$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: IjU//fF+HREaFRCArgMUScnEh7HLUSW9V+XaugjzEp0= Subject key identifier: 4C:55:AC:5F:B2:6E:EB:F8:FF:BD:39:45:3E:89:B0:70:5E:45:EA:50 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: 012C Signing time: Thu 07 Aug 2025 05:05:12 +0000 Manifest this update: Thu 07 Aug 2025 05:05:11 +0000 Manifest next update: Thu 14 Aug 2025 05:05:11 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: WZyAYCXoDjVaBXLxrQa3h4hYAsG/Dwv0nIN/LQw0BBc=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: lgKxQZBfyyGJs2ybuFT3lxPMvRUJgCHgG0F2ANjIDdA=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: sWbEBie3r4Rs9tqZdxaTO4p/g0MLaIAVIR769Fluhr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Aug 7 05:05:11 2025 GMT Not After : Aug 14 05:05:11 2025 GMT Subject: CN=68943407-1320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:11:d8:03:dd:af:76:e6:06:04:93:c7:8c:0f: 63:86:1c:91:47:fd:9b:6c:cd:c7:13:01:3a:df:d7: 84:2c:14:be:a7:85:c2:16:d4:e3:0f:ae:16:66:c7: d7:fa:71:61:fc:46:46:8e:8e:99:66:62:24:cc:61: b5:3f:25:9f:c9:76:e5:d3:5d:c2:fa:44:e3:bd:4d: 51:7c:11:8c:a0:21:9a:9f:98:aa:0c:59:82:d9:e1: eb:cb:b8:52:f4:7c:1e:e3:d0:a1:c9:f9:a5:1e:e4: 60:95:a8:d7:64:77:f1:cd:03:73:27:73:4c:7e:da: d3:da:bb:83:cf:7c:df:84:8d:5b:7a:e2:10:6b:c4: 93:aa:bf:12:5d:14:0c:a9:ff:5a:34:17:3c:94:be: d7:a0:34:86:91:43:c5:8f:8d:3b:49:59:b3:d1:dc: 27:1e:ee:48:55:f0:79:f0:e3:3e:92:c4:77:e1:79: 69:e8:7f:ad:32:2e:20:aa:a0:b6:2a:5e:70:ba:6d: 64:8d:98:3c:da:a3:5a:04:e8:32:35:f8:d7:ba:39: 9d:49:4d:40:66:be:58:bf:70:b9:07:5a:72:7e:09: 79:e9:b7:89:56:bf:bf:3f:f1:a0:4a:a6:3d:66:a7: 7f:14:ed:ba:d7:35:76:1e:08:33:2e:ab:2a:77:b0: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:55:AC:5F:B2:6E:EB:F8:FF:BD:39:45:3E:89:B0:70:5E:45:EA:50 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:77:45:c6:51:39:4e:46:3b:e6:8c:85:05:e1:1c:d4:3c:f2: c5:40:03:57:e0:cb:42:dd:b9:a0:22:27:a7:75:3e:82:2a:1f: a8:6d:c5:3e:7d:d0:40:3b:05:3d:ef:14:43:61:cf:1c:07:a5: c9:96:bf:90:33:d4:71:4f:2f:96:f9:18:d0:32:83:df:cd:96: 1b:df:be:f8:91:27:b6:64:bb:88:d4:62:3d:c6:5d:e1:8d:aa: 50:a9:92:b1:0d:73:e4:11:e5:78:58:7e:eb:36:78:d5:56:96: 45:a8:49:c0:82:17:08:b1:15:e8:92:54:db:f6:56:15:82:02: 97:7a:56:a7:be:ca:fe:e9:e4:cd:1c:ff:1d:ca:1e:a4:48:a2: 89:dd:bf:85:4e:00:ac:d9:33:70:98:09:c5:67:79:bd:3b:39: b6:76:58:f6:6b:0e:60:05:16:8f:87:37:e8:ef:32:43:aa:03: be:62:91:97:a6:8a:3a:cb:ae:17:cc:72:dd:84:d2:4f:1d:d3: 64:40:6f:8d:47:79:d7:80:d0:73:e8:8a:56:8c:84:86:e8:1b: c3:a1:d6:a1:4c:a1:83:11:e8:2a:d6:97:3a:47:04:d0:ae:65: 34:3c:89:a2:17:36:b7:26:14:ad:85:a0:33:66:eb:6f:b1:e1: 41:0a:0b:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjUwODA3MDUwNTExWhcNMjUwODE0MDUwNTExWjAYMRYwFAYD VQQDEw02ODk0MzQwNy0xMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xHYA92vduYGBJPHjA9jhhyRR/2bbM3HEwE639eELBS+p4XCFtTjD64WZsfX +nFh/EZGjo6ZZmIkzGG1PyWfyXbl013C+kTjvU1RfBGMoCGan5iqDFmC2eHry7hS 9Hwe49ChyfmlHuRglajXZHfxzQNzJ3NMftrT2ruDz3zfhI1beuIQa8STqr8SXRQM qf9aNBc8lL7XoDSGkUPFj407SVmz0dwnHu5IVfB58OM+ksR34Xlp6H+tMi4gqqC2 Kl5wum1kjZg82qNaBOgyNfjXujmdSU1AZr5Yv3C5B1pyfgl56beJVr+/P/GgSqY9 Zqd/FO261zV2HggzLqsqd7DhcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExVrF+y buv4/705RT6JsHBeRepQMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSd0XGUTlORjvmjIUF4RzUPPLFQANX4MtC3bmgIiendT6CKh+obcU+ fdBAOwU97xRDYc8cB6XJlr+QM9RxTy+W+RjQMoPfzZYb3774kSe2ZLuI1GI9xl3h japQqZKxDXPkEeV4WH7rNnjVVpZFqEnAghcIsRXoklTb9lYVggKXelanvsr+6eTN HP8dyh6kSKKJ3b+FTgCs2TNwmAnFZ3m9Ozm2dlj2aw5gBRaPhzfo7zJDqgO+YpGX poo6y64XzHLdhNJPHdNkQG+NR3nXgNBz6IpWjISG6BvDodahTKGDEegq1pc6RwTQ rmU0PImiFza3JhSthaAzZutvseFBCgtW -----END CERTIFICATE-----Generated at Sat Aug 9 05:45:59 2025 by rpki-client