$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json) Hash identifier: q4XUrpCfJn9IhUtH7ao1tXoiVnV9UH5Hwgvn4ilJDFI= Subject key identifier: 1D:42:24:06:B5:07:31:40:79:FB:4C:F7:55:EB:FE:6B:4C:72:C0:F3 Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft Manifest number: 58 Signing time: Sat 09 Aug 2025 07:46:17 +0000 Manifest this update: Sat 09 Aug 2025 07:46:17 +0000 Manifest next update: Sat 16 Aug 2025 07:46:17 +0000 Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: aLxrycP7haE3TD/HLUA1sSa/PcF6bjIrbjEhYX0MiKU=) 2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: pXA/nNICBjxxRUXdfG7Iajai0avdelFN1HiA2VJOvYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Validity Not Before: Aug 9 07:46:17 2025 GMT Not After : Aug 16 07:46:17 2025 GMT Subject: CN=6896fcc9-4b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:e4:09:83:4d:01:82:c1:cb:7f:64:8c:d8: 21:d0:36:55:1a:b3:29:63:3f:42:74:f4:28:cf:64: e4:5d:1a:a4:79:9a:14:e6:60:48:5a:5f:1b:3a:93: 0a:9e:e6:c5:36:b5:3b:d7:39:c0:1f:aa:7d:c3:d6: 82:99:9b:be:34:8c:e4:e5:19:c3:f7:78:0b:70:d8: e5:a4:23:22:2a:80:6a:07:4f:93:e5:39:40:fb:76: a5:bb:93:00:d4:a4:95:7e:d7:71:55:22:80:c4:4e: 73:58:98:1b:24:3a:33:71:89:fb:f8:ef:2b:72:64: 85:10:84:a4:0a:33:ed:b8:ad:76:86:6a:e6:d9:99: 7a:83:cb:45:a2:f1:59:80:e0:8d:35:22:6a:e4:b7: 9b:6b:00:ea:72:06:bb:a3:6e:aa:32:43:81:e9:e3: 44:4d:48:d4:83:90:2a:3a:6a:a5:91:cb:19:84:59: 65:64:c4:0f:ff:f1:fd:90:a6:fc:31:4d:57:a7:8f: 44:3a:d8:88:2a:ef:d1:22:07:c6:06:8d:86:af:f6: 1a:ba:31:29:e4:85:f5:b3:31:b4:14:b1:df:ea:11: 4a:c8:c0:47:39:38:75:4a:37:00:8e:71:ee:15:fa: a0:89:c6:bd:2c:6c:a6:73:e9:f3:17:72:80:a8:d9: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:42:24:06:B5:07:31:40:79:FB:4C:F7:55:EB:FE:6B:4C:72:C0:F3 X509v3 Authority Key Identifier: keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7e:2e:90:95:92:a4:f5:08:45:e6:48:8e:02:c3:5c:97:b5: 33:70:34:0c:da:61:61:9d:60:1f:49:4b:71:72:d5:5f:e4:34: ce:32:bd:f5:ee:74:17:00:12:ac:5b:88:f9:be:d2:31:ee:eb: 59:41:d2:33:2a:9d:7b:e7:8c:75:0c:fa:c2:8a:a2:a0:7f:84: 50:6b:b9:75:00:20:2a:9b:93:a1:ab:03:38:24:8d:f3:19:22: 12:ee:55:38:2d:63:61:d7:19:e4:ff:21:de:93:41:53:fe:b7: 84:cf:36:8f:76:d5:59:4e:80:1c:1e:11:43:43:77:29:41:46: 92:66:a8:28:38:3c:10:8b:8c:27:54:ad:65:8f:91:50:97:9a: b8:20:ac:68:1e:38:d5:6d:48:e3:04:ea:23:25:43:07:6b:64: 90:28:06:ef:ee:5e:2f:9e:13:2e:25:be:38:4f:af:3b:d0:eb: 36:a4:18:9b:af:cf:95:a0:d3:32:31:47:6e:0c:90:ae:4a:e2: 09:5c:00:26:06:2a:53:bc:db:25:21:44:42:d1:e7:27:9f:f7: ab:50:8b:50:30:83:5d:f1:7b:ed:05:16:10:05:65:fd:6b:81: 7f:8d:61:05:89:ed:b7:09:21:e4:b5:e1:4b:a7:c6:9b:c1:b0: f0:5e:30:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTI3NDExMC8GA1UEBRMoNjk1OEExQUIzQUNGN0Y5NUVEQTVBRDlDOUU0MUU0NDlC NkQxMTdGMjAeFw0yNTA4MDkwNzQ2MTdaFw0yNTA4MTYwNzQ2MTdaMBgxFjAUBgNV BAMTDTY4OTZmY2M5LTRiNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcpeQJg00BgsHLf2SM2CHQNlUasyljP0J09CjPZORdGqR5mhTmYEhaXxs6kwqe 5sU2tTvXOcAfqn3D1oKZm740jOTlGcP3eAtw2OWkIyIqgGoHT5PlOUD7dqW7kwDU pJV+13FVIoDETnNYmBskOjNxifv47ytyZIUQhKQKM+24rXaGaubZmXqDy0Wi8VmA 4I01Imrkt5trAOpyBrujbqoyQ4Hp40RNSNSDkCo6aqWRyxmEWWVkxA//8f2Qpvwx TVenj0Q62Igq79EiB8YGjYav9hq6MSnkhfWzMbQUsd/qEUrIwEc5OHVKNwCOce4V +qCJxr0sbKZz6fMXcoCo2Ur7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHUIkBrUH MUB5+0z3Vev+a0xywPMwHwYDVR0jBBgwFoAUaVihqzrPf5Xtpa2cnkHkSbbRF/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMjc0L0Q5OUYzQUZBRkIy MzExRUY5RjE1Qzc0QUM0RjlBRTAyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVZpaHF6clBmNVh0cGEyY25rSGtTYmJSRl9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx Mjc0L0Q5OUYzQUZBRkIyMzExRUY5RjE1Qzc0QUM0RjlBRTAyL2FWaWhxenJQZjVY dHBhMmNua0hrU2JiUkZfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABd+LpCVkqT1CEXmSI4Cw1yXtTNwNAzaYWGdYB9JS3Fy1V/kNM4yvfXu dBcAEqxbiPm+0jHu61lB0jMqnXvnjHUM+sKKoqB/hFBruXUAICqbk6GrAzgkjfMZ IhLuVTgtY2HXGeT/Id6TQVP+t4TPNo921VlOgBweEUNDdylBRpJmqCg4PBCLjCdU rWWPkVCXmrggrGgeONVtSOME6iMlQwdrZJAoBu/uXi+eEy4lvjhPrzvQ6zakGJuv z5Wg0zIxR24MkK5K4glcACYGKlO82yUhRELR5yef96tQi1Awg13xe+0FFhAFZf1r gX+NYQWJ7bcJIeS14UunxpvBsPBeMB4= -----END CERTIFICATE-----Generated at Sat Aug 9 14:28:46 2025 by rpki-client