$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: Rm+Yk3tVXmot0eg7josM/3BGOx8KdW78+XBrPTzMaHw= Subject key identifier: 37:7F:8D:4B:2A:6C:F3:B5:D6:47:AA:B6:05:8F:77:90:0D:AD:94:39 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 0142 Signing time: Sat 23 Aug 2025 04:31:07 +0000 Manifest this update: Sat 23 Aug 2025 04:31:07 +0000 Manifest next update: Sat 30 Aug 2025 04:31:07 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: TnuVwOq/ffplf5b32CLRRyyNqO/Z8AnPuTwED0VKYSg=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Aug 23 04:31:07 2025 GMT Not After : Aug 30 04:31:07 2025 GMT Subject: CN=68a9440b-18fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:e6:5f:17:e8:67:64:25:87:5c:dc:47:a3: 5f:da:02:ab:ab:c5:44:15:c4:6f:37:b6:24:d7:e6: 9e:14:c0:8f:b6:4d:33:94:82:4e:28:cb:c9:36:a5: b7:c5:fd:f9:ae:80:9b:d6:f2:23:25:2e:a3:39:94: 38:a7:0c:d9:78:6a:d3:c6:7b:66:35:3e:76:0e:07: a8:b1:98:cf:36:02:09:86:a0:a2:ee:04:dd:fa:ad: fc:2b:18:2d:73:33:8a:82:1b:5f:23:fc:8e:12:58: f2:c1:df:66:86:99:7c:9f:ab:76:ce:7f:58:c4:da: 9e:5a:14:bc:08:8f:f5:b2:03:fd:77:b2:6b:9b:6c: b2:bf:61:bc:58:19:0c:79:43:0b:37:e4:59:cf:a2: a3:fd:92:15:f4:66:de:78:48:83:41:96:fe:a6:cb: a9:d8:06:4d:5d:88:73:1e:11:4d:34:ff:5f:16:72: 1e:3b:0c:8c:69:ab:eb:22:52:c2:2e:59:24:5f:17: aa:36:e6:3d:ef:4e:38:e6:6e:e1:ec:f9:96:23:43: 6b:2a:fe:de:0c:f6:3a:0b:86:a2:d3:93:12:a1:8e: 8e:79:07:7b:87:6f:22:cb:11:e1:20:15:94:29:7f: a4:45:51:61:da:d9:c9:c2:fa:76:e0:92:04:9a:fd: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7F:8D:4B:2A:6C:F3:B5:D6:47:AA:B6:05:8F:77:90:0D:AD:94:39 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:83:66:ee:c4:eb:18:74:e1:33:32:1c:af:60:b7:df:5c:b7: e4:4c:c2:57:ef:c4:8a:e1:8e:13:80:73:5f:4a:ee:64:1f:54: 49:8d:3a:dd:f1:d3:ac:09:30:ec:fc:29:77:9d:0a:36:11:db: 3e:40:57:68:2e:2c:76:a3:34:d4:20:06:d0:53:15:65:d3:e3: b6:a4:3c:07:cd:d5:89:df:40:96:93:f0:d9:fe:c3:72:d6:3e: 6c:b5:19:fd:03:1e:7e:cf:a4:f8:97:82:d6:0a:50:5f:d8:16: 7e:b4:bd:01:8c:d2:4b:f1:ed:3d:3f:5b:3c:66:1f:95:48:af: da:4f:b5:92:23:dd:f7:b6:b6:97:7b:37:78:40:9c:b4:ef:41: 58:90:4b:dd:47:1b:a3:8a:1d:3c:04:c6:c6:a7:a9:19:c7:8b: 26:d7:91:f7:d4:bc:77:bd:63:df:db:98:15:d4:d7:e0:ea:85: cb:32:35:43:98:21:86:1d:ae:b2:6b:de:0c:6e:0d:7c:25:7f: b2:14:72:f9:7d:26:85:4e:97:95:c4:96:4b:15:e3:36:01:5d: 3d:52:5e:4e:65:33:b9:d9:50:85:9a:85:e6:f8:dd:9c:ba:26: 5e:5a:23:b8:4d:87:af:0a:57:0d:db:b2:0d:53:2e:71:fc:7b: 84:f9:8f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUwODIzMDQzMTA3WhcNMjUwODMwMDQzMTA3WjAYMRYwFAYD VQQDEw02OGE5NDQwYi0xOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cbmXxfoZ2Qlh1zcR6Nf2gKrq8VEFcRvN7Yk1+aeFMCPtk0zlIJOKMvJNqW3 xf35roCb1vIjJS6jOZQ4pwzZeGrTxntmNT52DgeosZjPNgIJhqCi7gTd+q38Kxgt czOKghtfI/yOEljywd9mhpl8n6t2zn9YxNqeWhS8CI/1sgP9d7Jrm2yyv2G8WBkM eUMLN+RZz6Kj/ZIV9GbeeEiDQZb+psup2AZNXYhzHhFNNP9fFnIeOwyMaavrIlLC LlkkXxeqNuY970445m7h7PmWI0NrKv7eDPY6C4ai05MSoY6OeQd7h28iyxHhIBWU KX+kRVFh2tnJwvp24JIEmv1RtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd/jUsq bPO11keqtgWPd5ANrZQ5MB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4g2buxOsYdOEzMhyvYLffXLfkTMJX78SK4Y4TgHNfSu5kH1RJjTrd 8dOsCTDs/Cl3nQo2Eds+QFdoLix2ozTUIAbQUxVl0+O2pDwHzdWJ30CWk/DZ/sNy 1j5stRn9Ax5+z6T4l4LWClBf2BZ+tL0BjNJL8e09P1s8Zh+VSK/aT7WSI933traX ezd4QJy070FYkEvdRxujih08BMbGp6kZx4sm15H31Lx3vWPf25gV1Nfg6oXLMjVD mCGGHa6ya94Mbg18JX+yFHL5fSaFTpeVxJZLFeM2AV09Ul5OZTO52VCFmoXm+N2c uiZeWiO4TYevClcN27INUy5x/HuE+Y8E -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:26 2025 by rpki-client