$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: F0M1BXzTJ4G+dJttWsFheCKEi9cOag0/hGSJKzG85n0= Subject key identifier: 79:C1:D7:4A:6C:6F:A6:8D:61:CC:C9:07:4E:65:A7:1D:21:C6:BC:73 Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 22DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 229C Signing time: Fri 08 Aug 2025 15:56:43 +0000 Manifest this update: Fri 08 Aug 2025 15:56:42 +0000 Manifest next update: Fri 15 Aug 2025 15:56:42 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: ttFWo8kBi6Y3zSj70+Xdsx4PsmmKFQIJxAsntl3y8oE=) 2: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: QalrWEPHK1c0+wAh4Y9v/QxVAuOH9u4KL51JrDmBQPs=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: yV/SjGOrZoU6XjMAo/QC3pR5jQlSni/vmLDt0r4ftkA=) 4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: 3g8CG6eXI2y/sKSche4ErWaN1/woBDrqwhgjSA2yZ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8927 (0x22df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Aug 8 15:56:42 2025 GMT Not After : Aug 15 15:56:42 2025 GMT Subject: CN=68961e3b-acee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:13:71:d3:28:38:1e:49:67:02:29:25:e3:ed: 59:e6:01:c5:25:4e:f8:ce:7c:f0:b9:f7:0e:21:ad: 7a:10:9a:f6:2d:d7:e4:82:f3:34:aa:34:db:6c:5d: 26:f3:74:9d:9e:a7:67:55:22:43:84:13:3c:61:9e: 3e:7f:15:7a:c3:aa:4e:99:6d:55:61:cc:f2:b4:5f: e9:7d:54:39:71:9a:b4:d4:8d:a3:de:80:b7:91:72: a0:e4:5e:e9:42:07:99:35:74:ce:9e:2e:c3:ad:ed: 51:3c:13:f2:b9:f9:10:bf:6b:62:c4:99:40:45:ef: 50:d5:1e:a5:ae:3c:8f:96:4e:81:98:9f:11:69:e2: e6:65:91:d0:60:3f:f1:81:5d:45:87:8b:d6:b8:dd: 4f:0a:e4:29:f7:af:bc:60:01:0b:2d:92:d0:f6:ab: 3a:2f:eb:e8:40:4d:0c:32:9f:8b:d5:b3:e1:0e:04: e7:bb:87:08:c3:89:8d:a2:dd:ab:7e:33:68:46:b3: 29:64:e8:28:d8:ac:36:d4:80:0c:d6:69:3b:89:00: ad:bc:ac:8d:9b:b3:d5:05:c1:15:9e:26:c5:68:a5: 1b:0b:16:e2:73:f1:f2:2f:42:04:f2:54:dd:85:08: 12:d2:f1:29:00:42:d3:ca:5b:e5:7f:77:51:22:c6: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C1:D7:4A:6C:6F:A6:8D:61:CC:C9:07:4E:65:A7:1D:21:C6:BC:73 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c1:77:48:e4:40:84:24:8e:e0:d1:20:af:4f:1e:d8:60:fe: af:88:06:ed:52:f6:ca:5a:39:88:60:57:84:95:5a:b3:cd:96: 71:28:42:10:5b:89:a4:ef:2d:26:67:fd:12:84:66:0a:2c:b1: 2a:0e:3b:3c:25:5c:17:b9:27:e8:49:14:cd:13:85:00:f6:07: 0a:10:f0:13:f7:2f:35:fc:84:66:42:3d:4a:9b:f0:71:95:1d: 18:4d:06:a6:51:7f:e1:fb:ae:e3:43:2f:8a:ca:9b:65:1d:dd: 1a:d8:68:ac:d3:62:34:81:13:20:29:10:db:28:36:ac:06:a5: dd:a1:d4:b1:c3:51:a6:4c:4e:93:95:3b:02:17:1f:d3:95:b5: 6b:0f:88:27:54:a7:08:f1:d9:38:9e:5a:63:68:44:56:bb:d8: 5d:05:d1:eb:71:7d:3e:31:ed:0f:0e:ca:33:a0:4d:91:90:3a: 74:da:25:c0:ec:27:a1:e5:b2:2a:7b:96:03:0d:58:d8:40:84: 7f:0a:55:7f:73:c6:00:82:94:48:9e:4b:50:32:8f:98:63:53: 9e:8b:89:d6:12:33:7e:94:5b:94:ec:fe:d8:54:2d:d0:d5:74: 5e:72:c4:2f:75:4a:53:40:1e:ba:cf:72:83:57:6d:2c:ca:a1: ee:57:d6:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjUwODA4MTU1NjQyWhcNMjUwODE1MTU1NjQyWjAYMRYwFAYD VQQDEw02ODk2MWUzYi1hY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xNx0yg4HklnAikl4+1Z5gHFJU74znzwufcOIa16EJr2LdfkgvM0qjTbbF0m 83SdnqdnVSJDhBM8YZ4+fxV6w6pOmW1VYczytF/pfVQ5cZq01I2j3oC3kXKg5F7p QgeZNXTOni7Dre1RPBPyufkQv2tixJlARe9Q1R6lrjyPlk6BmJ8RaeLmZZHQYD/x gV1Fh4vWuN1PCuQp96+8YAELLZLQ9qs6L+voQE0MMp+L1bPhDgTnu4cIw4mNot2r fjNoRrMpZOgo2Kw21IAM1mk7iQCtvKyNm7PVBcEVnibFaKUbCxbic/HyL0IE8lTd hQgS0vEpAELTylvlf3dRIsba8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnB10ps b6aNYczJB05lpx0hxrxzMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtwXdI5ECEJI7g0SCvTx7YYP6viAbtUvbKWjmIYFeElVqzzZZxKEIQ W4mk7y0mZ/0ShGYKLLEqDjs8JVwXuSfoSRTNE4UA9gcKEPAT9y81/IRmQj1Km/Bx lR0YTQamUX/h+67jQy+KyptlHd0a2Gis02I0gRMgKRDbKDasBqXdodSxw1GmTE6T lTsCFx/TlbVrD4gnVKcI8dk4nlpjaERWu9hdBdHrcX0+Me0PDsozoE2RkDp02iXA 7Ceh5bIqe5YDDVjYQIR/ClV/c8YAgpRInktQMo+YY1Oei4nWEjN+lFuU7P7YVC3Q 1XRecsQvdUpTQB66z3KDV20syqHuV9a1 -----END CERTIFICATE-----Generated at Sun Aug 10 03:44:25 2025 by rpki-client