$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: Zt+5Q1t+V4MjAMaXm+J3Ys6iOohHWv+sjc/dJVuaKks= Subject key identifier: C0:F2:4D:71:A5:39:04:1D:D9:01:FB:23:76:6A:55:E7:1B:3C:F8:71 Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 022B Signing time: Fri 19 Sep 2025 02:31:34 +0000 Manifest this update: Fri 19 Sep 2025 02:31:33 +0000 Manifest next update: Fri 26 Sep 2025 02:31:33 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: cIrgmlCUG2k34NZ4tJnWjsSduopG0icz1zzFdwcCZKM=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Sep 19 02:31:33 2025 GMT Not After : Sep 26 02:31:33 2025 GMT Subject: CN=68ccc085-2d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:10:ef:78:b9:ab:b2:48:52:60:d9:6e:d3: a3:a3:27:b6:45:99:c1:43:1d:b1:5d:bf:db:34:53: ed:76:d7:d8:96:99:c1:b2:39:d3:29:15:13:8e:fd: 6d:39:6f:87:5b:d5:b9:c3:c1:03:da:4a:ea:38:14: 87:da:1f:76:f5:91:d6:30:18:6f:fb:12:62:f7:d6: fa:74:82:2a:6d:99:06:73:61:e9:d9:7f:d3:6b:5a: e0:44:a2:54:ef:09:95:95:30:d5:d0:71:64:07:a1: a6:3e:22:5d:87:42:67:7a:4f:b1:c7:c4:75:33:ff: 56:a7:39:b4:60:77:dd:3d:44:d8:ed:0b:f5:16:fb: b1:ef:dd:3b:f0:6c:ad:1f:00:9e:85:8f:17:27:b1: b9:56:73:26:03:ce:55:24:08:84:0e:69:8c:c6:84: f6:68:32:fc:97:cd:3c:99:8e:59:01:70:85:7d:93: bb:66:b4:e2:b7:4a:7e:ff:49:0b:7f:2d:87:61:8d: b6:8e:45:10:01:cb:df:8c:43:6b:b0:8c:ee:f2:29: f4:d0:61:42:39:72:a3:3b:c2:19:70:96:36:e0:df: d5:d1:04:0e:89:96:37:eb:fa:eb:3b:77:23:22:d5: bc:a7:ff:d0:30:a6:fd:f6:1a:42:a6:40:61:b5:2a: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F2:4D:71:A5:39:04:1D:D9:01:FB:23:76:6A:55:E7:1B:3C:F8:71 X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:1c:f8:ef:20:16:50:8f:0e:5c:79:da:65:84:02:94:b7:4a: 74:a0:cc:7e:57:ce:fc:51:1b:b4:15:f1:aa:4a:ee:90:58:29: fe:4f:25:f5:e6:76:b0:8d:01:00:6a:3f:d6:07:57:29:25:ba: 87:cb:68:b0:4e:ab:92:13:1c:38:ae:56:99:12:35:2a:68:c1: ba:bf:0d:2f:85:d5:4e:ba:2f:32:2e:5d:1c:5d:65:ed:4e:fb: e5:d4:60:70:54:b4:a0:0a:f5:9c:0d:6b:28:fe:0b:77:62:68: 3d:88:32:cb:55:1d:8d:1f:f1:10:73:de:eb:65:e8:bb:f9:71: 98:d1:09:19:0e:27:9f:c5:f9:ab:65:8d:22:ed:ab:95:f4:15: da:1e:7a:99:f5:39:66:14:82:44:d3:2d:55:01:d0:ca:7c:fc: 07:93:67:55:47:ef:eb:05:ac:55:2c:05:91:5c:6b:df:0f:57: 76:e4:2a:57:8e:d5:ed:f4:73:a5:87:fa:b1:58:a3:e4:6d:79: d5:58:c7:42:1f:7f:1b:82:dc:00:d7:c3:d2:b8:6a:4c:06:26: 0b:d9:c0:7e:41:e6:7d:73:c1:ba:29:b7:5d:a9:f0:54:db:66: fb:74:5f:81:53:6d:35:09:30:8b:ac:4c:f8:f4:e7:96:c2:11: bb:0b:d7:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUwOTE5MDIzMTMzWhcNMjUwOTI2MDIzMTMzWjAYMRYwFAYD VQQDEw02OGNjYzA4NS0yZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5QQ73i5q7JIUmDZbtOjoye2RZnBQx2xXb/bNFPtdtfYlpnBsjnTKRUTjv1t OW+HW9W5w8ED2krqOBSH2h929ZHWMBhv+xJi99b6dIIqbZkGc2Hp2X/Ta1rgRKJU 7wmVlTDV0HFkB6GmPiJdh0Jnek+xx8R1M/9Wpzm0YHfdPUTY7Qv1Fvux79078Gyt HwCehY8XJ7G5VnMmA85VJAiEDmmMxoT2aDL8l808mY5ZAXCFfZO7ZrTit0p+/0kL fy2HYY22jkUQAcvfjENrsIzu8in00GFCOXKjO8IZcJY24N/V0QQOiZY36/rrO3cj ItW8p//QMKb99hpCpkBhtSqrJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDyTXGl OQQd2QH7I3ZqVecbPPhxMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4HPjvIBZQjw5cedplhAKUt0p0oMx+V878URu0FfGqSu6QWCn+TyX1 5nawjQEAaj/WB1cpJbqHy2iwTquSExw4rlaZEjUqaMG6vw0vhdVOui8yLl0cXWXt Tvvl1GBwVLSgCvWcDWso/gt3Ymg9iDLLVR2NH/EQc97rZei7+XGY0QkZDiefxfmr ZY0i7auV9BXaHnqZ9TlmFIJE0y1VAdDKfPwHk2dVR+/rBaxVLAWRXGvfD1d25CpX jtXt9HOlh/qxWKPkbXnVWMdCH38bgtwA18PSuGpMBiYL2cB+QeZ9c8G6KbddqfBU 22b7dF+BU201CTCLrEz49OeWwhG7C9cs -----END CERTIFICATE-----Generated at Fri Sep 19 10:19:23 2025 by rpki-client