$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: Dg8lf38JJ+OufJddwpJaOV8ajoAbhPo83c5btAGV3RI= Subject key identifier: 02:DB:A7:28:55:CD:82:A9:30:34:B0:EF:90:C3:45:F5:1E:AB:56:19 Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 027C Signing time: Sat 19 Jul 2025 02:10:14 +0000 Manifest this update: Sat 19 Jul 2025 02:10:13 +0000 Manifest next update: Sat 26 Jul 2025 02:10:13 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: jePwWLatvy6Q2bNvBXfqQL9U5HGkWvlKD/L0TayV85I=) 2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: afDoQTBXFlKBM9yUFVyCep64AS8jLGn8fXLF8BGp1Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: Jul 19 02:10:13 2025 GMT Not After : Jul 26 02:10:13 2025 GMT Subject: CN=687afe85-2b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d2:66:de:bd:5c:07:1e:b7:3d:a1:fe:bd:45: 00:6f:dc:dd:54:fc:ac:62:91:5f:73:98:f6:28:7a: 41:cc:cb:82:01:1f:ad:4a:be:eb:68:4d:2b:20:90: 5b:d1:57:e6:c0:ec:37:48:79:03:de:80:4b:07:3d: a5:aa:05:65:72:20:9d:d4:dc:eb:87:d3:9c:5c:7b: a8:af:e2:1a:e2:9f:27:ac:43:ec:c2:9c:17:99:13: 24:1f:22:bb:3c:10:f9:d3:64:8f:26:63:14:5c:44: 02:0b:6b:78:aa:84:8b:e9:62:da:ca:ee:a4:12:c4: 22:a6:d6:f1:02:ae:16:b5:15:99:45:3a:76:6d:6e: 00:c2:c7:0f:6d:5f:c8:37:bd:92:6b:fc:53:4a:b3: 17:fc:e2:56:f3:d8:67:84:59:98:32:5e:f3:39:16: 22:57:c5:64:83:08:92:b5:68:27:ad:a6:f6:47:22: 9d:b8:cd:d6:85:f0:dd:08:26:75:c4:9f:18:54:d2: d5:56:14:b0:4d:3a:36:1a:b0:9e:ea:9f:44:d3:8a: 7d:c9:7e:27:b9:f0:99:3b:fe:01:c8:dc:05:8d:d9: 53:f3:2f:34:51:77:67:c4:8e:4e:fe:01:fd:90:d4: e5:de:f9:4c:67:51:a1:66:a8:af:40:b1:47:cb:51: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DB:A7:28:55:CD:82:A9:30:34:B0:EF:90:C3:45:F5:1E:AB:56:19 X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1d:8a:9a:38:08:e8:be:72:ff:29:77:a0:65:5e:3b:22:1b: 60:5f:c7:3e:8f:1d:fa:1e:5e:79:9a:74:4f:45:1d:0a:fb:3a: ba:9c:27:08:60:2b:81:68:6e:5e:30:79:1a:53:2c:f2:6c:51: fb:a9:b5:ae:15:46:a5:5e:08:7e:46:59:a0:34:82:9d:99:29: ea:81:91:30:69:5d:c8:5b:e2:84:b0:4a:a4:57:b7:f3:6d:1f: 1f:ff:8d:1e:24:77:20:2f:d9:49:72:26:4c:91:04:2c:39:c7: 6b:3c:78:be:e3:9f:f5:1a:bf:16:e5:ef:1d:30:ab:1d:ab:a9: 8c:64:4f:06:b7:fb:fd:f4:f1:dd:07:ab:31:7d:a0:31:19:2b: ff:72:5f:69:2c:d1:73:1c:c4:9d:e2:c2:24:eb:18:84:ec:58: 52:40:69:12:d1:69:4e:bb:04:07:f7:fe:b2:de:ee:bc:c9:06: 2f:34:5b:75:78:b8:f6:a4:2a:d1:44:c7:59:02:d5:82:41:4c: aa:bb:4d:3e:19:38:5f:a5:1f:f7:b4:31:88:cf:bd:3d:8a:97: 46:d3:45:57:b8:d0:b4:30:9d:f7:91:56:d1:27:6c:a2:d6:2a: 39:02:9d:76:97:e4:b8:21:ff:b2:e4:d4:8d:e8:0b:45:77:6e: 6a:bd:ac:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjUwNzE5MDIxMDEzWhcNMjUwNzI2MDIxMDEzWjAYMRYwFAYD VQQDEw02ODdhZmU4NS0yYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29Jm3r1cBx63PaH+vUUAb9zdVPysYpFfc5j2KHpBzMuCAR+tSr7raE0rIJBb 0VfmwOw3SHkD3oBLBz2lqgVlciCd1Nzrh9OcXHuor+Ia4p8nrEPswpwXmRMkHyK7 PBD502SPJmMUXEQCC2t4qoSL6WLayu6kEsQiptbxAq4WtRWZRTp2bW4AwscPbV/I N72Sa/xTSrMX/OJW89hnhFmYMl7zORYiV8VkgwiStWgnrab2RyKduM3WhfDdCCZ1 xJ8YVNLVVhSwTTo2GrCe6p9E04p9yX4nufCZO/4ByNwFjdlT8y80UXdnxI5O/gH9 kNTl3vlMZ1GhZqivQLFHy1GDPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALbpyhV zYKpMDSw75DDRfUeq1YZMB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbHYqaOAjovnL/KXegZV47IhtgX8c+jx36Hl55mnRPRR0K+zq6nCcI YCuBaG5eMHkaUyzybFH7qbWuFUalXgh+RlmgNIKdmSnqgZEwaV3IW+KEsEqkV7fz bR8f/40eJHcgL9lJciZMkQQsOcdrPHi+45/1Gr8W5e8dMKsdq6mMZE8Gt/v99PHd B6sxfaAxGSv/cl9pLNFzHMSd4sIk6xiE7FhSQGkS0WlOuwQH9/6y3u68yQYvNFt1 eLj2pCrRRMdZAtWCQUyqu00+GThfpR/3tDGIz709ipdG00VXuNC0MJ33kVbRJ2yi 1io5Ap12l+S4If+y5NSN6AtFd25qvayr -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:20 2025 by rpki-client