$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json) Hash identifier: mZWIerHCQRcmo172xHkwloUFEweudGgolhs7q1+pyCY= Subject key identifier: 1C:FE:AE:CC:DF:4E:00:5D:B4:C6:63:82:65:CC:78:B4:8C:F0:1F:92 Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft Manifest number: 033D Signing time: Sat 23 Aug 2025 01:20:17 +0000 Manifest this update: Sat 23 Aug 2025 01:20:16 +0000 Manifest next update: Sat 30 Aug 2025 01:20:16 +0000 Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: TxswjTy3fhr6SKeZTsWJ9YlV4nTDU//xExtwmxQoM7Q=) 2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: IGdzlLmujAALpavxxSo45P0YFLMJKzqyXolkwQqyBjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Validity Not Before: Aug 23 01:20:16 2025 GMT Not After : Aug 30 01:20:16 2025 GMT Subject: CN=68a91751-c000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:51:fd:59:62:0b:2d:8e:54:81:9c:49:bf: 3b:bc:71:91:10:ff:3b:d6:db:90:dc:e3:a7:95:61: a5:1e:4e:83:49:14:03:68:ed:ad:46:48:f2:e0:c3: 6f:d4:b7:ba:9d:ba:1a:a5:71:ee:39:68:45:ca:2f: 99:5b:c9:88:37:94:04:f8:95:50:9e:eb:77:7c:f5: c8:78:e6:22:15:c1:9b:28:b3:3c:dc:80:44:28:61: 10:89:1e:c2:0f:c1:dd:e6:1f:d8:75:c0:62:1b:e7: 03:05:a9:92:a3:38:d0:b8:27:2a:03:38:5f:69:48: fc:8a:c3:bd:05:5c:b5:c7:33:13:86:40:ee:62:5b: ee:82:1d:00:56:94:79:da:46:7b:d7:76:3d:4f:1b: af:85:51:34:cd:4d:b9:23:db:44:17:f2:82:6f:99: 9f:eb:a1:47:1c:30:8e:a8:59:9e:ad:5e:01:eb:da: bd:ce:32:f6:b2:f6:ac:df:9c:fa:0d:e8:a2:cb:9c: 11:7f:3d:64:84:59:fe:c2:aa:29:04:f8:37:a5:9e: 37:10:ac:59:c3:0e:9e:94:30:9f:da:b9:bb:d9:d0: da:1f:8e:fe:f3:78:cd:42:1c:50:cb:a8:a1:32:66: 79:0e:5b:d5:c4:c3:ce:2e:b4:61:c3:16:2c:8f:d2: b1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FE:AE:CC:DF:4E:00:5D:B4:C6:63:82:65:CC:78:B4:8C:F0:1F:92 X509v3 Authority Key Identifier: keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:31:2b:b8:bd:54:99:96:72:4e:8d:48:89:10:7d:78:8b:72: 39:d9:64:92:47:c5:60:fc:02:43:b8:68:dc:1d:6b:4a:44:8e: b8:b5:a9:42:41:bd:e6:d7:5c:b5:af:ae:e5:1b:dc:3c:2f:98: 51:f1:46:c7:e7:a9:58:9b:a1:bd:96:3d:5b:f0:ab:ad:65:95: 15:ea:ea:b1:3d:fc:8b:bd:b7:f1:70:91:ce:68:d7:17:b4:78: c8:61:4c:ca:e2:bf:b9:cb:73:fc:1a:cf:2e:c2:12:59:36:d2: 6a:e5:36:14:cf:0b:c4:6b:e3:d9:c5:07:0f:01:45:0a:2d:74: 21:94:43:3c:7b:48:af:38:77:2a:29:cb:0f:82:cc:c5:3b:99: 66:b3:5d:e5:40:c3:ea:f9:6f:34:99:53:de:40:e3:2c:78:99: fd:c7:e3:03:50:ae:5e:ec:9d:68:59:a7:1b:93:4a:52:98:d4: 90:2b:98:9c:e6:35:03:ce:fa:99:49:ce:e6:8f:1a:19:94:e7: 05:3c:02:bc:57:35:71:2a:42:ad:b5:4b:69:ac:1d:7b:11:1e: f4:38:2a:25:6a:85:11:54:5f:dc:b6:d0:65:07:fa:a7:82:d0: 57:f3:d3:55:8f:90:3b:6f:e5:bc:c3:fa:dc:74:1f:18:c4:16: 22:ea:b9:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1 NDBDRjlCQUYwHhcNMjUwODIzMDEyMDE2WhcNMjUwODMwMDEyMDE2WjAYMRYwFAYD VQQDEw02OGE5MTc1MS1jMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlLRR/VliCy2OVIGcSb87vHGREP871tuQ3OOnlWGlHk6DSRQDaO2tRkjy4MNv 1Le6nboapXHuOWhFyi+ZW8mIN5QE+JVQnut3fPXIeOYiFcGbKLM83IBEKGEQiR7C D8Hd5h/YdcBiG+cDBamSozjQuCcqAzhfaUj8isO9BVy1xzMThkDuYlvugh0AVpR5 2kZ713Y9TxuvhVE0zU25I9tEF/KCb5mf66FHHDCOqFmerV4B69q9zjL2svas35z6 Deiiy5wRfz1khFn+wqopBPg3pZ43EKxZww6elDCf2rm72dDaH47+83jNQhxQy6ih MmZ5DlvVxMPOLrRhwxYsj9Kx9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz+rszf TgBdtMZjgmXMeLSM8B+SMB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNa OVUwcWFWeGFEcjlVRFBtNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTMSu4vVSZlnJOjUiJEH14i3I52WSSR8Vg/AJDuGjcHWtKRI64talC Qb3m11y1r67lG9w8L5hR8UbH56lYm6G9lj1b8KutZZUV6uqxPfyLvbfxcJHOaNcX tHjIYUzK4r+5y3P8Gs8uwhJZNtJq5TYUzwvEa+PZxQcPAUUKLXQhlEM8e0ivOHcq KcsPgszFO5lms13lQMPq+W80mVPeQOMseJn9x+MDUK5e7J1oWacbk0pSmNSQK5ic 5jUDzvqZSc7mjxoZlOcFPAK8VzVxKkKttUtprB17ER70OColaoURVF/cttBlB/qn gtBX89NVj5A7b+W8w/rcdB8YxBYi6rm8 -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:59 2025 by rpki-client