$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: D59BsNkgtvFpNmMX5Hq2+37E6ywfihHUdGV2d0VGKbc= Subject key identifier: 8E:9C:33:69:0B:71:02:69:BE:A8:A1:99:74:F6:16:35:EA:FD:6C:99 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: 50 Signing time: Sun 07 Sep 2025 07:49:12 +0000 Manifest this update: Sun 07 Sep 2025 07:49:12 +0000 Manifest next update: Sun 14 Sep 2025 07:49:12 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: zn7cJFzQ27cQv7NAhoFgdAiXLhr5w7EY9eZvJIQ0ock=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: SIbGv61TK6nlTBlpPzTxiHyFUxN8Qwjf/RzPAJKF8+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Sep 7 07:49:12 2025 GMT Not After : Sep 14 07:49:12 2025 GMT Subject: CN=68bd38f8-c781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:93:43:73:96:ea:65:cf:ce:ee:9f:1c:c3: 00:54:e4:80:20:ba:68:e4:d4:c8:bd:ff:77:5e:b2: e5:3e:ee:20:6a:a8:22:42:46:9b:20:3f:46:29:e4: ee:3d:9d:66:16:27:e4:ee:ea:69:aa:e8:d8:88:b5: 3f:66:46:8a:db:ea:75:1b:17:69:25:15:26:6b:7c: 9e:10:c0:62:78:78:88:a2:22:8e:8a:94:79:d4:e5: 93:3d:35:2a:c8:c1:70:e4:32:d2:37:58:32:b9:58: af:e4:30:f5:2c:df:60:37:ef:6e:b0:91:ba:84:fe: dc:3e:35:a2:08:cc:6e:b3:91:d1:81:6e:77:ac:3e: 0e:a1:ed:ce:2e:5b:be:3e:23:0e:17:ae:42:a9:75: e9:84:f8:5d:62:7f:1c:35:78:d5:0b:5f:23:a0:4f: 43:4f:28:77:ba:8d:c3:10:35:b5:72:e2:2c:ef:ac: 44:2f:43:94:54:3f:0c:ec:48:f3:69:51:f8:9e:a7: bf:b7:89:23:9c:8c:fd:83:be:1c:1b:f7:69:fd:ec: 08:f3:bc:0d:aa:6d:dc:02:8f:c9:d9:fc:be:1c:85: 98:1a:69:f0:e1:19:89:3a:32:fa:88:05:3a:01:68: b1:e1:21:a7:88:3d:fd:00:3e:a8:2b:9a:20:09:05: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9C:33:69:0B:71:02:69:BE:A8:A1:99:74:F6:16:35:EA:FD:6C:99 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:6b:d7:8b:8b:27:6e:22:02:18:e9:63:38:8f:25:5c:06:00: 89:1f:55:89:7e:8a:e5:7b:b9:c7:24:11:39:20:88:a4:be:53: 6c:de:c5:26:09:e0:dc:df:ad:50:de:d2:34:ec:36:bf:f5:fa: 98:ae:36:48:3c:46:09:f4:02:31:d3:62:e7:9c:83:b0:84:3f: ce:a3:c3:77:4f:a0:23:18:8f:7c:db:42:d3:25:f0:4c:a7:2a: 42:4b:83:b7:98:d9:e2:28:ef:aa:52:68:66:08:8f:b6:e1:fe: e8:e5:b2:c7:d5:63:6b:66:81:5a:1a:9d:b9:e0:1d:4a:2b:48: 47:8a:c7:48:39:68:0c:e5:9f:42:29:c0:8f:ec:05:a6:5d:4e: a8:d1:20:d0:f8:20:05:90:aa:6c:c4:68:fa:38:34:16:fe:b8: 61:e7:74:86:c8:cf:88:2b:c1:e0:bf:72:ba:8b:48:f9:19:40: f4:39:fe:4f:4a:f3:53:41:66:18:f3:e1:29:a3:91:2a:f1:00: 39:2c:b7:0f:90:a8:46:7b:f0:aa:83:76:24:23:73:c6:49:0e: 3e:1c:d3:45:5f:49:f0:a2:1c:af:ba:55:9d:58:f5:26:2a:69: 07:0e:5d:1b:c6:d0:f6:68:db:21:55:9d:5c:7c:1a:6f:37:a2: b1:7b:29:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MEYyMTExMC8GA1UEBRMoNzBEMjYwMUNCMEQwRkE0RjlDNUYwRTAyODZEOEI2QUZE OTIzNUEwNjAeFw0yNTA5MDcwNzQ5MTJaFw0yNTA5MTQwNzQ5MTJaMBgxFjAUBgNV BAMTDTY4YmQzOGY4LWM3ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8yJNDc5bqZc/O7p8cwwBU5IAgumjk1Mi9/3desuU+7iBqqCJCRpsgP0Yp5O49 nWYWJ+Tu6mmq6NiItT9mRorb6nUbF2klFSZrfJ4QwGJ4eIiiIo6KlHnU5ZM9NSrI wXDkMtI3WDK5WK/kMPUs32A3726wkbqE/tw+NaIIzG6zkdGBbnesPg6h7c4uW74+ Iw4XrkKpdemE+F1ifxw1eNULXyOgT0NPKHe6jcMQNbVy4izvrEQvQ5RUPwzsSPNp Ufiep7+3iSOcjP2Dvhwb92n97AjzvA2qbdwCj8nZ/L4chZgaafDhGYk6MvqIBToB aLHhIaeIPf0APqgrmiAJBaHnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjpwzaQtx Amm+qKGZdPYWNer9bJkwHwYDVR0jBBgwFoAUcNJgHLDQ+k+cXw4Chti2r9kjWgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwRjIxLzg1MTdGQjA4MTQx MzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWstY1h3NENodGkycjlraldn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05KZ0hMRFEtay1jWHc0Q2h0aTJyOWtqV2dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw RjIxLzg1MTdGQjA4MTQxMzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWst Y1h3NENodGkycjlraldnWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADpr14uLJ24iAhjpYziPJVwGAIkfVYl+iuV7ucckETkgiKS+U2zexSYJ 4NzfrVDe0jTsNr/1+piuNkg8Rgn0AjHTYuecg7CEP86jw3dPoCMYj3zbQtMl8Eyn KkJLg7eY2eIo76pSaGYIj7bh/ujlssfVY2tmgVoanbngHUorSEeKx0g5aAzln0Ip wI/sBaZdTqjRIND4IAWQqmzEaPo4NBb+uGHndIbIz4grweC/crqLSPkZQPQ5/k9K 81NBZhjz4SmjkSrxADkstw+QqEZ78KqDdiQjc8ZJDj4c00VfSfCiHK+6VZ1Y9SYq aQcOXRvG0PZo2yFVnVx8Gm83orF7KRI= -----END CERTIFICATE-----Generated at Mon Sep 8 19:26:04 2025 by rpki-client