$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: FoJ8sE/Mr7MyRxBeudMneksuM+fK2xQvMy7YRiLnFko= Subject key identifier: F2:DE:BD:49:AC:13:43:D1:DF:EE:39:FD:96:27:B8:AC:27:56:DE:D3 Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: FE Signing time: Sat 23 Aug 2025 05:20:17 +0000 Manifest this update: Sat 23 Aug 2025 05:20:16 +0000 Manifest next update: Sat 30 Aug 2025 05:20:16 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: bb/FB3YCk+iOrmpyhLrVDrbfsuuzqqNVdP/Hg7YRygs=) 2: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: jXqxc10SyUCzWVj9PPPMNw2b7v248uGR+j4feRoYBdI=) 3: C591C650781311F080669C0EC4F9AE02.roa (hash: WdqV1sxOirOUn9ZhlZhPe2M8qixZkx77pHk6AUB3MBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Aug 23 05:20:16 2025 GMT Not After : Aug 30 05:20:16 2025 GMT Subject: CN=68a94f91-3f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:c0:33:45:f1:6b:6b:54:2d:be:97:30:18: 8f:aa:bb:8e:84:68:38:3c:55:45:8c:b3:53:b1:fc: 55:bd:e8:f7:86:b9:bd:9c:e9:27:6f:36:93:41:b2: 2e:43:b4:0b:69:ee:da:39:23:c3:ee:b5:cf:30:68: 05:af:5a:b7:28:9d:14:89:6e:aa:fd:4d:45:f7:53: 25:c3:fb:53:72:11:f0:12:4c:d9:ee:02:23:14:c0: a9:71:6b:65:43:77:66:d4:e2:88:d9:6f:4c:c3:fb: 62:18:f3:21:f7:4d:8a:b7:f7:a2:cc:5b:82:be:0a: a7:f8:b6:1c:25:05:4e:23:0b:70:0e:62:f3:20:e2: 80:76:f6:93:26:17:c8:6e:c5:06:c1:84:16:ad:1b: d2:00:d1:78:48:ed:06:a8:62:38:55:19:1c:5e:d8: 65:ef:d9:82:bb:24:f5:85:69:aa:f3:eb:07:a7:d7: 64:85:53:74:74:65:ec:c0:e9:8b:55:79:c9:4c:7d: b3:3d:86:58:5c:c4:c4:a5:eb:27:d6:e7:3b:27:68: 88:81:08:60:17:bc:ab:ac:c9:1b:60:42:b4:b3:e8: 6b:f7:6b:04:73:77:f5:79:5b:cd:04:c9:ff:a3:06: da:de:a2:a3:42:63:10:66:b9:1f:f3:cf:fb:9d:27: 53:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DE:BD:49:AC:13:43:D1:DF:EE:39:FD:96:27:B8:AC:27:56:DE:D3 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:53:47:06:ad:21:fd:ea:70:f1:98:5f:c3:23:62:57:e7:f6: 90:1f:a2:e1:b2:35:6e:4d:8b:36:34:e3:24:12:03:57:ff:08: 13:55:ea:9b:40:aa:21:96:a0:43:9b:20:ff:d4:57:57:eb:44: 23:c4:2b:7e:3d:6f:99:10:af:b2:01:5f:7b:ef:59:57:cf:2d: 40:94:23:25:21:21:0f:93:cf:63:53:7b:b5:8d:1f:89:d0:5c: 9e:1f:72:6a:c3:44:1c:13:be:fa:2f:49:f9:f9:57:7e:4c:51: a3:59:c5:e4:9c:d6:b9:19:e9:00:fa:4a:eb:6c:01:f9:ba:7f: d8:55:a4:12:33:52:f2:ba:08:9a:81:f9:45:e9:5b:60:18:66: c9:b4:8a:e1:e7:45:97:e6:1b:e2:7a:6c:f6:79:fb:fe:4a:af: 81:f2:04:8c:58:ac:e4:10:44:af:8a:fd:bf:c5:a7:cf:79:2e: 78:22:9d:79:f7:0c:e0:7f:1c:d1:41:28:92:9b:71:7e:51:40: 3c:ce:dd:e5:e4:d4:09:cc:4b:db:f7:f9:e8:00:19:c3:c5:31: 01:65:1a:37:73:63:e7:0e:88:78:91:73:4b:75:f2:4b:06:82: 77:b7:47:f9:82:93:e2:f5:db:3d:19:f9:67:92:01:5c:5a:9f: 13:9b:9a:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjUwODIzMDUyMDE2WhcNMjUwODMwMDUyMDE2WjAYMRYwFAYD VQQDEw02OGE5NGY5MS0zZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHTAM0Xxa2tULb6XMBiPqruOhGg4PFVFjLNTsfxVvej3hrm9nOknbzaTQbIu Q7QLae7aOSPD7rXPMGgFr1q3KJ0UiW6q/U1F91Mlw/tTchHwEkzZ7gIjFMCpcWtl Q3dm1OKI2W9Mw/tiGPMh902Kt/eizFuCvgqn+LYcJQVOIwtwDmLzIOKAdvaTJhfI bsUGwYQWrRvSANF4SO0GqGI4VRkcXthl79mCuyT1hWmq8+sHp9dkhVN0dGXswOmL VXnJTH2zPYZYXMTEpesn1uc7J2iIgQhgF7yrrMkbYEK0s+hr92sEc3f1eVvNBMn/ owba3qKjQmMQZrkf88/7nSdTCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLevUms E0PR3+45/ZYnuKwnVt7TMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2 a3IwWDBNU3paUmpWdm5kdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATU0cGrSH96nDxmF/DI2JX5/aQH6LhsjVuTYs2NOMkEgNX/wgTVeqb QKohlqBDmyD/1FdX60QjxCt+PW+ZEK+yAV9771lXzy1AlCMlISEPk89jU3u1jR+J 0FyeH3Jqw0QcE776L0n5+Vd+TFGjWcXknNa5GekA+krrbAH5un/YVaQSM1Lyugia gflF6VtgGGbJtIrh50WX5hviemz2efv+Sq+B8gSMWKzkEESviv2/xafPeS54Ip15 9wzgfxzRQSiSm3F+UUA8zt3l5NQJzEvb9/noABnDxTEBZRo3c2PnDoh4kXNLdfJL BoJ3t0f5gpPi9ds9GflnkgFcWp8Tm5rS -----END CERTIFICATE-----Generated at Sun Aug 24 11:02:59 2025 by rpki-client