$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: L+Q1S5EhTMgLN3E+Ca+ldsk8PaiDy8Z7YG5FKt2g01c= Subject key identifier: CE:CD:6A:67:FF:46:89:EE:0D:B2:4F:E7:0A:E8:E3:C2:D2:8E:84:31 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 0127 Signing time: Fri 05 Sep 2025 05:05:09 +0000 Manifest this update: Fri 05 Sep 2025 05:05:09 +0000 Manifest next update: Fri 12 Sep 2025 05:05:09 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: MEInPdsrtRoF9/vCzy7737aSkm90VfB2u1nb0C//EEE=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Sep 5 05:05:09 2025 GMT Not After : Sep 12 05:05:09 2025 GMT Subject: CN=68ba6f85-22ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:38:77:ab:3b:29:d3:f2:44:ab:de:72:37: 53:3f:bc:a0:b9:66:54:10:d4:69:af:22:11:f9:4b: 18:2e:89:a0:1f:1d:ab:11:a8:d1:16:bc:d8:6d:7f: eb:ea:86:8b:1c:1c:45:c7:1b:fc:b3:ff:a2:a7:48: 5b:14:f1:1b:6a:98:5d:99:a5:50:5f:e8:48:b7:21: d4:bb:2d:4e:dc:f7:4f:1b:92:d4:9d:42:4d:44:72: cf:3f:53:0d:a5:67:43:90:c9:90:9b:72:37:55:37: 86:8c:f5:b8:d0:51:2c:86:93:c9:ef:4f:39:0b:40: 36:03:67:d5:17:de:f2:c5:0a:01:98:f2:be:1b:d1: 0d:60:e7:c4:87:60:6f:28:d4:6b:08:54:58:26:f2: 03:73:27:12:af:7a:19:96:a1:6c:97:f5:e2:d2:33: 69:2a:80:7c:f0:81:2f:08:7e:06:e7:3c:b7:95:98: 9c:2b:ce:ea:c4:b4:b1:6d:c4:6f:4a:b0:ad:4c:8e: 88:87:d3:7f:f6:84:bd:2c:8b:04:dc:7a:d7:e2:0f: 82:bc:76:4b:fa:89:b6:cc:b1:44:29:53:99:71:76: 7b:fe:ca:44:27:52:a3:a7:9a:d3:75:e8:ff:6a:fc: 76:9b:10:b2:05:bd:28:43:d5:3b:1a:05:b0:58:1a: 71:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CD:6A:67:FF:46:89:EE:0D:B2:4F:E7:0A:E8:E3:C2:D2:8E:84:31 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:de:ac:ff:d7:05:c4:c0:2e:7f:57:f0:90:d7:2b:72:f4:0a: 07:7c:a7:f9:5d:be:3e:a9:86:e3:a3:ea:73:a6:65:d2:d1:22: 00:41:3a:a6:c1:b0:ca:37:fb:ef:b0:c5:17:8d:fd:ee:d8:ec: f5:64:a3:56:77:b5:2f:45:3f:ea:6b:41:61:f2:ce:33:64:3a: 70:0f:7d:8b:d6:f2:6b:7a:bb:bd:7c:0d:bf:16:79:89:8e:e5: f5:57:c6:2c:b4:bd:97:c3:17:e5:cb:6e:6d:91:1b:19:97:50: b2:df:53:3e:79:3d:ef:01:22:ef:7c:4c:37:9e:8d:77:2d:28: 2d:d1:2b:2c:92:04:7f:0a:c6:91:fb:d0:15:88:a2:17:7a:c0: 14:f8:8a:03:c2:45:63:fe:16:cf:c2:1d:75:0b:21:a4:de:1e: f4:3b:7d:64:91:9c:25:8d:83:e6:20:65:3a:e4:a5:5e:03:6d: a8:2a:8a:21:72:58:67:cf:b0:a3:6b:41:2b:8d:96:28:41:ac: 9c:e4:14:ed:57:cc:04:85:d4:b9:b1:e1:89:35:1a:19:d5:3d: 32:29:da:b1:1c:26:3b:ae:59:05:1a:35:e0:83:8b:f8:ba:54: bf:74:aa:61:db:ef:cf:31:2d:35:a9:54:1e:4e:7f:27:2f:29: 44:97:d7:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjUwOTA1MDUwNTA5WhcNMjUwOTEyMDUwNTA5WjAYMRYwFAYD VQQDEw02OGJhNmY4NS0yMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE44d6s7KdPyRKvecjdTP7yguWZUENRpryIR+UsYLomgHx2rEajRFrzYbX/r 6oaLHBxFxxv8s/+ip0hbFPEbaphdmaVQX+hItyHUuy1O3PdPG5LUnUJNRHLPP1MN pWdDkMmQm3I3VTeGjPW40FEshpPJ7085C0A2A2fVF97yxQoBmPK+G9ENYOfEh2Bv KNRrCFRYJvIDcycSr3oZlqFsl/Xi0jNpKoB88IEvCH4G5zy3lZicK87qxLSxbcRv SrCtTI6Ih9N/9oS9LIsE3HrX4g+CvHZL+om2zLFEKVOZcXZ7/spEJ1Kjp5rTdej/ avx2mxCyBb0oQ9U7GgWwWBpxowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7Namf/ RonuDbJP5wro48LSjoQxMB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEzMC80QjdBMTg2QUNBRjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVH cDgyX3RMTlJTOWJfaGNqejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn3qz/1wXEwC5/V/CQ1yty9AoHfKf5Xb4+qYbjo+pzpmXS0SIAQTqm wbDKN/vvsMUXjf3u2Oz1ZKNWd7UvRT/qa0Fh8s4zZDpwD32L1vJreru9fA2/FnmJ juX1V8YstL2Xwxfly25tkRsZl1Cy31M+eT3vASLvfEw3no13LSgt0SsskgR/CsaR +9AViKIXesAU+IoDwkVj/hbPwh11CyGk3h70O31kkZwljYPmIGU65KVeA22oKooh clhnz7Cja0ErjZYoQayc5BTtV8wEhdS5seGJNRoZ1T0yKdqxHCY7rlkFGjXgg4v4 ulS/dKph2+/PMS01qVQeTn8nLylEl9cC -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:19 2025 by rpki-client