$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: fS3XLGoarT9x+7P2dsTPKa35iQEsBdgbtNijUpIv8jg= Subject key identifier: A9:BA:AD:0D:1A:97:ED:8A:1B:B6:5D:8B:DD:C2:BC:9D:CC:8E:78:18 Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: 9B Signing time: Thu 07 Aug 2025 06:52:54 +0000 Manifest this update: Thu 07 Aug 2025 06:52:53 +0000 Manifest next update: Thu 14 Aug 2025 06:52:53 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: fWMpk71caV2G+7uX6d3Xe6iFBiE8cnXbMxSQE+yb3ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Aug 7 06:52:53 2025 GMT Not After : Aug 14 06:52:53 2025 GMT Subject: CN=68944d45-6712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:e3:97:e8:41:d7:78:35:3d:0e:23:68:32: 8c:05:ae:a3:3a:c1:d1:99:5d:03:14:11:3e:f8:e2: 66:90:35:13:1e:9e:06:91:1c:63:9f:e3:a0:fa:0e: 7a:c2:ff:a6:82:71:0d:5e:40:30:f8:cd:2c:5f:6d: db:03:3b:a4:16:a2:18:69:ff:e8:85:2c:70:53:67: 3e:07:cb:ad:7e:c7:a9:2f:d8:65:ed:56:d0:85:b7: bc:ab:33:72:23:fe:ea:0e:b0:8b:dd:a0:f9:ff:f9: 18:16:0e:ba:fc:dc:10:63:79:6e:f4:c0:fa:f6:4e: c5:b9:ee:9b:8e:2a:7e:43:dc:bd:c1:3a:2e:cf:77: e5:a2:d1:79:02:b4:f8:95:ea:0a:cd:23:2a:02:e0: 84:98:12:79:42:b9:38:b3:1f:5b:33:81:c0:88:04: 70:2c:a5:df:87:f4:93:c7:39:b5:a2:c6:7b:10:c1: 2c:84:ef:fe:34:d4:13:74:d5:53:b7:43:a9:8a:80: fc:7f:dc:21:dd:fb:1b:5b:54:6a:d1:e2:b7:9a:6a: e1:58:24:51:b0:2a:eb:8d:b3:bb:3e:df:63:cf:1a: 4e:31:62:9d:c3:27:be:59:6a:07:e1:ca:2b:37:cc: ee:88:05:87:27:64:41:f8:f5:e0:37:fe:f7:2c:a1: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BA:AD:0D:1A:97:ED:8A:1B:B6:5D:8B:DD:C2:BC:9D:CC:8E:78:18 X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:cf:6a:d3:11:01:de:3f:9d:20:92:b5:fc:16:a6:97:16:c4: 59:5a:5d:db:18:6a:b0:e2:51:2b:d7:f6:8d:fb:41:5c:34:0f: ab:20:86:e4:74:95:c4:c9:de:a8:40:f4:d4:8f:24:95:e1:61: 6f:95:7a:c0:05:ca:27:a9:b2:8e:c2:2d:6e:3b:f4:a1:39:0f: be:16:7d:70:7a:49:f1:e3:bc:4c:fe:2c:53:e2:de:12:69:e2: 67:2a:36:f0:d8:31:8f:5e:ea:a8:84:1e:a1:89:78:b2:08:15: fa:a9:16:eb:5d:9f:c3:8c:86:86:77:62:70:c7:85:cb:38:3b: 6d:26:de:74:41:ec:ae:cf:c7:bb:c9:c4:68:6f:2b:cf:7b:bc: 54:dc:35:3e:97:2d:40:b2:80:d7:dc:d8:cb:de:87:fd:0a:9e: 37:c9:8c:2b:76:30:84:6f:2f:36:b9:d8:3a:75:3e:2e:70:6b: ca:1a:5c:b0:74:74:41:e3:37:ae:ab:91:60:36:4f:4e:1d:4b: 60:c7:f6:f3:ae:5d:79:8f:d4:53:44:0f:e5:c8:69:6b:2d:23: 6d:d4:70:6d:c1:95:dc:84:06:ef:33:58:b5:01:83:22:0c:ac: c8:01:98:0d:96:4c:c9:8f:11:90:3a:cd:03:58:f0:a3:34:aa: 25:af:6d:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKDg3OTJERTM5OUNGNjMxOTNEREMyOUQzMEZCRjBBNTgx RTAyNEYwMDMwHhcNMjUwODA3MDY1MjUzWhcNMjUwODE0MDY1MjUzWjAYMRYwFAYD VQQDEw02ODk0NGQ0NS02NzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWrjl+hB13g1PQ4jaDKMBa6jOsHRmV0DFBE++OJmkDUTHp4GkRxjn+Og+g56 wv+mgnENXkAw+M0sX23bAzukFqIYaf/ohSxwU2c+B8utfsepL9hl7VbQhbe8qzNy I/7qDrCL3aD5//kYFg66/NwQY3lu9MD69k7Fue6bjip+Q9y9wTouz3flotF5ArT4 leoKzSMqAuCEmBJ5Qrk4sx9bM4HAiARwLKXfh/STxzm1osZ7EMEshO/+NNQTdNVT t0OpioD8f9wh3fsbW1Rq0eK3mmrhWCRRsCrrjbO7Pt9jzxpOMWKdwye+WWoH4cor N8zuiAWHJ2RB+PXgN/73LKH1QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKm6rQ0a l+2KG7Zdi93CvJ3MjngYMB8GA1UdIwQYMBaAFIeS3jmc9jGT3cKdMPvwpYHgJPAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy9BM0RENkI5QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1aUGR3cDB3LV9DbGdlQWs4 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy9BM0RENkI5QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1a UGR3cDB3LV9DbGdlQWs4QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHz2rTEQHeP50gkrX8FqaXFsRZWl3bGGqw4lEr1/aN+0FcNA+rIIbk dJXEyd6oQPTUjySV4WFvlXrABconqbKOwi1uO/ShOQ++Fn1weknx47xM/ixT4t4S aeJnKjbw2DGPXuqohB6hiXiyCBX6qRbrXZ/DjIaGd2Jwx4XLODttJt50Qeyuz8e7 ycRobyvPe7xU3DU+ly1AsoDX3NjL3of9Cp43yYwrdjCEby82udg6dT4ucGvKGlyw dHRB4zeuq5FgNk9OHUtgx/bzrl15j9RTRA/lyGlrLSNt1HBtwZXchAbvM1i1AYMi DKzIAZgNlkzJjxGQOs0DWPCjNKolr22V -----END CERTIFICATE-----Generated at Fri Aug 8 20:54:57 2025 by rpki-client