$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json) Hash identifier: c1dcphkg9+rDKF9RZ/0j8ipPLFMCejEYR8OK078cwus= Subject key identifier: D7:5E:7A:03:9C:DA:41:EC:0B:4A:5F:BB:3A:C3:42:76:23:38:4C:05 Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Certificate serial: 081B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft Manifest number: 0814 Signing time: Fri 08 Aug 2025 21:15:10 +0000 Manifest this update: Fri 08 Aug 2025 21:15:09 +0000 Manifest next update: Fri 15 Aug 2025 21:15:09 +0000 Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: oYYqdbnQc1Brceyreog/y7ScYVmQqFIoxZOCPmIYvnU=) 2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: fA68vPB23i/OAo2Tlmrq8T3cX2gqQgOTyj+Ul9pJg/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2075 (0x81b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Validity Not Before: Aug 8 21:15:09 2025 GMT Not After : Aug 15 21:15:09 2025 GMT Subject: CN=689668de-5a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:19:63:75:96:1f:50:29:25:08:f6:c0:7b: 1f:a8:c8:99:01:6a:dd:d9:f2:59:90:a5:a9:80:51: 06:8e:98:d1:58:c7:ae:93:be:4f:b5:b2:51:54:e4: fe:39:28:62:8e:8a:74:49:69:eb:2c:ea:08:d4:8d: 04:4a:80:82:55:19:b7:87:03:54:49:63:5e:29:eb: 4f:6d:6a:ef:91:14:54:2c:1f:49:76:ff:20:8b:50: 5b:2b:50:3e:31:b8:54:d7:e7:31:7e:b1:df:48:8f: a3:49:22:0b:05:41:91:be:de:f7:7d:32:a9:1e:f2: e3:07:87:89:26:04:4f:5d:8e:e5:9f:ec:3c:67:ed: 8d:5d:66:08:01:4a:cf:1b:eb:f0:bd:d2:eb:0d:22: 5a:ba:aa:21:f3:55:d1:30:de:7d:38:af:f2:f0:cc: 38:b8:37:f7:f5:ed:d3:5e:8b:a4:44:05:9d:28:46: 9e:2f:e6:8f:35:1a:85:bf:38:37:8d:38:ed:9f:32: 6b:8f:5a:27:3b:0e:c9:7e:1c:7d:3b:d3:63:f8:e6: f5:43:ab:7f:41:22:d3:d7:d1:d7:81:b7:fe:ab:b4: 00:c9:f5:0d:bd:59:42:7c:a4:29:b4:28:5f:3b:a1: 1b:85:d8:d3:34:d0:ee:ba:dd:8e:3b:bf:be:52:49: e1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5E:7A:03:9C:DA:41:EC:0B:4A:5F:BB:3A:C3:42:76:23:38:4C:05 X509v3 Authority Key Identifier: keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:21:42:14:37:a3:9e:90:6f:47:31:bf:57:44:d3:fe:4c:6c: 84:67:bc:8f:e6:c4:66:78:65:dc:7b:8d:6a:d4:62:0a:6d:25: 45:7b:23:c5:88:e4:36:ba:00:d0:fc:97:74:10:48:90:36:2a: d5:16:a8:07:bd:c3:0d:07:66:89:25:96:38:46:6a:78:13:b9: e8:56:47:d5:7a:23:f5:e2:2c:61:de:2c:33:c8:1f:13:ea:1a: d3:a5:41:fa:1d:4d:cc:85:da:2f:e8:a3:08:f5:49:3d:ca:53: fd:10:a9:9f:89:16:ef:fe:45:66:64:ba:46:e2:a0:ea:be:f5: 90:5c:eb:48:73:62:1a:8f:cc:d0:a1:fb:dd:f0:88:f0:1d:19: a2:92:3f:6b:91:d3:f5:25:cf:e4:ad:f1:7e:58:d4:1b:a0:4c: b4:fd:2f:a2:aa:e1:6a:06:71:99:a5:74:0c:18:7c:2d:2d:4f: 9f:c3:74:eb:d4:2b:03:01:d7:76:6b:1c:06:d5:d9:e9:52:72: d2:12:38:5f:b6:4b:21:3a:c6:72:7d:c5:38:69:1a:1a:50:0f: fb:fa:3c:73:fa:83:65:ad:43:14:55:a4:c2:e6:7b:29:cd:79: 95:51:89:bb:9a:11:8b:d2:c8:e7:8d:e1:40:03:18:f4:11:92: 03:26:11:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDZBMzJCRDEzREZDRDc3RUYxQjVDMDUyQkUzNkVEODlB RDIxMjcwREIwHhcNMjUwODA4MjExNTA5WhcNMjUwODE1MjExNTA5WjAYMRYwFAYD VQQDEw02ODk2NjhkZS01YTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwUZY3WWH1ApJQj2wHsfqMiZAWrd2fJZkKWpgFEGjpjRWMeuk75PtbJRVOT+ OShijop0SWnrLOoI1I0ESoCCVRm3hwNUSWNeKetPbWrvkRRULB9Jdv8gi1BbK1A+ MbhU1+cxfrHfSI+jSSILBUGRvt73fTKpHvLjB4eJJgRPXY7ln+w8Z+2NXWYIAUrP G+vwvdLrDSJauqoh81XRMN59OK/y8Mw4uDf39e3TXoukRAWdKEaeL+aPNRqFvzg3 jTjtnzJrj1onOw7Jfhx9O9Nj+Ob1Q6t/QSLT19HXgbf+q7QAyfUNvVlCfKQptChf O6EbhdjTNNDuut2OO7++UknhgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdeegOc 2kHsC0pfuzrDQnYjOEwFMB8GA1UdIwQYMBaAFGoyvRPfzXfvG1wFK+Nu2JrSEnDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi9CMjVFRjk5MEU5 MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQtOGJYQVVyNDI3WW10SVNj TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqSzlFOV9OZC04YlhBVXI0MjdZbXRJU2NOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi9CMjVFRjk5MEU5MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQt OGJYQVVyNDI3WW10SVNjTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxIUIUN6OekG9HMb9XRNP+TGyEZ7yP5sRmeGXce41q1GIKbSVFeyPF iOQ2ugDQ/Jd0EEiQNirVFqgHvcMNB2aJJZY4Rmp4E7noVkfVeiP14ixh3iwzyB8T 6hrTpUH6HU3Mhdov6KMI9Uk9ylP9EKmfiRbv/kVmZLpG4qDqvvWQXOtIc2Iaj8zQ ofvd8IjwHRmikj9rkdP1Jc/krfF+WNQboEy0/S+iquFqBnGZpXQMGHwtLU+fw3Tr 1CsDAdd2axwG1dnpUnLSEjhftkshOsZyfcU4aRoaUA/7+jxz+oNlrUMUVaTC5nsp zXmVUYm7mhGL0sjnjeFAAxj0EZIDJhGt -----END CERTIFICATE-----Generated at Sat Aug 9 22:49:39 2025 by rpki-client