$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json) Hash identifier: YWvvhGQCBi6MOx7bdjwEUMBwJdKewpYuQq2/1NMoF18= Subject key identifier: C5:9F:AA:F9:F1:E8:41:07:D6:CC:6D:55:5A:CA:4A:41:F8:45:9A:E3 Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft Manifest number: 01F0 Signing time: Sat 23 Aug 2025 02:45:15 +0000 Manifest this update: Sat 23 Aug 2025 02:45:14 +0000 Manifest next update: Sat 30 Aug 2025 02:45:14 +0000 Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: ywpGXQ3zMh6HaWkvNx7FGnP99arR8hCYIy2TuLXumeE=) 2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: w+YVCZlT+ueyv41aCuxnpcHi2Q6S5cfTHp2i5KKlTA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA48, serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Validity Not Before: Aug 23 02:45:14 2025 GMT Not After : Aug 30 02:45:14 2025 GMT Subject: CN=68a92b3a-c188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:b8:2a:99:15:ce:62:32:80:74:02:55:60: e5:cb:67:3b:95:f1:1b:b1:75:0a:9b:c7:91:25:6e: 5c:9c:0d:f7:8d:ca:e8:e6:cb:62:3e:8e:3a:7e:e2: 3b:8f:aa:28:45:e2:a1:57:b4:30:b8:89:8b:4b:a2: f7:6f:f9:e2:72:f5:02:b7:ea:27:94:63:9b:97:0c: ad:92:87:2b:28:25:89:1f:9b:fc:89:c7:8e:9e:cf: 82:48:06:6a:54:bb:d8:68:3a:dd:3f:93:2b:14:79: a4:85:91:1d:12:97:39:81:63:bb:75:6a:f4:c1:9f: 7f:41:eb:ba:31:bb:30:61:83:f8:27:cf:15:94:f0: 82:36:11:07:5f:ad:c0:2b:92:bd:09:1d:90:b2:c2: 7b:d4:27:5c:5a:a7:64:7c:0a:f5:ee:b7:16:fe:60: f9:ed:dd:aa:32:2d:b5:52:0f:13:ec:40:14:50:0b: e1:f8:17:37:05:5c:f8:4a:5e:3c:62:19:6a:d7:33: 7d:50:81:7f:d3:ff:cc:13:ea:23:67:35:59:47:8e: 25:46:06:2f:2d:8b:6c:31:b2:cd:25:8d:15:eb:d0: 47:0e:34:d1:59:fe:cd:19:26:a5:e9:82:b2:07:45: 37:60:c2:10:6d:08:a1:01:a8:e7:4f:bf:a4:bd:0e: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9F:AA:F9:F1:E8:41:07:D6:CC:6D:55:5A:CA:4A:41:F8:45:9A:E3 X509v3 Authority Key Identifier: keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c6:1c:0e:45:d5:03:c7:40:c7:2b:69:a2:b2:25:e9:22:6e: 7c:99:59:d1:9c:a9:6e:4e:bb:52:ef:06:76:64:e9:d5:0b:4a: d6:0f:0d:a0:b4:28:b5:94:2e:b6:a4:94:22:8d:25:2a:41:7b: 3d:4b:a9:19:72:48:bf:f5:2f:5a:a7:40:fc:b1:c6:4c:a5:79: 56:7f:0f:47:46:12:1b:91:39:d9:10:20:40:91:34:9a:b3:4e: 41:12:3b:fc:01:ef:e8:76:5b:c1:2a:86:f5:48:66:d3:f8:cc: c3:42:12:0a:49:ef:4a:d0:94:cf:e1:9a:0d:fe:e7:3b:12:5b: 50:37:e5:c3:86:69:89:6b:27:b8:f4:84:6a:c4:08:f9:99:dd: 4d:ad:d2:e0:76:11:a8:f6:19:d0:cb:00:ec:f3:bf:ba:fc:d4: 36:7c:09:b6:09:00:17:c2:b4:ee:61:f0:a8:b2:b3:a1:52:3a: 9d:e8:82:95:dc:fa:4e:4b:95:df:5c:4c:c3:25:97:44:5a:da: 08:27:3f:d0:af:26:31:94:6c:8b:72:a8:33:56:c7:f3:bf:4f: 4d:01:54:8c:8f:53:74:54:01:8a:b2:d9:2b:1e:7d:e7:0c:5c: fb:1d:e1:3b:ad:05:13:d3:0c:b7:58:e6:19:0e:0e:aa:b1:16: 0d:60:6d:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBNDgxMTAvBgNVBAUTKEY1RkQyNzRBRjI3Q0U5NUY2OTJEQjgwQkU4RUY2N0Mz MjQ2MDJCNDgwHhcNMjUwODIzMDI0NTE0WhcNMjUwODMwMDI0NTE0WjAYMRYwFAYD VQQDEw02OGE5MmIzYS1jMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeO4KpkVzmIygHQCVWDly2c7lfEbsXUKm8eRJW5cnA33jcro5stiPo46fuI7 j6ooReKhV7QwuImLS6L3b/nicvUCt+onlGOblwytkocrKCWJH5v8iceOns+CSAZq VLvYaDrdP5MrFHmkhZEdEpc5gWO7dWr0wZ9/Qeu6MbswYYP4J88VlPCCNhEHX63A K5K9CR2QssJ71CdcWqdkfAr17rcW/mD57d2qMi21Ug8T7EAUUAvh+Bc3BVz4Sl48 Yhlq1zN9UIF/0//ME+ojZzVZR44lRgYvLYtsMbLNJY0V69BHDjTRWf7NGSal6YKy B0U3YMIQbQihAajnT7+kvQ521wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWfqvnx 6EEH1sxtVVrKSkH4RZrjMB8GA1UdIwQYMBaAFPX9J0ryfOlfaS24C+jvZ8MkYCtI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkE0OC9GNzM3MTNGNjk3 RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZWOXBMYmdMNk85bnd5UmdL MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmMG5Tdko4NlY5cExiZ0w2Tzlud3lSZ0swZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkE0OC9GNzM3MTNGNjk3RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZW OXBMYmdMNk85bnd5UmdLMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOxhwORdUDx0DHK2misiXpIm58mVnRnKluTrtS7wZ2ZOnVC0rWDw2g tCi1lC62pJQijSUqQXs9S6kZcki/9S9ap0D8scZMpXlWfw9HRhIbkTnZECBAkTSa s05BEjv8Ae/odlvBKob1SGbT+MzDQhIKSe9K0JTP4ZoN/uc7EltQN+XDhmmJaye4 9IRqxAj5md1NrdLgdhGo9hnQywDs87+6/NQ2fAm2CQAXwrTuYfCosrOhUjqd6IKV 3PpOS5XfXEzDJZdEWtoIJz/QryYxlGyLcqgzVsfzv09NAVSMj1N0VAGKstkrHn3n DFz7HeE7rQUT0wy3WOYZDg6qsRYNYG0n -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:06 2025 by rpki-client