025 GMT Subject: CN=687a83d2-4d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:c8:57:6a:40:d6:41:b7:41:29:2a:ef:e3: f7:96:5a:28:ba:60:e8:6a:4b:6e:d9:d7:1d:8e:aa: 55:97:83:9b:80:cc:6b:52:5a:93:6d:af:9d:52:33: e6:c8:8d:fc:bc:da:be:a4:0e:0d:8b:cf:be:94:7e: ed:ad:60:16:9c:bd:e8:7b:26:48:77:f6:b6:b5:70: 21:41:2a:d2:ce:39:c8:e2:21:a9:74:00:cb:fc:bf: de:88:d6:20:de:21:9c:0e:46:19:92:94:8b:61:9e: bc:3a:5d:05:ae:6c:46:d2:3d:38:73:18:e2:eb:e1: 9a:b3:46:7a:90:c3:6f:33:b7:e3:63:65:a3:6a:be: 7f:bf:f3:cc:37:d9:ab:24:8b:18:49:21:81:ad:80: d9:ee:9b:a8:b8:42:a0:72:3f:2a:4c:92:1d:5f:d4: 74:0f:84:90:65:c4:9f:b7:9b:d7:0d:0d:cc:71:14: 0a:2f:fa:d0:92:dd:32:30:be:56:2d:a6:ce:75:a0: d0:e9:ec:71:88:ab:e5:60:f9:e4:8c:a4:99:b3:f7: 0c:0d:49:b9:d6:b9:c9:74:98:cd:4c:05:dc:3a:7b: bc:13:63:0c:56:1f:5b:2a:77:2f:a8:22:ec:07:39: a2:a4:22:53:e9:ed:c5:b6:4e:63:ba:26:93:16:fd: 4e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0E:2E:3D:A4:A9:55:54:9C:2E:54:99:1D:37:4D:C3:CE:43:69:F7 X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cb:8b:6b:d9:f3:ae:9f:20:75:85:58:a0:33:1c:fd:ef:1d: 2b:c8:3d:94:05:a1:1d:cc:52:23:08:9c:d9:7d:d3:c7:eb:30: e0:1b:04:94:1b:44:a5:80:6d:bd:ba:fc:c8:08:47:0e:21:c6: 25:72:09:10:97:84:30:e3:a9:af:c0:89:ff:0a:36:cf:aa:3c: 2e:59:93:7b:62:35:a3:43:ff:01:28:4c:e5:ec:c3:de:d2:b8: 7e:a9:74:c3:2d:36:91:5c:45:c3:c5:44:cd:1a:c2:8c:47:bb: 15:a1:e1:e1:b6:b1:b5:1e:9f:85:ae:84:07:b7:76:82:67:1a: 55:50:8c:43:dc:fd:c5:33:39:f8:cf:d7:c1:7d:46:a1:6e:ee: 45:ec:a5:97:fb:3b:5a:0a:ac:5b:5a:fc:d3:50:49:b7:79:0b: 56:00:84:82:66:6d:36:74:b1:1d:91:42:79:e8:79:11:ce:4b: 94:74:ad:d8:bf:63:9c:2d:0c:a4:48:43:a6:33:62:cf:69:d8: 98:1e:3b:37:86:8a:c8:f1:49:91:3d:5f:bf:7a:34:91:c0:3a: 8b:c7:b3:a3:d5:0a:78:95:b6:cb:3d:11:f1:dc:65:b4:45:3d: 2b:94:ca:c7:97:53:8d:fd:d2:92:0c:e8:4c:1c:ea:c5:f8:8f: d7:63:94:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICES4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjUwNzE4MTcyNjQyWhcNMjUwNzI1MTcyNjQyWjAYMRYwFAYD VQQDEw02ODdhODNkMi00ZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsbIV2pA1kG3QSkq7+P3llooumDoaktu2dcdjqpVl4ObgMxrUlqTba+dUjPm yI38vNq+pA4Ni8++lH7trWAWnL3oeyZId/a2tXAhQSrSzjnI4iGpdADL/L/eiNYg 3iGcDkYZkpSLYZ68Ol0FrmxG0j04cxji6+Gas0Z6kMNvM7fjY2Wjar5/v/PMN9mr JIsYSSGBrYDZ7puouEKgcj8qTJIdX9R0D4SQZcSft5vXDQ3McRQKL/rQkt0yML5W LabOdaDQ6exxiKvlYPnkjKSZs/cMDUm51rnJdJjNTAXcOnu8E2MMVh9bKncvqCLs BzmipCJT6e3Ftk5juiaTFv1OCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUOLj2k qVVUnC5UmR03TcPOQ2n3MB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc5Ny8wOUYyRDk5NDFBMjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3Yy M2d1bWtsUGJ2d0VRUGxPa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6y4tr2fOunyB1hVigMxz97x0ryD2UBaEdzFIjCJzZfdPH6zDgGwSU G0SlgG29uvzICEcOIcYlcgkQl4Qw46mvwIn/CjbPqjwuWZN7YjWjQ/8BKEzl7MPe 0rh+qXTDLTaRXEXDxUTNGsKMR7sVoeHhtrG1Hp+FroQHt3aCZxpVUIxD3P3FMzn4 z9fBfUahbu5F7KWX+ztaCqxbWvzTUEm3eQtWAISCZm02dLEdkUJ56HkRzkuUdK3Y v2OcLQykSEOmM2LPadiYHjs3horI8UmRPV+/ejSRwDqLx7Oj1Qp4lbbLPRHx3GW0 RT0rlMrHl1ON/dKSDOhMHOrF+I/XY5Sc -----END CERTIFICATE-----Generated at Sun Jul 20 11:41:54 2025 by rpki-client