$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: bz9jvGzqBM2jZ2CZnP1pJG2mULSJ7thjPunN0hvp75s= Subject key identifier: 12:08:58:74:8E:8E:15:CF:12:2D:42:41:57:16:5E:8D:38:4D:A7:08 Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 01C2 Signing time: Mon 11 Aug 2025 03:09:14 +0000 Manifest this update: Mon 11 Aug 2025 03:09:14 +0000 Manifest next update: Mon 18 Aug 2025 03:09:14 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: XolmMLQmFBlA/1YBhrIFwrs+m0tPvXhV8enZTMkFOrU=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: wnETTqWJtI3Udhyqfyf0Gf1ngQci7SXSxAE3DX4g/Ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Aug 11 03:09:14 2025 GMT Not After : Aug 18 03:09:14 2025 GMT Subject: CN=68995eda-ec82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:3e:3b:5f:09:30:3a:03:d5:fa:b2:1e:c4: 86:34:2d:56:c1:88:c3:38:5a:a5:ce:46:12:26:c5: ae:ba:9a:21:68:f1:3b:7a:da:f7:e3:f6:9a:9e:9b: 79:3f:d2:7a:5b:34:11:85:7b:0f:6a:de:14:de:7c: 07:cc:d2:f7:bd:fb:d7:60:17:34:63:f3:ed:cb:90: e4:79:dd:e5:43:e6:cc:ea:e2:3c:c1:33:73:25:8e: 5a:f4:cf:01:45:c1:7e:22:93:66:90:06:7f:dd:14: ee:63:c4:8d:d5:b7:da:3a:0b:87:2e:72:6a:33:0d: 27:58:b7:8f:a4:fe:40:59:f9:58:c2:5d:e8:33:eb: de:50:30:7d:ea:7c:cf:bd:cc:e5:2a:69:54:d8:55: 47:ab:26:c3:75:10:d2:7b:31:57:32:97:d1:31:ea: 05:3f:74:c2:8f:fa:66:9f:fa:4d:03:ec:51:b4:10: d4:96:11:80:d9:92:a5:74:23:2e:bf:31:f5:26:9f: 61:e1:bd:4a:ab:5d:27:f8:48:ee:49:cc:7f:c8:37: d6:9f:b9:49:fb:25:5a:70:10:aa:64:ea:57:a4:28: 3d:28:22:96:0e:cb:56:52:de:b8:e2:34:a9:31:0c: 83:9a:19:5c:9f:cb:e4:33:a1:76:2b:3f:41:99:a8: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:08:58:74:8E:8E:15:CF:12:2D:42:41:57:16:5E:8D:38:4D:A7:08 X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cb:7c:45:fb:b2:e7:ca:0e:b2:c5:30:82:25:e3:c5:5e:b5: f2:3e:73:b9:e8:9f:17:90:5c:2b:c7:be:98:17:82:dd:17:20: 42:96:f6:16:c5:6c:23:71:42:29:12:c2:d0:bd:62:e1:b8:a1: 94:1f:7f:3e:09:b3:c3:9c:39:73:1a:d8:73:21:24:47:56:eb: df:5b:94:3d:15:e2:81:25:37:ea:f3:e0:68:b4:c1:b9:03:9b: b1:60:85:93:9c:97:f9:a5:0c:47:0d:5d:a6:43:24:52:9e:b0: c1:58:d1:d1:84:da:2f:40:9d:0b:10:d0:5b:b4:eb:5e:06:b4: 38:85:39:5a:01:42:6e:ae:2f:a4:b0:df:91:ec:38:51:d0:b7: f4:5f:6c:8d:3a:8b:24:f7:79:03:fc:a6:5f:bb:10:00:e4:4d: 44:f2:ee:57:8f:86:73:77:4d:29:87:d7:9c:26:65:4c:a8:48: f3:4d:83:29:c4:8d:ae:59:0f:4d:e8:de:67:d0:a6:be:b4:44: 92:12:3b:77:ab:07:ee:90:73:2c:76:60:3a:0a:64:13:07:1e: 08:5b:ca:e7:41:28:49:4c:f0:f1:87:a0:8d:72:8b:d5:2d:bc: 99:99:cd:34:dd:d2:bb:15:a6:a5:bf:76:3b:56:c0:cb:3b:22: cc:af:38:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUwODExMDMwOTE0WhcNMjUwODE4MDMwOTE0WjAYMRYwFAYD VQQDEw02ODk5NWVkYS1lYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSI+O18JMDoD1fqyHsSGNC1WwYjDOFqlzkYSJsWuupohaPE7etr34/aanpt5 P9J6WzQRhXsPat4U3nwHzNL3vfvXYBc0Y/Pty5Dked3lQ+bM6uI8wTNzJY5a9M8B RcF+IpNmkAZ/3RTuY8SN1bfaOguHLnJqMw0nWLePpP5AWflYwl3oM+veUDB96nzP vczlKmlU2FVHqybDdRDSezFXMpfRMeoFP3TCj/pmn/pNA+xRtBDUlhGA2ZKldCMu vzH1Jp9h4b1Kq10n+EjuScx/yDfWn7lJ+yVacBCqZOpXpCg9KCKWDstWUt644jSp MQyDmhlcn8vkM6F2Kz9BmagICwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIIWHSO jhXPEi1CQVcWXo04TacIMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3y3xF+7Lnyg6yxTCCJePFXrXyPnO56J8XkFwrx76YF4LdFyBClvYW xWwjcUIpEsLQvWLhuKGUH38+CbPDnDlzGthzISRHVuvfW5Q9FeKBJTfq8+BotMG5 A5uxYIWTnJf5pQxHDV2mQyRSnrDBWNHRhNovQJ0LENBbtOteBrQ4hTlaAUJuri+k sN+R7DhR0Lf0X2yNOosk93kD/KZfuxAA5E1E8u5Xj4Zzd00ph9ecJmVMqEjzTYMp xI2uWQ9N6N5n0Ka+tESSEjt3qwfukHMsdmA6CmQTBx4IW8rnQShJTPDxh6CNcovV LbyZmc003dK7Faalv3Y7VsDLOyLMrzjk -----END CERTIFICATE-----Generated at Tue Aug 12 19:06:31 2025 by rpki-client