$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: JgRpLnmsqf95ptig37PPwCh+PsEbhBkEqgrJmnahubQ= Subject key identifier: 6F:E9:F6:CD:86:8A:D2:87:F3:3D:95:8D:D5:49:B1:9E:5B:32:3A:3E Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 0456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 0452 Signing time: Sat 23 Aug 2025 00:28:40 +0000 Manifest this update: Sat 23 Aug 2025 00:28:39 +0000 Manifest next update: Sat 30 Aug 2025 00:28:39 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: b9vIMS9bxOiwD+NKvrqPGv1FC65fAPSmwt6gpidbPWc=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: x1o/7SXGT/4CedCgS5u41onm9GYNi5PSdU5ws280Sfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1110 (0x456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: Aug 23 00:28:39 2025 GMT Not After : Aug 30 00:28:39 2025 GMT Subject: CN=68a90b37-74c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:d6:8a:08:4a:b7:5a:0a:85:10:2a:50:b0: c7:9e:5f:9d:bb:75:0d:9b:e1:9b:58:31:3c:39:1f: c3:f5:af:85:43:f9:1e:e9:61:0e:63:a9:1b:7a:98: 9c:3e:01:85:66:48:a9:1f:68:1d:02:73:60:52:f2: ff:a3:a9:99:9f:bc:83:e8:0d:5b:29:bd:fc:f9:7f: 50:67:a8:71:2c:1d:e6:8f:56:06:6a:3d:8b:3b:56: d3:3e:e1:57:54:eb:55:c7:e0:c9:f4:fc:88:13:ac: d6:bc:58:33:7f:e9:bc:ae:ac:bb:a2:38:b9:86:db: 32:13:3e:c1:9b:c8:c3:a5:9e:e2:66:a5:31:b6:31: b9:7f:ca:1b:70:61:c6:ab:a9:78:15:58:3d:cc:ac: cf:3b:bb:ac:30:08:14:4e:22:83:05:dd:37:bb:95: 44:ae:e2:1c:88:33:f9:b2:70:52:2b:ef:d7:1c:de: 4d:9a:e0:c4:c6:6c:a7:7d:7e:c4:a0:e7:bc:2e:3c: f9:80:9f:35:19:8d:f4:ec:f9:13:f8:48:50:53:5f: 7b:21:bc:e7:ad:b1:7f:b0:06:3e:48:8c:08:89:85: c0:12:d6:ad:5b:3d:db:cb:f3:e2:2c:50:39:aa:47: 7f:51:30:6f:6e:9c:96:24:88:8d:bb:58:4a:e1:b1: 56:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E9:F6:CD:86:8A:D2:87:F3:3D:95:8D:D5:49:B1:9E:5B:32:3A:3E X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d9:05:cc:0a:b9:55:60:36:bd:a9:19:c0:4e:dd:f8:2c:a5: ac:48:f6:a1:f6:72:91:60:7a:12:3e:c5:0b:53:ef:08:e2:04: 9c:33:95:c0:8f:f1:8f:a5:39:fa:a5:4c:0f:a9:39:a8:1c:08: d7:8e:d6:fe:e7:53:c1:e3:25:75:1b:7d:0d:e9:43:34:d9:13: 2e:2c:c0:f7:55:98:d2:e8:40:c1:b7:9c:e9:c2:ef:83:6f:ae: be:d9:e6:6c:1f:01:ce:02:32:92:70:94:e2:f5:dc:85:26:d0: a3:72:15:7b:6b:cb:12:91:67:51:ee:d5:43:3b:6f:6d:89:e9: 29:11:2c:13:d3:84:ee:f5:0f:72:7c:85:20:e2:c2:58:01:b4: 0c:9d:fb:0b:5c:a6:01:d4:e4:12:24:5b:3e:d3:84:46:3f:2e: 6f:e4:f7:18:7b:b9:01:d9:51:2b:21:c8:2d:2c:d2:b7:1b:1b: 44:9a:79:73:91:bf:cc:f2:86:c0:89:a0:dd:a7:50:1b:e8:09: c4:30:8f:b9:d7:27:bf:86:3f:7d:38:62:59:5d:35:8b:68:cd: e9:df:fb:79:ba:6c:cb:e7:9f:9e:50:ab:a4:17:cd:17:b8:d5: 5c:4d:12:7a:78:51:de:e2:97:ea:e9:04:6e:67:92:a1:80:08: 53:11:87:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjUwODIzMDAyODM5WhcNMjUwODMwMDAyODM5WjAYMRYwFAYD VQQDEw02OGE5MGIzNy03NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3czWighKt1oKhRAqULDHnl+du3UNm+GbWDE8OR/D9a+FQ/ke6WEOY6kbepic PgGFZkipH2gdAnNgUvL/o6mZn7yD6A1bKb38+X9QZ6hxLB3mj1YGaj2LO1bTPuFX VOtVx+DJ9PyIE6zWvFgzf+m8rqy7oji5htsyEz7Bm8jDpZ7iZqUxtjG5f8obcGHG q6l4FVg9zKzPO7usMAgUTiKDBd03u5VEruIciDP5snBSK+/XHN5NmuDExmynfX7E oOe8Ljz5gJ81GY307PkT+EhQU197IbznrbF/sAY+SIwIiYXAEtatWz3by/PiLFA5 qkd/UTBvbpyWJIiNu1hK4bFW9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/p9s2G itKH8z2VjdVJsZ5bMjo+MB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR2QXMCrlVYDa9qRnATt34LKWsSPah9nKRYHoSPsULU+8I4gScM5XA j/GPpTn6pUwPqTmoHAjXjtb+51PB4yV1G30N6UM02RMuLMD3VZjS6EDBt5zpwu+D b66+2eZsHwHOAjKScJTi9dyFJtCjchV7a8sSkWdR7tVDO29tiekpESwT04Tu9Q9y fIUg4sJYAbQMnfsLXKYB1OQSJFs+04RGPy5v5PcYe7kB2VErIcgtLNK3GxtEmnlz kb/M8obAiaDdp1Ab6AnEMI+51ye/hj99OGJZXTWLaM3p3/t5umzL55+eUKukF80X uNVcTRJ6eFHe4pfq6QRuZ5KhgAhTEYc0 -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:34 2025 by rpki-client