$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json) Hash identifier: Kl7ACVqGTPMxPxQF5nXhrG63DkmwuBifzqCBhRke3oo= Subject key identifier: 1D:FE:2C:FB:E6:5F:93:BD:1D:37:C5:46:EF:E2:64:44:C4:96:1B:4B Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft Manifest number: 0336 Signing time: Sat 09 Aug 2025 01:38:51 +0000 Manifest this update: Sat 09 Aug 2025 01:38:50 +0000 Manifest next update: Sat 16 Aug 2025 01:38:50 +0000 Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: ng5MpUaiY/0W/hoJGaCnF4SRQr3LQKxPK/rbFpHnCg0=) 2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: IGdzlLmujAALpavxxSo45P0YFLMJKzqyXolkwQqyBjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Validity Not Before: Aug 9 01:38:50 2025 GMT Not After : Aug 16 01:38:50 2025 GMT Subject: CN=6896a6aa-d3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:64:c5:a6:47:2b:8e:7a:b1:1f:9f:ae:f9: 97:99:ba:34:1d:08:71:2d:01:ec:62:10:2d:ff:5c: 99:9e:e5:2a:9e:58:bf:74:71:b2:3a:e4:44:69:11: ed:3b:3e:7d:25:1f:18:c0:d8:0d:01:99:74:32:97: 3b:d0:fb:d7:5f:55:05:c2:22:32:cb:24:4c:a6:80: df:2a:2f:5b:7b:be:2d:0b:e8:5c:fd:d7:f0:44:02: 62:7a:e0:c2:50:de:92:77:d6:cd:e8:ef:38:e0:94: 1b:f8:96:52:bd:b2:15:e3:f1:c2:ca:10:5d:aa:8f: fb:5f:68:02:c0:1f:10:5c:86:94:1e:6c:88:0e:ed: af:27:ff:18:ab:db:3f:ef:60:6f:f4:de:52:46:1d: 70:2d:ef:5b:b4:09:19:27:10:7e:cd:5c:4f:ac:ee: 30:6c:da:de:c7:74:9b:63:9c:12:db:a9:eb:84:43: 9e:15:5f:36:0f:cf:e6:2e:84:cb:64:fb:da:e7:00: 1c:db:af:29:db:01:a6:24:92:13:6d:46:58:4f:c7: 18:76:9a:70:21:bc:a2:04:16:d4:ae:52:73:54:b7: 27:82:ed:59:c2:b4:7e:31:ac:49:e8:ee:94:37:da: 6c:25:17:26:d9:65:dc:c9:f1:82:07:9a:0e:69:dc: 3d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FE:2C:FB:E6:5F:93:BD:1D:37:C5:46:EF:E2:64:44:C4:96:1B:4B X509v3 Authority Key Identifier: keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a1:14:0e:03:a0:ce:58:9c:8a:a6:2d:1d:82:66:a7:95:a2: 13:a7:53:4c:2a:d7:6d:7a:c0:31:9f:85:3f:0e:8d:87:f8:f1: 62:b5:4d:03:42:bf:78:1f:9a:40:bc:32:8d:ea:89:ed:e8:74: 4f:9b:36:99:17:3f:3b:4f:23:d3:79:81:c9:b5:3f:f5:f6:94: 48:89:81:84:46:d4:ab:66:f0:a7:62:03:95:46:1e:52:c4:0c: 97:d7:4a:50:dd:5e:1d:fa:30:f8:bc:b1:fc:36:c2:86:1b:3f: 46:c1:a7:94:e1:55:24:8e:bc:1b:01:3f:ae:4c:57:03:a2:bc: 1f:4a:f9:e5:e8:58:a8:f7:47:3d:cb:69:4e:e3:15:06:69:c3: b2:90:30:d5:21:e2:35:76:88:d4:29:80:4f:7b:aa:c5:d0:6b: 1d:db:b7:bc:11:26:d4:27:ab:42:09:73:42:01:87:d8:79:ca: fb:0c:d9:38:c3:96:70:f5:91:52:45:26:57:62:48:b8:72:e7: 0d:26:27:02:98:59:26:9b:9e:7a:18:cf:64:33:6b:71:3e:b5: 2d:65:c7:2d:72:4f:4d:14:a4:01:ec:58:34:f6:d9:e4:cf:87: 43:a1:c2:a1:cd:6f:be:6d:18:1f:73:de:53:86:f5:4e:06:2b: 61:f3:0e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1 NDBDRjlCQUYwHhcNMjUwODA5MDEzODUwWhcNMjUwODE2MDEzODUwWjAYMRYwFAYD VQQDEw02ODk2YTZhYS1kM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXJkxaZHK456sR+frvmXmbo0HQhxLQHsYhAt/1yZnuUqnli/dHGyOuREaRHt Oz59JR8YwNgNAZl0Mpc70PvXX1UFwiIyyyRMpoDfKi9be74tC+hc/dfwRAJieuDC UN6Sd9bN6O844JQb+JZSvbIV4/HCyhBdqo/7X2gCwB8QXIaUHmyIDu2vJ/8Yq9s/ 72Bv9N5SRh1wLe9btAkZJxB+zVxPrO4wbNrex3SbY5wS26nrhEOeFV82D8/mLoTL ZPva5wAc268p2wGmJJITbUZYT8cYdppwIbyiBBbUrlJzVLcngu1ZwrR+MaxJ6O6U N9psJRcm2WXcyfGCB5oOadw9fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3+LPvm X5O9HTfFRu/iZETElhtLMB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNa OVUwcWFWeGFEcjlVRFBtNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdoRQOA6DOWJyKpi0dgmanlaITp1NMKtdtesAxn4U/Do2H+PFitU0D Qr94H5pAvDKN6ont6HRPmzaZFz87TyPTeYHJtT/19pRIiYGERtSrZvCnYgOVRh5S xAyX10pQ3V4d+jD4vLH8NsKGGz9GwaeU4VUkjrwbAT+uTFcDorwfSvnl6Fio90c9 y2lO4xUGacOykDDVIeI1dojUKYBPe6rF0Gsd27e8ESbUJ6tCCXNCAYfYecr7DNk4 w5Zw9ZFSRSZXYki4cucNJicCmFkmm556GM9kM2txPrUtZcctck9NFKQB7Fg09tnk z4dDocKhzW++bRgfc95ThvVOBith8w4Z -----END CERTIFICATE-----Generated at Sun Aug 10 21:06:02 2025 by rpki-client