$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft File: pp7mLFrogRdKQhI3WepCPWH3NCM.mft (raw, json) Hash identifier: OkJRzUimEjgseIoxTM0J6tbPymU96OiN+H5fhZhWDGU= Subject key identifier: DC:57:31:45:18:5E:B5:90:D4:2D:FB:47:C0:91:43:A8:51:27:A3:DA Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23 Certificate issuer: /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft Manifest number: B8 Signing time: Sat 23 Aug 2025 06:09:46 +0000 Manifest this update: Sat 23 Aug 2025 06:09:46 +0000 Manifest next update: Sat 30 Aug 2025 06:09:46 +0000 Files and hashes: 1: pp7mLFrogRdKQhI3WepCPWH3NCM.crl (hash: eOL+95rYZ4h68z+R6k5LF2jXSLbvZPEqT1KqgaJ33bU=) 2: A1418C5E68C411EF841B7987C4F9AE02.roa (hash: w11TSOq/EaycCd3tkTNvuoFONdTStuPzFxhygocn60Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132F12, serialNumber=A69EE62C5AE881174A42123759EA423D61F73423 Validity Not Before: Aug 23 06:09:46 2025 GMT Not After : Aug 30 06:09:46 2025 GMT Subject: CN=68a95b2a-f912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:68:40:f8:83:1a:b2:fa:2e:8c:8a:32:4d: 4d:73:4c:9d:93:e4:3f:1d:41:d3:2d:0b:3d:c2:94: 03:6f:64:36:0c:19:73:07:0c:9c:83:c1:cb:83:da: 52:58:8b:e3:f3:d3:bf:4f:bc:99:32:05:d3:a2:e3: 49:59:e8:ce:ea:3e:d6:05:e8:df:9a:f6:6c:ef:00: 4c:87:d5:02:b5:05:0c:ba:c2:f4:2e:2c:43:1e:1d: 07:ac:45:35:08:ce:55:18:74:99:a2:2f:ad:0d:3c: 40:f4:18:9d:08:59:f5:03:46:15:d3:47:5d:b7:87: b5:df:53:95:e9:77:4f:04:47:0e:e6:8b:21:92:f2: fd:99:51:3e:bd:24:9b:6a:b4:65:87:37:8f:68:cc: ec:92:e4:20:c8:a4:66:c7:9a:7a:2b:d1:24:e4:87: 78:62:d6:03:0e:96:19:dd:8c:e6:06:33:91:88:17: 78:0c:08:1f:1f:e2:19:1f:c8:1e:7d:ac:47:ba:89: 4e:8a:4b:cc:dd:f2:19:9e:34:11:a6:75:10:20:9d: 92:01:d5:7b:a0:b6:92:b5:c3:c8:e5:7f:8c:90:46: 1d:cd:e3:44:34:6c:66:4b:19:e0:9d:a4:8c:46:29: 27:a5:8d:7c:be:80:9c:dd:39:26:f1:53:80:4a:6d: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:57:31:45:18:5E:B5:90:D4:2D:FB:47:C0:91:43:A8:51:27:A3:DA X509v3 Authority Key Identifier: keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f8:6f:b5:06:df:c1:41:ff:9c:5f:2a:f8:b3:25:82:8b:a2: fc:10:10:1f:b0:d4:ca:d9:0b:91:42:65:6f:d8:de:2f:8a:f6: 5e:58:b2:60:9f:20:9f:84:f6:b0:cd:07:b8:79:62:e4:03:5b: ab:a3:cb:26:d2:74:14:d9:46:2a:a4:be:a7:09:3f:1f:86:bf: 5a:60:fe:11:d2:06:41:d5:e6:75:c7:36:1a:33:36:26:51:b6: da:5c:0a:4c:2f:09:63:61:b4:1b:4f:94:a7:9e:91:3a:23:7d: bd:0c:84:b9:72:dd:81:a0:54:db:c7:e9:ec:f0:52:1b:00:9b: 50:3f:d2:24:76:03:d5:cf:e1:28:ee:1b:3e:1c:62:00:3d:3c: 0a:75:d8:a4:65:ff:e1:32:8a:58:d4:b0:1d:2e:f5:0b:3e:9d: 62:c7:de:0f:af:78:20:47:c1:2c:f8:1f:66:9b:b1:81:a0:f1: 26:d0:be:a5:63:15:23:9f:f6:9e:bb:b9:7e:96:65:52:81:38: ce:cf:5f:05:2c:bd:b0:65:95:d0:92:bd:f5:74:d8:54:fd:46: b8:85:c9:42:57:38:ce:d6:66:3e:ca:80:8a:60:0d:7b:cd:d9: a9:7b:5a:dd:bb:af:b0:fe:48:f3:c3:4f:f7:c0:be:86:9b:e4: 2a:86:10:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGMTIxMTAvBgNVBAUTKEE2OUVFNjJDNUFFODgxMTc0QTQyMTIzNzU5RUE0MjNE NjFGNzM0MjMwHhcNMjUwODIzMDYwOTQ2WhcNMjUwODMwMDYwOTQ2WjAYMRYwFAYD VQQDEw02OGE5NWIyYS1mOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fVoQPiDGrL6LoyKMk1Nc0ydk+Q/HUHTLQs9wpQDb2Q2DBlzBwycg8HLg9pS WIvj89O/T7yZMgXTouNJWejO6j7WBejfmvZs7wBMh9UCtQUMusL0LixDHh0HrEU1 CM5VGHSZoi+tDTxA9BidCFn1A0YV00ddt4e131OV6XdPBEcO5oshkvL9mVE+vSSb arRlhzePaMzskuQgyKRmx5p6K9Ek5Id4YtYDDpYZ3YzmBjORiBd4DAgfH+IZH8ge faxHuolOikvM3fIZnjQRpnUQIJ2SAdV7oLaStcPI5X+MkEYdzeNENGxmSxngnaSM RiknpY18voCc3Tkm8VOASm2PNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxXMUUY XrWQ1C37R8CRQ6hRJ6PaMB8GA1UdIwQYMBaAFKae5ixa6IEXSkISN1nqQj1h9zQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkYxMi9GRjMzM0I4QTY4 QzExMUVGQTc1M0ExNjRDNEY5QUUwMi9wcDdtTEZyb2dSZEtRaEkzV2VwQ1BXSDNO Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwN21MRnJvZ1JkS1FoSTNXZXBDUFdIM05DTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkYxMi9GRjMzM0I4QTY4QzExMUVGQTc1M0ExNjRDNEY5QUUwMi9wcDdtTEZyb2dS ZEtRaEkzV2VwQ1BXSDNOQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA++G+1Bt/BQf+cXyr4syWCi6L8EBAfsNTK2QuRQmVv2N4vivZeWLJg nyCfhPawzQe4eWLkA1uro8sm0nQU2UYqpL6nCT8fhr9aYP4R0gZB1eZ1xzYaMzYm UbbaXApMLwljYbQbT5SnnpE6I329DIS5ct2BoFTbx+ns8FIbAJtQP9IkdgPVz+Eo 7hs+HGIAPTwKddikZf/hMopY1LAdLvULPp1ix94Pr3ggR8Es+B9mm7GBoPEm0L6l YxUjn/aeu7l+lmVSgTjOz18FLL2wZZXQkr31dNhU/Ua4hclCVzjO1mY+yoCKYA17 zdmpe1rdu6+w/kjzw0/3wL6Gm+QqhhA2 -----END CERTIFICATE-----Generated at Sat Aug 23 19:27:19 2025 by rpki-client