$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json) Hash identifier: X7Ja/M4GJi+VxGnY+UxfFVawQoC0KnOBWxQ+OtiEH5o= Subject key identifier: 9D:CD:75:A1:AA:D1:D4:E7:52:24:F5:12:20:70:7D:49:E9:5C:85:BD Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft Manifest number: 01EE Signing time: Sat 09 Aug 2025 02:56:22 +0000 Manifest this update: Sat 09 Aug 2025 02:56:21 +0000 Manifest next update: Sat 16 Aug 2025 02:56:21 +0000 Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: 9kb5VOAmE0z5qn0co8T/0SfNn2tdvF0svr3GpLeTzDc=) 2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: pbCZups9CHpt8yF1jqE6eaTv1T+fEJy3uGbRYPbMwLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Validity Not Before: Aug 9 02:56:21 2025 GMT Not After : Aug 16 02:56:21 2025 GMT Subject: CN=6896b8d5-7985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:23:94:21:82:4d:0c:57:77:16:0b:b2:d5: b1:da:6a:98:ab:34:68:5f:63:86:c0:3f:d5:d9:a1: 6e:09:d3:34:88:82:eb:e3:1f:0a:18:2b:7f:ab:e8: 1c:90:d0:39:97:16:ed:69:62:18:97:00:c0:be:99: df:63:80:c0:e2:e6:da:e7:75:5d:81:bc:81:54:06: e4:0f:58:b4:4c:6b:df:d8:09:57:8f:61:df:1c:e1: c3:21:5e:37:ab:f5:b6:e2:bb:e8:2e:2a:5e:60:52: 47:a4:5f:ed:15:d9:df:08:bc:5b:5b:61:3a:ec:3a: 69:71:2d:d6:8a:16:6a:3c:78:a4:c3:40:4e:a8:88: 46:7a:31:19:0f:6b:35:3c:0f:59:41:5e:8e:8c:5f: 3b:37:13:27:d3:b4:3b:88:b7:f0:ca:21:69:93:d1: 53:e7:e0:4b:13:dc:11:1c:95:e1:ab:f8:cf:fa:96: 05:87:23:63:62:dc:e3:8c:70:c8:a2:cd:ff:7b:6d: 2f:31:d2:22:66:53:8c:fa:f7:0e:75:82:cc:b5:b8: 16:c6:93:86:76:f2:e4:2b:ea:75:79:3e:d4:c8:71: b6:76:0a:a0:5b:ac:e2:d4:59:42:7f:73:ac:7a:a0: e4:02:0a:29:b3:40:d6:06:ec:d3:b1:c4:d1:2a:1c: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CD:75:A1:AA:D1:D4:E7:52:24:F5:12:20:70:7D:49:E9:5C:85:BD X509v3 Authority Key Identifier: keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:6c:1a:ec:97:2f:5f:6b:66:ab:d8:8f:55:e9:92:67:d0:ef: 24:eb:04:59:b6:99:56:b4:19:dd:0a:99:62:09:db:d8:aa:92: 81:41:05:73:26:90:aa:ed:78:9d:67:05:01:d4:06:81:72:03: 3c:ac:99:f8:ca:8c:9c:f4:e1:6d:c2:14:a4:f0:89:01:60:01: 82:39:3c:82:ad:84:17:97:4d:27:bd:8d:80:07:e1:a6:07:d4: 4c:f1:b5:84:ea:bc:9b:46:53:30:1f:b3:cc:dd:4c:dd:aa:d6: 1c:eb:b4:9b:cd:f8:40:74:77:f2:e7:32:b3:55:4a:a5:0e:87: df:56:32:3f:67:3b:a4:32:03:f5:d1:d0:dc:65:ae:ae:d2:a9: 82:f6:c2:3c:70:d7:92:02:e9:b7:30:5e:ef:24:72:77:3e:64: 32:8d:5a:c7:b2:40:54:0d:a6:da:a0:a4:65:9c:52:c2:bf:53: 7a:18:f7:34:af:cb:c0:04:dc:26:bf:7e:a6:7f:2a:d5:6a:b7: 1c:9e:0d:9c:07:56:70:53:a3:aa:04:84:17:e4:ba:59:b8:c5: a8:09:b6:af:63:cf:49:0d:75:16:61:f5:9d:9c:bf:3e:f7:36: 17:76:50:c0:e2:91:81:34:ba:20:47:c6:fb:5c:f2:b6:1f:f4: 5d:76:44:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCMkQxMTAvBgNVBAUTKEQ2Qjc1MTRDQkYwQkUyMDQ2QzEzQ0EwRDdGNUQyMjM1 MkZEQTU4RUUwHhcNMjUwODA5MDI1NjIxWhcNMjUwODE2MDI1NjIxWjAYMRYwFAYD VQQDEw02ODk2YjhkNS03OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3acjlCGCTQxXdxYLstWx2mqYqzRoX2OGwD/V2aFuCdM0iILr4x8KGCt/q+gc kNA5lxbtaWIYlwDAvpnfY4DA4uba53VdgbyBVAbkD1i0TGvf2AlXj2HfHOHDIV43 q/W24rvoLipeYFJHpF/tFdnfCLxbW2E67DppcS3WihZqPHikw0BOqIhGejEZD2s1 PA9ZQV6OjF87NxMn07Q7iLfwyiFpk9FT5+BLE9wRHJXhq/jP+pYFhyNjYtzjjHDI os3/e20vMdIiZlOM+vcOdYLMtbgWxpOGdvLkK+p1eT7UyHG2dgqgW6zi1FlCf3Os eqDkAgops0DWBuzTscTRKhxc9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3NdaGq 0dTnUiT1EiBwfUnpXIW9MB8GA1UdIwQYMBaAFNa3UUy/C+IEbBPKDX9dIjUv2lju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEIyRC8wMzFGNDUxRTgz N0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRnUnNFOG9OZjEwaU5TX2FX TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyZFJUTDhMNGdSc0U4b05mMTBpTlNfYVdPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEIyRC8wMzFGNDUxRTgzN0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRn UnNFOG9OZjEwaU5TX2FXTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0bBrsly9fa2ar2I9V6ZJn0O8k6wRZtplWtBndCpliCdvYqpKBQQVz JpCq7XidZwUB1AaBcgM8rJn4yoyc9OFtwhSk8IkBYAGCOTyCrYQXl00nvY2AB+Gm B9RM8bWE6rybRlMwH7PM3UzdqtYc67SbzfhAdHfy5zKzVUqlDoffVjI/ZzukMgP1 0dDcZa6u0qmC9sI8cNeSAum3MF7vJHJ3PmQyjVrHskBUDabaoKRlnFLCv1N6GPc0 r8vABNwmv36mfyrVarccng2cB1ZwU6OqBIQX5LpZuMWoCbavY89JDXUWYfWdnL8+ 9zYXdlDA4pGBNLogR8b7XPK2H/RddkRL -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:33 2025 by rpki-client