$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: +Hy9Ea3AnkgDfim/2goUsKvR1FAdHpV4SvUKiETUuLw= Subject key identifier: F3:0F:90:9C:74:8B:98:EA:02:39:5C:A3:AF:97:8F:72:3F:80:32:9D Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 088D Signing time: Sun 10 Aug 2025 20:37:00 +0000 Manifest this update: Sun 10 Aug 2025 20:37:00 +0000 Manifest next update: Sun 17 Aug 2025 20:37:00 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: wsgs0fsb/ydJWfu5+3idEh9LOGs+0HIwjpK5DwIkYSU=) 2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: 1z83FO4GtKRx6NJ1zk8GB6hRpxtXT/R6CtAHYUkaqdA=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: USCITVxdvr2vZIKZ9pZeTbR2vvO/c7r8PRbW/v091j8=) 4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: sjVV92TWr17Q5E7deLvp5LrkNkR25Y2nq+eGhf+3ca4=) 5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: 9Lu/m9ZIOQ62O9GVdOQbSiFzGg5F/YviY3o3WadSNV4=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: MuEbqKnGdeTwOpzWtZfybGE0sUEXNrb1FXuWP6xXyqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Aug 10 20:37:00 2025 GMT Not After : Aug 17 20:37:00 2025 GMT Subject: CN=689902ec-63fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:30:2a:f5:c7:51:4b:48:dc:2f:66:09:02: 60:a2:97:a4:b8:28:ce:4c:ae:36:24:d7:e9:97:d8: ee:ae:bb:06:4b:9a:4a:39:c1:55:33:d3:2b:7f:3b: 69:78:10:b2:62:e7:40:52:73:19:36:d5:52:19:5e: 26:2b:65:17:5e:7d:f6:f8:77:62:15:e2:6b:da:a3: 6a:1d:f4:b5:0f:a6:cf:b5:86:90:db:46:03:41:07: 47:83:1e:c6:5b:80:d8:7f:3e:ea:fc:0e:28:b2:2a: 83:3e:df:49:90:a6:22:b2:de:52:16:06:fb:1c:64: e3:4e:b2:a8:ea:45:a5:6e:42:a7:77:28:65:61:30: 36:1a:c9:a8:21:c3:c1:40:9f:e5:4a:65:45:64:06: 84:b2:5e:26:15:eb:79:b7:3b:cf:42:a4:73:d0:d1: cc:36:e3:c0:fc:23:8d:78:4b:70:75:c2:4d:a4:28: 7b:1f:98:ae:d6:ec:1b:0b:4b:af:1e:df:46:a2:04: 78:25:b0:d1:6a:72:e7:25:68:fc:cc:97:92:cb:53: 16:75:dd:ea:c8:89:8c:81:95:74:1c:26:ef:80:bf: 76:fc:6b:a2:87:fe:80:e4:c2:74:7f:8a:55:85:19: 9f:ac:4b:5a:c2:11:16:57:cf:f8:ba:32:ae:3f:f5: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0F:90:9C:74:8B:98:EA:02:39:5C:A3:AF:97:8F:72:3F:80:32:9D X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:cd:89:d2:50:81:89:5c:c0:7c:60:53:a1:1a:ea:55:ac:3f: c3:ee:21:d4:50:a8:f2:3b:57:ad:2f:c6:c0:69:62:0a:3f:7d: 33:a6:cf:a4:0b:2f:92:ed:91:fd:63:0a:37:b3:b7:80:73:f1: de:72:ca:28:14:f4:2c:30:d1:fb:f8:fa:39:53:1f:f1:2c:ba: 6b:da:40:c3:03:e2:75:f2:89:1d:b4:04:71:c5:ac:02:3b:20: 31:12:c0:18:28:ea:c4:50:51:fb:b2:92:e2:bf:9a:1a:4e:b7: 17:1f:a0:58:57:b1:2f:b7:09:27:6a:b2:c1:cc:4c:09:d5:0a: 9d:d1:97:6a:aa:ae:6b:1f:dd:8d:a1:00:9c:79:81:3e:8b:f7: 76:e0:56:d5:6e:3e:e2:5a:04:15:36:92:12:48:71:1d:a0:55: d2:f6:5b:fd:98:15:57:14:c4:0b:fb:8d:a6:9a:76:f8:2c:64: 84:cb:59:76:10:35:c2:5b:4f:5d:2d:bb:3d:92:47:2c:31:cb: 54:2d:3b:e1:51:73:19:7c:74:1d:17:f6:f1:a0:4b:82:6a:85: 23:c3:d1:a0:9a:c4:7e:e9:90:86:56:b7:8e:9d:f8:44:fd:83: 9e:b7:1d:29:20:00:25:65:ef:d4:ed:9b:e1:44:0d:5c:05:ae: de:0f:1d:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUwODEwMjAzNzAwWhcNMjUwODE3MjAzNzAwWjAYMRYwFAYD VQQDEw02ODk5MDJlYy02M2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5kwKvXHUUtI3C9mCQJgopekuCjOTK42JNfpl9jurrsGS5pKOcFVM9Mrfztp eBCyYudAUnMZNtVSGV4mK2UXXn32+HdiFeJr2qNqHfS1D6bPtYaQ20YDQQdHgx7G W4DYfz7q/A4osiqDPt9JkKYist5SFgb7HGTjTrKo6kWlbkKndyhlYTA2GsmoIcPB QJ/lSmVFZAaEsl4mFet5tzvPQqRz0NHMNuPA/CONeEtwdcJNpCh7H5iu1uwbC0uv Ht9GogR4JbDRanLnJWj8zJeSy1MWdd3qyImMgZV0HCbvgL92/Guih/6A5MJ0f4pV hRmfrEtawhEWV8/4ujKuP/Ux9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMPkJx0 i5jqAjlco6+Xj3I/gDKdMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2zYnSUIGJXMB8YFOhGupVrD/D7iHUUKjyO1etL8bAaWIKP30zps+k Cy+S7ZH9Ywo3s7eAc/HecsooFPQsMNH7+Po5Ux/xLLpr2kDDA+J18okdtARxxawC OyAxEsAYKOrEUFH7spLiv5oaTrcXH6BYV7EvtwknarLBzEwJ1Qqd0Zdqqq5rH92N oQCceYE+i/d24FbVbj7iWgQVNpISSHEdoFXS9lv9mBVXFMQL+42mmnb4LGSEy1l2 EDXCW09dLbs9kkcsMctULTvhUXMZfHQdF/bxoEuCaoUjw9GgmsR+6ZCGVreOnfhE /YOetx0pIAAlZe/U7ZvhRA1cBa7eDx3i -----END CERTIFICATE-----Generated at Mon Aug 11 13:05:22 2025 by rpki-client