$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft File: 125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json) Hash identifier: SiJdpnwtK6StKKhqm8aGylP4pG5NMRSCVlQsrrXWWrg= Subject key identifier: 88:7D:48:85:34:67:8E:7E:38:66:F2:5B:DC:1A:28:80:03:51:27:BA Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC Certificate issuer: /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft Manifest number: 0520 Signing time: Wed 30 Jul 2025 23:57:54 +0000 Manifest this update: Wed 30 Jul 2025 23:57:54 +0000 Manifest next update: Wed 06 Aug 2025 23:57:54 +0000 Files and hashes: 1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: vbXq1vjwwQnTOtT70wU0rgIrO1OGAPRn0GxenvfOfHo=) 2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: KLqg7iCkQ2UJ+0JMC/UQM8HaP6cn0IInutZRj+9bWr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 23:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Validity Not Before: Jul 30 23:57:54 2025 GMT Not After : Aug 6 23:57:54 2025 GMT Subject: CN=688ab182-8948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:5d:d3:27:b2:e0:a8:14:78:5e:5e:72:a6: 79:0b:21:81:9b:56:c8:a4:4d:19:6c:6e:a9:8b:88: 9b:74:5a:c1:a0:2e:44:4e:14:7d:3f:de:e6:9b:3c: ae:6f:0e:34:4a:de:3d:4a:ee:6b:43:9f:2c:4b:c7: 34:25:ae:d7:d6:95:34:71:61:73:bc:8c:14:e0:0b: d2:4b:50:84:6b:d2:64:a2:09:ab:d7:bc:ed:a0:10: ff:2e:e2:6e:bc:ab:49:41:f2:20:fc:9d:32:84:04: 2b:b7:69:01:6c:25:6b:5a:40:62:71:12:28:7d:b0: 9f:b6:ae:4a:8f:6a:b3:02:0b:7b:f0:f2:11:35:8e: 35:ce:b5:16:9a:ad:fe:f5:a2:e5:76:bb:9e:d6:fa: 39:04:f1:d5:52:e7:61:fe:6d:71:14:ab:66:9d:7f: be:83:3a:bb:89:ad:1b:77:39:f0:fd:9e:6a:0f:9f: f5:9d:26:22:aa:b8:5a:b7:dc:bd:19:15:a2:3e:8e: 84:de:e5:49:7b:87:5a:12:66:34:d6:1f:fa:2d:62: a0:d9:b1:e4:c9:35:bc:9d:e5:3a:0b:5e:b2:db:ab: 52:ac:d7:84:70:72:53:3a:2a:32:1c:3d:c0:7b:d2: d2:44:3c:c9:38:7a:e9:f3:b0:0b:13:ea:1e:12:6a: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7D:48:85:34:67:8E:7E:38:66:F2:5B:DC:1A:28:80:03:51:27:BA X509v3 Authority Key Identifier: keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1e:bc:0b:b5:1b:8f:23:dc:3c:0a:04:f8:72:69:a1:05:5a: ae:92:5c:cf:54:51:19:6f:8e:30:37:a0:e5:f9:70:47:eb:c9: 15:45:c4:4c:48:d0:8c:46:38:5e:be:c8:7c:bd:9c:b4:99:32: 84:96:2d:d4:85:76:72:ae:6e:65:2e:c0:a2:72:8f:66:b2:4c: 49:b7:ee:d5:45:7e:ea:0b:41:5f:24:eb:80:23:ab:b5:42:6c: 55:7a:4f:01:6f:fa:be:c1:f3:6c:15:e3:d2:59:9f:7a:e8:ba: 22:c8:2b:0a:00:4d:dd:a2:36:c0:a4:9b:af:a3:03:23:45:68: 3d:aa:fa:56:0c:04:3f:1d:0e:26:74:03:0d:a1:e1:a9:3b:90: 9d:d7:64:a5:14:b2:61:a5:00:0b:39:a9:4e:89:f7:a0:85:27: 0f:ea:ea:33:18:b6:8f:57:b5:05:e7:54:4f:ab:93:eb:28:09: cc:17:38:8a:c5:55:c9:0a:59:41:f7:b8:1d:f5:37:56:93:94: a4:5b:70:b9:5c:5b:32:f7:5b:e8:8a:07:d1:de:98:e4:2a:bd: aa:d1:84:80:16:f5:20:a7:e9:2f:59:72:71:9b:a1:b3:ae:c9: 33:32:0d:7c:81:17:df:c2:48:ac:24:47:97:e9:25:fd:46:54: 0e:5c:f2:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdDNDQxMTAvBgNVBAUTKEQ3NkU2MUI5OUY3NTNFRkVGNzk4N0Y0QjM0QThBRDMz Mjk3ODAzQUMwHhcNMjUwNzMwMjM1NzU0WhcNMjUwODA2MjM1NzU0WjAYMRYwFAYD VQQDEw02ODhhYjE4Mi04OTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQld0yey4KgUeF5ecqZ5CyGBm1bIpE0ZbG6pi4ibdFrBoC5EThR9P97mmzyu bw40St49Su5rQ58sS8c0Ja7X1pU0cWFzvIwU4AvSS1CEa9Jkogmr17ztoBD/LuJu vKtJQfIg/J0yhAQrt2kBbCVrWkBicRIofbCftq5Kj2qzAgt78PIRNY41zrUWmq3+ 9aLldrue1vo5BPHVUudh/m1xFKtmnX++gzq7ia0bdznw/Z5qD5/1nSYiqrhat9y9 GRWiPo6E3uVJe4daEmY01h/6LWKg2bHkyTW8neU6C16y26tSrNeEcHJTOioyHD3A e9LSRDzJOHrp87ALE+oeEmoH0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh9SIU0 Z45+OGbyW9waKIADUSe6MB8GA1UdIwQYMBaAFNduYbmfdT7+95h/SzSorTMpeAOs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0M0NC84QzZGMDhGODBF RTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2NzNtSDlMTktpdE15bDRB NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNWh1WjkxUHY3M21IOUxOS2l0TXlsNEE2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0M0NC84QzZGMDhGODBFRTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2 NzNtSDlMTktpdE15bDRBNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQHrwLtRuPI9w8CgT4cmmhBVquklzPVFEZb44wN6Dl+XBH68kVRcRM SNCMRjhevsh8vZy0mTKEli3UhXZyrm5lLsCico9mskxJt+7VRX7qC0FfJOuAI6u1 QmxVek8Bb/q+wfNsFePSWZ966LoiyCsKAE3dojbApJuvowMjRWg9qvpWDAQ/HQ4m dAMNoeGpO5Cd12SlFLJhpQALOalOifeghScP6uozGLaPV7UF51RPq5PrKAnMFziK xVXJCllB97gd9TdWk5SkW3C5XFsy91voigfR3pjkKr2q0YSAFvUgp+kvWXJxm6Gz rskzMg18gRffwkisJEeX6SX9RlQOXPIJ -----END CERTIFICATE-----Generated at Thu Jul 31 23:18:48 2025 by rpki-client