$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: ax1jGvpKivH55JKvExETuWC3GpBgsuIZ69A0hPT34SM= Subject key identifier: 6B:F7:72:BE:6A:A9:CD:52:46:6D:C8:BE:78:EC:FB:24:19:D1:24:4C Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: BE Signing time: Sat 09 Aug 2025 06:16:52 +0000 Manifest this update: Sat 09 Aug 2025 06:16:51 +0000 Manifest next update: Sat 16 Aug 2025 06:16:51 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: h3SJcbK98Jj5m5pCo76DH3HArCKR+e2Sl68dVkHaTMg=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: E5suk2cFemWvaevEKzcTmHU5tWd+iiNDKFUohuI1SXE=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: spLMbb3mjNqo3JOAdT4XdnGINqr0/vPrWt9FF24zq10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Aug 9 06:16:51 2025 GMT Not After : Aug 16 06:16:51 2025 GMT Subject: CN=6896e7d4-112b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:b8:d8:53:25:45:ec:dc:f8:42:be:67:a5: 64:8e:2f:df:47:21:04:89:e2:7e:bb:2d:86:fd:1c: 2e:bf:e5:b2:f1:bf:10:dc:09:72:38:b3:34:cd:b8: c5:79:18:dc:ab:fe:a6:d9:ac:0e:1f:2a:94:9c:41: ff:9b:18:ae:89:97:0a:cf:96:57:fb:1d:fa:26:77: 49:bd:61:4c:9a:67:1e:f3:ca:98:34:bd:59:d7:96: 3c:8e:06:f6:b2:1e:8b:76:c2:d6:1f:a4:84:be:5e: c7:75:b1:86:71:f2:7a:b1:81:5d:39:b8:ae:fe:de: c0:11:a9:f4:d3:ae:b2:3f:c6:23:77:c1:87:b2:95: 92:cc:e9:a6:01:82:69:dc:6f:ad:2d:24:38:ad:24: 01:d0:70:2c:4d:58:ca:4a:45:2b:12:17:cd:9d:58: 1c:9e:9d:9c:98:be:b7:36:0c:13:18:b7:15:e7:63: b3:1c:59:56:99:02:87:3e:81:37:4f:0c:d7:28:e1: ca:f4:e5:a9:b2:60:22:52:02:b0:c5:1a:93:84:64: 6d:a0:c1:f9:d5:c1:71:bb:49:eb:34:3f:37:f7:02: ac:73:49:80:9a:95:23:aa:6b:3a:e8:ef:d7:19:b9: 92:5f:62:c2:bc:a2:27:69:0c:e2:62:94:37:11:12: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F7:72:BE:6A:A9:CD:52:46:6D:C8:BE:78:EC:FB:24:19:D1:24:4C X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:4d:9b:de:69:e0:8f:9d:de:df:e8:92:cf:db:13:14:60:82: b5:f4:4e:3b:0e:28:76:2f:a2:22:db:ed:c5:76:23:10:6f:1c: 8b:18:da:c5:33:7a:6b:cc:00:c7:2c:d3:02:c6:7f:26:1b:f1: 2b:17:7b:19:49:f2:4c:cc:c0:dc:76:da:9f:fc:b5:1e:4b:30: 5b:50:06:9a:0f:0f:17:ed:cc:a4:56:26:1e:46:5c:9a:31:0f: e9:bd:6c:a0:66:55:1f:fe:31:32:58:59:4a:e6:9f:72:0f:d1: 7f:d9:68:35:02:48:b5:c8:46:6a:75:6c:0c:46:21:28:25:e8: 8e:45:47:ca:42:24:13:e2:44:72:5a:c1:9e:dd:41:2c:ed:29: 52:d6:cb:86:ed:02:4e:f4:b3:1e:3d:b0:91:67:42:ea:7f:11: 3c:60:a9:ef:a3:a7:69:82:c6:47:ec:29:f6:2b:1e:d3:1a:a2: 5f:92:95:a6:94:e5:4e:d5:49:d9:b9:5e:90:f5:8b:d6:d7:72: fd:9f:5a:a1:4c:b1:ef:d6:bb:ba:8c:86:da:5b:06:06:c4:af: 8a:85:4c:83:eb:c9:a2:20:25:77:09:bd:a1:62:6e:ba:d7:cc: fb:60:0b:b8:15:82:d2:45:bd:47:c8:c6:ea:4e:b1:e4:d4:da: 1a:8e:4c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUwODA5MDYxNjUxWhcNMjUwODE2MDYxNjUxWjAYMRYwFAYD VQQDEw02ODk2ZTdkNC0xMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2C42FMlRezc+EK+Z6Vkji/fRyEEieJ+uy2G/Rwuv+Wy8b8Q3AlyOLM0zbjF eRjcq/6m2awOHyqUnEH/mxiuiZcKz5ZX+x36JndJvWFMmmce88qYNL1Z15Y8jgb2 sh6LdsLWH6SEvl7HdbGGcfJ6sYFdObiu/t7AEan0066yP8Yjd8GHspWSzOmmAYJp 3G+tLSQ4rSQB0HAsTVjKSkUrEhfNnVgcnp2cmL63NgwTGLcV52OzHFlWmQKHPoE3 TwzXKOHK9OWpsmAiUgKwxRqThGRtoMH51cFxu0nrND839wKsc0mAmpUjqms66O/X GbmSX2LCvKInaQziYpQ3ERI7gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGv3cr5q qc1SRm3Ivnjs+yQZ0SRMMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGTZveaeCPnd7f6JLP2xMUYIK19E47Dih2L6Ii2+3FdiMQbxyLGNrF M3przADHLNMCxn8mG/ErF3sZSfJMzMDcdtqf/LUeSzBbUAaaDw8X7cykViYeRlya MQ/pvWygZlUf/jEyWFlK5p9yD9F/2Wg1Aki1yEZqdWwMRiEoJeiORUfKQiQT4kRy WsGe3UEs7SlS1suG7QJO9LMePbCRZ0LqfxE8YKnvo6dpgsZH7Cn2Kx7TGqJfkpWm lOVO1UnZuV6Q9YvW13L9n1qhTLHv1ru6jIbaWwYGxK+KhUyD68miICV3Cb2hYm66 18z7YAu4FYLSRb1HyMbqTrHk1Noajkwm -----END CERTIFICATE-----Generated at Sun Aug 10 04:50:06 2025 by rpki-client