$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft File: CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json) Hash identifier: Ef4Ca7maA7lsb5LpBso8e9YoDiEaPXDPmra/k6HC8T0= Subject key identifier: 0D:D0:F1:EC:AE:0B:92:06:7A:46:B2:9E:E6:DB:86:88:45:5A:2E:FD Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft Manifest number: 01F6 Signing time: Sat 09 Aug 2025 02:56:48 +0000 Manifest this update: Sat 09 Aug 2025 02:56:48 +0000 Manifest next update: Sat 16 Aug 2025 02:56:48 +0000 Files and hashes: 1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: x2TRlOcHm2E8PEMMc9JKWke1yhZFOcMJlH8RvazuibI=) 2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: csl85VTomjs4iPv8bKOFHRUkLivByj84d/cWaa81y8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Validity Not Before: Aug 9 02:56:48 2025 GMT Not After : Aug 16 02:56:48 2025 GMT Subject: CN=6896b8f0-ed95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:91:93:12:58:f6:4a:76:22:0d:8e:03:0c: 72:6a:b5:7f:1a:4d:16:6f:1d:94:b7:6d:4c:60:5e: 89:90:c7:4e:93:28:fe:cb:07:f3:99:8f:d2:42:a8: 8f:43:0f:1f:d0:56:e0:01:9b:f1:dd:5f:a6:43:82: 55:47:61:b1:04:8b:56:ac:5a:c5:97:ff:76:e8:4f: d0:fe:6c:87:73:42:f9:89:e1:7c:87:39:68:85:6d: 8b:3b:05:f8:47:46:6e:dc:82:6a:a1:c6:03:74:d0: cf:fd:20:dc:8c:68:2c:76:38:99:33:1a:0b:45:cb: 02:2a:16:d6:d7:d8:76:eb:15:d1:f8:dc:b2:8a:e0: 4b:5d:9a:a5:00:f0:3a:6d:a3:c0:fe:24:74:9e:b7: fc:ee:10:48:ef:b9:64:15:50:a2:67:81:90:60:24: f8:45:06:db:88:f2:eb:23:20:f3:b1:db:11:31:a2: 18:19:19:e9:22:76:76:47:60:72:a1:bc:66:14:9c: 50:fa:1b:fe:6f:ca:87:c6:4c:9f:aa:1d:50:c9:23: 99:87:66:95:05:9e:ed:96:4c:05:c8:f2:57:e9:f3: 34:cf:c2:34:d9:64:9c:7c:bd:15:b5:a4:c0:11:61: ab:c0:e7:3d:8b:ce:1b:9d:1e:9c:66:53:b1:6c:15: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D0:F1:EC:AE:0B:92:06:7A:46:B2:9E:E6:DB:86:88:45:5A:2E:FD X509v3 Authority Key Identifier: keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:91:2a:1f:4d:09:2d:eb:20:ea:a2:bf:83:32:91:90:e2:4e: 76:28:ad:4e:11:f2:04:c5:00:9e:e5:4b:37:4b:e4:08:29:b7: 54:3b:90:57:ea:ee:a2:87:5e:17:b8:a4:30:4a:fe:34:0b:40: 7d:e2:f6:12:57:8a:17:55:00:34:a5:20:eb:e9:00:ed:23:3b: 1f:aa:96:b4:f3:c2:66:a9:41:58:dd:a1:ce:c0:1a:c5:45:ba: ae:98:b9:d4:62:8d:a9:44:90:36:a4:b5:0c:0a:24:6c:a5:ea: e4:ae:2a:4d:a5:19:a6:ff:a5:db:71:49:39:5e:ec:ab:5c:d6: d8:52:32:e9:43:3c:3f:1c:b2:4e:f4:2d:5c:38:20:28:a9:82: 94:8b:70:12:0b:c2:d0:fc:e9:23:8d:bc:14:e5:ad:2a:48:69: a7:e5:e7:0e:b9:e0:b0:19:f9:43:ba:d6:b1:41:18:8c:58:2a: 98:e1:9c:72:e4:20:aa:20:8b:74:07:69:89:a4:a8:c1:41:43: e1:e6:20:d1:92:4d:e5:6d:8c:0d:bc:0c:61:0d:60:7a:49:1a: 28:da:bf:18:bf:c2:18:25:fe:ec:64:16:ca:4d:00:0a:97:68: 75:ba:5a:6a:3b:3a:d6:fd:ad:d2:a7:df:ac:6b:11:e5:b7:37: 31:cc:2e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4 MkM4RDJDRTAwHhcNMjUwODA5MDI1NjQ4WhcNMjUwODE2MDI1NjQ4WjAYMRYwFAYD VQQDEw02ODk2YjhmMC1lZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7KRkxJY9kp2Ig2OAwxyarV/Gk0Wbx2Ut21MYF6JkMdOkyj+ywfzmY/SQqiP Qw8f0FbgAZvx3V+mQ4JVR2GxBItWrFrFl/926E/Q/myHc0L5ieF8hzlohW2LOwX4 R0Zu3IJqocYDdNDP/SDcjGgsdjiZMxoLRcsCKhbW19h26xXR+NyyiuBLXZqlAPA6 baPA/iR0nrf87hBI77lkFVCiZ4GQYCT4RQbbiPLrIyDzsdsRMaIYGRnpInZ2R2By obxmFJxQ+hv+b8qHxkyfqh1QySOZh2aVBZ7tlkwFyPJX6fM0z8I02WScfL0VtaTA EWGrwOc9i84bnR6cZlOxbBXvswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3Q8eyu C5IGekaynubbhohFWi79MB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1 NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVBMi8xNTI1MzQxNDg1NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJU X09Id3dOdXpHeHVDeU5MT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAykSofTQkt6yDqor+DMpGQ4k52KK1OEfIExQCe5Us3S+QIKbdUO5BX 6u6ih14XuKQwSv40C0B94vYSV4oXVQA0pSDr6QDtIzsfqpa088JmqUFY3aHOwBrF RbqumLnUYo2pRJA2pLUMCiRsperkripNpRmm/6XbcUk5XuyrXNbYUjLpQzw/HLJO 9C1cOCAoqYKUi3ASC8LQ/OkjjbwU5a0qSGmn5ecOueCwGflDutaxQRiMWCqY4Zxy 5CCqIIt0B2mJpKjBQUPh5iDRkk3lbYwNvAxhDWB6SRoo2r8Yv8IYJf7sZBbKTQAK l2h1ulpqOzrW/a3Sp9+saxHltzcxzC4W -----END CERTIFICATE-----Generated at Sun Aug 10 04:46:15 2025 by rpki-client