$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft File: ko6KqA2ZpyP2qQIa5eewMqzt23o.mft (raw, json) Hash identifier: zmnD9sG9Vk33UB4m7I9TD2GBinCLpNcD3XYj4FChwwU= Subject key identifier: BB:07:E4:A5:67:AE:83:CA:8B:72:0A:1D:3E:6C:50:13:85:F4:DD:44 Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft Manifest number: 1E Signing time: Sat 09 Aug 2025 08:24:27 +0000 Manifest this update: Sat 09 Aug 2025 08:24:27 +0000 Manifest next update: Sat 16 Aug 2025 08:24:27 +0000 Files and hashes: 1: ko6KqA2ZpyP2qQIa5eewMqzt23o.crl (hash: fXyBS/TqtGpHqTbIzxa6pb8ndl/1mNeKB1J2dp6DLZk=) 2: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (hash: 4yAYX9W5VLKXpjedVy4WI6T1jB7PFE1AtNymWoFIgLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Validity Not Before: Aug 9 08:24:27 2025 GMT Not After : Aug 16 08:24:27 2025 GMT Subject: CN=689705bb-af08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:ac:3b:3d:e4:34:21:4b:8a:4e:ad:cc:27: 61:3f:ff:b3:a6:e4:7a:76:4f:9e:cb:56:cc:29:18: 06:f8:c9:cd:11:fe:ca:fd:49:c4:fe:8e:cc:eb:17: 5c:d1:ec:1b:58:f4:ec:88:c9:d8:47:dd:56:f0:c5: 75:4e:06:ff:fa:cb:18:9d:63:2c:32:08:1f:a3:1e: 11:08:66:fb:fc:12:5b:d2:a6:cf:5b:a5:45:7b:73: 64:da:6d:84:6a:6a:81:88:54:59:35:63:52:b3:9e: d7:64:45:7a:61:e6:38:09:fa:06:d6:4a:2a:98:e5: 20:c0:3c:fc:51:0e:da:66:82:90:e9:7a:61:f5:70: a6:7f:1e:cd:9b:8f:95:bd:cb:95:64:d6:df:23:cf: 3a:38:f8:78:35:4d:02:b7:b1:74:4c:62:3c:50:3f: 41:79:6a:67:7e:5d:e7:56:79:2c:9b:a6:f5:37:6d: 39:f8:2c:9e:34:fb:88:e1:29:9e:d6:50:33:31:14: 53:88:bd:65:8c:b3:a9:41:75:b6:99:54:8d:88:32: 7d:8e:01:94:6c:05:69:41:b2:b8:3d:db:7f:af:94: 0b:ee:d7:7f:70:3d:9a:40:2f:67:2a:0a:80:e4:e6: f9:82:c3:d5:d1:43:57:13:28:ac:57:2c:62:7c:ae: b7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:E4:A5:67:AE:83:CA:8B:72:0A:1D:3E:6C:50:13:85:F4:DD:44 X509v3 Authority Key Identifier: keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e6:0b:49:54:a0:2d:d0:cc:be:a0:6c:15:81:ba:24:92:78: ce:a8:57:d6:29:35:51:ba:e8:d1:12:b8:05:da:1b:10:69:4e: 07:c9:ff:28:83:16:9e:94:eb:63:b2:99:5c:47:e7:b2:f2:a1: 37:7f:01:99:20:69:4d:cd:e9:d4:84:6b:14:14:69:6d:61:76: d5:53:27:41:fe:7b:9a:69:91:28:56:a5:93:79:9d:eb:24:f5: 37:79:01:5a:87:0c:c0:dc:53:71:b6:f8:e7:66:fa:c1:8c:47: 54:e4:bc:ef:a0:96:e2:1e:a1:90:64:9c:06:1a:f9:46:48:ec: ba:ae:51:af:56:67:82:77:ee:08:b2:11:f9:48:43:e6:b9:d9: bd:92:54:10:33:6d:08:db:35:ed:ce:a5:bb:d2:6f:1a:6f:06: 07:4a:f0:f0:76:2c:8f:d8:87:1f:4e:57:ab:4f:e7:27:fa:e1: 0f:18:f6:dd:62:5a:97:cf:4f:11:e0:f8:7f:94:8a:4f:91:c9: 65:cf:aa:c6:19:b9:38:68:4b:6d:cf:ae:b3:46:cf:7c:14:a4: d4:e4:4d:77:a6:76:10:87:b0:14:9e:4b:43:30:e1:05:b9:5e: c8:1e:ca:36:91:b2:b9:08:4e:fa:1e:6c:ce:0c:2f:64:e2:28: 5e:75:da:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUEyNzExMC8GA1UEBRMoOTI4RThBQTgwRDk5QTcyM0Y2QTkwMjFBRTVFN0IwMzJB Q0VEREI3QTAeFw0yNTA4MDkwODI0MjdaFw0yNTA4MTYwODI0MjdaMBgxFjAUBgNV BAMTDTY4OTcwNWJiLWFmMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDODqw7PeQ0IUuKTq3MJ2E//7Om5Hp2T57LVswpGAb4yc0R/sr9ScT+jszrF1zR 7BtY9OyIydhH3VbwxXVOBv/6yxidYywyCB+jHhEIZvv8ElvSps9bpUV7c2TabYRq aoGIVFk1Y1KzntdkRXph5jgJ+gbWSiqY5SDAPPxRDtpmgpDpemH1cKZ/Hs2bj5W9 y5Vk1t8jzzo4+Hg1TQK3sXRMYjxQP0F5amd+XedWeSybpvU3bTn4LJ40+4jhKZ7W UDMxFFOIvWWMs6lBdbaZVI2IMn2OAZRsBWlBsrg923+vlAvu139wPZpAL2cqCoDk 5vmCw9XRQ1cTKKxXLGJ8rreTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuwfkpWeu g8qLcgodPmxQE4X03UQwHwYDVR0jBBgwFoAUko6KqA2ZpyP2qQIa5eewMqzt23ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1QTI3LzlEQzIyMDU0NEE1 ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQMnFRSWE1ZWV3TXF6dDIz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva282S3FBMlpweVAycVFJYTVlZXdNcXp0MjNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 QTI3LzlEQzIyMDU0NEE1ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQ MnFRSWE1ZWV3TXF6dDIzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAATmC0lUoC3QzL6gbBWBuiSSeM6oV9YpNVG66NESuAXaGxBpTgfJ/yiD Fp6U62OymVxH57LyoTd/AZkgaU3N6dSEaxQUaW1hdtVTJ0H+e5ppkShWpZN5nesk 9Td5AVqHDMDcU3G2+Odm+sGMR1TkvO+gluIeoZBknAYa+UZI7LquUa9WZ4J37giy EflIQ+a52b2SVBAzbQjbNe3OpbvSbxpvBgdK8PB2LI/Yhx9OV6tP5yf64Q8Y9t1i WpfPTxHg+H+Uik+RyWXPqsYZuThoS23PrrNGz3wUpNTkTXemdhCHsBSeS0Mw4QW5 XsgeyjaRsrkITvoebM4ML2TiKF512tM= -----END CERTIFICATE-----Generated at Sun Aug 10 04:46:34 2025 by rpki-client