$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: HoPcZbBQ4PFj/BRyycpROcxRhAUc3nPvEfSU8v1N11I= Subject key identifier: 29:7D:4B:FC:4D:07:8D:0D:65:8B:10:91:78:82:31:D1:29:73:E9:2E Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 011F Signing time: Sat 19 Jul 2025 04:38:17 +0000 Manifest this update: Sat 19 Jul 2025 04:38:17 +0000 Manifest next update: Sat 26 Jul 2025 04:38:17 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: E7BnNWTikq2/pCrdswkAw/qL13OXgkWUwyrgjB4h0sM=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: LLGlR1swQUGpHRHzrbzk96I6Zx3kb8thD/xfxQf3uHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Jul 19 04:38:17 2025 GMT Not After : Jul 26 04:38:17 2025 GMT Subject: CN=687b2139-093d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:42:eb:5f:42:87:3f:2d:b1:61:97:8c:a6: 69:d2:ff:79:2c:83:4c:1f:67:4b:0a:0b:4c:93:63: af:96:73:e5:a7:6a:d8:19:7c:18:fa:c2:11:e2:73: 88:f6:8e:13:6f:10:33:e8:3e:db:d6:36:4e:49:de: 46:9f:ca:bd:11:34:c4:c1:15:8a:04:e1:a4:92:51: c7:7c:8f:a6:87:3a:dd:24:60:58:cb:10:fa:ed:d6: ce:6e:6a:ad:71:e5:19:98:9f:0d:f4:b2:8b:42:e6: 00:c4:7d:43:a5:f9:0b:c6:6d:95:8f:78:93:47:ee: fb:a1:df:d2:7e:e7:83:7e:6b:ff:9d:35:fa:fc:dc: 22:de:4c:ad:c9:70:98:be:fd:2c:85:a6:49:50:65: 98:61:f8:1b:ec:69:75:33:6a:66:7a:d1:a6:37:be: 75:e3:c0:9e:19:c0:84:c3:77:a8:46:a5:92:b8:00: 7c:27:67:2e:d3:ca:00:1b:7c:eb:a0:67:53:c1:a6: 8a:fd:3b:c9:13:3e:7b:ae:91:20:1d:bf:1d:db:2d: a0:61:7f:6b:39:dc:ce:af:25:21:cd:24:f0:99:16: a5:04:c5:1f:d0:97:74:b5:ae:fd:17:1d:de:ec:b3: 36:3e:12:85:9d:63:0b:44:27:1f:d5:85:a5:02:a5: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7D:4B:FC:4D:07:8D:0D:65:8B:10:91:78:82:31:D1:29:73:E9:2E X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:40:32:ee:ca:f6:d6:da:b2:aa:01:95:dc:0b:09:c5:c6:66: 65:8a:c1:b6:95:17:e3:72:1d:76:bf:3e:d7:6b:d0:18:ea:f5: d5:14:e1:e6:d2:c5:e2:31:88:68:dc:c0:c8:ab:40:5c:ec:23: 59:07:33:d2:a9:97:7a:62:2b:d0:bf:26:09:98:5d:9c:fd:73: d8:02:6a:a5:7e:9a:04:17:3e:23:88:ec:b0:8b:5e:b0:df:fd: 00:db:dc:f1:0e:0c:b4:11:c8:8a:87:d3:52:63:23:81:30:ad: 5a:72:19:f8:bd:69:93:f9:31:c0:3e:e5:de:df:74:df:1f:e6: 08:a1:94:6e:20:0c:1f:6b:81:29:fd:c9:48:42:36:03:b3:2f: d8:53:84:dd:3f:a9:41:a0:82:23:1b:cd:b1:a0:5f:5a:be:de: 2a:d4:06:82:3d:17:fc:cc:cd:6b:e6:8b:ab:05:9e:60:50:27: af:64:5c:cd:be:44:f6:bc:85:38:bc:12:9e:05:ea:d6:88:ac: 86:b1:b6:23:8d:6b:bb:e9:59:ef:d3:29:c8:bc:2b:e8:28:73: f8:e9:9c:78:99:65:27:f0:5a:6d:85:1b:2f:a1:13:c8:79:d8: 9d:4d:76:5d:b9:b2:36:d5:b6:32:b7:ec:9b:04:1d:1b:8b:95: 30:41:99:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjUwNzE5MDQzODE3WhcNMjUwNzI2MDQzODE3WjAYMRYwFAYD VQQDEw02ODdiMjEzOS0wOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmlC619Chz8tsWGXjKZp0v95LINMH2dLCgtMk2OvlnPlp2rYGXwY+sIR4nOI 9o4TbxAz6D7b1jZOSd5Gn8q9ETTEwRWKBOGkklHHfI+mhzrdJGBYyxD67dbObmqt ceUZmJ8N9LKLQuYAxH1DpfkLxm2Vj3iTR+77od/SfueDfmv/nTX6/Nwi3kytyXCY vv0shaZJUGWYYfgb7Gl1M2pmetGmN75148CeGcCEw3eoRqWSuAB8J2cu08oAG3zr oGdTwaaK/TvJEz57rpEgHb8d2y2gYX9rOdzOryUhzSTwmRalBMUf0Jd0ta79Fx3e 7LM2PhKFnWMLRCcf1YWlAqWhPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl9S/xN B40NZYsQkXiCMdEpc+kuMB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHQDLuyvbW2rKqAZXcCwnFxmZlisG2lRfjch12vz7Xa9AY6vXVFOHm 0sXiMYho3MDIq0Bc7CNZBzPSqZd6YivQvyYJmF2c/XPYAmqlfpoEFz4jiOywi16w 3/0A29zxDgy0EciKh9NSYyOBMK1achn4vWmT+THAPuXe33TfH+YIoZRuIAwfa4Ep /clIQjYDsy/YU4TdP6lBoIIjG82xoF9avt4q1AaCPRf8zM1r5ourBZ5gUCevZFzN vkT2vIU4vBKeBerWiKyGsbYjjWu76Vnv0ynIvCvoKHP46Zx4mWUn8FpthRsvoRPI edidTXZdubI21bYyt+ybBB0bi5UwQZma -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:31 2025 by rpki-client