$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: DfI0hLDcdRYlItN1hAWt0rcXmk06AeX+7d22Ni+Kz+g= Subject key identifier: D2:57:A0:4E:09:5D:5D:95:BF:AB:ED:0D:BA:92:9D:79:B4:CB:7C:3F Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 015C Signing time: Thu 07 Aug 2025 04:30:57 +0000 Manifest this update: Thu 07 Aug 2025 04:30:56 +0000 Manifest next update: Thu 14 Aug 2025 04:30:56 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: v7d6d5MYpm6f6KrkrjMaJ9CDEQMa7SrRI+ZD1Pkc2q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Aug 7 04:30:56 2025 GMT Not After : Aug 14 04:30:56 2025 GMT Subject: CN=68942c00-edda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:58:93:62:4d:c6:97:52:08:6f:8f:2a:e6:4d: d6:29:45:27:18:5b:a2:5f:68:97:0c:c6:0c:a2:23: 81:cc:b9:09:5f:64:21:f0:48:16:c6:80:fd:d8:2b: bf:32:a6:74:a5:6e:2b:8a:f1:77:d9:4c:ab:ef:b6: ef:ce:ef:96:d6:cb:65:65:28:c5:c5:f2:59:5b:aa: 9a:a9:65:00:ca:c0:4b:de:b2:ea:72:b8:9e:de:aa: 6d:fb:d4:9f:20:68:a9:62:10:7d:2f:e2:dd:48:83: 80:06:79:1d:ff:55:72:83:b8:ed:1d:0d:6a:4f:c2: 33:43:30:3b:fc:ec:51:7a:91:c5:93:eb:69:97:65: d0:4e:1e:39:0e:8c:46:27:27:b3:43:27:51:16:fb: 0c:68:54:62:82:a0:70:c0:3e:10:a5:a3:9b:20:83: 50:e0:f4:07:ea:63:7e:d1:1b:d5:09:00:ec:d9:31: d7:98:fd:3a:60:74:ca:8f:00:79:b5:cf:76:47:99: fd:e8:fe:77:ee:e7:d6:32:6b:a9:e5:aa:fe:22:30: 08:9c:06:ff:f4:78:37:cd:eb:fa:0d:cd:20:f6:3f: ea:e4:be:37:25:1f:6f:a5:b0:53:78:84:65:92:59: c6:8d:cb:66:e6:2b:fb:15:09:6b:9e:0f:c1:65:f8: 71:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:57:A0:4E:09:5D:5D:95:BF:AB:ED:0D:BA:92:9D:79:B4:CB:7C:3F X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:56:35:f6:77:04:7d:12:3e:4a:bd:b8:fb:36:11:87:86:79: ce:62:cb:2b:0d:20:77:03:58:23:1e:94:35:83:50:13:d7:25: e1:cd:65:74:f4:8a:d9:14:89:64:21:df:a2:e3:40:3b:f9:7e: cc:2b:4e:76:1f:c2:3e:8c:9c:5f:d2:3f:81:ec:3e:dc:b7:e7: cf:a1:81:d4:dc:dd:37:fb:82:54:3a:49:2b:cf:7c:d3:22:e4: bb:6f:4a:e3:16:cb:0a:67:70:2c:f0:83:34:12:5e:d4:96:6f: 78:f3:96:ab:ca:63:dc:23:43:94:9b:5f:ad:ad:b8:e6:8f:67: b9:59:89:16:53:05:dc:51:a4:08:58:8e:64:e7:7c:db:65:e8: 21:5b:b2:a7:6c:70:e0:a5:23:8d:4d:03:16:9d:c5:cc:d5:96: 88:b2:db:09:df:e3:cb:09:21:08:7b:17:e5:5f:3f:53:40:87: 69:d3:91:62:08:d0:fb:b9:c5:35:0f:35:3c:3c:f5:ed:cd:da: 82:01:4d:30:27:06:7d:2f:67:4d:4a:e1:e2:ba:6b:7f:67:75: 30:1f:91:be:03:4e:ed:94:39:07:36:9a:bf:1d:ad:e3:1c:d6: 88:66:bb:30:48:b9:d2:bc:f0:96:b4:f7:49:6a:d1:0b:15:9a: 83:16:69:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjUwODA3MDQzMDU2WhcNMjUwODE0MDQzMDU2WjAYMRYwFAYD VQQDEw02ODk0MmMwMC1lZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71iTYk3Gl1IIb48q5k3WKUUnGFuiX2iXDMYMoiOBzLkJX2Qh8EgWxoD92Cu/ MqZ0pW4rivF32Uyr77bvzu+W1stlZSjFxfJZW6qaqWUAysBL3rLqcrie3qpt+9Sf IGipYhB9L+LdSIOABnkd/1Vyg7jtHQ1qT8IzQzA7/OxRepHFk+tpl2XQTh45DoxG JyezQydRFvsMaFRigqBwwD4QpaObIINQ4PQH6mN+0RvVCQDs2THXmP06YHTKjwB5 tc92R5n96P537ufWMmup5ar+IjAInAb/9Hg3zev6Dc0g9j/q5L43JR9vpbBTeIRl klnGjctm5iv7FQlrng/BZfhxkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJXoE4J XV2Vv6vtDbqSnXm0y3w/MB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdVjX2dwR9Ej5Kvbj7NhGHhnnOYssrDSB3A1gjHpQ1g1AT1yXhzWV0 9IrZFIlkId+i40A7+X7MK052H8I+jJxf0j+B7D7ct+fPoYHU3N03+4JUOkkrz3zT IuS7b0rjFssKZ3As8IM0El7Ulm9485arymPcI0OUm1+trbjmj2e5WYkWUwXcUaQI WI5k53zbZeghW7KnbHDgpSONTQMWncXM1ZaIstsJ3+PLCSEIexflXz9TQIdp05Fi CND7ucU1DzU8PPXtzdqCAU0wJwZ9L2dNSuHiumt/Z3UwH5G+A07tlDkHNpq/Ha3j HNaIZrswSLnSvPCWtPdJatELFZqDFmmB -----END CERTIFICATE-----Generated at Sat Aug 9 05:49:04 2025 by rpki-client