$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: ccGM/NVlMskC9GMKL3OkP+6RKvu57XXdVDNgO2P1HnA= Subject key identifier: AF:BE:76:2B:59:53:13:9F:A6:38:3E:25:E3:8D:EE:A8:6E:4B:20:54 Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 2B Signing time: Sat 09 Aug 2025 08:13:53 +0000 Manifest this update: Sat 09 Aug 2025 08:13:53 +0000 Manifest next update: Sat 16 Aug 2025 08:13:52 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: UkAhpRt0cLbsrNglHiE/55u1QCZSGioHlX2SOvVrnWA=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: Aug 9 08:13:53 2025 GMT Not After : Aug 16 08:13:52 2025 GMT Subject: CN=68970341-3492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5c:28:36:19:0c:57:7a:72:ea:c0:c4:72:3e: 54:00:02:3d:d9:ec:c0:cb:ba:53:60:28:ce:ff:13: 5c:c1:e8:81:23:b3:c4:4f:47:df:74:ec:20:20:64: 26:c2:bd:f7:ac:bf:42:34:a5:a4:69:2e:35:8a:8d: 14:b7:75:6d:07:be:8d:a7:83:33:7c:2c:fa:49:ac: c2:41:a3:d2:63:f0:7a:d1:7e:5f:e3:4b:ff:13:60: 76:01:b7:2d:7e:4e:7d:8f:30:cf:65:32:e4:53:72: f7:b8:cc:ec:fc:ce:52:40:d0:96:24:f4:95:03:14: 27:7f:75:54:0e:9f:fb:b5:e2:98:0b:55:c6:b9:15: 15:a6:66:02:74:dc:8b:f2:fc:22:be:b9:28:6f:48: 06:bd:de:29:bc:8f:fb:07:85:ea:54:c8:77:31:ed: 29:a7:84:1b:a2:64:9a:b2:31:9d:94:36:65:1b:d9: 1f:4a:bf:04:85:46:54:d8:fb:b3:d3:cb:c0:46:ee: c9:5e:6a:79:f7:a7:73:76:0b:19:73:8b:a9:6c:0e: b2:08:fa:98:db:2e:dd:cf:a4:92:cb:ec:2a:45:96: a7:db:c9:31:fd:ba:da:c8:36:d0:fe:07:b9:df:b3: b2:ba:af:04:ee:0c:7c:54:f2:25:f3:5c:c6:fe:90: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BE:76:2B:59:53:13:9F:A6:38:3E:25:E3:8D:EE:A8:6E:4B:20:54 X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:73:d0:31:ad:eb:79:6c:2f:e8:7c:50:3c:6e:e3:a6:46:bc: d1:e5:ee:ba:a9:60:c6:f6:f8:20:ac:00:1f:ae:44:34:12:31: 07:b5:21:e2:75:9a:03:ae:ba:8b:3f:12:00:48:07:55:f7:55: c1:de:31:fe:38:e2:19:b9:0d:99:39:31:33:26:78:80:e3:98: 03:0f:7b:b4:17:7a:b0:c1:63:70:13:fa:87:be:8a:21:6d:8f: 69:80:0d:5c:e5:f7:a4:d6:d7:ae:9b:db:7c:82:74:75:fb:84: 9f:89:fc:66:c8:2c:12:a4:cc:1c:9d:76:90:2e:ab:cb:1c:06: 7a:2a:59:01:41:dd:96:d2:49:21:05:52:f9:04:f0:ed:e7:58: 7f:f0:d0:23:3b:1a:4a:6d:cf:ee:f1:2a:cf:78:88:78:69:7a: 99:45:51:cc:3e:4e:92:39:66:ca:e0:0a:b0:58:9a:37:ca:72: ba:77:9b:06:a5:fa:a0:48:94:51:06:ff:77:4a:52:5a:64:5a: a7:97:6a:15:a1:c4:cf:8e:a6:53:6a:9b:5b:1e:5f:c2:2a:7b: 27:9d:89:16:c9:57:3f:32:66:64:dc:2c:f0:dc:ff:5c:4e:c6: 55:6a:bc:71:30:a7:99:36:e0:5f:1c:d4:ba:2a:02:90:66:4e: d5:54:f4:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTA4MDkwODEzNTNaFw0yNTA4MTYwODEzNTJaMBgxFjAUBgNV BAMTDTY4OTcwMzQxLTM0OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmXCg2GQxXenLqwMRyPlQAAj3Z7MDLulNgKM7/E1zB6IEjs8RPR9907CAgZCbC vfesv0I0paRpLjWKjRS3dW0Hvo2ngzN8LPpJrMJBo9Jj8HrRfl/jS/8TYHYBty1+ Tn2PMM9lMuRTcve4zOz8zlJA0JYk9JUDFCd/dVQOn/u14pgLVca5FRWmZgJ03Ivy /CK+uShvSAa93im8j/sHhepUyHcx7SmnhBuiZJqyMZ2UNmUb2R9KvwSFRlTY+7PT y8BG7sleann3p3N2Cxlzi6lsDrII+pjbLt3PpJLL7CpFlqfbyTH9utrINtD+B7nf s7K6rwTuDHxU8iXzXMb+kJUJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr752K1lT E5+mOD4l443uqG5LIFQwHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAApz0DGt63lsL+h8UDxu46ZGvNHl7rqpYMb2+CCsAB+uRDQSMQe1IeJ1 mgOuuos/EgBIB1X3VcHeMf444hm5DZk5MTMmeIDjmAMPe7QXerDBY3AT+oe+iiFt j2mADVzl96TW166b23yCdHX7hJ+J/GbILBKkzByddpAuq8scBnoqWQFB3ZbSSSEF UvkE8O3nWH/w0CM7Gkptz+7xKs94iHhpeplFUcw+TpI5ZsrgCrBYmjfKcrp3mwal +qBIlFEG/3dKUlpkWqeXahWhxM+OplNqm1seX8IqeyediRbJVz8yZmTcLPDc/1xO xlVqvHEwp5k24F8c1LoqApBmTtVU9KI= -----END CERTIFICATE-----Generated at Sun Aug 10 04:55:08 2025 by rpki-client