$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json) Hash identifier: i0X9riM9KGCmGuoxwg7KdySj59VGiDE0YFlLz6JU5Fc= Subject key identifier: C5:81:B2:A5:66:54:2C:42:3F:32:7D:D3:0F:53:76:E5:63:B4:A2:A0 Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 Certificate issuer: /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Certificate serial: 0BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft Manifest number: 0BD5 Signing time: Sun 10 Aug 2025 18:53:07 +0000 Manifest this update: Sun 10 Aug 2025 18:53:06 +0000 Manifest next update: Sun 17 Aug 2025 18:53:06 +0000 Files and hashes: 1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: zlx3XHhgdAJ4COnTVK+EHaLH+bl5xEnz7g5B4vLzimQ=) 2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: 2C78FaeQx3m8f9CmVKBPjRPsChYY+d/Ump5Gj8ph3JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3035 (0xbdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Validity Not Before: Aug 10 18:53:06 2025 GMT Not After : Aug 17 18:53:06 2025 GMT Subject: CN=6898ea92-2782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:3d:b4:c0:17:3a:50:0b:41:82:2c:de:a0: 5c:de:64:95:0c:3f:78:8f:c6:db:42:83:0d:92:dd: 5d:4b:62:42:c4:37:94:09:b5:55:b1:9c:84:1b:33: cf:29:2b:f7:35:ec:aa:cf:be:da:fc:2c:53:64:f7: a7:f6:4b:13:8f:f0:6b:0a:10:68:df:cb:8f:17:12: da:34:1d:ab:c6:32:5e:49:a7:e1:59:b6:75:b6:ef: 3e:17:39:43:7a:32:77:05:c7:ff:6b:43:91:5e:a4: c2:cb:d1:91:0c:23:d0:f3:2a:5e:35:ca:8d:99:72: ae:d9:31:b2:2a:29:fb:df:9c:c3:f6:65:8d:51:a1: 28:be:57:47:64:e0:9d:46:d4:0b:83:47:b3:b4:7b: a3:5a:eb:e1:a2:ae:ed:2e:27:99:7b:ae:bd:45:8c: 84:d3:6f:a2:84:60:02:e7:28:21:6a:f4:0e:e0:4d: f1:de:a8:40:03:62:d5:c4:20:93:c8:c6:48:cf:b8: 87:3a:10:50:ea:f3:a8:ae:c5:a7:db:5e:c6:78:08: 54:87:88:f4:e7:20:1d:59:4f:fd:d1:c7:fc:a8:cd: 36:65:f6:81:a7:8e:a1:68:02:05:a6:0f:be:95:b6: 3a:38:46:45:a5:b2:57:f0:4d:4a:53:5b:23:43:34: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:81:B2:A5:66:54:2C:42:3F:32:7D:D3:0F:53:76:E5:63:B4:A2:A0 X509v3 Authority Key Identifier: keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:db:d2:9a:8b:55:8e:10:40:58:03:88:e6:13:cc:f6:1f:ad: a8:47:78:d6:00:fc:f5:d0:c4:d0:81:b6:3e:5e:dd:c1:06:44: fc:3c:64:e7:1d:b0:af:a3:79:47:2a:8d:84:59:86:ee:73:c8: df:c4:0f:74:aa:2b:01:96:f3:5e:b5:2e:e3:fd:0f:e7:ff:40: 23:24:fa:5d:2a:b1:be:d1:fb:c5:8b:91:63:9b:8d:a8:ba:5a: 0a:bc:13:3b:79:fd:65:dd:b5:b8:ac:3b:06:e7:fa:97:53:d0: c6:f9:96:26:03:e9:94:97:3e:b6:9a:83:3f:77:67:af:b7:ff: a1:8e:a2:ee:38:fb:49:c0:7d:2a:c0:11:36:f1:fa:0e:03:b7: 22:87:d8:e2:17:fe:a8:4c:3e:c1:3e:6a:cc:6d:ba:28:53:9a: 74:ed:65:5b:9c:e2:8c:b8:fe:42:c2:f4:a9:f6:e6:4d:7a:8f: a8:e1:a0:86:26:2f:20:e3:ec:99:13:6c:60:ec:cf:fb:fa:b0: b5:0b:2d:b4:14:bf:65:34:d9:cb:ac:cf:13:78:71:c6:74:e5: ff:eb:61:b1:db:0e:9e:a1:91:73:9b:82:e9:cf:91:23:7a:05: f4:25:c5:bb:c4:04:c1:01:62:f5:1f:34:4c:5c:0e:7a:4a:e4: 0f:2f:01:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJFNTU4NENGOTkz RjA1QkQ5OTAwHhcNMjUwODEwMTg1MzA2WhcNMjUwODE3MTg1MzA2WjAYMRYwFAYD VQQDEw02ODk4ZWE5Mi0yNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nU9tMAXOlALQYIs3qBc3mSVDD94j8bbQoMNkt1dS2JCxDeUCbVVsZyEGzPP KSv3Neyqz77a/CxTZPen9ksTj/BrChBo38uPFxLaNB2rxjJeSafhWbZ1tu8+FzlD ejJ3Bcf/a0ORXqTCy9GRDCPQ8ypeNcqNmXKu2TGyKin735zD9mWNUaEovldHZOCd RtQLg0eztHujWuvhoq7tLieZe669RYyE02+ihGAC5yghavQO4E3x3qhAA2LVxCCT yMZIz7iHOhBQ6vOorsWn217GeAhUh4j05yAdWU/90cf8qM02ZfaBp46haAIFpg++ lbY6OEZFpbJX8E1KU1sjQzTYHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWBsqVm VCxCPzJ90w9TduVjtKKgMB8GA1UdIwQYMBaAFBtuMpLINWVOSRSS5VhM+ZPwW9mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEE2OS9FM0FCRDA0MjIx NDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpVNUpGSkxsV0V6NWtfQmIy WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyNHlrc2cxWlU1SkZKTGxXRXo1a19CYjJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEE2OS9FM0FCRDA0MjIxNDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpV NUpGSkxsV0V6NWtfQmIyWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf29Kai1WOEEBYA4jmE8z2H62oR3jWAPz10MTQgbY+Xt3BBkT8PGTn HbCvo3lHKo2EWYbuc8jfxA90qisBlvNetS7j/Q/n/0AjJPpdKrG+0fvFi5Fjm42o uloKvBM7ef1l3bW4rDsG5/qXU9DG+ZYmA+mUlz62moM/d2evt/+hjqLuOPtJwH0q wBE28foOA7cih9jiF/6oTD7BPmrMbbooU5p07WVbnOKMuP5CwvSp9uZNeo+o4aCG Ji8g4+yZE2xg7M/7+rC1Cy20FL9lNNnLrM8TeHHGdOX/62Gx2w6eoZFzm4Lpz5Ej egX0JcW7xATBAWL1HzRMXA56SuQPLwED -----END CERTIFICATE-----Generated at Mon Aug 11 08:51:55 2025 by rpki-client