$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json) Hash identifier: /nWezSmMeSAwhSith0t/W29SvcX4LZZ7E9RxNn/Yiu4= Subject key identifier: 05:F2:89:98:89:40:3F:68:13:E4:FD:C9:E1:9E:4F:CF:23:09:47:60 Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft Manifest number: 01C1 Signing time: Sat 23 Aug 2025 03:07:30 +0000 Manifest this update: Sat 23 Aug 2025 03:07:29 +0000 Manifest next update: Sat 30 Aug 2025 03:07:29 +0000 Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: ipodqdHxKL5jMvJgMcP2epqw8SbqeIPhn5zzGnLNZ6E=) 2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: 56O4jNAGsWq8QxLhQ86Wzd380hCjYQVi8/lo+JDEK9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Validity Not Before: Aug 23 03:07:29 2025 GMT Not After : Aug 30 03:07:29 2025 GMT Subject: CN=68a93071-ff72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:8e:d2:cb:ec:08:c1:3d:59:fb:2b:aa:66: 28:3a:71:28:c2:bc:1b:46:89:8b:6b:1e:ea:11:b2: da:57:7e:08:cc:87:9e:4a:7b:93:fb:3c:9b:4a:26: 91:f2:63:03:79:f1:42:7c:08:d9:b8:bf:da:48:38: 4e:68:94:76:38:66:c1:b0:51:5b:9c:1d:e8:80:66: 2e:c1:c6:54:f1:ea:30:10:9b:80:eb:fd:ff:02:c7: 3e:16:53:5d:bb:4e:bd:07:9f:cd:bd:7e:9d:8d:2d: a1:2e:8c:03:f4:65:31:15:ac:55:7a:8f:b7:0e:e4: 0e:a7:5f:ed:cb:d1:61:eb:8f:49:28:6e:a4:2e:85: 8b:8b:0c:3f:f4:83:99:49:a3:25:f2:49:91:21:f7: aa:05:99:42:54:ad:5e:3b:6f:80:8f:02:80:56:6f: 52:bb:2b:a3:c3:40:4d:a2:b3:fc:cd:ec:e5:7e:85: 6b:35:ef:43:85:49:ce:ac:d5:59:34:e6:c9:76:44: fc:01:ec:20:b1:31:07:8b:b5:41:e6:5f:39:6e:6c: 1f:2d:2e:ad:2a:8e:b5:4e:42:79:9a:d4:30:a0:f8: 5e:3c:12:10:36:de:da:b4:c6:35:a9:bc:65:1d:6d: 6a:a7:8f:2b:05:b9:c0:e2:0c:3b:75:58:02:df:d0: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F2:89:98:89:40:3F:68:13:E4:FD:C9:E1:9E:4F:CF:23:09:47:60 X509v3 Authority Key Identifier: keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:71:52:b9:91:14:70:87:49:fe:ca:71:84:76:06:9c:12:26: 83:10:c5:ea:40:df:22:e0:b4:48:be:fe:69:d7:ac:51:12:d5: 39:64:17:1b:ca:7c:a5:24:23:9b:6c:ed:3d:0d:b4:e4:20:ef: 5d:d5:14:2c:54:f0:7a:f9:f8:85:8c:5e:19:0e:e7:4d:d1:35: 19:c4:e3:67:69:fc:26:14:e5:16:2d:86:d4:8e:67:40:c4:62: 37:f0:af:a0:38:d5:b7:36:4a:70:e0:74:5a:c7:42:0c:bb:66: c9:8c:33:f3:1b:14:89:ac:28:85:45:99:f1:e7:37:26:03:ed: 48:76:7f:34:6b:5f:85:31:92:12:7a:38:c1:66:bb:48:47:2c: 9e:59:c4:19:a6:a0:0a:36:30:4c:61:27:8f:cf:89:99:3b:d7: f7:27:f7:7d:0c:86:ca:df:45:3e:d9:fb:aa:af:b6:5e:cc:7a: 33:4f:28:32:06:28:3a:63:26:9d:c6:7d:71:61:a4:e2:62:da: 21:96:0e:74:40:d1:25:43:ca:d4:c8:2e:66:fd:84:79:07:aa: d0:9b:dd:f0:93:d3:76:2b:3d:07:5e:a9:a5:b7:21:ea:09:40: ac:76:9f:66:3a:fc:ee:05:f1:20:bf:82:21:a3:fb:02:ea:41: aa:8a:8a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx NDI4MjU1MkUwHhcNMjUwODIzMDMwNzI5WhcNMjUwODMwMDMwNzI5WjAYMRYwFAYD VQQDEw02OGE5MzA3MS1mZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGmO0svsCME9WfsrqmYoOnEowrwbRomLax7qEbLaV34IzIeeSnuT+zybSiaR 8mMDefFCfAjZuL/aSDhOaJR2OGbBsFFbnB3ogGYuwcZU8eowEJuA6/3/Asc+FlNd u069B5/NvX6djS2hLowD9GUxFaxVeo+3DuQOp1/ty9Fh649JKG6kLoWLiww/9IOZ SaMl8kmRIfeqBZlCVK1eO2+AjwKAVm9Suyujw0BNorP8zezlfoVrNe9DhUnOrNVZ NObJdkT8AewgsTEHi7VB5l85bmwfLS6tKo61TkJ5mtQwoPhePBIQNt7atMY1qbxl HW1qp48rBbnA4gw7dVgC39DF6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXyiZiJ QD9oE+T9yeGeT88jCUdgMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3 R3ptU1lmdkxrRTRVS0NWUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgcVK5kRRwh0n+ynGEdgacEiaDEMXqQN8i4LRIvv5p16xREtU5ZBcb ynylJCObbO09DbTkIO9d1RQsVPB6+fiFjF4ZDudN0TUZxONnafwmFOUWLYbUjmdA xGI38K+gONW3Nkpw4HRax0IMu2bJjDPzGxSJrCiFRZnx5zcmA+1Idn80a1+FMZIS ejjBZrtIRyyeWcQZpqAKNjBMYSePz4mZO9f3J/d9DIbK30U+2fuqr7ZezHozTygy Big6Yyadxn1xYaTiYtohlg50QNElQ8rUyC5m/YR5B6rQm93wk9N2Kz0HXqmltyHq CUCsdp9mOvzuBfEgv4Iho/sC6kGqiopq -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:51 2025 by rpki-client