$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: /7TFU9ns7FjcPQwB0Ox6ZBN6ye6YVpdThR78IncoUhs= Subject key identifier: 6D:5B:7E:58:1F:8F:47:A5:0D:0D:37:FD:4C:9D:EA:AC:5B:FC:D2:57 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 013C Signing time: Mon 11 Aug 2025 04:35:44 +0000 Manifest this update: Mon 11 Aug 2025 04:35:44 +0000 Manifest next update: Mon 18 Aug 2025 04:35:44 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: JU67Jx3C/774yyfBKdts+v7h2L1SeVOUprMeBpcU70s=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 04:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Aug 11 04:35:44 2025 GMT Not After : Aug 18 04:35:44 2025 GMT Subject: CN=68997320-f3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:f7:eb:23:b6:d0:7e:06:51:19:93:a6:fb: 44:07:4a:5d:fa:80:21:c6:58:6b:e3:28:4c:56:52: 9a:f0:7e:04:58:6a:4a:52:f0:ae:a3:d2:23:5d:cc: f6:fc:c5:aa:19:f0:77:71:4c:cb:3c:8f:d4:6d:54: 34:41:b3:5a:9d:d0:03:6b:80:65:99:96:b5:57:2b: a7:c8:97:0d:2d:48:cc:8c:68:cf:bf:3d:70:a3:97: 34:af:b2:97:a5:e2:e1:1b:87:d3:93:c8:91:1f:3d: 43:e1:4d:de:89:f2:b8:86:48:24:02:dc:5d:57:8a: 06:7a:ba:29:93:48:60:aa:3d:74:b4:e0:db:c5:ad: 9e:75:28:6c:ed:18:6d:06:00:be:da:dc:01:e5:85: cf:9f:7e:a8:a9:3a:aa:d4:92:d5:b9:c5:c4:9b:fd: aa:ab:6f:24:db:2d:eb:bf:f9:ea:87:a3:50:4f:37: 9e:e6:3b:b1:7a:79:a4:7d:c6:b5:e4:5b:b7:64:0a: 09:88:b8:37:73:11:a8:63:45:a2:b2:06:5b:96:85: 6c:ff:f2:5a:9e:1b:99:e5:ca:af:34:ab:4c:81:ab: ce:24:b1:35:ad:1b:55:20:b4:b6:f1:0c:99:36:00: 2c:99:a7:3e:9c:3d:27:9a:ea:e2:9e:59:03:a4:07: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5B:7E:58:1F:8F:47:A5:0D:0D:37:FD:4C:9D:EA:AC:5B:FC:D2:57 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:7c:5e:0e:40:23:6f:c9:ae:dc:c7:96:8d:7b:4c:b4:cb:02: 93:86:10:76:d3:ea:94:8f:c0:40:97:70:61:0c:f2:40:04:10: 7f:0c:64:92:2c:c0:8c:9a:9d:12:49:6d:19:38:f7:c6:9a:68: a7:9f:fc:98:e4:d3:83:66:d5:0b:3e:4e:f7:90:54:f8:4e:f6: 22:91:94:f4:0b:2d:3b:77:f3:32:f8:d5:65:f5:0f:83:c1:33: 79:18:06:d6:dd:ca:9d:e5:a4:25:7e:51:7c:9f:2d:e7:04:d2: 66:89:2e:2e:ba:b2:85:4a:dc:a6:f5:66:20:5f:eb:0a:86:fc: 0d:17:9b:8c:60:6a:a4:1c:5f:37:63:b5:0f:9e:5e:08:2e:49: cc:12:a9:bb:0a:d6:53:e7:73:e5:17:32:a5:69:98:01:1f:85: 88:ea:e5:62:2e:23:25:d4:17:ff:91:e8:59:ef:c0:be:c9:0d: 30:66:4b:01:b3:44:0e:9d:c8:0f:5d:6c:d5:ee:50:ab:3d:89: b0:21:e3:d5:de:b7:8c:bb:ce:1c:fa:02:2e:86:f2:f4:48:9a: 8e:0e:75:70:c2:23:ca:2f:fb:cb:c7:15:b4:7c:8e:9b:1d:fa: 61:4a:c0:fa:57:18:45:8f:ba:56:38:fa:d8:c4:2a:9c:41:3a: cf:bb:10:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUwODExMDQzNTQ0WhcNMjUwODE4MDQzNTQ0WjAYMRYwFAYD VQQDEw02ODk5NzMyMC1mM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqb36yO20H4GURmTpvtEB0pd+oAhxlhr4yhMVlKa8H4EWGpKUvCuo9IjXcz2 /MWqGfB3cUzLPI/UbVQ0QbNandADa4BlmZa1VyunyJcNLUjMjGjPvz1wo5c0r7KX peLhG4fTk8iRHz1D4U3eifK4hkgkAtxdV4oGeropk0hgqj10tODbxa2edShs7Rht BgC+2twB5YXPn36oqTqq1JLVucXEm/2qq28k2y3rv/nqh6NQTzee5juxenmkfca1 5Fu3ZAoJiLg3cxGoY0WisgZbloVs//JanhuZ5cqvNKtMgavOJLE1rRtVILS28QyZ NgAsmac+nD0nmurinlkDpAcL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1bflgf j0elDQ03/Uyd6qxb/NJXMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIfF4OQCNvya7cx5aNe0y0ywKThhB20+qUj8BAl3BhDPJABBB/DGSS LMCMmp0SSW0ZOPfGmminn/yY5NODZtULPk73kFT4TvYikZT0Cy07d/My+NVl9Q+D wTN5GAbW3cqd5aQlflF8ny3nBNJmiS4uurKFStym9WYgX+sKhvwNF5uMYGqkHF83 Y7UPnl4ILknMEqm7CtZT53PlFzKlaZgBH4WI6uViLiMl1Bf/kehZ78C+yQ0wZksB s0QOncgPXWzV7lCrPYmwIePV3reMu84c+gIuhvL0SJqODnVwwiPKL/vLxxW0fI6b HfphSsD6VxhFj7pWOPrYxCqcQTrPuxBB -----END CERTIFICATE-----Generated at Tue Aug 12 19:00:59 2025 by rpki-client