$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: icNcdYZl+HHXswANgQj2pbWh7OFYykPKUU9uBVFLI2k= Subject key identifier: 2D:1B:D9:73:01:9B:D0:FD:56:29:D6:2B:3F:2B:CC:A1:92:CA:33:1F Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 0120 Signing time: Sat 23 Aug 2025 04:56:00 +0000 Manifest this update: Sat 23 Aug 2025 04:56:00 +0000 Manifest next update: Sat 30 Aug 2025 04:56:00 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: 7DD5MYOUXFnRwlVW/toUI7+LXMRmdJLiBi/9HqOApzs=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Aug 23 04:56:00 2025 GMT Not After : Aug 30 04:56:00 2025 GMT Subject: CN=68a949e0-ae49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:77:8d:5e:91:41:d4:df:3f:19:6f:b4:9c: b7:96:69:73:9c:91:d3:af:a6:72:fb:f9:a1:dd:29: e6:7c:ac:2c:6f:17:e9:e9:a0:39:93:d1:4a:65:4c: b9:a3:d8:f5:40:04:96:4e:fd:6b:5e:18:40:c0:bc: e4:55:58:d2:e1:59:d9:8e:f3:b4:fc:55:4d:9e:47: 1f:e4:29:35:bf:1a:3e:7e:2e:7c:16:51:95:4f:87: b9:0d:08:05:75:48:01:a4:a6:a2:e0:c6:c7:12:c6: 0a:c5:89:94:b7:80:f2:d2:62:1a:88:df:6d:5a:27: 4c:1c:0c:38:e4:ee:73:70:48:5b:b6:5c:80:c7:a9: e9:9c:29:d6:dc:0d:e3:18:21:dc:d5:3a:48:84:76: a7:f4:a1:b9:e5:cb:16:92:0a:64:75:c9:09:79:e5: a4:e5:4e:e5:70:2e:fe:5a:f6:2c:5e:e1:8f:a1:af: c1:ec:98:6e:00:e3:a3:1d:19:67:dc:18:2c:99:dc: a5:7e:88:f6:9d:5b:a9:42:b4:ea:87:29:8b:7f:db: 5b:3e:98:2e:ab:b6:c2:5f:d2:7d:f8:41:d2:57:5c: c7:f8:71:73:0f:89:fb:ba:0b:4e:57:be:f4:09:f9: e9:df:9e:62:5c:0a:de:a3:ef:8c:b0:39:07:f2:25: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1B:D9:73:01:9B:D0:FD:56:29:D6:2B:3F:2B:CC:A1:92:CA:33:1F X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:16:3f:1e:7f:b5:c0:58:23:48:03:a8:b6:5d:70:34:4e:cd: 93:70:8e:e7:37:63:64:03:4e:12:ca:2b:a8:95:1e:0b:4b:5e: a5:91:11:21:04:61:01:33:b2:b5:72:62:1a:79:d1:4a:ed:c3: f2:7d:00:39:54:4d:86:3c:05:1f:fa:e9:8f:37:34:3d:a1:63: 01:7c:e0:51:22:fe:ea:3f:7e:a4:0b:aa:43:bf:c9:71:1c:2b: 87:a7:82:96:76:7a:f1:70:5e:0d:67:88:99:95:57:1a:0e:3a: 33:0c:7c:86:97:e1:1a:47:50:46:d5:19:e4:db:ff:a0:c6:a4: 90:23:5e:a5:75:58:20:dc:20:c9:e5:8e:c4:8b:2f:f5:79:ce: 29:62:93:ed:a7:e2:e2:63:7f:3e:68:ad:48:b9:1d:b3:6a:68: 46:ab:8a:dc:80:0d:3b:2e:ce:37:72:5c:54:aa:fb:13:53:6d: 71:04:9e:cc:ae:2e:d6:a1:9e:39:3d:fa:58:27:c1:7f:93:67: e7:09:2a:25:36:9b:67:45:9c:ed:27:8d:63:c1:d6:aa:e0:1f: 8e:45:9c:be:48:ef:33:10:f9:66:f5:99:16:7c:7d:5d:29:70: e5:87:07:64:30:b7:b3:b2:f7:dd:e8:7f:78:93:67:14:dd:dd: fc:42:79:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjUwODIzMDQ1NjAwWhcNMjUwODMwMDQ1NjAwWjAYMRYwFAYD VQQDEw02OGE5NDllMC1hZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEJ3jV6RQdTfPxlvtJy3lmlznJHTr6Zy+/mh3SnmfKwsbxfp6aA5k9FKZUy5 o9j1QASWTv1rXhhAwLzkVVjS4VnZjvO0/FVNnkcf5Ck1vxo+fi58FlGVT4e5DQgF dUgBpKai4MbHEsYKxYmUt4Dy0mIaiN9tWidMHAw45O5zcEhbtlyAx6npnCnW3A3j GCHc1TpIhHan9KG55csWkgpkdckJeeWk5U7lcC7+WvYsXuGPoa/B7JhuAOOjHRln 3Bgsmdylfoj2nVupQrTqhymLf9tbPpguq7bCX9J9+EHSV1zH+HFzD4n7ugtOV770 Cfnp355iXAreo++MsDkH8iXLgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0b2XMB m9D9VinWKz8rzKGSyjMfMB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEzMC80QjdBMTg2QUNBRjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVH cDgyX3RMTlJTOWJfaGNqejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvFj8ef7XAWCNIA6i2XXA0Ts2TcI7nN2NkA04SyiuolR4LS16lkREh BGEBM7K1cmIaedFK7cPyfQA5VE2GPAUf+umPNzQ9oWMBfOBRIv7qP36kC6pDv8lx HCuHp4KWdnrxcF4NZ4iZlVcaDjozDHyGl+EaR1BG1Rnk2/+gxqSQI16ldVgg3CDJ 5Y7Eiy/1ec4pYpPtp+LiY38+aK1IuR2zamhGq4rcgA07Ls43clxUqvsTU21xBJ7M ri7WoZ45PfpYJ8F/k2fnCSolNptnRZztJ41jwdaq4B+ORZy+SO8zEPlm9ZkWfH1d KXDlhwdkMLezsvfd6H94k2cU3d38Qnlx -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:21 2025 by rpki-client