$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft File: KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json) Hash identifier: NFPx7lP8X+7hvsNKES/Ws1oFyVqa9Qdo7XWx33qfuVM= Subject key identifier: BE:F1:54:F1:6B:ED:28:A1:BE:D0:04:F4:C6:60:C4:AC:57:DC:45:D5 Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft Manifest number: 02E9 Signing time: Mon 21 Jul 2025 01:34:31 +0000 Manifest this update: Mon 21 Jul 2025 01:34:30 +0000 Manifest next update: Mon 28 Jul 2025 01:34:30 +0000 Files and hashes: 1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: YqvEnVRxvdnd25pTurdEg6g/+gCOxrDKnGuEq4rEX8Q=) 2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: 3t64o2UXNsxTNPIx1fcvAHHTrkMYu5vuFZ50YkMkLZI=) 3: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: HZusuoH1up8FDoOQyhT/1qoC+ff/aBBAonRcZ28YjMI=) 4: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Eku/YHWxKxpsRX6ogTNh3LDNRp5rXVLPBXYqCNfR56g=) 5: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: 3ncZT46pze+jMf4M4LYzFO82k2evN1uShAP1OkhdIKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Validity Not Before: Jul 21 01:34:30 2025 GMT Not After : Jul 28 01:34:30 2025 GMT Subject: CN=687d9927-1d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:6a:6e:85:53:68:04:cb:28:74:89:d0:3f: 28:0d:3b:f2:a7:dd:07:26:94:ba:d9:97:48:13:88: 5f:0b:d1:76:53:cf:db:57:78:a5:55:19:8e:85:bb: c7:8b:3f:17:39:2e:7c:3b:22:4d:da:12:c7:9f:a7: 56:50:02:d1:3d:92:01:a5:72:81:42:d0:43:9d:81: 72:22:29:de:34:28:bc:0c:ce:e7:02:81:13:1e:d1: 6d:eb:35:16:07:c8:36:bd:03:64:5f:1a:75:f7:38: f4:6d:a8:6c:df:e5:dd:04:85:65:85:b0:0e:70:cd: 5a:8b:e6:da:52:0b:95:c0:ef:97:3f:07:9b:c0:7e: 15:a5:25:10:2c:de:d4:39:e4:b9:62:37:24:0a:d8: 08:33:da:23:5d:eb:79:13:2d:f5:f6:d9:38:bc:04: d9:e1:68:02:18:48:e8:41:f7:5a:6d:a7:d1:e5:7e: 29:34:d4:3d:82:7e:1a:89:13:09:72:d6:44:f8:51: 0f:2c:cf:2e:38:fc:03:1d:eb:ec:b7:bb:4a:34:3a: fb:72:3c:c1:33:3c:29:7a:78:ab:e2:b7:31:d3:49: e6:69:94:68:51:7f:a1:a4:76:b8:65:3b:6e:7a:46: 6f:4e:26:03:02:ff:71:11:bc:c7:4d:f6:4f:40:05: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F1:54:F1:6B:ED:28:A1:BE:D0:04:F4:C6:60:C4:AC:57:DC:45:D5 X509v3 Authority Key Identifier: keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:86:76:1e:cf:7c:da:2c:bb:42:43:40:38:96:14:42:11:cc: ac:2c:e3:14:90:3c:77:cb:1a:2a:52:6f:72:68:ab:eb:92:bd: e8:37:71:a1:13:29:77:6c:24:33:3d:7d:bd:83:8c:62:bf:5f: c8:e7:7e:fb:15:7d:15:0d:29:5f:1d:1f:10:d5:8e:c7:8a:04: 93:2e:b7:ee:b6:fb:7b:8b:fb:96:20:a2:45:51:a5:fd:6b:ad: 8b:a3:0a:3a:f7:66:ff:cd:10:3c:de:08:55:a6:3e:13:12:e2: 00:0e:b5:b4:0c:f9:50:ef:47:d9:8d:e1:29:dc:fc:e2:e1:16: 40:03:96:f3:43:45:49:9e:44:08:40:57:a1:62:e0:10:94:b0: 26:d1:e5:02:f3:0a:fe:d3:6e:36:dc:d5:72:d5:b4:57:b8:b8: 98:a6:e9:fd:7a:49:fa:70:90:b5:82:50:32:bc:b9:b0:41:d1: ff:bc:10:bc:96:bb:82:b2:3e:93:60:6b:ba:eb:af:70:8f:4e: 72:3c:e8:ea:bc:b4:23:40:d5:2e:5d:22:c3:fd:ef:1a:0e:87: b9:1d:eb:53:91:7f:54:df:88:25:e9:bd:80:a1:dd:31:fa:30: 79:5f:45:08:e2:f4:81:dd:35:90:67:09:f3:b7:70:50:cd:9c: a8:d5:67:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDODQxMTAvBgNVBAUTKDI5NjYyRjUxM0EyNTRGMERCNUYwN0RCNTgxOUZCRUFF NDBGN0JGMTUwHhcNMjUwNzIxMDEzNDMwWhcNMjUwNzI4MDEzNDMwWjAYMRYwFAYD VQQDEw02ODdkOTkyNy0xZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA269qboVTaATLKHSJ0D8oDTvyp90HJpS62ZdIE4hfC9F2U8/bV3ilVRmOhbvH iz8XOS58OyJN2hLHn6dWUALRPZIBpXKBQtBDnYFyIineNCi8DM7nAoETHtFt6zUW B8g2vQNkXxp19zj0bahs3+XdBIVlhbAOcM1ai+baUguVwO+XPwebwH4VpSUQLN7U OeS5YjckCtgIM9ojXet5Ey319tk4vATZ4WgCGEjoQfdabafR5X4pNNQ9gn4aiRMJ ctZE+FEPLM8uOPwDHevst7tKNDr7cjzBMzwpenir4rcx00nmaZRoUX+hpHa4ZTtu ekZvTiYDAv9xEbzHTfZPQAURqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7xVPFr 7SihvtAE9MZgxKxX3EXVMB8GA1UdIwQYMBaAFClmL1E6JU8NtfB9tYGfvq5A978V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkM4NC8yQTlCQjAyNkVC QjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3MjE4SDIxZ1otLXJrRDN2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXWXZVVG9sVHcyMThIMjFnWi0tcmtEM3Z4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkM4NC8yQTlCQjAyNkVCQjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3 MjE4SDIxZ1otLXJrRDN2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYhnYez3zaLLtCQ0A4lhRCEcysLOMUkDx3yxoqUm9yaKvrkr3oN3Gh Eyl3bCQzPX29g4xiv1/I5377FX0VDSlfHR8Q1Y7HigSTLrfutvt7i/uWIKJFUaX9 a62Lowo692b/zRA83ghVpj4TEuIADrW0DPlQ70fZjeEp3Pzi4RZAA5bzQ0VJnkQI QFehYuAQlLAm0eUC8wr+02423NVy1bRXuLiYpun9ekn6cJC1glAyvLmwQdH/vBC8 lruCsj6TYGu6669wj05yPOjqvLQjQNUuXSLD/e8aDoe5HetTkX9U34gl6b2Aod0x +jB5X0UI4vSB3TWQZwnzt3BQzZyo1Wd8 -----END CERTIFICATE-----Generated at Mon Jul 21 13:26:17 2025 by rpki-client