$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: ZUvg9zAmFueiTKagreYlLHUu8efRi+Z38Fg0s8cDeH8= Subject key identifier: BA:13:DD:F8:E7:FF:BF:CD:94:14:A3:B5:84:DE:4F:8D:7D:6C:AA:05 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2AFE Signing time: Sun 10 Aug 2025 15:30:47 +0000 Manifest this update: Sun 10 Aug 2025 15:30:46 +0000 Manifest next update: Sun 17 Aug 2025 15:30:46 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: Yd0FLgMMnUHgldyPMZKi5PO57q9Wj8FewcpjflrI2aI=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: 8JXHn+tn0IVLCUvOUOerZKmcj6/h+ZMsxk2iLkFwjsA=) 3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: bFIjQrk+SKu0XJffarEwWtaET/rTeUOfIWLHnin1FNE=) 4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: ReV9a7hSveeezSpIAzgAbbvdpzxiWLw3q4n5gLELjhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11074 (0x2b42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Aug 10 15:30:46 2025 GMT Not After : Aug 17 15:30:46 2025 GMT Subject: CN=6898bb27-c924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:37:dc:05:39:10:89:e5:33:d7:aa:e8:8e: 22:81:81:c8:21:31:79:6f:16:02:e5:e7:7c:28:c6: 6b:2f:19:70:c1:14:4d:3e:93:e4:6f:ef:04:ee:3d: 05:68:6f:02:01:81:c1:64:bf:12:62:2e:7e:74:c9: 7a:78:b3:7d:b1:24:43:86:a6:81:03:19:b7:45:af: 82:38:f8:86:24:82:46:5b:99:6a:f7:f3:22:54:a0: ec:dc:8a:80:ca:ff:81:62:7c:d1:fd:29:67:d0:67: fb:42:4a:38:b0:b5:09:8e:38:2e:4c:35:ee:91:00: eb:b4:47:0e:e6:c9:c0:bb:3e:d3:7b:10:5f:74:a3: b8:7b:9d:4e:4b:05:d3:d1:b5:e3:02:24:25:78:3e: 35:61:21:94:e9:79:85:7e:28:d7:d7:56:4f:70:01: 94:ce:b5:cd:b3:9a:ad:47:16:f7:07:50:80:5c:49: e6:5f:76:c5:fa:f8:0d:b4:ea:ce:2b:6a:e2:0c:ef: 80:17:b5:d3:49:d9:12:07:f2:94:8c:ce:54:cd:f7: 3a:48:62:ed:1f:84:51:f7:28:fc:c6:f6:53:3e:82: 3c:b8:7b:5d:15:bd:61:90:79:1c:f9:a8:ab:02:1d: c6:ef:0c:b2:3b:15:1e:3b:49:dd:8a:f4:ee:37:16: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:13:DD:F8:E7:FF:BF:CD:94:14:A3:B5:84:DE:4F:8D:7D:6C:AA:05 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a5:9e:ea:39:41:7b:6a:77:a7:67:7b:bb:ef:c1:52:de:a9: ca:4d:c5:d1:02:48:6e:1d:d0:df:2a:bc:4d:2a:80:35:1e:31: 03:8a:b4:64:9a:77:2c:a7:8e:87:06:a5:c8:d1:9a:3b:13:cf: b9:f7:ec:39:54:b1:cb:61:6e:bf:b6:8d:8f:03:53:ce:ed:4e: 40:16:83:2c:8f:4f:af:d5:21:90:3f:c3:67:1f:1b:85:ce:ca: 62:30:07:34:94:b0:72:91:33:7d:ad:ac:b0:da:81:3e:e8:49: c7:00:2f:ff:28:4f:52:10:35:cb:25:27:76:68:a1:ed:e1:cf: aa:81:48:f5:5d:02:83:56:33:8f:99:01:05:43:6a:ec:8c:91: 8e:5f:31:6c:8e:70:c3:3e:16:ac:6e:d4:7c:5a:05:6d:92:10: fa:0e:f3:55:77:ed:58:47:7e:7a:82:7f:d0:7c:99:b3:05:9f: 14:c4:91:1f:12:ab:84:61:ea:65:90:fe:df:dc:1f:f3:03:98: d6:b7:5d:0b:44:d2:c8:4f:57:2d:b2:3b:d7:84:a6:36:47:01: fe:25:c3:18:8c:31:b2:e5:45:a9:b0:45:7a:f8:21:04:c1:d0: 85:06:9c:92:6b:81:65:18:92:b8:67:92:f8:f4:52:98:8c:3c: 75:20:85:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUwODEwMTUzMDQ2WhcNMjUwODE3MTUzMDQ2WjAYMRYwFAYD VQQDEw02ODk4YmIyNy1jOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7M33AU5EInlM9eq6I4igYHIITF5bxYC5ed8KMZrLxlwwRRNPpPkb+8E7j0F aG8CAYHBZL8SYi5+dMl6eLN9sSRDhqaBAxm3Ra+COPiGJIJGW5lq9/MiVKDs3IqA yv+BYnzR/Sln0Gf7Qko4sLUJjjguTDXukQDrtEcO5snAuz7TexBfdKO4e51OSwXT 0bXjAiQleD41YSGU6XmFfijX11ZPcAGUzrXNs5qtRxb3B1CAXEnmX3bF+vgNtOrO K2riDO+AF7XTSdkSB/KUjM5Uzfc6SGLtH4RR9yj8xvZTPoI8uHtdFb1hkHkc+air Ah3G7wyyOxUeO0ndivTuNxYkZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoT3fjn /7/NlBSjtYTeT419bKoFMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCopZ7qOUF7anenZ3u778FS3qnKTcXRAkhuHdDfKrxNKoA1HjEDirRk mncsp46HBqXI0Zo7E8+59+w5VLHLYW6/to2PA1PO7U5AFoMsj0+v1SGQP8NnHxuF zspiMAc0lLBykTN9rayw2oE+6EnHAC//KE9SEDXLJSd2aKHt4c+qgUj1XQKDVjOP mQEFQ2rsjJGOXzFsjnDDPhasbtR8WgVtkhD6DvNVd+1YR356gn/QfJmzBZ8UxJEf EquEYeplkP7f3B/zA5jWt10LRNLIT1ctsjvXhKY2RwH+JcMYjDGy5UWpsEV6+CEE wdCFBpySa4FlGJK4Z5L49FKYjDx1IIWx -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:58 2025 by rpki-client