$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json) Hash identifier: EBf2NlBiFDsi9l1KFsnlG3CzGAx4AeX3cWRIjj6/2I0= Subject key identifier: 85:26:AD:90:5F:0E:55:6D:00:15:89:CC:00:ED:44:8F:D6:E5:C7:01 Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft Manifest number: 0137 Signing time: Fri 22 Aug 2025 23:35:47 +0000 Manifest this update: Fri 22 Aug 2025 23:35:47 +0000 Manifest next update: Fri 29 Aug 2025 23:35:47 +0000 Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: VKorokWAil2pOhTnYLtmp+VOjmGF61VVZYNcBJooFts=) 2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: Kj01wL6hxzZNZ8dZAbJKpipOYkN2WV1ZM26ZUUjGKvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Validity Not Before: Aug 22 23:35:47 2025 GMT Not After : Aug 29 23:35:47 2025 GMT Subject: CN=68a8fed3-83c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:2c:63:d4:da:87:9f:31:a2:0a:f4:9e:67: 1b:79:99:bc:08:28:35:f2:a0:75:6d:8b:05:58:d9: db:60:d1:6c:ba:49:fd:80:47:7c:5b:2e:c9:59:45: fb:99:2f:7d:c8:6c:5a:30:c6:9e:12:fc:2a:24:48: 28:72:4b:c1:06:9a:91:de:2f:8a:56:8c:f0:2a:d8: 2a:db:45:b8:de:80:9c:c9:3d:2b:ef:e3:06:a1:47: 35:27:66:e1:6a:69:93:05:df:e3:c7:14:04:6e:56: 0d:48:39:3f:ad:01:ff:55:68:ca:ef:87:43:c9:c6: 1e:ac:43:6f:e2:17:bc:3e:39:22:a1:20:47:82:cd: 2b:1d:7d:90:22:16:c8:56:15:4b:56:b6:a7:aa:da: a9:19:3c:f5:76:40:8b:fb:2d:4a:c5:0d:b2:20:f3: fa:d2:8c:50:c2:f0:d9:12:53:0b:c4:72:ca:cb:25: 38:5d:48:7c:e8:8d:fa:f1:35:cd:97:22:b1:24:70: 94:dc:7c:7f:df:c8:f7:a1:98:37:e9:f2:11:26:c3: 82:93:a4:70:59:68:7c:09:6f:17:d2:ec:e6:b0:5d: e0:73:0f:7a:5f:b9:ed:db:ea:37:42:ec:65:15:ca: 7a:14:7d:10:72:a8:e0:2f:51:d1:16:5f:bf:fd:5d: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:26:AD:90:5F:0E:55:6D:00:15:89:CC:00:ED:44:8F:D6:E5:C7:01 X509v3 Authority Key Identifier: keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:74:0f:e8:91:7d:36:8d:a3:6a:c3:04:f7:f4:0a:13:de:8c: 91:d1:7f:7d:50:bf:a0:ec:68:71:38:26:63:50:6b:ae:89:c8: e1:43:1c:3b:bf:49:48:95:64:89:3f:75:68:3e:b8:cd:ad:c2: 72:e4:27:5a:ff:69:06:47:17:24:5c:1b:1a:42:dd:69:16:2a: 77:9f:47:93:65:b8:e6:80:58:58:fe:ad:32:59:1e:21:db:0f: 8d:c7:f4:49:ca:65:f8:cf:f6:37:6e:46:6f:57:19:4b:d1:7a: 6e:02:2c:21:6d:c7:8d:6a:ab:f0:a8:45:97:6d:ae:67:93:16: 89:6a:6c:a7:56:4b:ed:9f:c1:a9:84:ab:67:55:6d:6c:22:98: 9f:b0:21:9a:0d:9d:9d:ce:88:31:b8:94:91:f5:9b:94:a5:6f: 20:d2:f5:ea:74:d4:96:c8:04:7e:f6:48:b7:d5:b4:3a:94:83: bf:07:ef:ae:39:f6:ab:9e:e1:77:31:ee:71:3d:13:03:2e:2b: 62:e6:87:88:2e:df:e5:50:36:c8:65:47:e2:65:ee:c4:eb:13: 3d:c3:ef:41:73:77:42:c0:5c:06:38:5d:67:15:44:86:ed:ce: c2:95:57:e5:39:3b:d6:02:c2:46:1f:c5:37:78:4f:6f:8a:db: 53:11:63:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4 RDc3MjNFNTIwHhcNMjUwODIyMjMzNTQ3WhcNMjUwODI5MjMzNTQ3WjAYMRYwFAYD VQQDEw02OGE4ZmVkMy04M2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshwsY9Tah58xogr0nmcbeZm8CCg18qB1bYsFWNnbYNFsukn9gEd8Wy7JWUX7 mS99yGxaMMaeEvwqJEgockvBBpqR3i+KVozwKtgq20W43oCcyT0r7+MGoUc1J2bh ammTBd/jxxQEblYNSDk/rQH/VWjK74dDycYerENv4he8PjkioSBHgs0rHX2QIhbI VhVLVranqtqpGTz1dkCL+y1KxQ2yIPP60oxQwvDZElMLxHLKyyU4XUh86I368TXN lyKxJHCU3Hx/38j3oZg36fIRJsOCk6RwWWh8CW8X0uzmsF3gcw96X7nt2+o3Quxl Fcp6FH0QcqjgL1HRFl+//V3/5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUmrZBf DlVtABWJzADtRI/W5ccBMB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5 RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3 S1hqYzBMYU9sQXVOZHlQbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQdA/okX02jaNqwwT39AoT3oyR0X99UL+g7GhxOCZjUGuuicjhQxw7 v0lIlWSJP3VoPrjNrcJy5Cda/2kGRxckXBsaQt1pFip3n0eTZbjmgFhY/q0yWR4h 2w+Nx/RJymX4z/Y3bkZvVxlL0XpuAiwhbceNaqvwqEWXba5nkxaJamynVkvtn8Gp hKtnVW1sIpifsCGaDZ2dzogxuJSR9ZuUpW8g0vXqdNSWyAR+9ki31bQ6lIO/B++u OfarnuF3Me5xPRMDLiti5oeILt/lUDbIZUfiZe7E6xM9w+9Bc3dCwFwGOF1nFUSG 7c7ClVflOTvWAsJGH8U3eE9vittTEWO7 -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:04 2025 by rpki-client