$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json) Hash identifier: JivlJjUOT1X/pi1FxG/e2+98srCT5XqixuNOC8Uic5w= Subject key identifier: 9C:CF:EB:27:0A:C0:04:47:81:20:FE:88:D7:F7:93:BB:F1:F6:3E:13 Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft Manifest number: A2 Signing time: Wed 23 Jul 2025 06:33:33 +0000 Manifest this update: Wed 23 Jul 2025 06:33:32 +0000 Manifest next update: Wed 30 Jul 2025 06:33:32 +0000 Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: A9uDVRO2o+/yiQWWDrq3cOIl7n7zy6AdGcAuuj1QEWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 06:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Validity Not Before: Jul 23 06:33:32 2025 GMT Not After : Jul 30 06:33:32 2025 GMT Subject: CN=6880823d-f1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:fc:af:a9:aa:76:9b:cb:81:52:73:d2:73: 22:e0:62:96:80:92:27:d0:7f:a8:bf:13:76:42:2e: d3:87:11:04:70:3f:39:b0:f5:c2:0b:5f:e1:6b:7f: ac:8f:f5:18:9d:6d:39:87:c8:db:ea:bd:05:cd:b8: 99:87:54:f3:3e:34:65:da:39:74:04:82:da:3a:c8: df:92:1f:d9:20:ed:2f:d8:b9:05:4b:18:b6:17:c1: 64:6f:ea:c3:b2:4d:04:81:02:83:5b:42:a9:c4:93: c3:f4:1b:7a:1e:39:e0:a8:ee:72:06:9a:47:41:e3: d7:ce:c6:ac:0f:da:53:5f:27:61:cf:79:31:d2:c9: 85:31:b2:2d:59:74:ed:bd:d6:5f:63:4f:ed:8c:87: 2e:2f:83:e8:b2:01:56:e1:62:0f:db:ec:83:fc:c3: 0e:d7:10:dd:5a:48:86:bc:87:9f:20:ba:1f:70:1a: 32:fd:fd:fa:e1:34:3e:cb:02:d3:10:63:6e:cc:9e: d5:12:e0:7c:9a:69:01:80:30:27:6c:16:96:66:67: 23:60:09:b0:b9:42:cd:6b:b1:e2:15:4d:bf:0f:12: dd:42:de:a1:cf:d3:18:c1:ba:0b:3d:e4:9f:8a:41: b9:55:0e:b4:0f:cb:d8:2b:f2:8f:63:0f:e5:22:c9: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CF:EB:27:0A:C0:04:47:81:20:FE:88:D7:F7:93:BB:F1:F6:3E:13 X509v3 Authority Key Identifier: keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0a:81:64:f8:ad:0a:87:1a:91:66:e8:9e:47:df:c8:6c:0e: 55:3b:ce:1a:7f:5c:9a:d4:15:68:7d:51:d4:fa:e0:9a:2d:44: b1:53:a0:9d:0d:c1:26:4a:7a:79:96:17:50:70:4b:73:80:ca: 29:96:9f:90:9b:5a:95:d2:6e:15:6f:9a:06:dd:d9:66:f8:29: 5e:14:48:c4:60:35:5d:2b:52:76:88:ba:4b:97:6b:8b:81:52: 9a:69:55:6e:de:a0:bd:04:0b:75:0c:84:ac:e5:7a:e8:83:ca: 4b:a8:77:39:77:da:61:44:96:84:58:3d:65:02:c7:c0:e5:f1: 2a:bd:e0:d3:38:eb:83:27:24:48:d2:77:89:24:f9:72:02:ec: 03:a1:a6:7d:ba:ce:68:96:5a:57:e4:83:87:f8:db:a2:ad:39: be:e7:11:8f:fb:cb:5a:24:04:25:f4:65:f9:71:1e:62:a7:0d: d3:8b:6f:f2:c8:30:90:28:a3:2d:c2:db:87:70:d5:81:35:d3: a3:1c:ba:72:d2:fc:2e:fc:1a:de:6c:af:84:b7:b1:a5:f9:08: 67:a3:a5:04:3e:b0:14:be:a9:5e:3b:3c:9b:f5:a5:07:1d:1d: be:52:db:15:58:d2:5b:24:4c:84:50:2b:ed:4c:23:a7:cb:0f: d3:09:df:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDkxNDZCNzgyRUI4MjQ2N0IxOUQ4QjQxRDFDQzQwRUJG MDQ4OTkwNjYwHhcNMjUwNzIzMDYzMzMyWhcNMjUwNzMwMDYzMzMyWjAYMRYwFAYD VQQDEw02ODgwODIzZC1mMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/38r6mqdpvLgVJz0nMi4GKWgJIn0H+ovxN2Qi7ThxEEcD85sPXCC1/ha3+s j/UYnW05h8jb6r0FzbiZh1TzPjRl2jl0BILaOsjfkh/ZIO0v2LkFSxi2F8Fkb+rD sk0EgQKDW0KpxJPD9Bt6HjngqO5yBppHQePXzsasD9pTXydhz3kx0smFMbItWXTt vdZfY0/tjIcuL4PosgFW4WIP2+yD/MMO1xDdWkiGvIefILofcBoy/f364TQ+ywLT EGNuzJ7VEuB8mmkBgDAnbBaWZmcjYAmwuULNa7HiFU2/DxLdQt6hz9MYwboLPeSf ikG5VQ60D8vYK/KPYw/lIsk4pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzP6ycK wARHgSD+iNf3k7vx9j4TMB8GA1UdIwQYMBaAFJFGt4LrgkZ7Gdi0HRzEDr8EiZBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9EMEM1RjRFMjZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Juc1oyTFFkSE1RT3Z3U0pr R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9EMEM1RjRFMjZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Ju c1oyTFFkSE1RT3Z3U0prR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4CoFk+K0KhxqRZuieR9/IbA5VO84af1ya1BVofVHU+uCaLUSxU6Cd DcEmSnp5lhdQcEtzgMoplp+Qm1qV0m4Vb5oG3dlm+CleFEjEYDVdK1J2iLpLl2uL gVKaaVVu3qC9BAt1DISs5Xrog8pLqHc5d9phRJaEWD1lAsfA5fEqveDTOOuDJyRI 0neJJPlyAuwDoaZ9us5ollpX5IOH+NuirTm+5xGP+8taJAQl9GX5cR5ipw3Ti2/y yDCQKKMtwtuHcNWBNdOjHLpy0vwu/BrebK+Et7Gl+Qhno6UEPrAUvqleOzyb9aUH HR2+UtsVWNJbJEyEUCvtTCOnyw/TCd85 -----END CERTIFICATE-----Generated at Thu Jul 24 12:27:59 2025 by rpki-client