$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json) Hash identifier: pgG7eXZVHwMXNTPJI+M7yYpzKK4v3acCgDX/EvPpJY4= Subject key identifier: 60:50:1A:CB:6E:BA:7A:99:1D:6C:99:C1:F0:FB:C5:61:5E:E2:91:0D Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft Manifest number: 61 Signing time: Sat 19 Jul 2025 06:36:50 +0000 Manifest this update: Sat 19 Jul 2025 06:36:49 +0000 Manifest next update: Sat 26 Jul 2025 06:36:49 +0000 Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: jmIlyeEUr47au7pCPwF88P7B8riJkjuZ/tbj/Jn0TZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Validity Not Before: Jul 19 06:36:49 2025 GMT Not After : Jul 26 06:36:49 2025 GMT Subject: CN=687b3d02-87a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9e:ab:0a:27:4a:5e:c8:61:12:a6:2b:3e:bd: 8b:da:9a:51:94:83:93:bf:c3:ca:62:16:52:43:ee: 97:c1:a8:50:66:d8:16:8d:f6:d5:78:9d:9c:b6:ea: de:65:44:35:9b:7c:b5:ff:5c:8e:db:ba:62:3c:d1: 20:7e:24:ec:10:5e:5b:d2:5b:50:09:d1:a3:66:d8: be:5d:9a:46:b5:43:3a:06:46:0a:66:a2:56:35:2b: ae:fb:14:0c:ee:15:b8:1a:62:da:6c:88:f4:8c:b3: 1e:e6:5a:d5:fc:0f:75:36:ac:78:3d:c3:57:7d:6f: 0b:bd:80:c5:30:d8:16:0f:d9:5e:82:a7:9e:bc:91: ce:1b:91:a7:82:29:86:e1:42:86:25:05:a0:e4:1a: 44:92:67:d0:df:4a:74:f5:bc:b8:68:a4:02:94:76: 3c:85:98:d5:7f:1c:72:61:b4:e2:f4:9c:7e:35:30: 7e:38:fd:25:86:0f:f1:fd:bc:e7:e5:d6:55:42:b1: 19:ca:16:1a:96:df:bd:9b:be:5e:ee:8e:e3:02:39: 52:32:41:e5:b9:d7:0d:e1:1d:4e:ee:be:2f:b7:8c: 10:ec:f8:70:d2:f6:72:13:0f:3c:39:de:39:53:9e: f5:51:37:50:f2:68:1a:d1:d4:1d:bc:2d:27:12:c7: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:50:1A:CB:6E:BA:7A:99:1D:6C:99:C1:F0:FB:C5:61:5E:E2:91:0D X509v3 Authority Key Identifier: keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:6d:03:99:01:95:c8:92:b8:94:66:a8:7b:e3:64:25:54:94: fa:d0:c0:81:98:f2:1c:c8:80:39:64:75:4c:bf:1b:f9:6e:ec: bc:53:57:ce:33:3d:4b:b0:85:0a:7a:29:c1:15:d7:3f:95:0b: 1f:00:b7:ca:87:9e:27:81:cd:06:49:f3:d1:43:fb:8d:89:df: 36:f6:26:8d:a4:3b:88:b9:92:88:38:6f:88:a7:1c:64:d2:9a: 04:ba:59:27:9d:8c:5c:f5:4b:a4:1c:cc:40:e6:d8:16:f2:41: 78:b2:89:ad:d4:a4:ea:bf:7c:ea:64:11:da:ee:67:0f:af:07: 54:ab:5b:3f:55:d6:e3:e7:73:52:c5:a6:6d:d9:80:c4:06:46: fe:a0:3d:d0:7d:2b:28:66:85:c1:36:aa:5a:41:6d:7e:ae:d0: 43:61:b9:ae:c7:e0:85:cc:9a:f8:15:f0:bf:ae:4c:16:12:fc: 5a:de:eb:65:31:45:d3:fe:8b:4c:0b:b9:4a:7a:5e:5a:2a:06: 6d:6d:19:6e:e8:2a:54:19:7b:c4:9a:41:d6:ee:55:0d:59:c9: 30:34:b9:84:45:0a:15:44:56:69:be:aa:75:71:6b:bf:9c:f0: 7a:86:ad:64:51:51:3c:91:00:7d:13:ed:38:bc:a9:8d:16:8d: f8:ea:db:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkUxRTExMC8GA1UEBRMoMjhFREE3Qjk1RDVFOEQ0NTYyQTc1OTc0QzZERDdEQTY0 QzJBMkE4NjAeFw0yNTA3MTkwNjM2NDlaFw0yNTA3MjYwNjM2NDlaMBgxFjAUBgNV BAMTDTY4N2IzZDAyLTg3YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnnqsKJ0peyGESpis+vYvamlGUg5O/w8piFlJD7pfBqFBm2BaN9tV4nZy26t5l RDWbfLX/XI7bumI80SB+JOwQXlvSW1AJ0aNm2L5dmka1QzoGRgpmolY1K677FAzu FbgaYtpsiPSMsx7mWtX8D3U2rHg9w1d9bwu9gMUw2BYP2V6Cp568kc4bkaeCKYbh QoYlBaDkGkSSZ9DfSnT1vLhopAKUdjyFmNV/HHJhtOL0nH41MH44/SWGD/H9vOfl 1lVCsRnKFhqW372bvl7ujuMCOVIyQeW51w3hHU7uvi+3jBDs+HDS9nITDzw53jlT nvVRN1DyaBrR1B28LScSx7bLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYFAay266 epkdbJnB8PvFYV7ikQ0wHwYDVR0jBBgwFoAUKO2nuV1ejUVip1l0xt19pkwqKoYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFL0Q0MDlGODJBRDE2 OTExRUZCNzZGQjUyMEM0RjlBRTAyL0tPMm51VjFlalVWaXAxbDB4dDE5cGt3cUtv WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS08ybnVWMWVqVVZpcDFsMHh0MTlwa3dxS29ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RTFFL0Q0MDlGODJBRDE2OTExRUZCNzZGQjUyMEM0RjlBRTAyL0tPMm51VjFlalVW aXAxbDB4dDE5cGt3cUtvWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAVtA5kBlciSuJRmqHvjZCVUlPrQwIGY8hzIgDlkdUy/G/lu7LxTV84z PUuwhQp6KcEV1z+VCx8At8qHnieBzQZJ89FD+42J3zb2Jo2kO4i5kog4b4inHGTS mgS6WSedjFz1S6QczEDm2BbyQXiyia3UpOq/fOpkEdruZw+vB1SrWz9V1uPnc1LF pm3ZgMQGRv6gPdB9KyhmhcE2qlpBbX6u0ENhua7H4IXMmvgV8L+uTBYS/Fre62Ux RdP+i0wLuUp6XloqBm1tGW7oKlQZe8SaQdbuVQ1ZyTA0uYRFChVEVmm+qnVxa7+c 8HqGrWRRUTyRAH0T7Ti8qY0Wjfjq23Y= -----END CERTIFICATE-----Generated at Sun Jul 20 12:19:37 2025 by rpki-client