$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: 8BMqU+7OL4EgwIfGECejQXl+Jg9k4vuF61ygr5cNma4= Subject key identifier: CF:53:2B:40:2B:28:7C:0E:A2:0C:62:B7:F7:E1:4E:E7:5E:5A:37:74 Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 22 Signing time: Wed 23 Jul 2025 08:11:36 +0000 Manifest this update: Wed 23 Jul 2025 08:11:36 +0000 Manifest next update: Wed 30 Jul 2025 08:11:36 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: axPdOhUaYtYpCovOS0twhqrk+DiRNEex5iYU9bP5/SE=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: Jul 23 08:11:36 2025 GMT Not After : Jul 30 08:11:36 2025 GMT Subject: CN=68809938-f54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:2b:72:8a:ab:26:3f:f8:0a:7e:3f:9b:5f: 47:85:e2:12:00:44:19:dc:3d:be:26:90:a9:ac:d1: d2:d3:4a:fc:92:b9:37:ff:a0:df:4e:d1:14:79:6e: 23:35:5b:dc:e4:71:66:db:13:33:ec:6a:ea:89:67: 62:1d:43:39:3a:df:ca:b0:84:c7:d9:5e:ff:0f:bb: 34:5f:55:70:a1:2d:ba:4d:94:57:18:24:f8:1c:a5: c9:2f:eb:6f:52:14:45:40:26:74:c1:74:15:21:84: 5e:f7:e8:22:2f:07:05:24:a0:2b:db:0c:c8:cc:0b: 7c:9e:6b:10:3a:55:b7:1a:51:dd:92:c9:0c:8b:50: 6c:8e:63:15:b8:c0:00:f3:f8:62:de:ef:ab:be:0e: 34:81:5d:2f:0b:c0:b6:67:de:98:7a:2b:b2:7b:24: f7:61:4b:eb:30:47:13:81:ab:56:6b:98:ff:38:53: ec:c3:41:43:f5:58:03:62:86:4f:27:ad:ec:6c:0f: 44:a9:6f:60:cc:a5:f1:e4:0b:9f:26:0b:5d:5c:e5: 14:61:29:fe:d9:05:53:99:ee:2e:87:7f:7c:ee:d0: 87:cc:c1:1a:7e:32:65:e2:87:08:22:73:df:00:de: bf:22:d6:22:8b:52:e4:7f:7f:f6:f7:77:da:dd:25: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:53:2B:40:2B:28:7C:0E:A2:0C:62:B7:F7:E1:4E:E7:5E:5A:37:74 X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a5:26:3e:48:c1:a7:a5:0d:49:82:d7:6f:28:ef:bd:97:5c: cb:1d:41:16:4d:8e:b0:ce:0d:c3:a1:f8:ef:bd:74:28:b3:d0: f1:66:70:9d:ff:f0:44:cf:06:f8:b3:79:32:92:bb:47:b7:e9: a0:bb:0f:c6:a3:c1:e8:29:4d:f2:d0:55:72:93:b8:79:61:c7: 74:46:7c:fc:ac:bd:b4:88:7d:dd:6e:7f:b5:34:91:0c:82:ed: 6e:dc:76:a6:7a:3c:85:e6:72:ce:c3:5c:f4:68:2c:a6:ee:ae: 1e:e9:87:e3:2e:06:4c:ea:5d:75:71:85:14:5a:11:60:3d:1d: 4c:58:3f:53:5c:f5:ec:c4:8d:d5:dd:b0:62:31:31:2a:01:22: c9:22:83:23:62:ad:ce:35:bf:19:60:64:60:b0:8c:d4:8d:02: 7d:6e:fe:b9:81:94:a6:c1:2c:d3:69:98:2b:93:60:49:f0:7c: 0d:d3:d0:c3:8b:4d:7e:20:c2:45:fb:e2:47:3c:28:cf:32:6e: 5d:0d:9a:da:66:ea:55:20:02:27:bc:6f:0a:9e:ca:37:e1:69: 1e:7f:95:7a:bb:f6:2c:69:d0:9e:9e:52:03:70:70:e6:d9:01: 71:a9:68:6f:80:4a:66:08:54:b3:5d:5a:fc:83:15:b3:0f:b4: 3c:0e:48:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTA3MjMwODExMzZaFw0yNTA3MzAwODExMzZaMBgxFjAUBgNV BAMTDTY4ODA5OTM4LWY1NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOfityiqsmP/gKfj+bX0eF4hIARBncPb4mkKms0dLTSvySuTf/oN9O0RR5biM1 W9zkcWbbEzPsauqJZ2IdQzk638qwhMfZXv8PuzRfVXChLbpNlFcYJPgcpckv629S FEVAJnTBdBUhhF736CIvBwUkoCvbDMjMC3yeaxA6VbcaUd2SyQyLUGyOYxW4wADz +GLe76u+DjSBXS8LwLZn3ph6K7J7JPdhS+swRxOBq1ZrmP84U+zDQUP1WANihk8n rexsD0Spb2DMpfHkC58mC11c5RRhKf7ZBVOZ7i6Hf3zu0IfMwRp+MmXihwgic98A 3r8i1iKLUuR/f/b3d9rdJZ0DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz1MrQCso fA6iDGK39+FO515aN3QwHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGKlJj5IwaelDUmC128o772XXMsdQRZNjrDODcOh+O+9dCiz0PFmcJ3/ 8ETPBvizeTKSu0e36aC7D8ajwegpTfLQVXKTuHlhx3RGfPysvbSIfd1uf7U0kQyC 7W7cdqZ6PIXmcs7DXPRoLKburh7ph+MuBkzqXXVxhRRaEWA9HUxYP1Nc9ezEjdXd sGIxMSoBIskigyNirc41vxlgZGCwjNSNAn1u/rmBlKbBLNNpmCuTYEnwfA3T0MOL TX4gwkX74kc8KM8ybl0Nmtpm6lUgAie8bwqeyjfhaR5/lXq79ixp0J6eUgNwcObZ AXGpaG+ASmYIVLNdWvyDFbMPtDwOSKg= -----END CERTIFICATE-----Generated at Thu Jul 24 05:02:12 2025 by rpki-client