$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft File: CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json) Hash identifier: 5QSD0iViGTNXN8DXD9VY0Lo7jVmg9OetXVpTiJI5UV4= Subject key identifier: 3B:C7:2B:50:36:F7:19:3A:C5:A3:B9:0B:B9:A4:0E:AF:F7:97:39:73 Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft Manifest number: 47 Signing time: Sat 09 Aug 2025 07:54:27 +0000 Manifest this update: Sat 09 Aug 2025 07:54:26 +0000 Manifest next update: Sat 16 Aug 2025 07:54:26 +0000 Files and hashes: 1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: l+2A7cjFoLq+j2kTJFgl6ioGuQVymTmZG4pW00g77ss=) 2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: D+C1K1lzyhPvB9LwJB8gZilHLGwebOslipSKAX/r/Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Validity Not Before: Aug 9 07:54:26 2025 GMT Not After : Aug 16 07:54:26 2025 GMT Subject: CN=6896feb3-096f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:7c:70:48:f4:ee:c6:02:18:d4:38:fc:a9: 28:48:f3:8f:94:5c:e2:bd:93:dc:f3:8f:6c:70:f1: e8:55:ba:77:73:dd:49:81:f4:1a:31:72:1e:ca:51: 4a:44:c7:62:b0:41:58:2e:56:ff:9c:89:20:40:c5: 7a:6c:aa:3c:9c:b5:bf:39:c5:88:f3:e7:fc:9d:05: 3e:42:36:9a:6b:af:ff:d8:d7:57:9b:c6:ef:df:60: 5c:65:61:a4:0f:88:bd:b5:57:e8:19:3f:dd:6a:0f: 25:01:84:06:f8:fd:02:a8:3b:c9:a0:f1:6b:4b:13: 62:6c:26:79:3d:6d:99:48:a7:e6:d9:29:a3:b5:c9: e4:55:bb:f3:81:f6:55:1c:d2:1b:1c:1e:8e:51:ff: 96:44:61:4b:3a:8e:7d:66:40:c3:56:fa:b1:f2:48: 37:44:ad:9d:c6:52:2c:8a:29:9c:09:d7:c9:8c:6e: 97:c1:24:9b:cf:f3:51:6c:bb:87:79:d8:95:27:08: fd:d2:30:9e:d3:25:a8:d6:72:29:3e:a3:1a:97:94: d2:ad:d8:2e:af:dc:bd:eb:9c:7f:2c:5d:12:96:7b: 95:84:ab:2c:83:f6:ca:85:d0:e9:c0:b3:bd:aa:b5: be:54:5e:9e:17:ad:e0:99:3e:2a:1c:f3:e8:eb:ed: 4c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C7:2B:50:36:F7:19:3A:C5:A3:B9:0B:B9:A4:0E:AF:F7:97:39:73 X509v3 Authority Key Identifier: keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:31:7d:82:11:0c:89:72:9c:13:f5:75:ba:73:c5:d6:21:13: 90:34:1a:c6:52:4e:2c:ff:19:7c:87:3f:13:59:4c:c6:04:d0: 11:b2:4a:14:71:47:15:4e:c3:cf:27:6b:46:14:21:49:4e:4f: 9d:31:56:5b:42:d4:5b:7f:51:84:d5:f4:f6:74:85:e3:9e:83: df:85:ee:88:e6:09:5e:d4:35:95:b6:8d:90:20:47:37:51:3a: 12:b7:53:92:b2:cd:1c:91:7e:15:cd:eb:d2:a6:ac:40:ef:d7: 0d:eb:6f:52:a4:c6:76:c0:30:32:e0:a2:8f:45:12:e5:65:96: b3:55:2e:cc:d9:0a:e5:6e:a5:63:a7:48:8d:d5:36:23:00:43: 3c:fc:0e:24:0c:d6:fe:b5:97:8c:80:80:c3:14:51:b5:6c:ba: 13:5c:97:3f:c3:ff:7b:6c:f3:0b:d5:9e:e3:8c:a1:cd:ce:d1: 3f:0b:85:c2:29:74:39:84:85:32:ac:1a:3f:51:3e:44:c0:33: 8f:d8:65:1b:9d:28:81:71:9e:9e:16:34:75:d5:56:0d:c5:13: e5:54:22:0e:9a:be:2c:02:20:6e:c3:ea:f9:a0:77:79:80:9e: b2:e4:95:6e:fa:d5:1d:cb:ad:37:ac:e3:61:b9:2f:6f:06:ff: 48:8f:c3:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUUwOTExMC8GA1UEBRMoMDhBMzkxQzZCMzg5QzgxMEU5NUJDNjEzOUNFQ0IyOUQ1 RDM5NThDNDAeFw0yNTA4MDkwNzU0MjZaFw0yNTA4MTYwNzU0MjZaMBgxFjAUBgNV BAMTDTY4OTZmZWIzLTA5NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+MXxwSPTuxgIY1Dj8qShI84+UXOK9k9zzj2xw8ehVundz3UmB9Boxch7KUUpE x2KwQVguVv+ciSBAxXpsqjyctb85xYjz5/ydBT5CNpprr//Y11ebxu/fYFxlYaQP iL21V+gZP91qDyUBhAb4/QKoO8mg8WtLE2JsJnk9bZlIp+bZKaO1yeRVu/OB9lUc 0hscHo5R/5ZEYUs6jn1mQMNW+rHySDdErZ3GUiyKKZwJ18mMbpfBJJvP81Fsu4d5 2JUnCP3SMJ7TJajWcik+oxqXlNKt2C6v3L3rnH8sXRKWe5WEqyyD9sqF0OnAs72q tb5UXp4XreCZPioc8+jr7UyHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO8crUDb3 GTrFo7kLuaQOr/eXOXMwHwYDVR0jBBgwFoAUCKORxrOJyBDpW8YTnOyynV05WMQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1RTA5Lzg3MDU1QjMyMDhD ODExRjBBMEQzNEU1NkM0RjlBRTAyL0NLT1J4ck9KeUJEcFc4WVRuT3l5blYwNVdN US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0tPUnhyT0p5QkRwVzhZVG5PeXluVjA1V01RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 RTA5Lzg3MDU1QjMyMDhDODExRjBBMEQzNEU1NkM0RjlBRTAyL0NLT1J4ck9KeUJE cFc4WVRuT3l5blYwNVdNUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD8xfYIRDIlynBP1dbpzxdYhE5A0GsZSTiz/GXyHPxNZTMYE0BGyShRx RxVOw88na0YUIUlOT50xVltC1Ft/UYTV9PZ0heOeg9+F7ojmCV7UNZW2jZAgRzdR OhK3U5KyzRyRfhXN69KmrEDv1w3rb1KkxnbAMDLgoo9FEuVllrNVLszZCuVupWOn SI3VNiMAQzz8DiQM1v61l4yAgMMUUbVsuhNclz/D/3ts8wvVnuOMoc3O0T8LhcIp dDmEhTKsGj9RPkTAM4/YZRudKIFxnp4WNHXVVg3FE+VUIg6aviwCIG7D6vmgd3mA nrLklW761R3LrTes42G5L28G/0iPw2o= -----END CERTIFICATE-----Generated at Sun Aug 10 04:28:46 2025 by rpki-client