$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: /KdzfE7zQ0wi6cpLXyTaNT2OLlrRuxdhXxPM3EX3xJU= Subject key identifier: 6B:9C:E3:FD:15:A2:49:79:7E:17:10:21:CD:F6:9A:AA:10:58:9A:15 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: 41 Signing time: Sat 09 Aug 2025 07:59:22 +0000 Manifest this update: Sat 09 Aug 2025 07:59:22 +0000 Manifest next update: Sat 16 Aug 2025 07:59:22 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: PfAglC/DF13V25PQy4bU0g/imkBZt8JmZz4UM/gA7C8=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: SIbGv61TK6nlTBlpPzTxiHyFUxN8Qwjf/RzPAJKF8+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Aug 9 07:59:22 2025 GMT Not After : Aug 16 07:59:22 2025 GMT Subject: CN=6896ffda-3e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:48:56:29:ca:2e:96:0d:21:9b:e1:7a:e4: 28:3e:05:0a:8d:96:ff:6d:42:fc:1f:e0:69:89:b3: 33:65:63:a1:5a:88:53:ca:9a:66:ea:eb:82:49:76: 18:5e:12:3c:28:04:97:0a:56:12:91:3f:9f:59:6b: ad:6a:a1:bf:10:a6:dd:0a:76:98:9f:e6:4c:20:40: 4d:dc:4e:d5:a5:d9:23:c8:ff:c0:41:45:0c:a0:c2: af:fb:2f:31:cc:d5:cf:42:be:71:68:00:fa:41:12: cb:67:18:81:ab:f0:d9:7f:00:2b:28:18:69:0f:b4: 08:99:d8:5a:7c:fa:32:aa:9b:e0:5b:ab:98:6c:7b: 99:d8:30:f9:2d:b9:62:f0:92:9a:88:87:fb:6b:09: 3a:1b:74:f2:15:3e:40:86:3b:02:ad:6a:8b:5d:10: be:4f:62:d3:1d:93:6c:75:b7:05:0d:77:e0:33:63: c4:ba:6c:2d:d2:4f:d5:82:7c:cd:95:42:d7:eb:7c: 50:88:86:46:80:c0:98:b1:ea:5a:f7:d2:07:0f:6b: 65:38:2d:8e:d0:5b:45:9d:79:48:a8:59:c6:f3:7a: b9:58:5c:bd:d7:9c:41:68:5b:20:ef:df:75:0f:5f: c6:9d:58:b5:22:91:8a:eb:a0:dc:b2:af:b5:ad:ba: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9C:E3:FD:15:A2:49:79:7E:17:10:21:CD:F6:9A:AA:10:58:9A:15 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f4:19:47:0d:25:05:e3:a1:62:94:01:74:bf:ac:bd:d3:e3: d4:ee:01:d3:45:96:9f:f9:4b:6b:da:67:4a:48:11:86:aa:92: 45:b0:79:9b:f1:16:64:a3:99:c6:98:23:3a:97:64:89:b6:6b: 17:53:83:7c:3d:dc:c1:db:51:c7:79:0b:91:6e:6e:7e:61:f4: 25:cc:59:1c:d7:11:29:8b:55:b5:32:22:82:bb:f9:35:f0:ad: b4:d3:79:0d:19:a6:68:dc:95:cd:49:54:13:10:84:f7:6f:9f: b0:5b:75:fe:25:5a:25:98:58:32:69:86:b8:87:c4:3d:8c:5b: 69:91:eb:38:47:56:a5:4f:3a:c3:54:5c:50:75:fd:a2:a1:73: cf:e5:d4:c0:92:41:8f:62:b9:03:84:95:1e:9e:14:9c:66:b1: 3b:26:3c:61:e4:3f:d0:8f:87:b5:94:4b:34:23:ea:de:1f:15: ef:2c:4c:b9:6f:cc:aa:43:95:91:05:47:31:0d:ce:a9:0a:74: ba:71:7a:d8:77:d6:a3:21:1d:33:49:ca:e3:e2:d2:a9:8a:c5: 85:6f:9d:9d:2b:5f:ab:4f:45:1e:6b:a9:9b:16:0f:a9:7b:a2: ba:14:63:bb:de:c7:fa:6d:1c:6b:7c:40:01:53:c5:b3:65:06: e3:22:b8:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MEYyMTExMC8GA1UEBRMoNzBEMjYwMUNCMEQwRkE0RjlDNUYwRTAyODZEOEI2QUZE OTIzNUEwNjAeFw0yNTA4MDkwNzU5MjJaFw0yNTA4MTYwNzU5MjJaMBgxFjAUBgNV BAMTDTY4OTZmZmRhLTNlMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg9khWKcoulg0hm+F65Cg+BQqNlv9tQvwf4GmJszNlY6FaiFPKmmbq64JJdhhe EjwoBJcKVhKRP59Za61qob8Qpt0Kdpif5kwgQE3cTtWl2SPI/8BBRQygwq/7LzHM 1c9CvnFoAPpBEstnGIGr8Nl/ACsoGGkPtAiZ2Fp8+jKqm+Bbq5hse5nYMPktuWLw kpqIh/trCTobdPIVPkCGOwKtaotdEL5PYtMdk2x1twUNd+AzY8S6bC3ST9WCfM2V QtfrfFCIhkaAwJix6lr30gcPa2U4LY7QW0WdeUioWcbzerlYXL3XnEFoWyDv33UP X8adWLUikYrroNyyr7WtuhPJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa5zj/RWi SXl+FxAhzfaaqhBYmhUwHwYDVR0jBBgwFoAUcNJgHLDQ+k+cXw4Chti2r9kjWgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwRjIxLzg1MTdGQjA4MTQx MzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWstY1h3NENodGkycjlraldn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05KZ0hMRFEtay1jWHc0Q2h0aTJyOWtqV2dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw RjIxLzg1MTdGQjA4MTQxMzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWst Y1h3NENodGkycjlraldnWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFL0GUcNJQXjoWKUAXS/rL3T49TuAdNFlp/5S2vaZ0pIEYaqkkWweZvx FmSjmcaYIzqXZIm2axdTg3w93MHbUcd5C5Fubn5h9CXMWRzXESmLVbUyIoK7+TXw rbTTeQ0Zpmjclc1JVBMQhPdvn7Bbdf4lWiWYWDJphriHxD2MW2mR6zhHVqVPOsNU XFB1/aKhc8/l1MCSQY9iuQOElR6eFJxmsTsmPGHkP9CPh7WUSzQj6t4fFe8sTLlv zKpDlZEFRzENzqkKdLpxeth31qMhHTNJyuPi0qmKxYVvnZ0rX6tPRR5rqZsWD6l7 oroUY7vex/ptHGt8QAFTxbNlBuMiuB8= -----END CERTIFICATE-----Generated at Sat Aug 9 23:07:17 2025 by rpki-client