$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft File: 9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json) Hash identifier: NyAetRlArzbnWO3PJ2UR+Jx7DVT2S/27EVHzKA0Kgrg= Subject key identifier: C9:93:F9:63:40:65:3A:3A:E4:21:85:4A:AE:8A:8D:70:4E:15:70:8E Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft Manifest number: 068C Signing time: Wed 06 Aug 2025 23:57:59 +0000 Manifest this update: Wed 06 Aug 2025 23:57:58 +0000 Manifest next update: Wed 13 Aug 2025 23:57:58 +0000 Files and hashes: 1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: Grztjvin4QWDW222jw9ExH6z6zOMIVQD7eb9/5/O+ZI=) 2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: ioHyUTgCHnCGMUHWoGRwcexhSo8qMCJK1mxXffaCMDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Validity Not Before: Aug 6 23:57:58 2025 GMT Not After : Aug 13 23:57:58 2025 GMT Subject: CN=6893ec06-9d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:13:37:8f:98:7d:39:53:4f:17:b8:d4:f4: 70:b0:c9:7a:da:bd:b3:c5:9d:02:99:ee:ac:a4:0d: 98:35:61:ce:bf:2e:7a:b0:44:88:01:2b:70:93:6e: a7:c2:bc:cb:61:e5:08:a7:00:0a:c8:6d:84:eb:12: 3a:eb:73:7f:5f:27:6c:3a:12:64:66:45:c2:e5:e2: 18:49:5e:00:9a:f3:fd:b1:bc:d3:01:5c:76:b8:4a: ad:56:96:de:2a:f3:4d:39:e9:dc:12:94:7d:a6:6c: 80:f3:bc:c5:05:75:72:ae:06:fe:3d:13:5b:e7:f7: f9:c1:d1:bc:6d:e3:2c:dd:fe:2a:7d:d6:a8:83:d8: a7:d5:64:61:5f:25:f5:9e:99:5b:5d:8b:c2:f5:32: 49:2d:b5:5c:e3:5b:1d:df:eb:1a:de:0d:c9:65:d5: 15:f9:0a:35:81:4e:33:65:58:ba:81:08:5f:dc:ee: 45:9c:91:e2:54:c0:66:d5:0b:db:a7:27:e1:44:04: 1f:e2:46:0a:a9:f1:48:a3:0a:85:b0:43:02:64:b5: 2f:0a:b3:cd:88:1f:6c:80:07:37:a2:c2:61:45:0a: 95:90:44:94:f8:d2:49:ad:4e:03:2c:1b:24:53:14: 62:85:61:3f:c7:df:e4:09:49:8c:76:fe:72:46:9f: 20:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:F9:63:40:65:3A:3A:E4:21:85:4A:AE:8A:8D:70:4E:15:70:8E X509v3 Authority Key Identifier: keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e9:fc:2b:98:b3:84:88:e6:a8:10:e6:f9:d7:31:ca:06:9c: c0:ab:ba:08:41:e6:93:61:26:cc:34:a0:0f:e9:8b:d0:a2:48: a5:31:74:4b:a6:c5:75:8f:7a:00:79:8c:14:b3:b0:a4:07:bf: 35:fa:81:1a:65:54:15:29:18:dd:0f:b5:d8:19:5b:5c:56:de: c3:e6:d3:61:bd:c6:b9:70:f7:13:ae:e3:5a:41:7a:24:ad:14: f7:6f:3f:8e:51:6d:03:56:1c:01:de:35:53:72:46:63:aa:cf: 73:05:a0:23:7a:ae:d6:06:77:2d:fb:e6:ab:32:43:bf:e9:73: 4d:a8:a4:63:77:4c:4a:b0:a7:53:93:66:a2:0c:75:1e:10:a1: b3:09:7c:5f:e5:98:10:70:66:89:02:93:f1:ff:a4:87:46:a8: 17:ff:5c:92:b6:48:4b:30:59:e7:f5:c8:6d:71:ba:19:3f:eb: f6:00:f0:1d:59:23:c6:08:a9:49:0d:0b:20:0d:7e:1f:a2:ec: 61:ee:89:e7:8f:8b:0c:3e:51:cf:29:79:17:07:19:ff:47:29: 29:1d:49:98:f9:0c:d1:f3:8a:b3:80:bd:a0:7e:f5:c9:8f:f9: df:a2:12:33:07:a9:8b:45:ba:99:06:9f:23:0f:53:84:5b:89: e8:a6:72:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKEY0QzA2NDEzNzQ5NzVBNThCNTRFQzAyQzEwNDk3MzJF QzhBNzBBQ0IwHhcNMjUwODA2MjM1NzU4WhcNMjUwODEzMjM1NzU4WjAYMRYwFAYD VQQDEw02ODkzZWMwNi05ZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qoTN4+YfTlTTxe41PRwsMl62r2zxZ0Cme6spA2YNWHOvy56sESIAStwk26n wrzLYeUIpwAKyG2E6xI663N/XydsOhJkZkXC5eIYSV4AmvP9sbzTAVx2uEqtVpbe KvNNOencEpR9pmyA87zFBXVyrgb+PRNb5/f5wdG8beMs3f4qfdaog9in1WRhXyX1 nplbXYvC9TJJLbVc41sd3+sa3g3JZdUV+Qo1gU4zZVi6gQhf3O5FnJHiVMBm1Qvb pyfhRAQf4kYKqfFIowqFsEMCZLUvCrPNiB9sgAc3osJhRQqVkESU+NJJrU4DLBsk UxRihWE/x9/kCUmMdv5yRp8gVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmT+WNA ZTo65CGFSq6KjXBOFXCOMB8GA1UdIwQYMBaAFPTAZBN0l1pYtU7ALBBJcy7IpwrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFdsaTFUc0FzRUVsekxzaW5D c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNQmtFM1NYV2xpMVRzQXNFRWx6THNpbkNzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFds aTFUc0FzRUVsekxzaW5Dc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj6fwrmLOEiOaoEOb51zHKBpzAq7oIQeaTYSbMNKAP6YvQokilMXRL psV1j3oAeYwUs7CkB781+oEaZVQVKRjdD7XYGVtcVt7D5tNhvca5cPcTruNaQXok rRT3bz+OUW0DVhwB3jVTckZjqs9zBaAjeq7WBnct++arMkO/6XNNqKRjd0xKsKdT k2aiDHUeEKGzCXxf5ZgQcGaJApPx/6SHRqgX/1yStkhLMFnn9chtcboZP+v2APAd WSPGCKlJDQsgDX4fouxh7onnj4sMPlHPKXkXBxn/RykpHUmY+QzR84qzgL2gfvXJ j/nfohIzB6mLRbqZBp8jD1OEW4nopnIz -----END CERTIFICATE-----Generated at Thu Aug 7 04:39:28 2025 by rpki-client