$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json) Hash identifier: LY/sCW98Is402VqzXTqOYDP7r/6VEyqs1ggSEphwnr0= Subject key identifier: 50:C6:64:B8:CB:15:38:B2:F9:18:CD:20:F8:AA:5E:62:AB:73:27:01 Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft Manifest number: 01F1 Signing time: Sat 09 Aug 2025 02:52:14 +0000 Manifest this update: Sat 09 Aug 2025 02:52:13 +0000 Manifest next update: Sat 16 Aug 2025 02:52:13 +0000 Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: ogv3dfuMbd5E8iEvZiCgLmtyhI+uLRPekFuu34SkDv8=) 2: CA181F42791211ED9D926781C4F9AE02.roa (hash: zvSljqq8u0aCswP8WadYkts+Ql8DETe3wBjOyVuGUoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Validity Not Before: Aug 9 02:52:13 2025 GMT Not After : Aug 16 02:52:13 2025 GMT Subject: CN=6896b7dd-a34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a0:c8:d0:66:4c:9f:d5:ab:6d:cf:4e:bf:01: ca:d1:fb:77:2b:4a:ba:b5:ea:ef:ae:bf:e9:b9:6e: 43:65:2d:a3:5f:79:16:38:46:71:0f:eb:12:d0:40: 36:9a:95:a6:98:65:ba:cb:c0:62:e8:83:60:dd:73: bf:31:bc:a6:ed:9b:e1:52:fa:ff:7f:10:c2:fa:91: e9:e6:0d:b0:ff:a0:a2:97:12:b7:72:82:25:e1:d7: b6:79:bd:8e:1f:b2:3c:91:2b:69:55:ef:e6:d5:6a: 9d:4f:22:28:8c:e6:3b:72:2e:43:3d:63:f4:d8:d7: a7:20:31:9e:b4:f0:ab:5d:75:0d:09:c8:69:c6:a8: 7b:64:ce:5e:6b:e8:82:5f:f3:f2:46:3a:e0:0e:0a: 97:aa:b7:06:8b:f4:a2:b6:9c:95:c0:90:a9:64:25: 4b:c0:cc:67:83:09:d1:ef:12:66:91:90:93:d0:ab: a3:e8:6a:6f:cf:b9:7d:1d:19:d6:0f:37:19:e3:70: 3b:df:7b:55:9b:43:b3:ac:35:ee:fb:4a:45:23:ef: 22:9c:56:c2:4c:98:ff:10:0b:f1:44:d8:4c:c6:a3: 97:72:e1:c7:8b:0a:e4:6c:0a:2f:da:d0:fd:be:46: 7b:f4:e5:b9:b4:42:ea:d9:8d:80:16:cc:c6:64:e3: fa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C6:64:B8:CB:15:38:B2:F9:18:CD:20:F8:AA:5E:62:AB:73:27:01 X509v3 Authority Key Identifier: keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:24:cc:e2:38:e1:ae:8d:1c:46:1a:f2:61:9b:d1:93:ec:bc: 2a:27:02:f5:6d:3e:4d:a1:fa:fe:4c:3f:fd:ec:b9:c0:22:23: a9:f5:5e:a2:e9:94:49:92:15:5f:79:47:01:d4:15:6a:19:9d: 5f:33:eb:5d:71:98:1e:4d:1b:f5:75:72:77:6f:f3:89:96:a1: 74:4f:55:83:85:b0:3b:e0:93:02:5c:c7:6e:36:fe:e5:fc:5d: e4:5d:75:55:fc:34:fe:bf:02:38:81:32:1e:45:07:83:79:a1: 34:db:6e:42:43:47:e7:81:8a:bf:e7:5d:92:a8:bf:7b:35:36: ae:fb:8a:b0:b1:ce:32:b4:27:44:72:82:d6:fa:03:fa:18:bc: b1:a5:39:8c:c7:12:4f:ec:c1:27:c0:5e:d4:1e:07:f6:e8:f1: f3:85:e0:22:61:97:e4:2d:44:a2:cc:53:bd:9f:d0:b1:85:89: ae:dd:41:52:84:12:05:8b:ad:2e:e8:1d:36:07:1a:e4:53:27: 4e:f7:d3:ec:1a:e1:48:5b:7a:d1:3d:4b:43:05:eb:b3:0b:9a: f0:2c:c1:f4:1d:2a:b9:7c:92:f5:10:b7:6d:2d:99:97:d3:27: 74:6a:e1:d1:9c:52:10:ea:c0:d1:4f:50:6b:4f:04:ce:42:19: 8e:34:4e:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QUMxMTAvBgNVBAUTKDBGRDQyNDhGRDQ4QkExQUUwQjYwRDhDRjZBNDNEQjMz QjZGNEY2QkEwHhcNMjUwODA5MDI1MjEzWhcNMjUwODE2MDI1MjEzWjAYMRYwFAYD VQQDEw02ODk2YjdkZC1hMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KDI0GZMn9Wrbc9OvwHK0ft3K0q6tervrr/puW5DZS2jX3kWOEZxD+sS0EA2 mpWmmGW6y8Bi6INg3XO/Mbym7ZvhUvr/fxDC+pHp5g2w/6CilxK3coIl4de2eb2O H7I8kStpVe/m1WqdTyIojOY7ci5DPWP02NenIDGetPCrXXUNCchpxqh7ZM5ea+iC X/PyRjrgDgqXqrcGi/SitpyVwJCpZCVLwMxngwnR7xJmkZCT0Kuj6Gpvz7l9HRnW DzcZ43A733tVm0OzrDXu+0pFI+8inFbCTJj/EAvxRNhMxqOXcuHHiwrkbAov2tD9 vkZ79OW5tELq2Y2AFszGZOP6kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDGZLjL FTiy+RjNIPiqXmKrcycBMB8GA1UdIwQYMBaAFA/UJI/Ui6GuC2DYz2pD2zO29Pa6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVBQy81RkFGNTY0Mjc5 MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9hNExZTmpQYWtQYk03YjA5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5UWtqOVNMb2E0TFlOalBha1BiTTdiMDlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVBQy81RkFGNTY0Mjc5MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9h NExZTmpQYWtQYk03YjA5cm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArJMziOOGujRxGGvJhm9GT7LwqJwL1bT5Nofr+TD/97LnAIiOp9V6i 6ZRJkhVfeUcB1BVqGZ1fM+tdcZgeTRv1dXJ3b/OJlqF0T1WDhbA74JMCXMduNv7l /F3kXXVV/DT+vwI4gTIeRQeDeaE0225CQ0fngYq/512SqL97NTau+4qwsc4ytCdE coLW+gP6GLyxpTmMxxJP7MEnwF7UHgf26PHzheAiYZfkLUSizFO9n9CxhYmu3UFS hBIFi60u6B02BxrkUydO99PsGuFIW3rRPUtDBeuzC5rwLMH0HSq5fJL1ELdtLZmX 0yd0auHRnFIQ6sDRT1BrTwTOQhmONE6l -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:16 2025 by rpki-client