$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft File: 125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json) Hash identifier: EOPv0si3j0ZAfNRZuLy3YKDTBFvc/03Lc1PgfJuEzEU= Subject key identifier: 62:24:41:75:40:30:8F:1C:31:C9:B8:58:68:CB:ED:9B:00:A5:29:3B Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC Certificate issuer: /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft Manifest number: 0525 Signing time: Sat 09 Aug 2025 00:01:47 +0000 Manifest this update: Sat 09 Aug 2025 00:01:47 +0000 Manifest next update: Sat 16 Aug 2025 00:01:47 +0000 Files and hashes: 1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: 1Z0YWknAOG/AV4RqsnSev60KnUL2bggCZ+lnCT+F5T4=) 2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: KLqg7iCkQ2UJ+0JMC/UQM8HaP6cn0IInutZRj+9bWr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Validity Not Before: Aug 9 00:01:47 2025 GMT Not After : Aug 16 00:01:47 2025 GMT Subject: CN=68968feb-2cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:77:17:11:56:4e:e5:23:76:b6:4d:f5:20: d4:5f:51:4d:c8:42:ea:b6:de:a9:97:6c:4f:01:fd: 5c:82:f7:40:41:68:da:07:05:aa:2c:2e:c2:f9:08: c9:47:0c:87:46:88:69:cb:a9:6a:53:43:41:74:94: b1:1a:75:5c:54:3d:c7:ea:e4:d4:59:0c:39:b8:77: 46:be:78:f9:c9:6e:f0:28:dc:fd:4e:fc:ba:8c:fb: 20:1e:19:73:77:2a:4a:57:f4:bc:77:80:e4:ac:11: 23:57:6e:6a:25:47:03:33:e6:b3:b1:64:51:12:8b: 1f:3a:4f:1d:9c:58:05:f9:0c:11:05:cd:c9:05:05: cd:a7:1e:8c:cb:4d:ee:05:3e:ab:dd:4e:e3:ad:88: fd:ad:10:1a:ba:55:b6:e1:86:09:c2:59:e6:f5:81: cf:27:8e:3e:c9:82:86:ae:07:71:e4:0b:6f:10:81: 14:dc:05:ac:85:b1:bc:39:fe:02:19:6b:bc:4d:81: a4:ed:50:8f:a4:ed:94:b4:33:5e:0e:aa:ba:34:fd: 97:a0:79:51:8f:cc:ce:ef:0d:73:d9:95:51:33:4e: 7a:f5:4a:9e:b9:78:91:0d:3a:34:1b:00:94:20:c2: 57:08:9a:1b:87:5e:21:7e:9c:c4:3b:09:d5:83:e1: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:24:41:75:40:30:8F:1C:31:C9:B8:58:68:CB:ED:9B:00:A5:29:3B X509v3 Authority Key Identifier: keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e3:0f:b5:29:25:a3:d9:6f:f2:12:35:06:88:9b:8b:45:6a: e7:82:ab:2d:22:e3:24:15:68:c6:fa:f6:99:6d:74:dc:43:51: 2d:07:06:a2:52:ce:0c:a3:c2:8d:e3:d9:c1:e8:76:c2:4b:8e: c4:6d:01:17:93:a4:ed:ab:c6:e4:25:87:3d:27:86:20:c4:3b: fd:a4:37:71:9a:d3:b3:6d:62:81:93:79:b9:f6:4c:af:b9:d0: 21:de:13:72:db:55:37:fb:f5:91:0c:a9:a6:50:1e:b4:63:1d: f2:24:67:ab:78:98:a1:d1:d0:21:f2:32:46:9c:7b:9d:87:0a: 43:10:0e:ab:26:76:4c:b7:2f:79:86:20:8e:c2:90:c5:e9:02: 69:3a:99:26:82:e7:fa:2c:ce:99:e2:71:c2:53:62:f3:94:bb: 20:d7:0a:be:c9:00:3a:9e:5d:cd:10:3c:12:df:dd:4e:a1:61: 51:9d:7b:9d:fe:8e:0f:38:5a:0d:fc:bd:d0:e2:f5:c4:92:a8: ed:f8:84:17:81:d9:75:76:e9:21:36:9a:89:4e:0e:b8:c0:0f: 99:a8:da:dd:ce:dc:72:9e:ec:c1:03:74:a4:1a:c4:1d:cc:b9: 3c:4a:56:03:e8:17:3d:6d:e6:a4:6e:3d:7d:98:e1:65:ce:8a: 7e:1c:a1:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdDNDQxMTAvBgNVBAUTKEQ3NkU2MUI5OUY3NTNFRkVGNzk4N0Y0QjM0QThBRDMz Mjk3ODAzQUMwHhcNMjUwODA5MDAwMTQ3WhcNMjUwODE2MDAwMTQ3WjAYMRYwFAYD VQQDEw02ODk2OGZlYi0yY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZ93FxFWTuUjdrZN9SDUX1FNyELqtt6pl2xPAf1cgvdAQWjaBwWqLC7C+QjJ RwyHRohpy6lqU0NBdJSxGnVcVD3H6uTUWQw5uHdGvnj5yW7wKNz9Tvy6jPsgHhlz dypKV/S8d4DkrBEjV25qJUcDM+azsWRREosfOk8dnFgF+QwRBc3JBQXNpx6My03u BT6r3U7jrYj9rRAaulW24YYJwlnm9YHPJ44+yYKGrgdx5AtvEIEU3AWshbG8Of4C GWu8TYGk7VCPpO2UtDNeDqq6NP2XoHlRj8zO7w1z2ZVRM0569UqeuXiRDTo0GwCU IMJXCJobh14hfpzEOwnVg+HC3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIkQXVA MI8cMcm4WGjL7ZsApSk7MB8GA1UdIwQYMBaAFNduYbmfdT7+95h/SzSorTMpeAOs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0M0NC84QzZGMDhGODBF RTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2NzNtSDlMTktpdE15bDRB NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNWh1WjkxUHY3M21IOUxOS2l0TXlsNEE2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0M0NC84QzZGMDhGODBFRTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2 NzNtSDlMTktpdE15bDRBNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL4w+1KSWj2W/yEjUGiJuLRWrngqstIuMkFWjG+vaZbXTcQ1EtBwai Us4Mo8KN49nB6HbCS47EbQEXk6Ttq8bkJYc9J4YgxDv9pDdxmtOzbWKBk3m59kyv udAh3hNy21U3+/WRDKmmUB60Yx3yJGereJih0dAh8jJGnHudhwpDEA6rJnZMty95 hiCOwpDF6QJpOpkmguf6LM6Z4nHCU2LzlLsg1wq+yQA6nl3NEDwS391OoWFRnXud /o4POFoN/L3Q4vXEkqjt+IQXgdl1dukhNpqJTg64wA+ZqNrdztxynuzBA3SkGsQd zLk8SlYD6Bc9beakbj19mOFlzop+HKEl -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:14 2025 by rpki-client