$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: UIQWpZKZq7Jr7vW6KlYvXaf+QYJzaC9SzAfpokMK25Y= Subject key identifier: D9:EF:25:66:B3:9A:5D:3E:93:46:2A:D6:E6:B8:9E:7C:9B:59:30:53 Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: 0111 Signing time: Mon 21 Jul 2025 05:02:31 +0000 Manifest this update: Mon 21 Jul 2025 05:02:30 +0000 Manifest next update: Mon 28 Jul 2025 05:02:30 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: DANpE6rESv50C9SlSE3JdVeonytLrQae+1loDjAiK+k=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: Jul 21 05:02:30 2025 GMT Not After : Jul 28 05:02:30 2025 GMT Subject: CN=687dc9e7-95f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:9a:cb:3e:33:ed:97:40:78:0e:66:2c:dd: a5:40:3f:6d:d2:c1:8f:40:37:9a:25:90:55:ad:71: a0:de:fd:cb:f7:32:12:0b:97:a1:54:5d:f8:1a:df: 45:41:e2:9d:74:47:47:e0:bb:e2:4e:65:86:d1:de: 78:16:8c:05:00:cd:5c:ad:2a:af:59:8e:9a:2e:69: 54:04:ed:d2:fb:17:cb:0d:ca:ba:a1:84:60:a7:c9: 94:60:c8:4c:3a:34:6f:de:67:09:16:ad:6c:49:26: 94:4f:93:44:8c:9b:60:3b:91:ba:e6:3e:86:d0:76: 96:d0:ed:f9:15:0e:5b:ae:1c:78:d4:d3:66:60:01: 9a:26:5d:ac:49:1f:ab:16:38:24:7b:68:63:f8:a4: cb:fc:c6:48:b8:59:71:92:72:0c:27:54:85:6c:0a: 68:b3:31:12:4e:73:d9:92:31:a9:2c:c0:ad:59:1c: 06:f6:65:bc:9e:46:10:8e:23:10:9e:67:4f:7a:ed: cd:6e:7b:ae:ba:a2:7f:4f:91:f1:42:9a:f5:1e:42: b3:6d:2b:9d:88:5f:bc:47:e2:10:f1:de:a0:5c:a6: 98:c0:85:4c:67:3c:5f:c1:d7:ab:fb:91:5e:65:5f: cd:bb:1b:08:c8:63:11:51:02:22:c6:9f:d8:f3:1e: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EF:25:66:B3:9A:5D:3E:93:46:2A:D6:E6:B8:9E:7C:9B:59:30:53 X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:43:e6:ed:b5:1e:5e:75:1a:57:8d:f6:36:93:bd:96:02:f4: 9a:fd:77:a5:f9:4e:c6:f9:4b:c8:a8:0d:17:27:40:a0:1e:68: de:f6:95:d1:15:98:3a:5e:20:03:1c:09:32:9e:2f:c2:6b:67: b4:3f:d1:c2:85:55:b5:8c:b1:a6:50:d4:21:b1:7c:d3:53:70: 08:9c:dd:ae:07:5c:92:84:90:df:d6:9c:cc:65:e0:33:f6:83: f7:dc:76:be:eb:75:b0:c0:2c:22:45:0c:78:b9:c3:ae:a9:f2: da:2d:f9:ef:f1:8f:44:3c:64:d4:a0:36:1f:09:6b:8b:24:5a: 28:91:f0:57:a5:e2:11:05:78:f1:f0:0c:07:f9:a3:fe:88:f4: 0f:cb:54:60:4a:45:98:dc:c7:d4:d1:e3:e7:55:f0:cc:70:fe: f0:f5:1a:48:38:16:31:ab:af:58:05:42:2c:1e:8c:00:47:1b: 86:95:a5:e9:71:4b:b1:3d:b4:70:b3:b7:c1:a8:bb:dc:63:2a: 14:e9:56:ca:ea:7f:b4:1a:cc:bc:4d:6f:c5:9d:6f:ef:b9:fa: 30:47:f4:f3:92:6b:e5:86:5e:2f:17:e0:46:60:90:5f:fe:86: ca:ba:3a:ee:ac:f7:6d:f5:b9:fc:21:19:24:57:d4:f6:7c:9a: f8:90:4c:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUwNzIxMDUwMjMwWhcNMjUwNzI4MDUwMjMwWjAYMRYwFAYD VQQDEw02ODdkYzllNy05NWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sOayz4z7ZdAeA5mLN2lQD9t0sGPQDeaJZBVrXGg3v3L9zISC5ehVF34Gt9F QeKddEdH4LviTmWG0d54FowFAM1crSqvWY6aLmlUBO3S+xfLDcq6oYRgp8mUYMhM OjRv3mcJFq1sSSaUT5NEjJtgO5G65j6G0HaW0O35FQ5brhx41NNmYAGaJl2sSR+r Fjgke2hj+KTL/MZIuFlxknIMJ1SFbAposzESTnPZkjGpLMCtWRwG9mW8nkYQjiMQ nmdPeu3NbnuuuqJ/T5HxQpr1HkKzbSudiF+8R+IQ8d6gXKaYwIVMZzxfwder+5Fe ZV/NuxsIyGMRUQIixp/Y8x6O2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnvJWaz ml0+k0Yq1ua4nnybWTBTMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6 ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvQ+bttR5edRpXjfY2k72WAvSa/Xel+U7G+UvIqA0XJ0CgHmje9pXR FZg6XiADHAkyni/Ca2e0P9HChVW1jLGmUNQhsXzTU3AInN2uB1yShJDf1pzMZeAz 9oP33Ha+63WwwCwiRQx4ucOuqfLaLfnv8Y9EPGTUoDYfCWuLJFookfBXpeIRBXjx 8AwH+aP+iPQPy1RgSkWY3MfU0ePnVfDMcP7w9RpIOBYxq69YBUIsHowARxuGlaXp cUuxPbRws7fBqLvcYyoU6VbK6n+0Gsy8TW/FnW/vufowR/Tzkmvlhl4vF+BGYJBf /obKujrurPdt9bn8IRkkV9T2fJr4kEzH -----END CERTIFICATE-----Generated at Wed Jul 23 02:21:19 2025 by rpki-client