$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json) Hash identifier: WzDT55FneVqMtj7NDG09trMLcxlSRFDdIzlj9Dd0X5A= Subject key identifier: 9E:93:F8:86:9B:A5:D6:9A:FB:76:DC:48:C0:1B:C7:B7:37:A2:F9:97 Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft Manifest number: 5E Signing time: Sat 23 Aug 2025 07:21:08 +0000 Manifest this update: Sat 23 Aug 2025 07:21:07 +0000 Manifest next update: Sat 30 Aug 2025 07:21:07 +0000 Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: VSiG3x6fVnOPaU2IgTX/AIOCSpTuM/AV1qvhrTzdRiA=) 2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: BR0iac6RCibng8iXx5EGv9yUT7uect2xiyJYOcbA9Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Validity Not Before: Aug 23 07:21:07 2025 GMT Not After : Aug 30 07:21:07 2025 GMT Subject: CN=68a96be4-5e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:79:e4:83:4e:78:59:3d:9a:d3:77:99:bc: 11:b9:02:fd:4d:99:a9:7b:f7:08:8e:30:52:40:56: 41:11:4f:f0:ab:03:e8:9b:e0:59:80:84:e8:6b:5e: 66:2c:a2:a1:9d:83:b6:c1:a0:3e:c1:ff:cc:47:f9: 54:fa:03:d5:04:6e:59:fc:6d:32:4b:96:49:56:d2: 50:9e:63:43:02:10:14:37:95:54:f3:85:5e:c5:f2: e4:54:e3:82:a9:2d:8f:a4:c7:e5:76:97:2f:a2:c5: 02:5e:6f:cb:06:d9:fd:f0:82:cf:74:28:5b:6c:bb: de:37:84:e3:aa:65:e6:93:fc:3c:e2:74:93:b6:38: 4b:2f:d5:b5:77:e9:de:b2:c3:bd:4d:75:48:fd:d4: 13:04:a1:f5:87:61:48:8b:55:fa:2c:49:10:f3:5f: 4d:a9:5d:22:d6:ee:36:cf:0c:3d:dc:52:f1:c5:60: 93:88:70:45:22:04:76:47:c3:a5:b0:50:f7:dd:bd: f7:13:a1:92:6d:ed:66:33:59:be:5e:2b:ee:a6:50: 18:a7:57:79:9a:a0:6a:8e:b2:1b:d2:ad:b1:91:01: aa:c9:99:7b:44:1c:64:54:e4:09:16:6f:e3:bb:5f: 4f:14:36:f2:f2:01:89:02:d6:30:b2:cc:e9:d1:3e: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:F8:86:9B:A5:D6:9A:FB:76:DC:48:C0:1B:C7:B7:37:A2:F9:97 X509v3 Authority Key Identifier: keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e6:0c:7a:c8:df:2c:72:4e:94:4b:00:ee:ea:86:77:d5:d0: 4f:5a:7c:ed:7c:33:3b:7a:a0:52:1f:89:84:62:8b:d8:19:61: d9:a4:82:d1:2d:ee:1c:da:1c:17:46:a6:1b:eb:84:2b:dc:00: 15:b3:eb:3e:fc:ad:15:ff:55:c7:a4:63:e3:c1:4e:ce:20:98: 11:9f:a0:0a:a2:42:f7:4e:f0:e6:b1:7b:ce:9d:d7:ce:34:75: 4f:c7:67:58:ae:4e:c3:b1:8d:17:2a:59:e7:eb:5b:7d:06:eb: 37:f0:e5:70:06:81:6f:cc:df:5f:7a:6f:5a:af:e6:0f:55:2e: ae:11:d6:69:b4:d5:78:82:c8:98:28:11:6f:35:9e:74:da:57: 43:23:e7:e3:e3:ee:77:82:65:b1:7d:b0:d7:12:a1:3d:d1:2d: f5:b3:38:71:9d:38:b2:fc:0c:bc:cc:de:af:65:29:7a:10:41: a0:a1:96:2e:d4:18:a6:a8:8a:e6:53:19:54:56:d2:d9:10:15: 62:4d:2c:46:aa:93:76:e6:6c:2f:e9:d3:73:58:91:73:6e:98: d9:05:70:82:2c:be:a0:63:3c:6a:a3:8c:fe:92:e4:42:9a:cf: 1a:6c:37:68:8d:f4:28:1e:ca:48:9d:95:9c:5f:e0:a6:d5:14: 87:75:bc:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTQ3NzExMC8GA1UEBRMoNzI0MUU4RjAzOEI5RjI1MkZCNjFDQTQxQjZBNEZDMTY3 Qjc3NTUyNjAeFw0yNTA4MjMwNzIxMDdaFw0yNTA4MzAwNzIxMDdaMBgxFjAUBgNV BAMTDTY4YTk2YmU0LTVlMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4hnnkg054WT2a03eZvBG5Av1Nmal79wiOMFJAVkERT/CrA+ib4FmAhOhrXmYs oqGdg7bBoD7B/8xH+VT6A9UEbln8bTJLlklW0lCeY0MCEBQ3lVTzhV7F8uRU44Kp LY+kx+V2ly+ixQJeb8sG2f3wgs90KFtsu943hOOqZeaT/DzidJO2OEsv1bV36d6y w71NdUj91BMEofWHYUiLVfosSRDzX02pXSLW7jbPDD3cUvHFYJOIcEUiBHZHw6Ww UPfdvfcToZJt7WYzWb5eK+6mUBinV3maoGqOshvSrbGRAarJmXtEHGRU5AkWb+O7 X08UNvLyAYkC1jCyzOnRPnKXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnpP4hpul 1pr7dtxIwBvHtzei+ZcwHwYDVR0jBBgwFoAUckHo8Di58lL7YcpBtqT8Fnt3VSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxNDc3LzZCNzAzNUY4RjNG QzExRUY5OUQ1MzczMEM0RjlBRTAyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2tIbzhEaTU4bEw3WWNwQnRxVDhGbnQzVlNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx NDc3LzZCNzAzNUY4RjNGQzExRUY5OUQ1MzczMEM0RjlBRTAyL2NrSG84RGk1OGxM N1ljcEJ0cVQ4Rm50M1ZTWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC3mDHrI3yxyTpRLAO7qhnfV0E9afO18Mzt6oFIfiYRii9gZYdmkgtEt 7hzaHBdGphvrhCvcABWz6z78rRX/VcekY+PBTs4gmBGfoAqiQvdO8Oaxe86d1840 dU/HZ1iuTsOxjRcqWefrW30G6zfw5XAGgW/M3196b1qv5g9VLq4R1mm01XiCyJgo EW81nnTaV0Mj5+Pj7neCZbF9sNcSoT3RLfWzOHGdOLL8DLzM3q9lKXoQQaChli7U GKaoiuZTGVRW0tkQFWJNLEaqk3bmbC/p03NYkXNumNkFcIIsvqBjPGqjjP6S5EKa zxpsN2iN9CgeykidlZxf4KbVFId1vLc= -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:01 2025 by rpki-client