$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft File: ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json) Hash identifier: zw9GZGCFMMpvgsADMsXOaMoFO40i6V9asZMY3zCcgt8= Subject key identifier: BC:8A:E9:BF:6D:7F:6D:00:4A:FB:A3:D3:CB:77:26:13:2F:06:A1:B0 Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 Certificate issuer: /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft Manifest number: 01A9 Signing time: Mon 11 Aug 2025 03:19:04 +0000 Manifest this update: Mon 11 Aug 2025 03:19:03 +0000 Manifest next update: Mon 18 Aug 2025 03:19:03 +0000 Files and hashes: 1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: ZUaw6mQbOoX9qYcnrDgIYnqSHqTzqtXahXA6etm2L68=) 2: AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (hash: XG0ognbrHuDFVvw75BGHMdtpiHu/beUvd7TsChbHkCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A39E, serialNumber=724D84100B2599931903869AB05220776C8BAC42 Validity Not Before: Aug 11 03:19:03 2025 GMT Not After : Aug 18 03:19:03 2025 GMT Subject: CN=68996128-18e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:4b:b0:76:72:3b:a0:5b:06:4b:c8:13:e8: 82:99:ae:25:18:96:01:7a:e3:bc:5e:40:ad:b0:69: 91:5e:81:8e:57:c8:c8:d4:80:30:eb:74:19:46:86: 98:73:49:2d:4b:57:b3:c9:36:cf:db:8b:45:e1:f3: bd:d8:e8:f8:13:e8:29:48:b3:55:00:87:a7:af:24: 3e:e7:9a:e1:4d:72:b7:8b:9c:59:ef:e6:d1:f9:b7: db:bb:34:26:06:cb:4f:fe:d4:9a:48:ef:f3:ac:28: b6:66:b2:b1:6c:56:9d:0b:bc:79:c1:6d:ec:76:c2: b2:6e:22:1b:14:54:f7:ab:cd:b4:40:a7:98:5f:19: b3:19:fd:f0:38:75:d6:f7:d5:f3:55:b7:dd:3d:26: 93:78:ae:71:14:f0:49:65:83:d6:6a:6f:aa:1e:64: e8:73:43:83:27:6c:14:2f:2d:3e:32:33:eb:97:85: fd:a4:db:14:d7:ea:96:a2:c1:fe:88:37:af:2e:7b: 90:cd:4a:8a:c5:d2:6d:ed:99:8f:24:71:95:6a:d2: f5:bd:c3:56:59:60:44:c9:2b:40:52:ff:01:68:1d: f4:14:84:15:cb:9e:84:ea:06:bd:42:d7:41:29:5a: a0:0f:74:f4:bf:7f:71:ae:bd:b0:a0:4a:4c:e1:c4: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8A:E9:BF:6D:7F:6D:00:4A:FB:A3:D3:CB:77:26:13:2F:06:A1:B0 X509v3 Authority Key Identifier: keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ff:09:a1:fc:77:34:05:72:53:9b:33:db:59:33:28:35:8c: e2:02:a3:35:d3:80:5d:2b:bd:49:33:06:ec:c3:ef:c9:3b:dd: 91:42:eb:00:78:cb:e1:b8:6c:d4:94:76:d3:d2:ef:ee:d1:d8: e8:57:42:1c:17:6a:68:c9:2b:9a:55:e7:af:fb:e6:19:84:8c: 8b:db:76:b8:c4:93:d8:e9:f2:11:f3:71:fa:47:70:f3:4b:6b: 93:a0:26:43:a3:77:fc:92:ee:39:fa:5b:35:83:aa:54:b9:dc: 61:88:21:41:01:a7:1f:50:ec:1d:23:b3:68:61:bf:c4:5f:f5: 44:92:e7:1c:35:fd:c0:fc:fa:93:f6:1c:9f:14:8b:69:de:c0: 69:56:26:d1:54:34:8d:57:60:c3:17:2c:d9:d4:1a:47:9e:bc: d8:cf:53:66:d6:42:86:ed:5c:33:8f:ee:f9:6b:ae:e8:c2:1c: 14:38:d8:4a:a9:80:64:8b:fe:65:69:10:b0:a3:d0:5f:d5:4a: d4:f6:c4:56:95:85:63:51:2e:e8:d0:60:87:53:d0:85:2a:0c: f5:9b:c8:7a:b2:67:29:16:f0:5f:dc:6d:17:6b:c3:c3:d2:32: 0a:73:7a:27:bd:85:80:61:ab:29:22:d2:09:f1:26:5d:7c:9f: 1d:fc:ec:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzOUUxMTAvBgNVBAUTKDcyNEQ4NDEwMEIyNTk5OTMxOTAzODY5QUIwNTIyMDc3 NkM4QkFDNDIwHhcNMjUwODExMDMxOTAzWhcNMjUwODE4MDMxOTAzWjAYMRYwFAYD VQQDEw02ODk5NjEyOC0xOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwNLsHZyO6BbBkvIE+iCma4lGJYBeuO8XkCtsGmRXoGOV8jI1IAw63QZRoaY c0ktS1ezyTbP24tF4fO92Oj4E+gpSLNVAIenryQ+55rhTXK3i5xZ7+bR+bfbuzQm BstP/tSaSO/zrCi2ZrKxbFadC7x5wW3sdsKybiIbFFT3q820QKeYXxmzGf3wOHXW 99XzVbfdPSaTeK5xFPBJZYPWam+qHmToc0ODJ2wULy0+MjPrl4X9pNsU1+qWosH+ iDevLnuQzUqKxdJt7ZmPJHGVatL1vcNWWWBEyStAUv8BaB30FIQVy56E6ga9QtdB KVqgD3T0v39xrr2woEpM4cSt9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyK6b9t f20ASvuj08t3JhMvBqGwMB8GA1UdIwQYMBaAFHJNhBALJZmTGQOGmrBSIHdsi6xC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTM5RS9ENjQ0ODFGOEVF NDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1aTVpBNGFhc0ZJZ2QyeUxy RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrMkVFQXNsbVpNWkE0YWFzRklnZDJ5THJFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTM5RS9ENjQ0ODFGOEVFNDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1a TVpBNGFhc0ZJZ2QyeUxyRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs/wmh/Hc0BXJTmzPbWTMoNYziAqM104BdK71JMwbsw+/JO92RQusA eMvhuGzUlHbT0u/u0djoV0IcF2poySuaVeev++YZhIyL23a4xJPY6fIR83H6R3Dz S2uToCZDo3f8ku45+ls1g6pUudxhiCFBAacfUOwdI7NoYb/EX/VEkuccNf3A/PqT 9hyfFItp3sBpVibRVDSNV2DDFyzZ1BpHnrzYz1Nm1kKG7Vwzj+75a67owhwUONhK qYBki/5laRCwo9Bf1UrU9sRWlYVjUS7o0GCHU9CFKgz1m8h6smcpFvBf3G0Xa8PD 0jIKc3onvYWAYaspItIJ8SZdfJ8d/OwV -----END CERTIFICATE-----Generated at Mon Aug 11 08:53:54 2025 by rpki-client