$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: kUFKYyCRdl0gzDvq74/uR9ZAI3sqV1ALLpG1M46suFE= Subject key identifier: 28:39:91:A1:DE:19:AC:95:27:EF:F3:DB:6D:06:B7:12:1F:F1:FE:91 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: AB Signing time: Thu 03 Jul 2025 06:16:24 +0000 Manifest this update: Thu 03 Jul 2025 06:16:24 +0000 Manifest next update: Thu 10 Jul 2025 06:16:24 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: ezrdHRstJvfZtGm+vsQe7EpUisYLOObMq9ByDMmEJ9w=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: E5suk2cFemWvaevEKzcTmHU5tWd+iiNDKFUohuI1SXE=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: spLMbb3mjNqo3JOAdT4XdnGINqr0/vPrWt9FF24zq10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Jul 3 06:16:24 2025 GMT Not After : Jul 10 06:16:24 2025 GMT Subject: CN=68662038-20c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:2e:e4:49:2f:4b:0f:45:5f:2c:37:6c:83: 4a:66:11:f9:cc:b4:64:e5:1a:52:89:7b:59:3a:f3: 4e:1f:46:35:99:f8:08:94:ee:5d:a2:17:b5:17:2c: 35:ba:c1:1a:c7:53:a7:09:2f:8d:42:e7:a3:9b:2e: 4e:d8:a5:75:5c:77:a7:0f:6e:9d:24:d4:fa:8f:71: 33:7b:6d:ed:ee:57:b6:96:32:24:cc:90:42:6a:3e: 74:b0:f1:53:7a:b2:e7:21:ea:25:69:d9:87:ef:f3: 63:c4:4b:90:b0:75:e4:55:e5:2a:97:16:65:d4:76: 7e:2f:e5:b4:51:31:c0:21:db:a7:23:ac:50:ab:3c: 94:6f:88:7a:b3:df:76:a9:8e:b9:3e:71:49:0f:4c: 0d:c3:5e:90:cf:98:2b:ff:ee:f4:04:9b:0b:bc:6b: 35:8e:db:22:45:48:72:07:e3:52:f3:30:24:cc:70: ce:7b:e2:ea:fb:33:a0:a2:0a:76:b8:2b:64:72:75: 45:9d:97:9c:5c:7b:74:e6:b0:00:98:fe:77:5e:1b: 74:24:5c:d8:d6:d1:f8:cd:ed:5b:5b:9a:c5:41:b0: 7c:b5:7c:ff:f2:ba:49:26:59:7c:13:a7:d6:c6:43: af:b0:71:b7:6c:d2:b2:d2:86:09:c4:55:6a:d7:fb: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:39:91:A1:DE:19:AC:95:27:EF:F3:DB:6D:06:B7:12:1F:F1:FE:91 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f9:03:8f:1c:32:a3:1f:bf:a2:ca:ec:37:f7:18:db:8b:21: 38:50:35:13:f6:08:0e:77:9c:b5:79:c1:2a:44:91:44:48:9b: 3b:e1:d7:40:a0:3e:11:0d:aa:b1:71:56:47:46:54:ce:de:38: 96:35:42:4b:c7:5d:9b:d8:6d:ed:45:29:8c:48:45:ea:d1:58: b6:90:4b:7f:a2:38:48:6a:07:21:c6:c8:6d:24:fe:bf:1a:a1: 3b:61:bd:20:84:6e:b9:b9:cd:fd:e8:42:a4:05:19:f1:ef:1f: fb:0b:3d:06:2d:e8:96:08:8c:39:5b:af:19:7a:0e:57:c8:b9: 39:c0:82:21:bc:dd:d9:29:46:5e:64:d1:fa:36:bf:6f:d4:23: 4b:27:bb:8b:f0:58:1b:93:36:1f:09:3a:b9:6d:31:b8:3e:6e: 4a:6c:94:6a:1b:f9:8a:ad:85:67:01:6c:17:17:28:b8:a7:d4: 2f:ea:fb:e6:34:f0:a0:21:32:83:48:26:37:55:ea:d9:7e:ea: 73:43:6b:f4:40:57:47:33:40:6e:08:78:ed:25:38:20:33:fa: 97:07:3f:8e:f2:3b:89:a0:0a:83:80:b6:63:e3:f8:82:71:67: b0:2f:b7:d1:69:33:ec:64:6c:7b:e2:8d:59:d1:99:60:15:da: 30:6b:bd:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUwNzAzMDYxNjI0WhcNMjUwNzEwMDYxNjI0WjAYMRYwFAYD VQQDEw02ODY2MjAzOC0yMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYku5EkvSw9FXyw3bINKZhH5zLRk5RpSiXtZOvNOH0Y1mfgIlO5dohe1Fyw1 usEax1OnCS+NQuejmy5O2KV1XHenD26dJNT6j3Eze23t7le2ljIkzJBCaj50sPFT erLnIeoladmH7/NjxEuQsHXkVeUqlxZl1HZ+L+W0UTHAIdunI6xQqzyUb4h6s992 qY65PnFJD0wNw16Qz5gr/+70BJsLvGs1jtsiRUhyB+NS8zAkzHDOe+Lq+zOgogp2 uCtkcnVFnZecXHt05rAAmP53Xht0JFzY1tH4ze1bW5rFQbB8tXz/8rpJJll8E6fW xkOvsHG3bNKy0oYJxFVq1/sNUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg5kaHe GayVJ+/z220GtxIf8f6RMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD+QOPHDKjH7+iyuw39xjbiyE4UDUT9ggOd5y1ecEqRJFESJs74ddA oD4RDaqxcVZHRlTO3jiWNUJLx12b2G3tRSmMSEXq0Vi2kEt/ojhIagchxshtJP6/ GqE7Yb0ghG65uc396EKkBRnx7x/7Cz0GLeiWCIw5W68Zeg5XyLk5wIIhvN3ZKUZe ZNH6Nr9v1CNLJ7uL8FgbkzYfCTq5bTG4Pm5KbJRqG/mKrYVnAWwXFyi4p9Qv6vvm NPCgITKDSCY3VerZfupzQ2v0QFdHM0BuCHjtJTggM/qXBz+O8juJoAqDgLZj4/iC cWewL7fRaTPsZGx74o1Z0ZlgFdowa70t -----END CERTIFICATE-----Generated at Fri Jul 4 07:53:40 2025 by rpki-client