$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json) Hash identifier: vlAqmR8ZOuPxlDHS242Sb7WVnoUaMxsk5VehJTIPUCE= Subject key identifier: 04:D2:36:4E:47:88:91:1B:00:C0:15:51:D1:40:43:0A:45:9A:BA:79 Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft Manifest number: 0130 Signing time: Fri 08 Aug 2025 23:52:58 +0000 Manifest this update: Fri 08 Aug 2025 23:52:57 +0000 Manifest next update: Fri 15 Aug 2025 23:52:57 +0000 Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: 4e+Apsk+8txakQCX25ljZHdA7wFRkT9X+0+4DxS06zw=) 2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: Kj01wL6hxzZNZ8dZAbJKpipOYkN2WV1ZM26ZUUjGKvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Validity Not Before: Aug 8 23:52:57 2025 GMT Not After : Aug 15 23:52:57 2025 GMT Subject: CN=68968dda-4d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:e0:43:46:55:99:01:b7:ea:19:55:ea:2f: 74:65:e9:8e:46:c0:a6:00:ef:17:0a:57:4d:3e:71: 8a:27:e2:16:f8:45:a6:73:d7:56:6f:cf:0d:e2:3c: 14:9a:28:6c:31:f1:74:ae:35:a4:c3:02:00:b1:6a: f1:72:64:00:5d:d3:71:74:64:ad:12:fb:ee:c2:22: 68:17:8b:87:dc:99:15:47:2a:b6:16:9f:90:73:29: e3:34:32:de:73:43:44:09:1f:db:1a:b9:77:32:be: 6d:d0:f7:a2:e3:c1:39:76:29:ee:6b:d6:a7:5e:8e: ec:7e:9d:a1:03:c9:63:15:64:df:7f:2d:02:30:16: ba:18:02:08:d7:db:5b:28:0f:88:98:2a:b4:07:c4: fa:39:f3:88:a6:f9:e2:a0:71:3a:c9:31:8b:3a:2d: 0e:b7:fd:96:46:19:00:44:8d:3b:63:6a:18:7e:09: 05:9e:c1:81:ef:67:31:3a:92:c8:84:92:06:ac:41: 7c:ad:15:4e:d2:f4:55:04:de:c7:88:e2:17:8d:4d: 87:a6:db:8a:79:7f:79:3b:df:a9:59:2b:9b:ac:49: 5d:6a:39:1b:1b:1b:76:f3:49:06:36:62:66:bd:72: 49:84:23:b4:dc:dd:ca:2a:c8:2a:fa:59:da:50:47: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D2:36:4E:47:88:91:1B:00:C0:15:51:D1:40:43:0A:45:9A:BA:79 X509v3 Authority Key Identifier: keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:34:75:00:a1:17:fe:57:2e:fa:c7:77:e4:4c:ef:a6:3e:43: cf:8e:d4:2a:bc:c6:e4:ea:8b:fc:f6:10:21:41:53:4b:f9:b0: 90:8a:8a:29:30:48:cc:40:16:f3:0d:ba:ae:bb:65:f7:86:c1: a1:7f:e5:e7:90:f1:4b:b3:6c:2b:cf:95:bf:e4:d4:a0:07:49: f5:0e:b1:d7:34:df:da:e3:eb:57:dd:73:d1:75:5f:74:55:17: 1a:2d:ed:29:71:3a:21:17:03:ec:46:55:45:0e:41:6e:cf:e6: f5:36:d6:2f:2d:a9:9b:06:5c:f8:74:65:07:77:ba:11:53:36: a3:e1:e3:1a:fb:c6:b3:33:1b:a4:0e:a6:c6:50:cc:b9:b6:0c: e4:29:a0:cf:fb:f2:0f:6f:13:48:18:61:97:4c:7a:95:4b:73: 74:71:e9:d4:3a:4f:e4:8b:6f:46:f0:e7:2a:7f:03:49:7a:14: fd:f2:ec:3c:fa:5d:1e:0e:da:dc:e7:ef:96:88:bd:57:5d:97: 40:22:70:76:34:d0:1c:6a:c7:bb:c8:87:f5:e1:ec:95:87:44: 50:e5:45:11:2c:d6:eb:b6:a4:2f:69:1c:95:7a:8f:15:fd:78: c3:a5:32:1a:76:f4:01:5a:54:3a:29:7f:5f:89:55:d5:93:4c: ac:b8:5d:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4 RDc3MjNFNTIwHhcNMjUwODA4MjM1MjU3WhcNMjUwODE1MjM1MjU3WjAYMRYwFAYD VQQDEw02ODk2OGRkYS00ZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUHgQ0ZVmQG36hlV6i90ZemORsCmAO8XCldNPnGKJ+IW+EWmc9dWb88N4jwU mihsMfF0rjWkwwIAsWrxcmQAXdNxdGStEvvuwiJoF4uH3JkVRyq2Fp+QcynjNDLe c0NECR/bGrl3Mr5t0Pei48E5dinua9anXo7sfp2hA8ljFWTffy0CMBa6GAII19tb KA+ImCq0B8T6OfOIpvnioHE6yTGLOi0Ot/2WRhkARI07Y2oYfgkFnsGB72cxOpLI hJIGrEF8rRVO0vRVBN7HiOIXjU2HptuKeX95O9+pWSubrEldajkbGxt280kGNmJm vXJJhCO03N3KKsgq+lnaUEd2EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATSNk5H iJEbAMAVUdFAQwpFmrp5MB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5 RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3 S1hqYzBMYU9sQXVOZHlQbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPNHUAoRf+Vy76x3fkTO+mPkPPjtQqvMbk6ov89hAhQVNL+bCQioop MEjMQBbzDbquu2X3hsGhf+XnkPFLs2wrz5W/5NSgB0n1DrHXNN/a4+tX3XPRdV90 VRcaLe0pcTohFwPsRlVFDkFuz+b1NtYvLambBlz4dGUHd7oRUzaj4eMa+8azMxuk DqbGUMy5tgzkKaDP+/IPbxNIGGGXTHqVS3N0cenUOk/ki29G8OcqfwNJehT98uw8 +l0eDtrc5++WiL1XXZdAInB2NNAcase7yIf14eyVh0RQ5UURLNbrtqQvaRyVeo8V /XjDpTIadvQBWlQ6KX9fiVXVk0ysuF0w -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:55 2025 by rpki-client