$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json) Hash identifier: 3bsjI9XNC7NX93FOmMqSTKNANCu1e/8pWJZGltTe6TQ= Subject key identifier: 61:AF:54:F7:C1:9E:E3:2D:76:C7:ED:0B:6C:75:0E:DA:29:AF:F0:8A Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31 Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft Manifest number: 06CC Signing time: Fri 18 Jul 2025 22:21:43 +0000 Manifest this update: Fri 18 Jul 2025 22:21:43 +0000 Manifest next update: Fri 25 Jul 2025 22:21:43 +0000 Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: fkSkuoIQB/H1tKlZvBHRKIJ/dbvMPLMXmisPwZ1lbzI=) 2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: cWc+J1TIBwheicFkr/uWy0LuYQxsGfxktq1Xam8BBXI=) 3: 9398F508619611EBA485B448C4F9AE02.roa (hash: Nd8Cn8Kc0/NAG96VlpahXIFBzBlttK0FrKVnW80S2cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31 Validity Not Before: Jul 18 22:21:43 2025 GMT Not After : Jul 25 22:21:43 2025 GMT Subject: CN=687ac8f7-af0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:7f:15:06:8d:a4:22:45:6a:19:2f:2a:59: e0:dd:30:bf:f6:b3:e2:02:bc:ce:da:9e:1a:58:87: 7a:65:ed:48:2b:1d:38:05:b0:77:d4:b7:ad:82:d3: 3b:52:3e:ad:a7:19:42:f5:2e:31:67:58:19:45:7b: cf:85:86:80:a0:6e:dc:c0:ec:21:bd:ee:bb:69:86: 17:66:4b:0f:f0:fb:3c:39:5d:60:3f:f9:61:6a:c3: e9:a7:c2:e1:14:1a:ae:3a:c0:c8:67:01:f5:54:b0: 70:2e:ae:db:f4:c6:45:7c:f9:d3:da:37:12:0b:ca: bc:2d:79:32:50:ce:28:c4:61:e3:33:44:8a:47:6b: 87:20:76:ac:31:4b:fd:88:97:58:c0:cb:a2:0c:d2: 74:f5:06:d5:56:20:c7:1c:73:b2:0d:6d:55:a8:6e: 24:7e:eb:8b:d4:5a:b0:2f:58:92:d9:f4:fa:a4:c4: c8:d5:d7:ad:38:36:ac:de:bf:37:fd:a8:c9:dd:7f: ee:66:ac:96:1c:1e:ff:9f:ad:8d:7e:1d:47:af:33: bb:9c:37:2d:a9:82:0c:6d:ef:34:f4:8f:84:a5:00: d7:30:46:09:9e:68:86:67:f7:ea:d7:e2:de:37:6d: ec:79:6c:41:2b:9c:71:7c:53:45:97:27:0a:e4:f1: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AF:54:F7:C1:9E:E3:2D:76:C7:ED:0B:6C:75:0E:DA:29:AF:F0:8A X509v3 Authority Key Identifier: keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ef:f3:dd:20:80:41:55:9c:0f:41:10:86:2a:24:3d:67:ff: d0:d2:2e:47:89:76:71:c4:5e:bd:22:a9:65:29:4e:26:58:62: c8:e8:96:17:d6:66:43:7d:d9:93:e1:90:f1:8d:31:88:78:a0: 65:2f:10:00:04:69:4e:59:a8:99:d9:bd:58:76:d0:a3:37:be: 3c:bc:17:3b:39:8b:1e:98:2c:05:7d:d4:7e:bc:6e:76:1f:47: 93:9a:f9:70:99:ea:8a:19:c7:8b:76:71:8d:9c:9f:20:f4:f4: 26:2f:e6:d9:4d:10:73:08:71:55:a9:0c:e2:54:26:33:dd:70: ef:6b:95:a9:fd:06:18:b8:e1:40:84:f3:50:3d:9c:44:e2:89: 1d:69:c9:8b:d5:8c:b6:95:4e:3f:94:c4:29:36:c0:6e:08:31: a3:c1:0f:73:f4:64:94:4d:ba:aa:56:fb:3f:80:82:39:c4:87: eb:bb:c1:3b:ba:11:b6:65:f1:f3:44:2a:4b:e8:bb:46:6f:9c: 93:75:02:93:40:b4:b9:a7:b1:d0:ad:64:aa:46:b4:96:e1:d9: 71:b6:2e:64:60:51:03:1e:80:72:3c:a3:12:e0:c9:ce:6c:17: b5:8d:b4:53:90:72:37:e1:41:0e:54:29:41:fe:d0:64:e3:9d: 14:6e:c6:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5NjAxMTAvBgNVBAUTKDJBOTAwNzM0QzVFM0I5M0FDQTk0NzBFM0Y1QUREQURD MkYyMTVCMzEwHhcNMjUwNzE4MjIyMTQzWhcNMjUwNzI1MjIyMTQzWjAYMRYwFAYD VQQDEw02ODdhYzhmNy1hZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnp/FQaNpCJFahkvKlng3TC/9rPiArzO2p4aWId6Ze1IKx04BbB31LetgtM7 Uj6tpxlC9S4xZ1gZRXvPhYaAoG7cwOwhve67aYYXZksP8Ps8OV1gP/lhasPpp8Lh FBquOsDIZwH1VLBwLq7b9MZFfPnT2jcSC8q8LXkyUM4oxGHjM0SKR2uHIHasMUv9 iJdYwMuiDNJ09QbVViDHHHOyDW1VqG4kfuuL1FqwL1iS2fT6pMTI1detODas3r83 /ajJ3X/uZqyWHB7/n62Nfh1HrzO7nDctqYIMbe809I+EpQDXMEYJnmiGZ/fq1+Le N23seWxBK5xxfFNFlycK5PEn7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGvVPfB nuMtdsftC2x1Dtopr/CKMB8GA1UdIwQYMBaAFCqQBzTF47k6ypRw4/Wt2twvIVsx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk2MC85QzZGN0JFQTYx OTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVUcktsSERqOWEzYTNDOGhX ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twQUhOTVhqdVRyS2xIRGo5YTNhM0M4aFd6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk2MC85QzZGN0JFQTYxOTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVU cktsSERqOWEzYTNDOGhXekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp7/PdIIBBVZwPQRCGKiQ9Z//Q0i5HiXZxxF69IqllKU4mWGLI6JYX 1mZDfdmT4ZDxjTGIeKBlLxAABGlOWaiZ2b1YdtCjN748vBc7OYsemCwFfdR+vG52 H0eTmvlwmeqKGceLdnGNnJ8g9PQmL+bZTRBzCHFVqQziVCYz3XDva5Wp/QYYuOFA hPNQPZxE4okdacmL1Yy2lU4/lMQpNsBuCDGjwQ9z9GSUTbqqVvs/gII5xIfru8E7 uhG2ZfHzRCpL6LtGb5yTdQKTQLS5p7HQrWSqRrSW4dlxti5kYFEDHoByPKMS4MnO bBe1jbRTkHI34UEOVClB/tBk450UbsY1 -----END CERTIFICATE-----Generated at Sun Jul 20 13:02:40 2025 by rpki-client