$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: urNZbBPMhKjqj/nY+tfGizoGWuy+dyamcc+5g46fiAg= Subject key identifier: 7C:34:F8:76:9E:DF:57:E6:49:87:84:2D:EC:1C:8A:67:F0:56:6B:EB Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 32 Signing time: Sat 23 Aug 2025 07:52:13 +0000 Manifest this update: Sat 23 Aug 2025 07:52:12 +0000 Manifest next update: Sat 30 Aug 2025 07:52:12 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: yMuEBtYn8Z8iJPQcRfwt7eB8UHyzXEh/vDWuriybZB8=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: Aug 23 07:52:12 2025 GMT Not After : Aug 30 07:52:12 2025 GMT Subject: CN=68a9732c-1126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:53:b8:87:f4:b3:dd:c6:b8:9a:c0:b4:47: 5a:7c:eb:3a:ca:2c:82:e6:34:38:e7:50:75:d9:02: cf:77:53:0e:01:80:78:81:47:c9:b5:75:2c:75:47: 1d:8d:ea:6e:99:0e:df:5c:73:44:b4:e6:c4:c6:31: 40:6e:43:ae:75:f5:ea:4e:6e:1c:10:f5:84:53:45: 18:a2:5c:bc:3d:2f:38:a7:35:2c:0d:c2:7e:ea:45: 99:f3:dc:69:73:4a:c6:21:9f:b5:86:a6:8a:b5:f9: 24:cf:54:60:40:30:38:04:b9:53:f5:9d:90:27:0f: 17:ce:27:80:da:fd:ea:44:fd:66:d0:46:3a:15:8e: 93:86:d7:6f:4e:25:5a:ed:f6:fe:28:86:96:ec:34: f0:2a:4a:16:5d:d1:64:02:69:4e:71:62:86:e3:28: 9a:e3:94:6a:34:fc:12:24:70:33:3f:1e:27:f5:c5: 38:9f:4b:3a:fa:f3:5a:15:8f:50:90:78:af:39:cb: ab:da:d2:bb:90:05:87:82:a2:95:85:35:40:b1:3e: 3d:5e:ee:8b:31:ec:1b:a4:e3:6d:b6:f7:ee:df:9c: 13:8d:7c:3c:4a:e0:b0:6f:a1:2b:a2:c8:d1:75:fd: 8b:c3:ac:2b:e6:68:df:07:eb:9a:ef:c8:bc:96:cf: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:34:F8:76:9E:DF:57:E6:49:87:84:2D:EC:1C:8A:67:F0:56:6B:EB X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:dc:54:df:fc:03:a7:71:a7:62:04:de:f2:b0:8e:b6:3f:af: e0:51:b8:a7:fc:d4:6a:f7:c0:5d:e1:21:fb:89:18:ac:5b:f4: 5d:ec:f7:bd:95:17:0b:a1:5b:b3:56:f3:26:ba:02:13:02:45: 62:4a:c8:58:57:7d:43:eb:e5:bb:e6:66:62:d9:f0:8a:2d:cf: 07:49:4b:59:1d:5d:51:f6:97:8f:22:33:2a:24:ea:b7:36:fb: 36:13:41:81:a1:5a:44:91:4b:4c:d4:ab:e9:a5:b7:8c:b1:1a: 0c:51:d6:43:ce:be:78:8b:b2:be:ee:74:09:b1:4d:0a:c1:72: ea:44:e0:e6:a2:56:49:28:b9:a5:b2:f3:d2:7f:13:c7:2b:41: 48:0a:c6:43:b0:2c:1d:a0:2d:14:d1:65:ed:e0:dc:c0:af:29: b2:45:95:e0:84:77:db:ea:4d:a9:7b:a3:56:5e:92:0e:2f:ac: 2e:6a:61:e0:69:78:e6:80:a6:10:17:39:2d:b2:d8:5c:da:df: 06:16:75:05:a3:d2:b6:0a:b7:31:0f:77:ac:c9:f0:45:94:29: 85:86:f3:77:82:96:5c:2e:1c:53:e8:8a:6c:c6:7c:0e:76:7c: 39:52:83:bc:c5:e6:54:50:1d:e6:38:4e:20:e0:a5:b3:e0:de: b8:63:70:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTA4MjMwNzUyMTJaFw0yNTA4MzAwNzUyMTJaMBgxFjAUBgNV BAMTDTY4YTk3MzJjLTExMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0J1O4h/Sz3ca4msC0R1p86zrKLILmNDjnUHXZAs93Uw4BgHiBR8m1dSx1Rx2N 6m6ZDt9cc0S05sTGMUBuQ6519epObhwQ9YRTRRiiXLw9LzinNSwNwn7qRZnz3Glz SsYhn7WGpoq1+STPVGBAMDgEuVP1nZAnDxfOJ4Da/epE/WbQRjoVjpOG129OJVrt 9v4ohpbsNPAqShZd0WQCaU5xYobjKJrjlGo0/BIkcDM/Hif1xTifSzr681oVj1CQ eK85y6va0ruQBYeCopWFNUCxPj1e7osx7Buk42229+7fnBONfDxK4LBvoSuiyNF1 /YvDrCvmaN8H65rvyLyWz+p3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfDT4dp7f V+ZJh4Qt7ByKZ/BWa+swHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJDcVN/8A6dxp2IE3vKwjrY/r+BRuKf81Gr3wF3hIfuJGKxb9F3s972V FwuhW7NW8ya6AhMCRWJKyFhXfUPr5bvmZmLZ8IotzwdJS1kdXVH2l48iMyok6rc2 +zYTQYGhWkSRS0zUq+mlt4yxGgxR1kPOvniLsr7udAmxTQrBcupE4OaiVkkouaWy 89J/E8crQUgKxkOwLB2gLRTRZe3g3MCvKbJFleCEd9vqTal7o1Zekg4vrC5qYeBp eOaAphAXOS2y2Fza3wYWdQWj0rYKtzEPd6zJ8EWUKYWG83eCllwuHFPoimzGfA52 fDlSg7zF5lRQHeY4TiDgpbPg3rhjcPc= -----END CERTIFICATE-----Generated at Sun Aug 24 05:14:51 2025 by rpki-client