$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: fkIY7/RTcTE4n/NscJFh92rOtvH9aTggNZHG+geXduU= Subject key identifier: 5C:99:57:29:E8:E1:68:31:14:DA:5D:96:BF:A3:9D:0B:E9:D2:BC:AB Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 014B Signing time: Tue 09 Sep 2025 04:21:06 +0000 Manifest this update: Tue 09 Sep 2025 04:21:05 +0000 Manifest next update: Tue 16 Sep 2025 04:21:05 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: 7XNg8e3tqQ4bTGt0bd52EnpKbWbryvmjQVsAESQvO8I=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Sep 9 04:21:05 2025 GMT Not After : Sep 16 04:21:05 2025 GMT Subject: CN=68bfab32-a33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:88:71:04:77:ba:fe:8c:b8:8f:ef:82:12:19: 89:56:9f:23:67:5f:ab:64:c0:98:71:11:ad:3c:4e: e7:15:4e:da:19:a9:35:e2:a0:83:3a:8e:0f:5b:a1: 36:56:cd:7f:7b:63:3f:c3:14:51:fb:4f:9a:62:b5: be:d7:51:6f:b8:a8:ac:01:d9:5a:67:b4:fb:a8:cc: 84:2b:24:67:18:c0:c1:89:90:56:43:4a:15:ea:89: cb:3d:8c:fc:bd:36:e9:c0:e8:e5:46:d8:85:6d:ef: 51:7b:fd:94:2f:c4:44:a2:82:3c:ed:b4:5d:2d:ee: d9:36:38:23:b6:8a:bd:85:f2:d9:4a:f1:08:bb:66: 16:5a:4b:2d:45:9e:6f:5b:5f:5a:68:ad:83:ed:e0: d6:37:cb:0d:76:71:33:22:8f:38:ed:a0:51:72:1b: 26:bf:2c:28:3b:67:fd:22:78:85:37:03:ae:a0:c7: 12:ad:f4:44:e9:0d:d9:a2:22:76:52:33:11:09:3b: 76:9c:9d:f3:2a:8b:54:6a:d8:52:0d:6f:b1:b8:47: 63:f1:5f:d5:90:8f:df:09:b5:d7:76:d5:3d:c3:11: 31:e3:77:18:a1:82:1b:1a:f7:4f:90:5d:85:5f:8a: 89:78:53:39:a1:b1:37:34:f0:69:be:1b:72:f1:eb: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:99:57:29:E8:E1:68:31:14:DA:5D:96:BF:A3:9D:0B:E9:D2:BC:AB X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:41:e7:40:78:00:5f:82:80:fa:31:06:df:a9:98:0f:3b:12: 6b:23:cf:99:f1:12:d2:00:6a:8c:16:09:77:16:6f:82:f5:2c: 41:22:8a:0b:f3:e6:96:5a:b0:68:fb:76:de:a4:54:c9:19:6c: 28:12:99:91:a7:0f:09:09:89:85:19:c2:b4:7f:9a:89:51:3b: 81:3a:88:70:e1:46:ce:0c:24:13:d2:bb:ba:76:c8:37:f4:ba: dd:ea:cd:0c:96:8c:ba:50:8c:ee:58:67:9f:6c:1d:e0:3c:81: 90:c9:ed:f1:7d:6f:c9:76:36:cc:25:50:ef:6e:8d:3e:58:bd: 46:e3:d6:53:39:90:03:9a:d2:e3:6c:00:1e:6c:bc:18:00:e4: 8d:a4:d2:bc:66:24:43:35:17:5e:0b:14:04:b4:b0:5e:77:d2: da:e8:00:4d:43:7b:70:01:b5:20:59:e1:f8:5c:e1:61:bd:05: a0:15:45:0e:80:f9:4d:20:1f:62:1b:84:2f:00:40:76:9a:b1: 5c:13:3e:b0:78:7b:90:94:92:4e:23:e3:ae:09:9d:e1:e5:11: e8:a8:9b:3e:d6:75:99:a7:b1:ce:a0:24:28:37:d4:3f:fe:97: fc:d6:d0:16:58:3b:f6:11:f3:40:9e:27:a8:ac:8e:7b:4e:e4: 4a:4a:37:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUwOTA5MDQyMTA1WhcNMjUwOTE2MDQyMTA1WjAYMRYwFAYD VQQDEw02OGJmYWIzMi1hMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44hxBHe6/oy4j++CEhmJVp8jZ1+rZMCYcRGtPE7nFU7aGak14qCDOo4PW6E2 Vs1/e2M/wxRR+0+aYrW+11FvuKisAdlaZ7T7qMyEKyRnGMDBiZBWQ0oV6onLPYz8 vTbpwOjlRtiFbe9Re/2UL8REooI87bRdLe7ZNjgjtoq9hfLZSvEIu2YWWkstRZ5v W19aaK2D7eDWN8sNdnEzIo847aBRchsmvywoO2f9IniFNwOuoMcSrfRE6Q3ZoiJ2 UjMRCTt2nJ3zKotUathSDW+xuEdj8V/VkI/fCbXXdtU9wxEx43cYoYIbGvdPkF2F X4qJeFM5obE3NPBpvhty8evvowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyZVyno 4WgxFNpdlr+jnQvp0ryrMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJQedAeABfgoD6MQbfqZgPOxJrI8+Z8RLSAGqMFgl3Fm+C9SxBIooL 8+aWWrBo+3bepFTJGWwoEpmRpw8JCYmFGcK0f5qJUTuBOohw4UbODCQT0ru6dsg3 9Lrd6s0Mloy6UIzuWGefbB3gPIGQye3xfW/JdjbMJVDvbo0+WL1G49ZTOZADmtLj bAAebLwYAOSNpNK8ZiRDNRdeCxQEtLBed9La6ABNQ3twAbUgWeH4XOFhvQWgFUUO gPlNIB9iG4QvAEB2mrFcEz6weHuQlJJOI+OuCZ3h5RHoqJs+1nWZp7HOoCQoN9Q/ /pf81tAWWDv2EfNAnieorI57TuRKSjd5 -----END CERTIFICATE-----Generated at Tue Sep 9 18:34:32 2025 by rpki-client