$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: H8n08E9cY8/+I7EHWwUSLUK0ziOqt/AvW+MfXUqxUtc= Subject key identifier: 9B:5D:02:3A:A9:44:99:98:A6:E2:FE:30:C3:D5:26:D4:6F:81:8A:1F Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 0632 Signing time: Sun 20 Jul 2025 21:37:45 +0000 Manifest this update: Sun 20 Jul 2025 21:37:44 +0000 Manifest next update: Sun 27 Jul 2025 21:37:44 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: /FZYG+/Vn8m7zLnoUTRyG4AZo3a4gZrj0WzE9B0Z57c=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: iU7wUJ3hXR1AJP4W6iQ9Q4xhVfpuGa8z3zC49Uy6j+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Jul 20 21:37:44 2025 GMT Not After : Jul 27 21:37:44 2025 GMT Subject: CN=687d61a8-66e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:4e:b1:38:bb:a3:73:d2:8b:51:02:a1:3e: 3f:dd:78:f8:35:1c:fa:b7:03:19:39:41:ec:da:6f: 46:14:da:cf:5c:1d:31:7b:a8:9b:e2:49:4a:38:a4: c0:21:2e:8d:35:80:84:58:3f:30:1f:3f:2e:36:c1: e3:00:38:26:ec:e7:87:7a:2a:72:3c:30:32:72:d2: c6:ee:c0:1a:7c:97:e0:97:0b:78:78:04:b1:48:c5: 5b:c9:86:35:7c:e0:44:05:59:20:be:19:4c:19:60: d3:61:a4:03:a0:69:e6:06:72:99:e9:41:a6:40:d8: 95:91:6d:55:05:7f:9f:7e:0b:59:8d:d8:89:47:e1: 2d:4e:df:63:34:07:e1:dc:a4:5d:df:fc:0a:5e:20: 56:2e:5c:41:32:63:3d:43:59:ee:06:e2:40:61:f2: fd:a3:d7:e1:2c:e7:0a:41:2c:84:6a:e8:17:ad:66: 16:b7:35:76:32:af:7e:5c:11:d0:01:62:15:97:47: da:30:4e:96:cc:39:40:ac:08:ce:02:b0:9b:a5:4a: 49:7c:af:7b:35:78:63:e3:b0:b8:25:85:96:e9:e6: e1:c5:27:1e:2a:4b:22:d6:7c:fb:c4:65:9d:ca:cc: ac:6c:08:02:de:59:10:a0:fb:09:06:c2:bd:0c:9d: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5D:02:3A:A9:44:99:98:A6:E2:FE:30:C3:D5:26:D4:6F:81:8A:1F X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ef:19:af:19:55:38:ce:f6:c5:e5:2e:6d:c2:2d:5b:e2:d2: cf:2d:61:fa:c9:dc:34:83:e4:f1:c4:5f:10:d4:ec:61:9b:7d: 0f:4b:ed:9d:36:79:62:69:d7:df:5b:92:d8:7d:39:e9:bb:e6: f8:36:56:88:b6:4d:93:99:ae:67:74:9e:05:76:4c:22:9a:aa: 45:06:44:12:80:a0:39:00:91:e8:89:e3:77:7f:b1:b4:eb:bc: fe:bb:d9:34:6c:7d:bf:a5:e3:72:85:17:0a:ed:bc:8e:ba:e5: 8c:51:10:3a:37:6a:bf:b1:0b:b3:5c:3b:07:05:79:ed:92:2a: 62:f4:6c:87:54:fc:d0:2a:42:20:25:8c:47:ea:2a:26:81:9d: 2d:06:83:fb:b9:2b:a1:41:f2:ad:2d:f6:2c:b9:f5:02:16:d5: 5c:44:e2:65:75:1e:0c:30:20:53:fb:e5:8c:4e:47:7f:cd:06: a6:29:b7:30:20:71:c7:8c:8a:5e:77:7d:8e:73:48:a4:10:44: 29:95:a0:5e:ec:91:e9:6c:4e:61:cd:c8:c9:1d:87:4c:d4:ac: a8:1b:75:e3:0d:4c:12:01:5c:2a:6e:2c:b2:76:7d:d2:30:f2: 39:e8:7b:64:de:70:d1:5d:5a:ca:2b:60:31:b0:a5:5f:5c:9d: fe:13:5d:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUwNzIwMjEzNzQ0WhcNMjUwNzI3MjEzNzQ0WjAYMRYwFAYD VQQDEw02ODdkNjFhOC02NmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr45OsTi7o3PSi1ECoT4/3Xj4NRz6twMZOUHs2m9GFNrPXB0xe6ib4klKOKTA IS6NNYCEWD8wHz8uNsHjADgm7OeHeipyPDAyctLG7sAafJfglwt4eASxSMVbyYY1 fOBEBVkgvhlMGWDTYaQDoGnmBnKZ6UGmQNiVkW1VBX+ffgtZjdiJR+EtTt9jNAfh 3KRd3/wKXiBWLlxBMmM9Q1nuBuJAYfL9o9fhLOcKQSyEaugXrWYWtzV2Mq9+XBHQ AWIVl0faME6WzDlArAjOArCbpUpJfK97NXhj47C4JYWW6ebhxSceKksi1nz7xGWd ysysbAgC3lkQoPsJBsK9DJ3UywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtdAjqp RJmYpuL+MMPVJtRvgYofMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM7xmvGVU4zvbF5S5twi1b4tLPLWH6ydw0g+TxxF8Q1Oxhm30PS+2d NnliadffW5LYfTnpu+b4NlaItk2Tma5ndJ4FdkwimqpFBkQSgKA5AJHoieN3f7G0 67z+u9k0bH2/peNyhRcK7byOuuWMURA6N2q/sQuzXDsHBXntkipi9GyHVPzQKkIg JYxH6iomgZ0tBoP7uSuhQfKtLfYsufUCFtVcROJldR4MMCBT++WMTkd/zQamKbcw IHHHjIped32Oc0ikEEQplaBe7JHpbE5hzcjJHYdM1KyoG3XjDUwSAVwqbiyydn3S MPI56Htk3nDRXVrKK2AxsKVfXJ3+E12E -----END CERTIFICATE-----Generated at Mon Jul 21 03:05:31 2025 by rpki-client