$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json) Hash identifier: +9ifD+lBCl5QSCnEA4E6wEEIc+EjvX9ZpOSUlF7a51Q= Subject key identifier: 06:BE:B1:D9:B1:43:59:B5:4F:30:91:F6:70:36:D2:61:59:90:FE:6E Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 Certificate issuer: /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft Manifest number: BF Signing time: Sat 19 Jul 2025 06:08:43 +0000 Manifest this update: Sat 19 Jul 2025 06:08:43 +0000 Manifest next update: Sat 26 Jul 2025 06:08:43 +0000 Files and hashes: 1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: JnuVOPY2ztoH2/ngwXvjUC3iW7wZudT6Yoz5K2783zU=) 2: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: +ehd8KtxPwFaqFNVmOCKeYgOq8q50OL3e4iQXY+Px88=) 3: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: IYR9mQ1VQUiO08kcI4RHdp/FLN6UHawsT13ESG27pvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Validity Not Before: Jul 19 06:08:43 2025 GMT Not After : Jul 26 06:08:43 2025 GMT Subject: CN=687b366b-21ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:34:38:50:b6:b9:be:a6:37:67:3a:94:d6: 57:06:65:7c:3d:48:3f:c3:b7:91:b2:d1:f4:42:3e: af:d9:a4:28:29:0e:f5:57:a1:1f:98:8a:29:49:0d: 53:43:48:3c:8d:5d:8b:02:52:9f:07:7a:87:26:c3: 63:34:10:7c:01:ac:b0:3a:58:da:10:6a:76:91:08: e5:37:a0:9f:28:c8:f8:e9:76:03:1b:fe:6e:ec:27: 98:60:19:6e:6d:71:95:51:57:d6:86:40:24:f7:7c: f4:a8:ef:d8:f0:0b:62:f7:44:eb:60:39:28:df:32: 53:ec:a2:2b:61:f1:67:c4:d7:37:7e:ea:57:c7:62: fa:bb:fb:17:8b:38:a2:12:a5:e3:ab:0a:1d:50:3b: 2e:7d:89:30:af:7d:be:2d:9f:7f:8e:c1:00:30:b3: 06:26:cd:ec:87:e3:f7:a3:00:2c:38:88:4f:58:1f: e6:1d:c5:30:81:97:34:ec:37:f2:c2:2c:02:46:c1: d9:21:c3:d7:8c:77:e3:8e:f1:45:59:02:03:f4:5c: 9d:fe:df:cc:07:e4:1c:d1:fd:38:cd:e6:16:f1:b6: d2:29:1c:76:3b:bd:dc:ed:76:87:ab:16:87:df:ce: 62:70:3b:b2:ec:9a:4a:8e:0e:ff:95:e4:a8:ec:2e: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BE:B1:D9:B1:43:59:B5:4F:30:91:F6:70:36:D2:61:59:90:FE:6E X509v3 Authority Key Identifier: keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:63:c3:b3:b2:03:4b:1b:35:4e:a4:6a:4b:76:a3:26:7d:53: 02:47:b7:4d:7d:b5:0b:fe:ef:da:e3:9f:b0:b9:04:da:75:3d: 20:6f:17:f9:12:52:87:3a:31:5c:62:bb:5a:42:0f:1f:bc:9c: f7:79:6d:fc:68:a4:2e:fd:05:7a:36:13:ac:cc:a8:05:ee:96: e2:1f:bb:95:ee:89:d4:22:e7:88:7b:10:f9:a8:04:ed:cf:c4: fa:50:c7:64:e0:c4:b4:06:ad:5d:89:64:00:72:48:49:2e:62: 96:44:a4:85:62:80:63:73:3a:db:11:13:a0:a4:bb:a6:c3:55: 01:ea:58:1f:e5:1a:fa:e5:f7:4e:e4:d7:6b:b6:8b:eb:11:58: 1b:7d:bd:25:93:d8:71:d3:75:db:d8:6a:cb:23:ac:02:e7:c4: 09:f1:b8:1b:b7:cb:e7:a7:e9:74:9d:22:97:8d:c2:26:60:0e: 5d:5d:4e:78:bc:3a:4c:6a:32:68:3a:23:1c:72:ad:03:fb:cf: 6d:64:ea:6b:a8:15:34:1d:95:45:d9:cd:52:98:c9:11:84:fc: e4:93:2c:a3:2c:8b:17:ed:56:e4:c0:2c:12:61:25:89:05:05: 6a:a6:f0:fa:9d:67:91:f4:68:dc:02:a9:33:74:85:6b:a2:98: 50:3c:e6:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDJCMTMxQUExMEQ3RTZCRkVBMzY3RTgxQjczRDdGREIw QUMwMUQ2NzgwHhcNMjUwNzE5MDYwODQzWhcNMjUwNzI2MDYwODQzWjAYMRYwFAYD VQQDEw02ODdiMzY2Yi0yMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgg0OFC2ub6mN2c6lNZXBmV8PUg/w7eRstH0Qj6v2aQoKQ71V6EfmIopSQ1T Q0g8jV2LAlKfB3qHJsNjNBB8AaywOljaEGp2kQjlN6CfKMj46XYDG/5u7CeYYBlu bXGVUVfWhkAk93z0qO/Y8Ati90TrYDko3zJT7KIrYfFnxNc3fupXx2L6u/sXizii EqXjqwodUDsufYkwr32+LZ9/jsEAMLMGJs3sh+P3owAsOIhPWB/mHcUwgZc07Dfy wiwCRsHZIcPXjHfjjvFFWQID9Fyd/t/MB+Qc0f04zeYW8bbSKRx2O73c7XaHqxaH 385icDuy7JpKjg7/leSo7C5TvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa+sdmx Q1m1TzCR9nA20mFZkP5uMB8GA1UdIwQYMBaAFCsTGqENfmv+o2foG3PX/bCsAdZ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81MEYwMTFDODQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFfNmpaLWdiYzlmOXNLd0Ix bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t4TWFvUTEtYV82alotZ2JjOWY5c0t3QjFuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81MEYwMTFDODQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFf NmpaLWdiYzlmOXNLd0IxbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEY8OzsgNLGzVOpGpLdqMmfVMCR7dNfbUL/u/a45+wuQTadT0gbxf5 ElKHOjFcYrtaQg8fvJz3eW38aKQu/QV6NhOszKgF7pbiH7uV7onUIueIexD5qATt z8T6UMdk4MS0Bq1diWQAckhJLmKWRKSFYoBjczrbEROgpLumw1UB6lgf5Rr65fdO 5NdrtovrEVgbfb0lk9hx03Xb2GrLI6wC58QJ8bgbt8vnp+l0nSKXjcImYA5dXU54 vDpMajJoOiMccq0D+89tZOprqBU0HZVF2c1SmMkRhPzkkyyjLIsX7VbkwCwSYSWJ BQVqpvD6nWeR9GjcAqkzdIVrophQPOY3 -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:26 2025 by rpki-client