$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft File: p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json) Hash identifier: uOpct/KVrncJGbS7Qa1cWcHlcx4jRvYGuXu021g01J4= Subject key identifier: B9:31:9A:5E:78:FD:0A:3F:F5:B1:0C:A9:42:15:E8:55:76:4E:8C:89 Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft Manifest number: 0244 Signing time: Sat 23 Aug 2025 02:07:06 +0000 Manifest this update: Sat 23 Aug 2025 02:07:05 +0000 Manifest next update: Sat 30 Aug 2025 02:07:05 +0000 Files and hashes: 1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: CrLqFJKYrUG1CzuKB7ZpD7Eey75lGpjTXQY7RXIdQ2Q=) 2: 3366A64616EE11F092BB8D27C4F9AE02.roa (hash: i++L18nKx2UpxwLaQvIAqwvjXRZa+Id5obrV0iiXRHE=) 3: 2F902D58953E11EFA996495BC4F9AE02.roa (hash: 6CtQHuguxSUnTwF1xZmxqOd9O17RpALi4oubVA2Taoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Validity Not Before: Aug 23 02:07:05 2025 GMT Not After : Aug 30 02:07:05 2025 GMT Subject: CN=68a9224a-51ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:12:60:18:58:b7:2e:b1:31:b6:c6:ee:b2: 64:9b:d6:80:9e:4d:ab:d2:ab:75:69:f0:d8:b2:dc: 17:12:0e:ff:92:64:db:f8:97:2c:8f:d3:84:25:6a: 00:35:0c:fe:d3:f1:02:2d:59:fd:70:a4:9b:2f:5d: 8a:f9:49:44:3c:8b:92:b0:37:9c:2f:ea:16:44:39: e2:91:bd:78:b4:4c:ed:41:7a:f5:31:13:15:f6:67: 98:1d:b7:06:74:ab:63:06:4b:bf:0c:2c:a7:f4:e0: 04:72:c5:97:48:6c:02:1f:74:65:d8:27:6b:d5:49: a3:25:72:3a:cb:4e:30:b7:f3:6d:35:49:0a:d5:d9: 7d:6c:29:87:f8:56:8b:b1:38:1e:6e:c5:a2:c1:8b: e1:77:37:59:c3:b4:44:98:6a:39:dd:d0:1a:cb:e7: 01:2b:ad:29:5b:ce:7f:c5:92:80:8d:f1:52:d5:a1: b0:05:a5:d3:81:8e:01:d4:f1:da:35:f8:8b:d9:8e: 11:f1:61:6d:62:af:f9:d8:02:a1:35:8a:5f:92:c9: 73:d6:91:d6:e8:d0:bb:da:70:36:72:fa:e4:e6:45: be:35:76:17:92:af:79:fd:79:f1:bd:13:ac:e0:4e: 00:5c:78:c6:1e:b8:cf:7e:76:49:50:91:04:b4:a8: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:31:9A:5E:78:FD:0A:3F:F5:B1:0C:A9:42:15:E8:55:76:4E:8C:89 X509v3 Authority Key Identifier: keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:3b:29:be:39:7c:98:39:c8:7c:ed:44:03:0e:10:a4:c1:28: 9e:fa:14:ed:9a:ae:75:d2:7d:92:0c:27:62:f5:77:6b:33:b8: 74:3b:91:29:76:e1:95:b6:81:3b:ff:97:f1:55:1e:19:ac:99: dc:29:48:54:07:e9:f4:60:a8:cf:a2:ee:c4:ea:b0:eb:1b:71: 97:ad:88:75:31:db:2b:b5:aa:a1:f8:93:e3:a3:f6:e7:6d:b0: b4:cf:11:80:c5:01:08:e2:cc:7b:68:5b:71:0c:27:dc:ad:ea: fc:64:13:28:b9:25:51:a8:f2:87:4d:07:3d:32:d9:91:62:52: 62:41:40:90:45:77:41:44:b7:9c:fa:7e:3b:40:af:99:0c:59: 8a:ee:59:90:10:73:d3:fa:63:41:79:e7:aa:6b:de:a8:d4:05: dd:53:cb:62:22:9d:b0:ad:a0:9d:f0:99:64:d2:9d:4f:09:b5: 72:b4:72:e1:cd:5e:2f:77:03:e4:38:9a:3f:4d:37:42:dc:8b: ad:19:9f:49:c4:14:ad:de:c7:95:a7:a2:5c:40:d1:31:49:6f: 37:5a:11:55:2c:ba:df:08:54:7a:03:91:18:5d:22:2a:76:c2: b4:0f:86:4f:e3:8a:b4:ff:19:84:39:0f:65:ff:5c:a2:75:f8: 41:83:50:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy OUNDNzZCNjUwHhcNMjUwODIzMDIwNzA1WhcNMjUwODMwMDIwNzA1WjAYMRYwFAYD VQQDEw02OGE5MjI0YS01MWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzA8SYBhYty6xMbbG7rJkm9aAnk2r0qt1afDYstwXEg7/kmTb+Jcsj9OEJWoA NQz+0/ECLVn9cKSbL12K+UlEPIuSsDecL+oWRDnikb14tEztQXr1MRMV9meYHbcG dKtjBku/DCyn9OAEcsWXSGwCH3Rl2Cdr1UmjJXI6y04wt/NtNUkK1dl9bCmH+FaL sTgebsWiwYvhdzdZw7REmGo53dAay+cBK60pW85/xZKAjfFS1aGwBaXTgY4B1PHa NfiL2Y4R8WFtYq/52AKhNYpfkslz1pHW6NC72nA2cvrk5kW+NXYXkq95/XnxvROs 4E4AXHjGHrjPfnZJUJEEtKhwIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkxml54 /Qo/9bEMqUIV6FV2ToyJMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4 M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzE0Mi85NjYxODVCQTM4M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09W eEN5OWk4YjFMd01wekhhMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClOym+OXyYOch87UQDDhCkwSie+hTtmq510n2SDCdi9XdrM7h0O5Ep duGVtoE7/5fxVR4ZrJncKUhUB+n0YKjPou7E6rDrG3GXrYh1Mdsrtaqh+JPjo/bn bbC0zxGAxQEI4sx7aFtxDCfcrer8ZBMouSVRqPKHTQc9MtmRYlJiQUCQRXdBRLec +n47QK+ZDFmK7lmQEHPT+mNBeeeqa96o1AXdU8tiIp2wraCd8Jlk0p1PCbVytHLh zV4vdwPkOJo/TTdC3IutGZ9JxBSt3seVp6JcQNExSW83WhFVLLrfCFR6A5EYXSIq dsK0D4ZP44q0/xmEOQ9l/1yidfhBg1Bp -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:02 2025 by rpki-client