$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: bSmOemZJEct1hWbIbcUXdqcyVh5NOkfMtbIC35fw7yw= Subject key identifier: F9:0A:8E:48:D6:92:4B:FD:8A:B3:9B:0E:CA:87:E3:BE:1A:FC:19:29 Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 0477 Signing time: Sat 23 Aug 2025 00:19:38 +0000 Manifest this update: Sat 23 Aug 2025 00:19:37 +0000 Manifest next update: Sat 30 Aug 2025 00:19:37 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: w3TnJ37JSDdo0yKie8Kgwq7wcbkFZJKwYkaj62i4k/s=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: qCU/OsBRO4+PMlzfkCWYCpZe9YTKzCH9brvEdyELMJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: Aug 23 00:19:37 2025 GMT Not After : Aug 30 00:19:37 2025 GMT Subject: CN=68a90919-5095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:2b:52:53:72:83:a1:15:53:80:bf:c0:a9: 0b:f2:61:ac:99:e9:3c:84:2c:4b:8c:89:b5:4b:26: 10:cd:19:f9:a2:0a:ad:fc:d8:91:73:bd:09:3c:dd: 6d:c4:a3:f2:2d:a8:c5:a7:ea:f1:d7:7f:ea:b4:54: c7:74:b1:cb:c6:e8:8d:5a:c5:45:17:9f:70:d9:c7: ae:2d:2c:a1:c8:75:cc:54:55:3f:00:a0:1e:1a:a6: 53:88:32:2a:d4:e5:23:48:a4:d4:50:a4:c9:b4:47: c7:59:ff:c8:59:cb:60:57:7e:6d:db:d1:e8:4f:58: d1:81:c5:51:f3:e3:e9:f0:c8:f7:45:26:98:5e:56: 3e:d8:f8:66:be:ca:12:5c:4c:a5:6d:f1:f8:62:16: 8b:6e:36:fc:a6:ed:08:b7:3c:6e:b4:2a:3c:e2:b3: 44:df:e4:72:10:af:55:74:5d:18:3e:8f:a4:d9:2c: cc:2a:a7:8f:be:9b:92:e0:46:f8:2b:cf:b0:d0:4f: 86:47:b9:66:be:ac:1a:11:57:25:e7:ae:f9:05:d4: fd:21:e5:ae:1d:0e:2b:bb:ee:a7:06:6a:bf:49:32: d3:82:58:b6:52:ec:de:4e:57:5d:42:26:49:4d:58: 18:74:41:a6:49:dd:fc:c4:33:c5:29:36:b5:00:f9: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0A:8E:48:D6:92:4B:FD:8A:B3:9B:0E:CA:87:E3:BE:1A:FC:19:29 X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5e:3e:f0:9c:ec:eb:eb:ed:16:bd:ed:a7:c0:30:86:49:e9: cd:42:60:38:e7:8d:1e:cb:36:49:55:20:35:16:1a:44:f3:b3: fd:32:82:ba:e5:f1:59:fc:e4:a5:5d:5e:90:77:a9:0b:1c:73: 04:7c:0b:bc:9b:d7:08:aa:30:c7:c0:b5:9f:4e:8d:22:03:af: 15:9d:92:c3:3f:04:94:9e:f5:fa:06:f5:19:60:89:4d:e1:7e: 2b:67:7a:c7:39:f7:97:e3:6c:d2:48:7a:02:37:3f:1f:5a:4c: 62:6f:68:f0:b8:56:18:4a:44:8f:a8:66:a9:27:10:d0:d5:f7: 55:f1:50:8c:d0:4b:e0:ba:7e:81:12:90:7f:74:09:fb:14:be: 9a:9a:e7:bf:31:34:0a:54:56:a4:92:90:2c:a0:f2:a0:f3:36: e4:2f:bb:4a:f9:0a:27:5e:15:c6:b1:e8:63:4a:ff:5d:a8:51: 91:4c:ef:08:90:4f:a8:ef:17:85:30:75:04:9d:a2:50:9c:47: 66:ba:06:c4:f6:ad:b2:49:cc:9f:ed:cc:4c:43:ed:67:fe:5e: b5:41:02:4d:33:70:6c:4a:8e:24:e2:fc:fc:c6:68:a5:09:51: 85:a2:e2:57:d5:82:5c:ba:39:cd:39:f7:bd:81:51:f3:b1:ed: f7:ac:29:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjUwODIzMDAxOTM3WhcNMjUwODMwMDAxOTM3WjAYMRYwFAYD VQQDEw02OGE5MDkxOS01MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4UrUlNyg6EVU4C/wKkL8mGsmek8hCxLjIm1SyYQzRn5ogqt/NiRc70JPN1t xKPyLajFp+rx13/qtFTHdLHLxuiNWsVFF59w2ceuLSyhyHXMVFU/AKAeGqZTiDIq 1OUjSKTUUKTJtEfHWf/IWctgV35t29HoT1jRgcVR8+Pp8Mj3RSaYXlY+2PhmvsoS XEylbfH4YhaLbjb8pu0ItzxutCo84rNE3+RyEK9VdF0YPo+k2SzMKqePvpuS4Eb4 K8+w0E+GR7lmvqwaEVcl5675BdT9IeWuHQ4ru+6nBmq/STLTgli2UuzeTlddQiZJ TVgYdEGmSd38xDPFKTa1APn4NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkKjkjW kkv9irObDsqH474a/BkpMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Xj7wnOzr6+0Wve2nwDCGSenNQmA4540eyzZJVSA1FhpE87P9MoK6 5fFZ/OSlXV6Qd6kLHHMEfAu8m9cIqjDHwLWfTo0iA68VnZLDPwSUnvX6BvUZYIlN 4X4rZ3rHOfeX42zSSHoCNz8fWkxib2jwuFYYSkSPqGapJxDQ1fdV8VCM0Evgun6B EpB/dAn7FL6amue/MTQKVFakkpAsoPKg8zbkL7tK+QonXhXGsehjSv9dqFGRTO8I kE+o7xeFMHUEnaJQnEdmugbE9q2yScyf7cxMQ+1n/l61QQJNM3BsSo4k4vz8xmil CVGFouJX1YJcujnNOfe9gVHzse33rCk1 -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:41 2025 by rpki-client