$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: xVY8D9E0Ih6k0I04dNlaIU5Ae//IF1hPXsKgN4+cYS0= Subject key identifier: 07:81:19:4E:69:45:13:01:28:FA:CB:F1:28:63:2E:72:8E:86:98:2C Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 34B0 Signing time: Tue 12 Aug 2025 15:11:45 +0000 Manifest this update: Tue 12 Aug 2025 15:11:44 +0000 Manifest next update: Tue 19 Aug 2025 15:11:44 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: M3AXipnTAwopWlATL4ruEdlxx4pZTEAa6g2QjB6/yK0=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: kZdCLZLr7MrW3XdEboMd7BRjcidMEtmhtIWvhKUYQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Aug 12 15:11:44 2025 GMT Not After : Aug 19 15:11:44 2025 GMT Subject: CN=689b59b1-79cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b0:82:e5:50:ba:47:35:32:c6:f5:13:1a:24: 8f:6d:d9:1a:c0:dc:ea:27:e0:b7:54:45:92:09:6f: f2:84:a0:68:2b:9c:93:7d:bc:0a:a2:b3:5a:0a:f1: ff:48:b9:5a:d1:3c:51:ec:60:4a:a2:42:bc:35:fa: a5:64:cc:ce:6f:75:0a:a7:51:65:2b:da:ac:84:47: e1:a0:b1:11:32:8b:2d:2e:5b:c1:11:e5:bf:d7:07: 46:47:77:e2:f7:dc:6b:8b:3d:68:50:d9:9b:2e:a2: 6f:d5:19:a5:49:da:fa:89:99:9f:e1:74:56:09:5a: 03:b7:44:7b:03:9a:42:b8:e9:26:e8:a6:b9:bf:d3: a8:3a:79:ec:fe:90:6f:bd:48:e1:ac:0d:e0:7c:6e: 78:41:d4:b1:89:98:b3:83:9d:ad:3e:ac:23:ea:0f: 7e:af:00:cd:de:14:4c:8f:55:db:8a:a2:8e:13:3f: c9:62:93:72:d0:eb:93:90:22:b7:aa:f9:48:5e:b6: a4:49:af:1a:32:96:ff:70:7e:73:27:c1:a4:a1:b8: 86:37:24:a3:de:4f:b9:d0:96:ef:fa:79:05:0b:a8: d4:60:0c:4b:0a:61:8b:ea:20:c0:ba:fe:f9:08:c0: 4d:6d:ed:6f:a7:76:4d:87:5f:df:75:68:5f:78:cc: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:81:19:4E:69:45:13:01:28:FA:CB:F1:28:63:2E:72:8E:86:98:2C X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7d:45:ad:dc:91:fb:73:67:f4:1b:26:67:67:8d:44:cf:82: 7e:50:c3:4c:ec:e8:6c:66:5b:49:fd:3c:62:6f:b8:c8:36:33: ff:5a:43:71:fc:5f:d6:cf:ed:81:bf:9e:78:f7:74:db:03:ca: 84:eb:c3:3f:0b:f6:86:fc:b7:e3:2e:f1:95:fa:bd:b8:49:cf: a5:db:c7:5e:af:5f:ff:1a:32:c9:3f:20:96:59:ff:2a:39:bb: 39:fa:cb:13:01:be:60:8e:09:cf:bc:a8:f9:e3:42:75:90:64: e1:db:88:27:8e:f9:da:bb:56:41:6b:4c:90:02:f0:1d:ae:21: ce:9f:6a:d5:4f:52:6f:61:49:b1:93:32:43:f9:69:bf:2c:41: 0f:d7:d7:66:b8:63:d3:9c:ba:c1:f3:9e:72:e0:48:07:f3:7d: 90:ce:9f:40:1d:99:0c:84:0f:5f:24:a7:81:87:86:90:f7:ee: 7b:ed:a3:ca:af:6a:ed:9b:50:99:ea:25:9c:a8:b6:e6:ca:f7: 0e:c9:a6:38:60:da:da:34:c1:bd:5f:f6:e5:40:ae:cd:de:11: d4:0b:46:f3:01:e0:b9:06:96:04:a8:13:a0:88:1d:56:65:a4: 4c:f5:c8:15:21:f4:ce:6d:b8:62:38:39:65:ba:2c:23:c5:7a: 3b:e4:57:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjUwODEyMTUxMTQ0WhcNMjUwODE5MTUxMTQ0WjAYMRYwFAYD VQQDEw02ODliNTliMS03OWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rCC5VC6RzUyxvUTGiSPbdkawNzqJ+C3VEWSCW/yhKBoK5yTfbwKorNaCvH/ SLla0TxR7GBKokK8NfqlZMzOb3UKp1FlK9qshEfhoLERMostLlvBEeW/1wdGR3fi 99xriz1oUNmbLqJv1RmlSdr6iZmf4XRWCVoDt0R7A5pCuOkm6Ka5v9OoOnns/pBv vUjhrA3gfG54QdSxiZizg52tPqwj6g9+rwDN3hRMj1XbiqKOEz/JYpNy0OuTkCK3 qvlIXrakSa8aMpb/cH5zJ8GkobiGNySj3k+50Jbv+nkFC6jUYAxLCmGL6iDAuv75 CMBNbe1vp3ZNh1/fdWhfeMyP8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeBGU5p RRMBKPrL8ShjLnKOhpgsMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOfUWt3JH7c2f0GyZnZ41Ez4J+UMNM7OhsZltJ/Txib7jINjP/WkNx /F/Wz+2Bv55493TbA8qE68M/C/aG/LfjLvGV+r24Sc+l28der1//GjLJPyCWWf8q Obs5+ssTAb5gjgnPvKj540J1kGTh24gnjvnau1ZBa0yQAvAdriHOn2rVT1JvYUmx kzJD+Wm/LEEP19dmuGPTnLrB855y4EgH832Qzp9AHZkMhA9fJKeBh4aQ9+577aPK r2rtm1CZ6iWcqLbmyvcOyaY4YNraNMG9X/blQK7N3hHUC0bzAeC5BpYEqBOgiB1W ZaRM9cgVIfTObbhiODlluiwjxXo75FfS -----END CERTIFICATE-----Generated at Wed Aug 13 02:17:29 2025 by rpki-client