$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: 2+cNfVoUi9zBGUr/qIr6xYfQYRjskDUoZZdQZwwQlDY= Subject key identifier: FB:A3:81:CE:8B:EA:06:61:34:39:80:A5:CE:C5:B4:27:44:E2:0E:F1 Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 1139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 1131 Signing time: Fri 22 Aug 2025 17:23:46 +0000 Manifest this update: Fri 22 Aug 2025 17:23:45 +0000 Manifest next update: Fri 29 Aug 2025 17:23:45 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: uPLa+tycuyhqy062PuZfx2pdHaDzGVPYAIYmHP4YNEg=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4409 (0x1139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Aug 22 17:23:45 2025 GMT Not After : Aug 29 17:23:45 2025 GMT Subject: CN=68a8a7a1-5326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9b:7b:30:58:15:d0:a1:82:5c:56:2c:40:28: 80:e2:52:88:05:83:38:92:11:92:1e:10:76:16:49: 12:7e:9b:e2:7f:6f:bf:b3:10:1a:97:57:da:da:36: c9:44:6e:9e:a0:1a:ea:bc:d5:34:a3:96:8c:f1:86: e6:2d:6d:c5:b9:70:ce:a4:ac:7b:a1:96:09:17:a7: 11:3c:9e:1c:f9:73:8a:85:ce:ba:e2:3b:ae:19:70: 84:f9:f8:86:b9:a4:ad:59:82:67:fd:cc:de:0d:21: 29:95:cd:6c:86:c4:d7:67:e3:06:f0:de:95:b4:07: fc:16:46:20:59:ee:29:7a:87:c1:4f:24:fd:d9:c2: 54:d1:e0:1d:5a:80:54:6d:85:89:f9:b0:9b:4f:ca: 9d:73:91:e5:7e:a9:b5:77:ca:9d:5e:f0:94:7a:4c: b7:57:e2:a3:e2:9c:f1:8d:9f:4e:cd:e9:7e:02:a4: 31:50:cf:a2:c2:f4:d5:53:24:ba:90:37:48:e8:e1: 2e:93:c8:fc:b9:cb:36:c3:2c:d5:4a:9d:dd:c0:a0: 36:f4:83:40:69:5e:b6:bf:ab:6f:fc:e9:4a:46:10: 70:90:e6:1e:58:01:4f:e8:a8:77:05:f9:55:13:52: 1e:86:7b:a6:c3:1b:1c:54:5f:6f:48:a3:82:93:b0: b4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A3:81:CE:8B:EA:06:61:34:39:80:A5:CE:C5:B4:27:44:E2:0E:F1 X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:9b:a5:d8:8e:ac:bb:70:b8:7d:eb:53:e4:ce:17:f5:9a:61: 62:58:f1:48:60:15:2c:bc:83:ee:2b:3c:f0:79:80:ae:e3:d9: 54:1d:9a:00:fc:79:2e:d5:fb:cc:41:fc:1c:42:0b:29:c5:d7: 86:19:0d:cf:84:e5:a8:00:55:12:27:05:ed:8f:10:0a:14:0c: 2c:c7:4b:be:da:08:06:7a:90:fc:da:c4:74:a8:ec:43:54:68: af:41:ea:21:e0:15:3c:11:20:36:ac:73:f8:94:b7:0d:37:a9: 9d:22:47:49:f7:43:e8:ab:df:35:ed:99:49:7c:80:4b:61:40: e8:ad:52:90:1a:48:f1:e7:fa:f0:c7:4c:7d:17:b4:aa:e5:27: 56:0e:d9:71:bb:ab:11:28:a9:52:41:b9:7b:6c:ea:40:9b:69: 1d:9f:93:b6:31:b3:39:93:1d:be:30:f3:5a:e6:f0:00:b7:ab: 9a:e6:9e:37:3a:11:7a:12:85:df:7e:9c:8e:ca:94:ce:22:a3: e3:e9:e2:b2:1d:08:44:be:b9:ca:66:a2:ad:c2:9d:3c:a5:2b: dc:2a:06:c4:d0:86:a5:cf:4e:7e:bc:e3:12:30:25:5a:60:c3: 65:41:9c:47:bc:18:aa:dd:70:d9:2b:ff:30:2f:c2:d1:65:90: 45:b2:98:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjUwODIyMTcyMzQ1WhcNMjUwODI5MTcyMzQ1WjAYMRYwFAYD VQQDEw02OGE4YTdhMS01MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Jt7MFgV0KGCXFYsQCiA4lKIBYM4khGSHhB2FkkSfpvif2+/sxAal1fa2jbJ RG6eoBrqvNU0o5aM8YbmLW3FuXDOpKx7oZYJF6cRPJ4c+XOKhc664juuGXCE+fiG uaStWYJn/czeDSEplc1shsTXZ+MG8N6VtAf8FkYgWe4peofBTyT92cJU0eAdWoBU bYWJ+bCbT8qdc5Hlfqm1d8qdXvCUeky3V+Kj4pzxjZ9Ozel+AqQxUM+iwvTVUyS6 kDdI6OEuk8j8ucs2wyzVSp3dwKA29INAaV62v6tv/OlKRhBwkOYeWAFP6Kh3BflV E1IehnumwxscVF9vSKOCk7C0/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPujgc6L 6gZhNDmApc7FtCdE4g7xMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClm6XYjqy7cLh961Pkzhf1mmFiWPFIYBUsvIPuKzzweYCu49lUHZoA /Hku1fvMQfwcQgspxdeGGQ3PhOWoAFUSJwXtjxAKFAwsx0u+2ggGepD82sR0qOxD VGivQeoh4BU8ESA2rHP4lLcNN6mdIkdJ90Poq9817ZlJfIBLYUDorVKQGkjx5/rw x0x9F7Sq5SdWDtlxu6sRKKlSQbl7bOpAm2kdn5O2MbM5kx2+MPNa5vAAt6ua5p43 OhF6EoXffpyOypTOIqPj6eKyHQhEvrnKZqKtwp08pSvcKgbE0Ialz05+vOMSMCVa YMNlQZxHvBiq3XDZK/8wL8LRZZBFspil -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:24 2025 by rpki-client