$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft File: MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json) Hash identifier: hHjkpnGHJO464mc9JYIMzHK3RDsD+tQ/NKcswBzgL2M= Subject key identifier: 3F:F5:33:1D:67:BA:21:ED:F7:0F:50:B6:13:8D:9A:85:DA:9A:06:05 Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 Certificate issuer: /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Certificate serial: 1504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft Manifest number: 14F9 Signing time: Fri 22 Aug 2025 16:57:29 +0000 Manifest this update: Fri 22 Aug 2025 16:57:28 +0000 Manifest next update: Fri 29 Aug 2025 16:57:28 +0000 Files and hashes: 1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: m6x+V6wRpyn+jrug4oBP8nNX09OUUvulvBl5f0vtdr0=) 2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: pz/sh5ewtugJGaQEjLj/4LhT6VQlQpXzMK/OXn+CHaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5380 (0x1504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Validity Not Before: Aug 22 16:57:28 2025 GMT Not After : Aug 29 16:57:28 2025 GMT Subject: CN=68a8a179-daeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:e1:12:ec:c4:13:fc:fb:4f:88:52:e6:67: 0b:28:4c:10:71:62:a2:38:43:32:3f:66:dd:1a:1e: 69:3b:af:b5:43:57:d9:48:6c:bc:9e:cb:1d:aa:1b: 74:39:0e:57:b5:9b:77:85:62:a8:5f:fd:1c:60:fb: 8b:8b:77:81:68:c5:76:4f:8d:ba:11:05:b1:93:10: 05:a0:af:03:0f:3d:d2:2b:cc:6a:77:08:e7:72:15: ce:60:77:e5:31:dc:95:13:fa:18:8e:9a:df:0b:48: 48:71:95:c3:79:a8:8c:54:ce:ed:8c:7d:44:19:64: 1c:29:42:bd:ad:14:21:e2:67:44:05:d3:17:76:f8: 90:82:bf:13:7e:2c:c9:dc:b9:73:42:e0:4d:8b:6d: 03:6c:63:17:79:a6:9a:6d:28:2f:84:4b:4e:44:55: a7:55:22:32:ba:f5:46:13:9d:76:a0:ff:85:a3:b6: a0:c4:b9:f6:6a:9f:9a:86:2c:48:94:87:66:a2:9c: 4f:bd:61:c3:64:dd:6f:6b:58:e8:94:d7:c8:78:10: 80:35:c4:2f:43:4a:f7:71:5a:29:df:2a:11:8b:da: 8b:01:18:ab:fa:f4:9a:fc:42:05:01:6f:e8:00:db: e3:f1:92:f5:1e:93:6f:f5:96:f6:aa:08:88:60:3b: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:33:1D:67:BA:21:ED:F7:0F:50:B6:13:8D:9A:85:DA:9A:06:05 X509v3 Authority Key Identifier: keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:48:99:37:1f:c8:d5:9e:9d:c5:68:c9:c8:03:d7:0a:d1:76: 39:7a:f3:36:e9:3e:96:94:1e:84:cc:59:15:3a:85:29:10:53: de:57:51:08:42:a0:cc:7a:9e:5d:df:c7:11:13:50:eb:6b:e2: a7:8e:a7:fd:93:42:b7:52:3b:25:96:8c:ef:33:ed:ed:ac:9d: 80:50:49:de:6d:87:43:42:97:0c:83:3e:78:5c:49:b1:b3:c8: 74:f1:a8:6d:1f:43:00:7e:b8:b2:e0:92:25:1b:34:47:97:af: cf:80:eb:28:5e:67:2d:7f:88:78:14:3b:3d:a4:de:e1:9c:e7: c3:a8:e1:3a:cc:89:b5:f3:1d:24:aa:69:62:e7:1d:8a:50:b0: 93:54:a5:38:94:bb:cd:1c:77:b4:37:56:30:6f:f7:c3:54:74: f7:0b:0a:a5:60:3a:26:b0:7c:11:b4:0a:6c:3b:ac:c9:7b:1a: 6d:cb:fc:5f:9b:02:17:4c:55:76:68:de:1f:5c:58:09:79:81: 25:31:22:3f:00:77:24:d2:c3:19:e9:c0:f3:e3:85:d2:07:37: ed:f3:83:50:be:63:7e:f5:f2:17:8d:1f:27:4d:7e:6c:12:e6: bc:9b:f1:f7:7f:9c:7e:90:07:f4:60:5a:27:98:06:15:fe:af: d3:8e:5b:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NzMxMTAvBgNVBAUTKDMxRTkxMkU5RkY3M0FGNUJDNDQ3NjkzNTI4RDcyNUIy NUEyQjE3RjcwHhcNMjUwODIyMTY1NzI4WhcNMjUwODI5MTY1NzI4WjAYMRYwFAYD VQQDEw02OGE4YTE3OS1kYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX7hEuzEE/z7T4hS5mcLKEwQcWKiOEMyP2bdGh5pO6+1Q1fZSGy8nssdqht0 OQ5XtZt3hWKoX/0cYPuLi3eBaMV2T426EQWxkxAFoK8DDz3SK8xqdwjnchXOYHfl MdyVE/oYjprfC0hIcZXDeaiMVM7tjH1EGWQcKUK9rRQh4mdEBdMXdviQgr8TfizJ 3LlzQuBNi20DbGMXeaaabSgvhEtORFWnVSIyuvVGE512oP+Fo7agxLn2ap+ahixI lIdmopxPvWHDZN1va1jolNfIeBCANcQvQ0r3cVop3yoRi9qLARir+vSa/EIFAW/o ANvj8ZL1HpNv9Zb2qgiIYDveGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/1Mx1n uiHt9w9QthONmoXamgYFMB8GA1UdIwQYMBaAFDHpEun/c69bxEdpNSjXJbJaKxf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY3My8wM0Y0MzA5QTU4 Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIxdkVSMmsxS05jbHNsb3JG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01la1M2Zjl6cjF2RVIyazFLTmNsc2xvckZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY3My8wM0Y0MzA5QTU4Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIx dkVSMmsxS05jbHNsb3JGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWSJk3H8jVnp3FaMnIA9cK0XY5evM26T6WlB6EzFkVOoUpEFPeV1EI QqDMep5d38cRE1Dra+Knjqf9k0K3UjsllozvM+3trJ2AUEnebYdDQpcMgz54XEmx s8h08ahtH0MAfriy4JIlGzRHl6/PgOsoXmctf4h4FDs9pN7hnOfDqOE6zIm18x0k qmli5x2KULCTVKU4lLvNHHe0N1Ywb/fDVHT3CwqlYDomsHwRtApsO6zJexpty/xf mwIXTFV2aN4fXFgJeYElMSI/AHck0sMZ6cDz44XSBzft84NQvmN+9fIXjR8nTX5s Eua8m/H3f5x+kAf0YFonmAYV/q/Tjls2 -----END CERTIFICATE-----Generated at Sat Aug 23 19:46:03 2025 by rpki-client