$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: kT+bnP8nG1o9UcFlumOIV6StCeAt5qZvTYfm8GIk5Bg= Subject key identifier: 32:8B:9C:CD:2E:CD:AA:C4:A8:39:C4:31:52:44:87:95:33:A0:36:3C Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 0207 Signing time: Sat 23 Aug 2025 02:21:52 +0000 Manifest this update: Sat 23 Aug 2025 02:21:51 +0000 Manifest next update: Sat 30 Aug 2025 02:21:51 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: BpjwnuaFriszOb7PUYtQ8AawuMdJRfLUTuswaScLaHc=) 2: B695C976638F11EDB427BF33C4F9AE02.roa (hash: Bfu/ALycXYH90jyLAqZWBRVy+FwJZTHe9HY8IeLE+Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Aug 23 02:21:51 2025 GMT Not After : Aug 30 02:21:51 2025 GMT Subject: CN=68a925c0-8e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:67:ff:89:97:ce:45:5a:08:b9:88:c7:b9: 84:04:e6:8e:c6:06:57:fe:2b:f2:b0:6b:f9:87:e8: d6:d3:d8:f9:c0:a5:5b:d7:0a:87:0a:b6:f7:77:32: 3b:aa:70:5b:f8:96:7f:c9:78:6a:08:ce:10:56:51: 82:07:54:9c:cc:19:78:4d:3c:ae:92:9d:90:0f:2e: 9a:46:3d:ca:a9:0d:d6:4a:e4:86:4f:b1:c3:fb:d5: d0:fa:c2:ca:01:c8:5f:b4:29:f6:32:27:a6:59:c1: 37:67:22:40:6f:ef:43:aa:c3:c2:ac:24:42:2a:74: 72:f0:d6:34:55:4e:23:ed:79:2c:6b:29:b6:77:8d: cb:d2:0e:7d:9d:e4:03:2b:de:35:9b:d5:44:94:c1: 4d:d7:30:99:d2:bd:53:00:f5:7d:b0:75:8b:b5:2e: 57:55:a4:85:41:06:47:ba:cd:22:da:34:1e:71:d3: cd:8a:c2:04:db:05:af:df:2f:b5:df:0a:8f:74:3a: b1:32:af:00:d4:4a:59:84:49:43:dd:f0:b9:37:90: ed:15:51:78:ab:22:bf:59:4f:a3:d7:41:0c:87:69: 78:f2:57:56:2d:82:3b:fb:35:a1:b1:6c:a3:4b:9c: 16:04:2e:59:7c:c1:67:e0:e3:d8:75:8e:d7:bc:ab: 99:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8B:9C:CD:2E:CD:AA:C4:A8:39:C4:31:52:44:87:95:33:A0:36:3C X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:68:41:50:54:ca:8b:67:74:da:1b:8d:d1:24:b8:1c:a1:03: b2:5a:c5:0d:b9:ee:d9:46:44:3d:3e:07:14:f9:b9:ab:a0:76: b5:c8:20:60:69:9d:91:f9:f7:c3:14:e3:49:15:41:c5:cd:10: 56:f5:2e:d3:62:d8:b9:a0:e0:41:60:79:35:ad:17:41:fd:46: e2:f3:e9:38:87:12:a7:66:0a:25:f2:be:44:25:7d:c5:85:c1: 99:0b:39:5b:43:0a:bb:e9:52:2a:03:9f:8d:9f:78:cf:03:f6: c1:37:82:01:8c:21:f5:39:14:ff:96:43:d9:c5:a5:3f:7d:74: 8e:35:5d:0f:28:8a:0a:14:60:66:a8:e1:98:4c:28:d5:1e:9f: fa:58:d7:7e:06:56:07:3d:77:c6:64:ae:c3:be:47:31:d0:b1: 4f:dc:b3:b1:2d:50:b3:c3:64:2a:f7:22:9c:fb:13:40:7a:b8: 56:4e:0e:4a:76:b7:b2:8a:52:a1:63:fd:ed:96:45:86:bb:a5: 92:6c:d3:9f:2b:46:32:98:43:5c:aa:39:ea:a0:04:e0:15:d2: 88:0e:50:08:8b:1d:2b:ee:7d:cf:aa:52:f5:38:82:94:00:3a: 1f:cc:ad:c0:60:d3:c9:c2:8e:77:72:75:4f:9a:f9:a9:e8:a7: 4c:d7:45:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUwODIzMDIyMTUxWhcNMjUwODMwMDIyMTUxWjAYMRYwFAYD VQQDEw02OGE5MjVjMC04ZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13Nn/4mXzkVaCLmIx7mEBOaOxgZX/ivysGv5h+jW09j5wKVb1wqHCrb3dzI7 qnBb+JZ/yXhqCM4QVlGCB1SczBl4TTyukp2QDy6aRj3KqQ3WSuSGT7HD+9XQ+sLK AchftCn2MiemWcE3ZyJAb+9DqsPCrCRCKnRy8NY0VU4j7Xksaym2d43L0g59neQD K941m9VElMFN1zCZ0r1TAPV9sHWLtS5XVaSFQQZHus0i2jQecdPNisIE2wWv3y+1 3wqPdDqxMq8A1EpZhElD3fC5N5DtFVF4qyK/WU+j10EMh2l48ldWLYI7+zWhsWyj S5wWBC5ZfMFn4OPYdY7XvKuZGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKLnM0u zarEqDnEMVJEh5UzoDY8MB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHaEFQVMqLZ3TaG43RJLgcoQOyWsUNue7ZRkQ9PgcU+bmroHa1yCBg aZ2R+ffDFONJFUHFzRBW9S7TYti5oOBBYHk1rRdB/Ubi8+k4hxKnZgol8r5EJX3F hcGZCzlbQwq76VIqA5+Nn3jPA/bBN4IBjCH1ORT/lkPZxaU/fXSONV0PKIoKFGBm qOGYTCjVHp/6WNd+BlYHPXfGZK7Dvkcx0LFP3LOxLVCzw2Qq9yKc+xNAerhWTg5K dreyilKhY/3tlkWGu6WSbNOfK0YymENcqjnqoATgFdKIDlAIix0r7n3PqlL1OIKU ADofzK3AYNPJwo53cnVPmvmp6KdM10VN -----END CERTIFICATE-----Generated at Sun Aug 24 03:15:34 2025 by rpki-client