$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft File: 9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json) Hash identifier: 309E350YNzK2uq9qe/LYZGDly3stPB7FrWZCyuOdals= Subject key identifier: FD:59:72:52:6B:C7:60:8C:CF:DA:0D:71:A2:CB:F1:C0:FA:2E:99:26 Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E Certificate issuer: /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft Manifest number: 011F Signing time: Sat 09 Aug 2025 05:08:21 +0000 Manifest this update: Sat 09 Aug 2025 05:08:21 +0000 Manifest next update: Sat 16 Aug 2025 05:08:21 +0000 Files and hashes: 1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: 4E7OL5flcIVyZHeVMFxGoUR4zWwQ6G0K9/avgqWypks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Validity Not Before: Aug 9 05:08:21 2025 GMT Not After : Aug 16 05:08:21 2025 GMT Subject: CN=6896d7c5-4ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:1d:20:79:e7:de:5e:80:00:9d:f8:bf:b7:31: 68:69:4a:b3:49:b9:6e:5c:da:6e:49:78:9b:5b:a0: 3e:3e:75:e9:0e:65:b6:3d:8e:43:9d:eb:1f:16:a7: 5a:b1:f4:f8:ff:e5:56:97:ae:d5:98:e7:02:7d:89: e8:51:33:b4:66:e6:77:b6:18:cb:54:7b:61:29:be: ed:40:61:0e:cd:78:27:37:c9:9b:6e:de:f7:1c:f5: d5:cd:27:0e:3c:2c:6f:22:a7:73:29:23:0b:3a:83: e5:ae:54:fb:80:d2:38:91:ae:43:be:75:2a:db:4e: fe:9e:c8:0a:a0:7c:69:ce:b0:3b:61:94:94:a5:e4: bd:c6:cc:32:03:c1:22:86:3e:e0:e1:f2:a8:bb:b6: dc:2b:1e:97:12:6c:ca:d7:fb:e8:1e:f8:0a:cd:c0: 31:37:09:40:52:36:1a:5e:28:ed:76:8a:b7:b1:73: fd:0c:b2:77:c6:bf:c5:11:7f:ab:5d:37:bf:51:06: ca:15:28:9a:75:0b:c1:28:d2:e4:e5:1c:cd:74:33: 3b:ec:5b:d0:2c:69:9b:12:e3:cf:ba:63:ea:bd:0e: 98:c4:4c:ca:87:dd:64:f6:54:d1:34:0b:f4:1f:bb: 5d:d3:b6:3b:e6:83:d6:49:ba:0c:ad:c7:ed:cf:da: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:59:72:52:6B:C7:60:8C:CF:DA:0D:71:A2:CB:F1:C0:FA:2E:99:26 X509v3 Authority Key Identifier: keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:df:3c:55:43:a0:f1:da:ff:c6:6a:c6:54:9d:f1:f6:a0:d2: cd:5c:b5:63:4d:43:c8:c1:e4:fc:cc:cd:82:51:89:c8:6e:d4: 44:40:48:ba:5d:fc:e9:bd:f6:9d:7c:e4:5a:2e:3a:00:c6:02: 03:63:76:5d:a7:07:8b:b1:f5:2a:f0:f4:c7:17:d9:85:4d:08: d8:b5:94:1e:60:93:d6:36:2e:a7:a9:44:10:80:d9:c3:74:11: c2:38:74:ae:c9:eb:ca:37:e3:d3:6f:33:35:ac:a1:be:17:20: 1a:bc:15:33:ce:3e:32:68:b8:28:5d:c5:cb:d7:fc:c6:64:a7: 3f:9a:c8:21:dc:b4:35:b0:9a:b0:b2:e3:ca:e4:e7:c3:88:45: f5:e4:27:f4:88:73:d3:a5:2d:50:7e:7b:a7:6e:7f:16:4c:07: 99:25:6e:f6:de:64:ad:ec:cb:b3:cf:eb:52:09:ca:cc:36:0b: 0f:c0:41:51:74:9b:1e:8f:4a:4b:c8:77:9b:69:a5:ac:d7:6f: e4:50:bd:0f:ce:69:4d:a2:17:a3:97:a9:d2:54:83:7c:96:e2: 04:4e:e7:4d:60:b2:ca:fe:d6:8c:66:3d:69:ca:18:af:f5:18: 06:37:0e:bd:9c:a6:d8:e6:6c:57:48:e9:d2:1c:45:99:2c:f4: 90:a9:81:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEY2OEUzNERGNzE5MDY3OTIyMkI3NkY3MDNFMDMzN0NB MUJCOTZGM0UwHhcNMjUwODA5MDUwODIxWhcNMjUwODE2MDUwODIxWjAYMRYwFAYD VQQDEw02ODk2ZDdjNS00YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+B0geefeXoAAnfi/tzFoaUqzSbluXNpuSXibW6A+PnXpDmW2PY5DnesfFqda sfT4/+VWl67VmOcCfYnoUTO0ZuZ3thjLVHthKb7tQGEOzXgnN8mbbt73HPXVzScO PCxvIqdzKSMLOoPlrlT7gNI4ka5DvnUq207+nsgKoHxpzrA7YZSUpeS9xswyA8Ei hj7g4fKou7bcKx6XEmzK1/voHvgKzcAxNwlAUjYaXijtdoq3sXP9DLJ3xr/FEX+r XTe/UQbKFSiadQvBKNLk5RzNdDM77FvQLGmbEuPPumPqvQ6YxEzKh91k9lTRNAv0 H7td07Y75oPWSboMrcftz9okcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1ZclJr x2CMz9oNcaLL8cD6LpkmMB8GA1UdIwQYMBaAFPaONN9xkGeSIrdvcD4DN8obuW8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS81ODcwQTlGNkJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1SWl0Mjl3UGdNM3lodTVi ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvNDAzM0dRWjVJaXQyOXdQZ00zeWh1NWJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS81ODcwQTlGNkJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1 SWl0Mjl3UGdNM3lodTViejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu3zxVQ6Dx2v/GasZUnfH2oNLNXLVjTUPIweT8zM2CUYnIbtREQEi6 XfzpvfadfORaLjoAxgIDY3ZdpweLsfUq8PTHF9mFTQjYtZQeYJPWNi6nqUQQgNnD dBHCOHSuyevKN+PTbzM1rKG+FyAavBUzzj4yaLgoXcXL1/zGZKc/msgh3LQ1sJqw suPK5OfDiEX15Cf0iHPTpS1Qfnunbn8WTAeZJW723mSt7Muzz+tSCcrMNgsPwEFR dJsej0pLyHebaaWs12/kUL0PzmlNohejl6nSVIN8luIETudNYLLK/taMZj1pyhiv 9RgGNw69nKbY5mxXSOnSHEWZLPSQqYEz -----END CERTIFICATE-----Generated at Sun Aug 10 14:00:46 2025 by rpki-client