$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: dftzYQGk+aE9TcsNGWJVzWkIbAX2F7yqPZNuEzrla9M= Subject key identifier: 5A:65:07:5E:03:12:5F:F4:D0:55:C8:DE:2D:62:6B:B2:1F:6C:82:D3 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: C5 Signing time: Sat 23 Aug 2025 05:56:07 +0000 Manifest this update: Sat 23 Aug 2025 05:56:07 +0000 Manifest next update: Sat 30 Aug 2025 05:56:07 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: JCTXPOpUXdd79FDNsVuDdzTb29Ah0bajmBDgycK2tTc=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: E5suk2cFemWvaevEKzcTmHU5tWd+iiNDKFUohuI1SXE=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: spLMbb3mjNqo3JOAdT4XdnGINqr0/vPrWt9FF24zq10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Aug 23 05:56:07 2025 GMT Not After : Aug 30 05:56:07 2025 GMT Subject: CN=68a957f7-11c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a1:1b:3c:6e:d1:6c:20:c0:aa:97:1a:a8:43: 6e:52:8d:1c:aa:f9:db:e2:a3:0e:fd:08:22:82:6b: 0b:2c:55:66:22:cd:bf:f7:48:85:47:fa:d0:e1:69: 4e:fa:17:8c:10:d9:de:70:94:46:51:37:89:18:12: 67:dc:3c:09:ee:68:df:33:ee:74:3d:41:7e:d2:51: dd:53:a0:18:dc:b2:1c:ca:38:42:2c:a3:94:81:c0: 69:76:db:dc:15:c2:4a:db:95:8d:82:df:e7:be:b8: 51:55:57:2a:92:55:87:eb:b8:92:01:cb:90:f8:5f: a8:b8:12:3b:15:0a:39:a7:2f:76:d9:c0:d2:11:b3: 85:9b:91:60:fd:78:fd:38:d0:d6:86:e2:cc:05:9c: da:2d:2e:c9:e5:8c:4b:bb:26:94:1e:cb:0b:71:15: 19:c6:12:a0:11:88:33:8b:fa:78:4b:6e:4e:8d:ee: 95:75:0d:21:5e:71:01:1c:a5:eb:76:ff:eb:5b:2b: 1a:cf:80:d2:a9:14:bb:b3:51:ee:15:6a:e3:6b:80: 0f:c1:bf:c1:00:ce:46:1c:a2:38:ba:63:a5:17:36: 73:e4:08:cf:1d:d4:76:3c:c4:1b:28:2b:b1:74:bd: c6:59:03:65:e9:a1:85:02:2a:f5:09:2c:64:55:2f: e1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:65:07:5E:03:12:5F:F4:D0:55:C8:DE:2D:62:6B:B2:1F:6C:82:D3 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:94:dc:3c:e5:bd:30:38:f6:b9:ce:cd:93:c4:6e:44:91:3c: 25:60:38:34:35:ee:03:50:17:97:ac:b3:79:ad:2d:46:97:59: 31:64:20:6c:33:fa:65:55:74:1f:25:f3:9f:ba:8c:fe:5a:aa: 3b:72:30:aa:8d:20:14:4e:cc:10:14:f1:f3:69:33:1e:1d:87: 9a:f2:ef:fd:1c:fb:63:e6:9d:49:bc:7e:a4:c0:8d:54:fa:48: d6:c9:c4:8d:a6:70:2e:50:14:1b:87:63:e3:78:c4:75:f7:fc: e3:8b:7d:4f:44:0a:a4:49:97:03:e5:b8:ba:0c:23:77:5a:1c: 97:51:f5:24:fb:d4:33:3e:cb:ec:30:58:ea:ca:1f:ac:ec:f6: 55:f7:d2:c5:0d:c6:f8:ea:bb:3d:86:79:b0:7d:02:75:ed:4c: 7a:d2:b9:26:9b:db:7a:53:52:b8:72:ef:db:8d:c8:fe:52:ba: 32:b8:56:74:96:c5:81:62:67:bb:a2:dc:d3:56:0f:93:34:d8: 05:fa:64:3e:5f:00:00:a4:4a:95:2f:b7:14:b7:88:8d:01:c8: 1b:e9:44:50:06:62:7d:f1:2e:fd:79:bf:8e:1c:9f:fa:19:e8: d1:a1:44:f4:ca:dc:b6:7d:41:74:b6:85:a0:bc:04:1a:2f:ae: 80:c2:30:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUwODIzMDU1NjA3WhcNMjUwODMwMDU1NjA3WjAYMRYwFAYD VQQDEw02OGE5NTdmNy0xMWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56EbPG7RbCDAqpcaqENuUo0cqvnb4qMO/QgigmsLLFVmIs2/90iFR/rQ4WlO +heMENnecJRGUTeJGBJn3DwJ7mjfM+50PUF+0lHdU6AY3LIcyjhCLKOUgcBpdtvc FcJK25WNgt/nvrhRVVcqklWH67iSAcuQ+F+ouBI7FQo5py922cDSEbOFm5Fg/Xj9 ONDWhuLMBZzaLS7J5YxLuyaUHssLcRUZxhKgEYgzi/p4S25Oje6VdQ0hXnEBHKXr dv/rWysaz4DSqRS7s1HuFWrja4APwb/BAM5GHKI4umOlFzZz5AjPHdR2PMQbKCux dL3GWQNl6aGFAir1CSxkVS/hhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFplB14D El/00FXI3i1ia7IfbILTMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtlNw85b0wOPa5zs2TxG5EkTwlYDg0Ne4DUBeXrLN5rS1Gl1kxZCBs M/plVXQfJfOfuoz+Wqo7cjCqjSAUTswQFPHzaTMeHYea8u/9HPtj5p1JvH6kwI1U +kjWycSNpnAuUBQbh2PjeMR19/zji31PRAqkSZcD5bi6DCN3WhyXUfUk+9QzPsvs MFjqyh+s7PZV99LFDcb46rs9hnmwfQJ17Ux60rkmm9t6U1K4cu/bjcj+UroyuFZ0 lsWBYme7otzTVg+TNNgF+mQ+XwAApEqVL7cUt4iNAcgb6URQBmJ98S79eb+OHJ/6 GejRoUT0yty2fUF0toWgvAQaL66AwjDu -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:52 2025 by rpki-client