$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: AwiUhiavxcI8klvyVtdSXR8Vl5t0BcD9FynQvqWQI7E= Subject key identifier: DF:62:13:4B:22:87:AC:B6:23:A0:11:EA:1E:19:02:F1:6D:CE:08:5C Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 011E Signing time: Fri 13 Jun 2025 03:44:35 +0000 Manifest this update: Fri 13 Jun 2025 03:44:35 +0000 Manifest next update: Fri 20 Jun 2025 03:44:35 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: BGY0lAqvkdYxCWcC2JLhRtjPdn1EPs4HWDQc0zJ9dUM=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Jun 13 03:44:35 2025 GMT Not After : Jun 20 03:44:35 2025 GMT Subject: CN=684b9ea3-f619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:e7:f9:90:21:75:28:fa:39:6a:9a:39:ae: 89:b1:be:be:c0:8c:b4:14:d5:c9:66:ac:3a:68:32: c1:a0:25:db:c4:7b:3e:6d:31:23:e1:37:9b:6f:fa: ef:c7:c4:55:e4:cd:6d:ea:ca:2a:3e:9c:a1:90:9a: c7:22:ea:f0:cd:3a:29:02:51:81:93:14:fd:e0:f8: ea:fd:d2:ad:45:21:9b:e3:8d:7f:30:22:03:e4:c8: ff:0f:ff:02:6e:6b:3f:5f:9f:c2:13:d7:ca:7d:d8: d7:c5:f2:4a:60:78:f8:f7:3c:ce:4a:02:4a:e8:ab: 04:3b:67:bf:5b:f2:67:b3:de:b1:f7:96:45:07:7a: a8:98:f4:df:4a:1c:0e:67:f4:fb:5f:4d:08:05:85: 66:cd:a8:5a:da:0f:96:0d:a1:f9:8e:af:57:13:fb: 16:8c:95:37:67:9f:28:bf:30:f5:75:bd:dd:06:c6: 53:51:67:01:d5:c7:3c:8f:d9:14:b0:bb:1c:89:82: 02:64:2a:e5:e4:75:40:c3:3a:c5:3b:cc:8c:dc:04: b8:ec:ec:fb:bd:44:02:c0:e8:28:4e:53:da:27:00: a6:eb:48:1e:16:c5:9b:df:76:7e:1d:78:c7:a5:b4: a2:98:a3:cf:b5:ca:c1:e5:0b:7d:3e:41:95:6a:d0: 3b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:62:13:4B:22:87:AC:B6:23:A0:11:EA:1E:19:02:F1:6D:CE:08:5C X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:11:c0:a0:7f:be:84:a1:7c:40:d1:82:a1:4e:cf:d5:02:24: 9e:83:6e:10:02:39:1c:4a:78:53:0a:6b:ce:7a:cd:82:19:70: 33:bc:59:79:21:ff:76:6a:36:20:e8:79:95:73:ce:3b:7e:7a: 94:00:8f:f8:81:34:24:2d:be:c2:15:9d:1e:7a:b3:5f:c6:a6: 70:b6:8a:f3:32:ac:bc:f0:5e:0d:11:18:ba:93:ec:f4:be:16: c5:1c:7b:c8:48:c1:f6:0b:fa:dd:e9:ac:ad:ba:96:1c:95:bb: 07:4d:61:18:15:23:c0:d3:27:ad:e9:0b:e0:05:db:a7:ad:38: 62:3c:47:77:43:ad:54:8c:22:f0:b7:0a:04:c3:0d:95:d9:98: 20:1d:45:ef:8a:48:3b:c8:41:09:28:1c:10:dd:94:bd:14:43: 94:6c:6f:ce:be:19:11:83:cd:06:c2:3a:dd:98:be:9f:85:6c: d1:97:39:47:18:d4:c7:ec:9c:76:97:5b:d4:47:c1:96:01:5b: 3f:c7:b2:57:57:55:9a:48:14:11:12:f4:f7:ad:0e:67:40:b5: f9:db:d6:7f:38:75:5f:85:a1:69:1a:9e:2f:c5:e3:86:9d:56: d1:4d:4c:7b:61:7b:35:92:81:ea:ab:b2:33:28:88:61:ba:0f: 61:2f:2f:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUwNjEzMDM0NDM1WhcNMjUwNjIwMDM0NDM1WjAYMRYwFAYD VQQDEw02ODRiOWVhMy1mNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ybn+ZAhdSj6OWqaOa6Jsb6+wIy0FNXJZqw6aDLBoCXbxHs+bTEj4Tebb/rv x8RV5M1t6soqPpyhkJrHIurwzTopAlGBkxT94Pjq/dKtRSGb441/MCID5Mj/D/8C bms/X5/CE9fKfdjXxfJKYHj49zzOSgJK6KsEO2e/W/Jns96x95ZFB3qomPTfShwO Z/T7X00IBYVmzaha2g+WDaH5jq9XE/sWjJU3Z58ovzD1db3dBsZTUWcB1cc8j9kU sLsciYICZCrl5HVAwzrFO8yM3AS47Oz7vUQCwOgoTlPaJwCm60geFsWb33Z+HXjH pbSimKPPtcrB5Qt9PkGVatA7HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9iE0si h6y2I6AR6h4ZAvFtzghcMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFEcCgf76EoXxA0YKhTs/VAiSeg24QAjkcSnhTCmvOes2CGXAzvFl5 If92ajYg6HmVc847fnqUAI/4gTQkLb7CFZ0eerNfxqZwtorzMqy88F4NERi6k+z0 vhbFHHvISMH2C/rd6aytupYclbsHTWEYFSPA0yet6QvgBdunrThiPEd3Q61UjCLw twoEww2V2ZggHUXvikg7yEEJKBwQ3ZS9FEOUbG/OvhkRg80GwjrdmL6fhWzRlzlH GNTH7Jx2l1vUR8GWAVs/x7JXV1WaSBQREvT3rQ5nQLX529Z/OHVfhaFpGp4vxeOG nVbRTUx7YXs1koHqq7IzKIhhug9hLy/f -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:00 2025 by rpki-client