$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: pauCoI9XEBnjyFKvgJ8TjOtkYAF7tuTNeQ0RcwugFGA= Subject key identifier: 17:92:3E:74:D1:33:FB:9D:2D:13:28:5F:DC:CE:12:66:0F:9A:4A:5E Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 1133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 112B Signing time: Sun 10 Aug 2025 17:16:31 +0000 Manifest this update: Sun 10 Aug 2025 17:16:31 +0000 Manifest next update: Sun 17 Aug 2025 17:16:31 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: ITPbTS7fuZqaVeKOSDTuUXdrzcEZd4ktRbEYoQqa3K0=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4403 (0x1133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Aug 10 17:16:31 2025 GMT Not After : Aug 17 17:16:31 2025 GMT Subject: CN=6898d3ef-3266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:26:f1:dd:b5:e8:7d:3e:cf:43:7c:27:2f: 43:9a:c9:b4:5a:61:95:21:7a:f5:f1:55:27:0c:24: fe:84:31:c7:f0:27:5c:cc:1b:c7:7c:01:6d:e0:c5: 52:dd:9c:de:8b:04:b9:1b:e5:de:49:2d:c4:37:2f: db:a8:69:c9:50:fe:48:f0:59:65:14:64:ea:e0:fe: 09:f1:ed:85:5e:95:ad:5d:6b:98:c7:bd:8a:d2:aa: f9:2b:50:a5:00:f1:3c:ad:65:65:a3:c4:3e:f4:07: fe:88:7e:84:5c:39:2e:30:a4:58:32:9e:af:9f:bf: e7:ef:aa:3e:f9:a3:6d:e3:be:ea:cf:0d:9e:80:e7: 9a:d1:ed:f2:b8:41:8e:6d:ee:57:6a:98:a7:40:1f: 3f:25:f8:17:c3:0a:02:15:24:2c:72:d2:55:fc:9b: 36:86:3f:e7:42:89:b5:38:72:8f:ab:54:f4:87:39: 29:d9:be:0f:c7:73:e0:4f:73:a3:86:df:6c:7f:81: 4b:bd:f6:1b:c7:f9:11:19:df:61:f9:9f:e7:3c:3d: 81:9e:82:7b:2b:06:94:74:a4:b2:e2:f5:8c:da:49: ec:61:a1:1f:6a:2b:e9:57:d2:fc:96:b1:12:94:e0: 42:ec:5b:17:74:9a:68:72:b3:38:ed:8e:25:f1:92: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:92:3E:74:D1:33:FB:9D:2D:13:28:5F:DC:CE:12:66:0F:9A:4A:5E X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:34:14:cf:dc:24:c3:2a:d2:7a:4e:6a:1d:7a:2a:7b:50:3e: 73:61:14:98:25:6d:1a:a1:23:bb:85:9a:91:84:5f:dc:e4:d5: 3a:bc:b3:c3:b7:1a:e3:60:33:6b:d2:9b:66:c0:75:e1:8a:ab: e7:68:3d:5c:7e:0a:b6:3a:f9:68:7b:18:91:5a:ee:df:b2:cc: 15:2c:65:85:c9:ea:a5:54:75:d1:84:e3:95:c4:32:15:a4:cc: 45:81:00:d8:16:03:96:61:ab:37:6a:a2:af:75:55:e2:d4:05: 69:d3:c4:94:b7:86:06:e2:91:6c:c5:a0:25:f1:32:f9:f1:11: a3:09:df:e6:67:ed:0c:ae:26:63:86:9d:3b:77:d8:62:3a:bd: 5c:44:b4:63:2f:27:5b:b5:4e:86:40:0e:4e:11:4f:a9:4a:41: b2:8e:df:a3:ed:c1:18:fb:6f:7c:2d:55:5b:60:1f:ac:77:ac: 8a:2f:de:9d:ee:f0:a4:4c:37:88:12:cb:d6:38:02:f9:82:15: 6c:f3:da:d4:64:a0:5a:45:fc:d0:7d:32:95:0c:81:72:87:e8: b7:57:ae:10:d5:1c:9b:3a:75:98:aa:8e:31:86:1d:5e:87:b0: 7a:f7:05:9e:8b:68:cd:0b:c1:33:6e:59:30:ad:6e:c9:58:eb: 6c:47:0e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjUwODEwMTcxNjMxWhcNMjUwODE3MTcxNjMxWjAYMRYwFAYD VQQDEw02ODk4ZDNlZi0zMjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWUm8d216H0+z0N8Jy9Dmsm0WmGVIXr18VUnDCT+hDHH8CdczBvHfAFt4MVS 3ZzeiwS5G+XeSS3ENy/bqGnJUP5I8FllFGTq4P4J8e2FXpWtXWuYx72K0qr5K1Cl APE8rWVlo8Q+9Af+iH6EXDkuMKRYMp6vn7/n76o++aNt477qzw2egOea0e3yuEGO be5XapinQB8/JfgXwwoCFSQsctJV/Js2hj/nQom1OHKPq1T0hzkp2b4Px3PgT3Oj ht9sf4FLvfYbx/kRGd9h+Z/nPD2BnoJ7KwaUdKSy4vWM2knsYaEfaivpV9L8lrES lOBC7FsXdJpocrM47Y4l8ZILNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeSPnTR M/udLRMoX9zOEmYPmkpeMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANNBTP3CTDKtJ6Tmodeip7UD5zYRSYJW0aoSO7hZqRhF/c5NU6vLPD txrjYDNr0ptmwHXhiqvnaD1cfgq2OvloexiRWu7fsswVLGWFyeqlVHXRhOOVxDIV pMxFgQDYFgOWYas3aqKvdVXi1AVp08SUt4YG4pFsxaAl8TL58RGjCd/mZ+0MriZj hp07d9hiOr1cRLRjLydbtU6GQA5OEU+pSkGyjt+j7cEY+298LVVbYB+sd6yKL96d 7vCkTDeIEsvWOAL5ghVs89rUZKBaRfzQfTKVDIFyh+i3V64Q1RybOnWYqo4xhh1e h7B69wWei2jNC8EzblkwrW7JWOtsRw5F -----END CERTIFICATE-----Generated at Mon Aug 11 01:51:40 2025 by rpki-client