$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: 4JrKOab/gJA86Y4uDv51NO0/J1Bv4a2KyEDlEMcoGuk= Subject key identifier: 4D:D3:EF:AF:D1:17:F8:34:A9:77:55:9E:57:79:BF:76:4C:C9:73:BE Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 0820 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 194D Signing time: Sun 24 Aug 2025 17:13:55 +0000 Manifest this update: Sun 24 Aug 2025 17:13:55 +0000 Manifest next update: Sun 31 Aug 2025 17:13:55 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: MYY/5sKCNz6/es2kjmNZFZnKuovou3fQWrLEamvSR0E=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: AyCP93l17PVAvsWp7E1MG1o/2qev6JZiBs4CqJLmMrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2080 (0x820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: Aug 24 17:13:55 2025 GMT Not After : Aug 31 17:13:55 2025 GMT Subject: CN=68ab4853-0ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:31:da:f8:3d:4c:23:a8:a7:a4:32:a5:c7:7b: 68:06:b6:39:3a:91:10:a6:8e:f9:31:75:6e:f2:fa: 0c:b2:e8:65:c5:14:94:75:37:50:24:85:11:73:e2: 77:1f:37:46:2f:36:87:34:ba:ec:56:7d:88:f0:16: fa:7e:52:bc:c5:ad:c7:ba:a5:26:1d:48:bb:f4:d6: af:fe:33:b0:a5:e3:e1:e9:36:86:a2:26:92:6a:4b: 54:d6:7b:5f:f2:08:16:41:d4:d0:86:eb:7e:7c:87: f3:84:2f:c3:4e:fd:78:7b:23:b3:dd:10:5e:c1:c0: fc:dd:5b:aa:49:90:55:d4:82:f9:f6:66:b2:85:fb: e3:9e:69:5a:dc:18:e3:64:86:f7:c4:30:3c:3f:89: 00:de:42:f3:2d:76:08:10:f2:ea:2e:d1:bf:c6:4a: 13:e0:5f:73:d6:f8:ba:c2:37:10:d5:6c:a9:10:62: 1b:3d:60:95:c7:22:39:c0:37:5b:11:55:fe:50:42: 7a:8d:a6:39:78:8c:f3:7c:aa:0c:f8:82:63:a9:48: ef:ab:f4:be:3d:3d:9e:a2:39:5b:0c:a3:99:09:fb: c4:f7:bf:d4:84:71:27:2c:59:67:8f:0a:85:e3:ed: 19:ec:8c:a5:88:6a:6d:f2:91:62:a3:ad:29:1d:4d: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:EF:AF:D1:17:F8:34:A9:77:55:9E:57:79:BF:76:4C:C9:73:BE X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:5d:d9:d6:b8:a9:3f:59:32:6b:40:c8:44:f0:d6:d4:24:6b: 10:82:b5:00:d3:96:59:b9:00:17:e5:4b:32:b0:ea:f1:e3:25: 68:51:8d:8d:56:6a:44:94:4f:42:a6:b6:b9:70:68:88:62:aa: ff:ae:01:db:ff:74:c2:7e:98:b4:37:0f:eb:c5:8d:c0:8c:3d: 07:da:d1:e4:77:24:b5:72:e9:35:c0:6b:23:b3:89:f8:ff:b9: 06:45:90:f0:cf:0e:ae:21:cf:b8:08:a5:e5:65:05:83:02:1d: 03:c2:2c:28:ef:3c:c6:6d:79:40:09:f3:56:46:30:98:b1:78: a1:3f:25:0c:92:10:7c:b0:e4:44:1c:9e:2b:e9:4e:dd:4b:94: 89:80:68:ad:9c:8c:d7:fa:10:5c:33:c2:a4:10:e5:84:b4:79: 5f:c1:f1:9e:1a:78:d9:b0:1a:36:8d:bd:39:3a:4d:88:e4:19: 8a:b5:99:f5:22:05:d2:f2:e4:29:90:32:fa:52:1d:f0:7a:8d: e7:b9:a7:aa:d9:67:d3:62:12:fe:b9:2e:98:b4:77:82:0a:fb: a5:6e:dd:8c:ad:83:9a:ff:b3:93:f1:ca:58:f5:9f:6e:a3:00: db:6f:3a:20:1e:6e:c0:3e:bc:94:c4:d8:63:73:17:2c:4a:f7: b1:f4:f3:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjUwODI0MTcxMzU1WhcNMjUwODMxMTcxMzU1WjAYMRYwFAYD VQQDEw02OGFiNDg1My0wZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzHa+D1MI6inpDKlx3toBrY5OpEQpo75MXVu8voMsuhlxRSUdTdQJIURc+J3 HzdGLzaHNLrsVn2I8Bb6flK8xa3HuqUmHUi79Nav/jOwpePh6TaGoiaSaktU1ntf 8ggWQdTQhut+fIfzhC/DTv14eyOz3RBewcD83VuqSZBV1IL59mayhfvjnmla3Bjj ZIb3xDA8P4kA3kLzLXYIEPLqLtG/xkoT4F9z1vi6wjcQ1WypEGIbPWCVxyI5wDdb EVX+UEJ6jaY5eIzzfKoM+IJjqUjvq/S+PT2eojlbDKOZCfvE97/UhHEnLFlnjwqF 4+0Z7IyliGpt8pFio60pHU30OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3T76/R F/g0qXdVnld5v3ZMyXO+MB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRXdnWuKk/WTJrQMhE8NbUJGsQgrUA05ZZuQAX5UsysOrx4yVoUY2N VmpElE9Cpra5cGiIYqr/rgHb/3TCfpi0Nw/rxY3AjD0H2tHkdyS1cuk1wGsjs4n4 /7kGRZDwzw6uIc+4CKXlZQWDAh0Dwiwo7zzGbXlACfNWRjCYsXihPyUMkhB8sORE HJ4r6U7dS5SJgGitnIzX+hBcM8KkEOWEtHlfwfGeGnjZsBo2jb05Ok2I5BmKtZn1 IgXS8uQpkDL6Uh3weo3nuaeq2WfTYhL+uS6YtHeCCvulbt2MrYOa/7OT8cpY9Z9u owDbbzogHm7APryUxNhjcxcsSvex9POz -----END CERTIFICATE-----Generated at Sun Aug 24 21:44:30 2025 by rpki-client