$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json) Hash identifier: MhlZ2n+HghzquhTVJpYPLkJE4wSfbPa5yxiDmkgSgnI= Subject key identifier: 19:28:EA:BD:77:02:5E:8D:1A:CA:68:4F:4D:96:1E:11:33:AF:B6:2E Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft Manifest number: 0C62 Signing time: Thu 24 Jul 2025 18:33:35 +0000 Manifest this update: Thu 24 Jul 2025 18:33:34 +0000 Manifest next update: Thu 31 Jul 2025 18:33:34 +0000 Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: ElCJ5EQvSXZfLaGfgoVZ2fGbw6jfVtYW5Jlqlryenp0=) 2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: YkdaufQKgLmZNVY5l1QIovl6Z82cSg5d5l7gPKlvt34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 18:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Validity Not Before: Jul 24 18:33:34 2025 GMT Not After : Jul 31 18:33:34 2025 GMT Subject: CN=68827c7f-0b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:15:b3:20:26:2a:16:91:b8:73:42:1d:45: de:b8:58:da:39:8a:b1:57:93:d9:f1:b4:0f:68:51: 65:eb:20:3b:8e:c0:fd:2f:3b:79:b0:7f:f1:69:d2: f4:8a:74:f7:5e:f7:41:63:45:a8:bf:ac:5c:a3:c3: 52:c8:f0:bb:75:65:bd:fa:13:c6:88:ba:28:c6:07: 08:70:66:9c:6b:84:71:7a:6d:39:1e:43:72:5d:a4: 1f:3d:dd:e4:b5:81:8b:c5:cb:79:ee:14:cb:c9:ea: 9c:67:89:cd:23:ca:d9:1c:ab:8c:15:b4:b3:c2:35: 47:46:de:42:e0:d0:91:ba:0c:5f:bd:f3:81:26:27: 6f:b2:f0:82:15:5d:4f:e3:9a:d2:e9:71:fa:bf:61: 78:05:c7:0b:1a:74:01:7a:dc:44:f6:79:fe:28:e8: 46:4e:ff:a3:9d:45:92:8a:ca:05:53:4d:d8:64:78: a9:d7:e6:51:6e:63:99:95:3f:47:64:40:39:fb:57: 87:26:fd:ca:8d:8a:b2:43:56:17:9a:8c:8b:ca:38: 1e:0d:43:06:f5:a7:a3:df:f9:2f:ce:4d:fd:86:fc: 9c:3f:1c:4d:ef:49:b3:bd:bf:57:e5:84:40:26:27: 52:f1:c0:77:f0:ea:43:a9:9b:0e:f9:a6:30:a2:21: 3c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:28:EA:BD:77:02:5E:8D:1A:CA:68:4F:4D:96:1E:11:33:AF:B6:2E X509v3 Authority Key Identifier: keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:8e:16:e8:76:ba:fe:7d:15:54:39:a9:20:dc:3e:4e:6b:b2: 04:58:e0:63:bc:89:93:b4:bd:6f:1e:e4:ac:e1:a6:2e:35:e4: ab:47:a9:1e:18:16:9b:6c:e5:97:bb:01:3c:11:c2:db:d5:66: 65:c8:ac:f8:79:f6:a4:81:a3:50:a3:94:6f:f9:96:a7:05:de: c3:3b:09:e7:d6:11:f5:01:30:9c:3d:9c:05:d1:be:47:6d:02: 51:72:68:2c:4b:31:d0:28:7f:36:89:9e:c0:5e:0d:72:91:49: 6c:36:7d:cd:42:c1:51:09:4b:22:9a:52:70:98:18:bd:1c:e9: 58:73:0c:77:93:6f:3e:31:95:05:8d:5f:9e:44:ed:09:ab:a9: 33:68:a4:2c:95:2b:98:c4:8f:3d:fa:44:c8:b0:70:9a:47:b9: b5:0b:47:18:98:14:d6:1f:9a:66:fe:06:de:e4:f0:70:2e:22: 5d:91:7b:0d:56:8f:8f:de:3f:7d:9a:8a:5a:92:db:95:f1:55: f9:6b:65:e4:d8:62:ee:6c:8c:c5:b7:f2:c5:fb:eb:f3:c9:7b: 58:df:ca:fe:d0:73:15:da:46:ba:27:b4:73:0a:43:78:34:6b: 40:8d:db:04:5a:9d:43:b9:6e:82:38:54:02:4d:34:5a:87:bf: f6:d8:b3:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNGOTkxMTAvBgNVBAUTKEY2MUYxMjEwNDg2MzFGQjc2OEQ1NTVDM0JGQTlCMDIw Njg1RThGNDkwHhcNMjUwNzI0MTgzMzM0WhcNMjUwNzMxMTgzMzM0WjAYMRYwFAYD VQQDEw02ODgyN2M3Zi0wYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVcVsyAmKhaRuHNCHUXeuFjaOYqxV5PZ8bQPaFFl6yA7jsD9Lzt5sH/xadL0 inT3XvdBY0Wov6xco8NSyPC7dWW9+hPGiLooxgcIcGaca4Rxem05HkNyXaQfPd3k tYGLxct57hTLyeqcZ4nNI8rZHKuMFbSzwjVHRt5C4NCRugxfvfOBJidvsvCCFV1P 45rS6XH6v2F4BccLGnQBetxE9nn+KOhGTv+jnUWSisoFU03YZHip1+ZRbmOZlT9H ZEA5+1eHJv3KjYqyQ1YXmoyLyjgeDUMG9aej3/kvzk39hvycPxxN70mzvb9X5YRA JidS8cB38OpDqZsO+aYwoiE8ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBko6r13 Al6NGspoT02WHhEzr7YuMB8GA1UdIwQYMBaAFPYfEhBIYx+3aNVVw7+psCBoXo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0Y5OS9CNzM4NDAxMDA1 M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3ZG8xVlhEdjZtd0lHaGVq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloOFNFRWhqSDdkbzFWWER2Nm13SUdoZWoway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0Y5OS9CNzM4NDAxMDA1M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3 ZG8xVlhEdjZtd0lHaGVqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnjhbodrr+fRVUOakg3D5Oa7IEWOBjvImTtL1vHuSs4aYuNeSrR6ke GBabbOWXuwE8EcLb1WZlyKz4efakgaNQo5Rv+ZanBd7DOwnn1hH1ATCcPZwF0b5H bQJRcmgsSzHQKH82iZ7AXg1ykUlsNn3NQsFRCUsimlJwmBi9HOlYcwx3k28+MZUF jV+eRO0Jq6kzaKQslSuYxI89+kTIsHCaR7m1C0cYmBTWH5pm/gbe5PBwLiJdkXsN Vo+P3j99mopaktuV8VX5a2Xk2GLubIzFt/LF++vzyXtY38r+0HMV2ka6J7RzCkN4 NGtAjdsEWp1DuW6COFQCTTRah7/22LN4 -----END CERTIFICATE-----Generated at Sat Jul 26 02:04:32 2025 by rpki-client