$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: Ggi7206XcgLQl2qovRDsWTwuAIFykxct27gqp9N1+YA= Subject key identifier: 48:8D:18:8A:40:81:52:6D:31:8E:B7:A6:BD:68:58:06:02:8E:9A:88 Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 0476 Signing time: Thu 21 Aug 2025 00:14:19 +0000 Manifest this update: Thu 21 Aug 2025 00:14:19 +0000 Manifest next update: Thu 28 Aug 2025 00:14:19 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: ZvpcYKwYa29ukaHfNKnv93vaoBJq0N5ZTJZBJtUWQq8=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: qCU/OsBRO4+PMlzfkCWYCpZe9YTKzCH9brvEdyELMJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: Aug 21 00:14:19 2025 GMT Not After : Aug 28 00:14:19 2025 GMT Subject: CN=68a664db-2ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:e5:c3:09:d7:8f:75:77:fd:97:55:4d:2e: f0:44:a5:d4:80:0c:10:6b:3c:52:fe:e7:45:a9:ba: 30:4f:bf:ad:f8:b1:28:47:69:5a:15:fc:2d:06:c6: b5:7c:17:80:9a:a4:1b:56:b6:e8:1a:f6:ed:47:bc: 44:d7:60:73:8c:2a:ae:2a:a8:e5:3d:19:fc:91:06: c9:5a:88:56:08:dc:36:ac:61:cc:cc:02:23:32:a8: f8:33:bd:99:61:f4:af:83:58:75:ec:fb:fb:02:c9: 26:5a:de:e9:75:a4:02:16:f5:5a:d2:69:8b:70:88: b5:cd:f3:41:54:28:0d:ae:ef:e6:3f:4d:15:03:be: cb:f3:05:e1:df:7c:f7:af:45:d5:99:04:13:46:c6: 6a:61:61:8e:88:97:07:c9:d6:f4:da:ca:7c:89:73: 2f:d7:38:f7:6d:3c:be:87:f3:71:41:08:91:f6:be: f0:b0:3c:90:9b:7e:c0:0b:2d:dd:16:ae:64:af:20: 29:50:55:c4:eb:c9:3a:d8:a9:b3:5e:aa:fa:5a:5e: d5:78:c5:14:e2:4a:b9:b2:f3:57:11:7a:d9:e5:88: 58:91:b2:2b:e7:15:c9:51:17:8e:5e:2a:ef:76:2a: 7b:85:b3:58:f5:4d:8a:8d:ad:01:f8:be:16:c3:e1: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8D:18:8A:40:81:52:6D:31:8E:B7:A6:BD:68:58:06:02:8E:9A:88 X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4a:96:d3:ed:c8:fd:20:71:c1:bd:23:b8:db:b4:3e:b5:64: 38:5a:3a:ea:47:37:3b:6c:80:55:1e:af:32:72:53:9f:09:44: 6a:84:27:76:28:35:4e:6d:ba:85:4a:49:71:64:1f:ee:72:66: 79:ad:25:8b:c6:04:26:54:14:f8:12:ec:43:22:41:d0:d7:2b: 32:9a:2a:cf:25:10:0f:4c:40:82:60:3c:3c:6c:f0:ed:6d:11: 54:8e:db:0d:ce:3c:ab:4d:98:f0:29:54:dd:4d:91:e8:fa:b5: 31:43:b0:86:c0:f9:9b:1f:72:41:44:12:46:13:a9:92:57:39: 61:1c:c1:8f:f6:cb:b1:09:38:25:30:bc:47:42:03:a1:31:1e: 26:de:cc:de:fe:39:96:12:89:8a:ab:63:49:ee:20:37:17:2a: d4:62:ac:ac:3f:6a:35:f3:fc:98:54:b2:97:f4:94:f9:e8:d9: 82:6c:62:bd:19:2b:07:70:69:d0:89:ec:85:09:da:0c:94:18: 3e:d3:e2:cc:97:5e:a8:f9:13:a2:29:29:e3:86:be:87:7d:ce: 8e:60:96:92:f2:ca:4a:33:52:e5:39:35:ac:f9:1e:42:61:5a: 8c:8f:7e:1e:65:da:79:8e:d8:d3:25:be:d6:a7:3f:eb:f2:22: 6b:e4:74:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjUwODIxMDAxNDE5WhcNMjUwODI4MDAxNDE5WjAYMRYwFAYD VQQDEw02OGE2NjRkYi0yZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWzlwwnXj3V3/ZdVTS7wRKXUgAwQazxS/udFqbowT7+t+LEoR2laFfwtBsa1 fBeAmqQbVrboGvbtR7xE12BzjCquKqjlPRn8kQbJWohWCNw2rGHMzAIjMqj4M72Z YfSvg1h17Pv7AskmWt7pdaQCFvVa0mmLcIi1zfNBVCgNru/mP00VA77L8wXh33z3 r0XVmQQTRsZqYWGOiJcHydb02sp8iXMv1zj3bTy+h/NxQQiR9r7wsDyQm37ACy3d Fq5kryApUFXE68k62KmzXqr6Wl7VeMUU4kq5svNXEXrZ5YhYkbIr5xXJUReOXirv dip7hbNY9U2Kja0B+L4Ww+G/kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiNGIpA gVJtMY63pr1oWAYCjpqIMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMSpbT7cj9IHHBvSO427Q+tWQ4WjrqRzc7bIBVHq8yclOfCURqhCd2 KDVObbqFSklxZB/ucmZ5rSWLxgQmVBT4EuxDIkHQ1ysymirPJRAPTECCYDw8bPDt bRFUjtsNzjyrTZjwKVTdTZHo+rUxQ7CGwPmbH3JBRBJGE6mSVzlhHMGP9suxCTgl MLxHQgOhMR4m3sze/jmWEomKq2NJ7iA3FyrUYqysP2o18/yYVLKX9JT56NmCbGK9 GSsHcGnQieyFCdoMlBg+0+LMl16o+ROiKSnjhr6Hfc6OYJaS8spKM1LlOTWs+R5C YVqMj34eZdp5jtjTJb7Wpz/r8iJr5HQE -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:11 2025 by rpki-client