$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft File: koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft (raw, json) Hash identifier: 4BTZx+pZuMNXqvC0aZozaqGTSmoXGO8q7P2+hDgLCbo= Subject key identifier: 8F:75:5C:90:FD:9C:7E:D7:7B:AB:A7:AC:3D:3B:FB:42:33:0F:DB:F4 Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft Manifest number: 50 Signing time: Sat 19 Jul 2025 07:31:34 +0000 Manifest this update: Sat 19 Jul 2025 07:31:34 +0000 Manifest next update: Sat 26 Jul 2025 07:31:34 +0000 Files and hashes: 1: koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl (hash: xkVY17NnNdGkxOyM1pfnYHS7ilP1h/6xYwH7cpvBVDM=) 2: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (hash: zvy+2HhQd/n3VOaiuMrL5/OccoJAnqCm0UAKCkrWeWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Validity Not Before: Jul 19 07:31:34 2025 GMT Not After : Jul 26 07:31:34 2025 GMT Subject: CN=687b49d6-792a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:c9:f4:92:7b:33:74:85:86:ba:44:3d:d0: d1:b3:9e:a4:ac:67:9f:07:09:fe:54:47:9b:70:e5: 1d:0b:ee:e8:48:24:fc:f9:bb:32:e8:de:cf:8e:aa: b2:5a:33:d9:db:11:7d:cf:a6:cf:fa:56:0c:ae:17: 37:3c:4f:ea:83:62:78:b7:36:be:eb:dd:78:c4:f6: 06:41:59:61:46:d5:da:28:d1:da:5d:72:4b:8c:61: c1:9e:8d:ef:f4:b2:0a:59:dd:c0:cf:75:6a:b1:6b: 0f:67:a7:ca:43:1e:07:0b:c5:2d:5c:55:a5:c1:5b: 46:59:6e:9d:a8:d2:ab:a8:d7:dd:c6:3b:f9:c3:50: 33:e4:8d:9e:17:a7:27:c2:6e:a7:42:08:5b:9b:67: 02:23:f6:65:37:36:a4:32:3c:da:bf:6a:db:ed:29: 43:d5:26:db:76:87:17:53:aa:54:25:64:28:50:14: f7:c5:f8:99:b5:37:00:b5:2f:4a:a9:1d:de:7f:90: dd:dc:5a:29:2b:db:47:f2:fe:31:fe:cf:25:8f:ed: 6d:df:32:69:78:2b:db:e0:a1:7d:8b:c6:d6:3c:b5: 50:b5:5c:c8:75:8c:ad:62:80:9d:68:4a:dc:97:74: da:de:51:ab:17:a6:07:db:49:04:17:b6:e3:1c:ce: b2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:75:5C:90:FD:9C:7E:D7:7B:AB:A7:AC:3D:3B:FB:42:33:0F:DB:F4 X509v3 Authority Key Identifier: keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:77:5d:05:b9:19:d5:db:e4:0a:06:b8:3b:ff:83:94:34:a5: 51:0e:93:ff:03:ac:71:fd:32:4a:a5:0f:17:c1:16:c5:8e:ad: 33:d8:3e:61:b2:da:a6:ca:7a:80:ea:52:28:a9:80:21:d9:2f: 45:f3:13:1c:8a:ff:7d:a6:43:17:8f:f0:8d:c4:88:86:85:d7: 1a:96:5d:a2:30:0e:d2:72:62:d2:04:95:71:63:e6:bb:7d:47: 8a:09:7c:6e:7e:df:21:a1:c9:40:9f:cf:e8:92:e2:76:1f:40: 7b:25:c0:ae:c7:3c:5f:50:00:c2:64:09:f8:03:b0:4a:15:fc: 0a:12:20:1b:24:7e:75:89:fe:d8:3f:4f:7d:44:ab:31:d8:c7: 9b:ba:eb:dc:ba:2a:f0:0f:a3:61:1e:11:92:4e:73:9f:1f:32: 14:34:57:bb:70:7f:1d:cf:21:40:e2:03:04:c4:e1:ec:ed:64: 3d:13:92:e1:0f:e9:e5:81:6a:43:ed:df:4a:09:b5:e6:cc:6a: 84:ca:4b:59:cc:29:1e:33:62:06:c2:90:57:fa:dd:90:93:19: b2:94:a3:38:26:2a:dd:57:2a:d1:89:54:a4:90:67:d8:d4:ec: 1d:ff:e9:08:eb:9e:1c:6d:50:a6:ae:30:6f:8d:9c:3b:72:c5: 9d:a1:db:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODY3OTExMC8GA1UEBRMoOTI4MEYwNzA3NDc3NTMzODdCNkJBNjU3MzJENkRENzk5 MkIzNTBDMTAeFw0yNTA3MTkwNzMxMzRaFw0yNTA3MjYwNzMxMzRaMBgxFjAUBgNV BAMTDTY4N2I0OWQ2LTc5MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcxcn0knszdIWGukQ90NGznqSsZ58HCf5UR5tw5R0L7uhIJPz5uzLo3s+OqrJa M9nbEX3Pps/6VgyuFzc8T+qDYni3Nr7r3XjE9gZBWWFG1doo0dpdckuMYcGeje/0 sgpZ3cDPdWqxaw9np8pDHgcLxS1cVaXBW0ZZbp2o0quo193GO/nDUDPkjZ4XpyfC bqdCCFubZwIj9mU3NqQyPNq/atvtKUPVJtt2hxdTqlQlZChQFPfF+Jm1NwC1L0qp Hd5/kN3cWikr20fy/jH+zyWP7W3fMml4K9vgoX2LxtY8tVC1XMh1jK1igJ1oStyX dNreUasXpgfbSQQXtuMczrLTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj3VckP2c ftd7q6esPTv7QjMP2/QwHwYDVR0jBBgwFoAUkoDwcHR3Uzh7a6ZXMtbdeZKzUMEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4Njc5L0NCMkNCM0NFRUE3 NzExRUZBNTYzNTY4MEM0RjlBRTAyL2tvRHdjSFIzVXpoN2E2WlhNdGJkZVpLelVN RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva29Ed2NIUjNVemg3YTZaWE10YmRlWkt6VU1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 Njc5L0NCMkNCM0NFRUE3NzExRUZBNTYzNTY4MEM0RjlBRTAyL2tvRHdjSFIzVXpo N2E2WlhNdGJkZVpLelVNRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIJ3XQW5GdXb5AoGuDv/g5Q0pVEOk/8DrHH9MkqlDxfBFsWOrTPYPmGy 2qbKeoDqUiipgCHZL0XzExyK/32mQxeP8I3EiIaF1xqWXaIwDtJyYtIElXFj5rt9 R4oJfG5+3yGhyUCfz+iS4nYfQHslwK7HPF9QAMJkCfgDsEoV/AoSIBskfnWJ/tg/ T31EqzHYx5u669y6KvAPo2EeEZJOc58fMhQ0V7twfx3PIUDiAwTE4eztZD0TkuEP 6eWBakPt30oJtebMaoTKS1nMKR4zYgbCkFf63ZCTGbKUozgmKt1XKtGJVKSQZ9jU 7B3/6QjrnhxtUKauMG+NnDtyxZ2h2xI= -----END CERTIFICATE-----Generated at Sun Jul 20 15:03:43 2025 by rpki-client