$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: 5fRzdZuShtQOaPaAqk3h/UeE9zeDEnlhFynHLG16/rQ= Subject key identifier: 86:EA:79:F8:BC:D6:AC:76:C7:BF:92:A8:BA:04:98:7B:D9:A8:4B:C3 Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: 011B Signing time: Sat 09 Aug 2025 05:12:59 +0000 Manifest this update: Sat 09 Aug 2025 05:12:59 +0000 Manifest next update: Sat 16 Aug 2025 05:12:59 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: KBNKbBaZOmS5YVmTBuC/FHFQ5XlLZF0ioM8QPwe6vvc=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: Aug 9 05:12:59 2025 GMT Not After : Aug 16 05:12:59 2025 GMT Subject: CN=6896d8db-df09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:18:2d:26:b7:a4:87:7b:73:c9:38:62:dc: b9:b7:db:73:82:ed:86:05:7f:3f:b6:4d:50:80:df: a8:a6:a2:8e:62:85:e1:6c:eb:3f:f6:d4:69:8a:ff: 13:1f:0c:7d:12:05:fc:88:8b:42:9c:8d:1f:8b:64: 66:37:0f:ad:6f:1c:aa:5a:d3:26:ce:79:14:6b:d7: 34:6d:d5:2a:cb:71:45:16:d0:ef:7f:1b:48:56:68: 86:77:f3:43:22:40:72:e7:bd:ec:0c:f9:a7:77:aa: 29:ad:a9:3a:06:e6:79:b1:7b:44:a6:3e:ae:5e:82: 0a:db:e3:70:4c:13:7a:54:da:c8:70:89:a4:df:e4: 0c:6e:fd:a6:fa:54:b0:bd:fd:32:3c:12:f3:90:83: a4:cc:4a:0e:1b:2e:b6:94:7c:00:fb:b3:7a:82:a8: 17:cd:33:ba:19:00:de:54:56:c8:ea:f4:51:d4:ea: f2:41:03:95:e8:26:e8:29:f6:83:7f:e8:56:a4:b7: a3:07:7d:45:c8:24:2b:76:8f:4e:9e:76:6b:b8:43: 1d:23:aa:13:f6:f4:c2:40:c2:02:2b:8e:32:aa:e5: 39:41:2a:e0:c5:5b:d1:fb:c9:b6:b5:45:35:86:3b: d2:f8:c2:69:30:06:b2:e9:d1:84:9f:38:4e:b2:47: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EA:79:F8:BC:D6:AC:76:C7:BF:92:A8:BA:04:98:7B:D9:A8:4B:C3 X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:83:88:90:f0:e8:6e:7e:d6:15:73:7b:40:e2:a5:c8:a5:c4: bb:eb:52:8f:77:77:2a:f3:bc:cc:c0:c6:cf:97:e2:37:03:52: d4:ba:79:b3:5b:ab:96:4e:df:42:ff:44:bc:b9:ec:91:3f:fb: 07:db:22:b4:f8:f2:75:2d:5a:de:8f:35:ac:7b:e1:bd:d7:95: 0b:2a:c4:b9:61:41:6d:de:30:86:b5:53:e0:a4:35:13:de:54: 30:be:5e:7a:54:df:6b:47:e8:fd:e0:02:73:46:36:c9:6b:0f: e0:8e:6b:1c:33:2e:75:db:53:1e:20:58:87:03:cf:63:5c:2a: 86:ca:af:0b:bb:e8:d4:1b:59:fc:57:9a:f9:3d:aa:b5:fe:a4: 41:c9:cf:6c:99:e0:8e:ed:33:21:7f:be:6f:be:5b:e2:aa:62: 7e:1d:74:1c:59:ba:eb:9d:2c:b4:89:c3:24:3f:f3:03:e4:b3: 94:18:35:9e:62:e7:22:cf:97:bd:c7:97:d6:22:65:5f:a0:d0: ac:19:13:92:46:52:18:ae:d8:e2:33:2b:d3:ce:da:02:b4:f4: 00:06:d2:1a:7f:42:a9:fa:47:04:2a:38:43:68:55:e2:ed:ed: 74:a9:76:7c:b8:96:49:79:4e:91:55:72:3b:68:93:69:db:e6: a1:78:b6:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUwODA5MDUxMjU5WhcNMjUwODE2MDUxMjU5WjAYMRYwFAYD VQQDEw02ODk2ZDhkYi1kZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1sYLSa3pId7c8k4Yty5t9tzgu2GBX8/tk1QgN+opqKOYoXhbOs/9tRpiv8T Hwx9EgX8iItCnI0fi2RmNw+tbxyqWtMmznkUa9c0bdUqy3FFFtDvfxtIVmiGd/ND IkBy573sDPmnd6oprak6BuZ5sXtEpj6uXoIK2+NwTBN6VNrIcImk3+QMbv2m+lSw vf0yPBLzkIOkzEoOGy62lHwA+7N6gqgXzTO6GQDeVFbI6vRR1OryQQOV6CboKfaD f+hWpLejB31FyCQrdo9OnnZruEMdI6oT9vTCQMICK44yquU5QSrgxVvR+8m2tUU1 hjvS+MJpMAay6dGEnzhOske2awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbqefi8 1qx2x7+SqLoEmHvZqEvDMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6 ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGg4iQ8OhuftYVc3tA4qXIpcS761KPd3cq87zMwMbPl+I3A1LUunmz W6uWTt9C/0S8ueyRP/sH2yK0+PJ1LVrejzWse+G915ULKsS5YUFt3jCGtVPgpDUT 3lQwvl56VN9rR+j94AJzRjbJaw/gjmscMy5121MeIFiHA89jXCqGyq8Lu+jUG1n8 V5r5Paq1/qRByc9smeCO7TMhf75vvlviqmJ+HXQcWbrrnSy0icMkP/MD5LOUGDWe Yuciz5e9x5fWImVfoNCsGROSRlIYrtjiMyvTztoCtPQABtIaf0Kp+kcEKjhDaFXi 7e10qXZ8uJZJeU6RVXI7aJNp2+aheLbi -----END CERTIFICATE-----Generated at Sun Aug 10 04:15:21 2025 by rpki-client