$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft File: kI2z-bdG9SC7uahMhT9pJsFeub0.mft (raw, json) Hash identifier: gERKENNXTWwbaOwfTgbKuda88FqdUZT2kCYZ27yrmsI= Subject key identifier: BA:52:D4:85:5A:8B:FA:A3:43:5E:AB:23:BC:10:3D:E5:AE:61:EC:CA Authority key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD Certificate issuer: /CN=A919A909/serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft Manifest number: D1 Signing time: Wed 23 Jul 2025 05:57:14 +0000 Manifest this update: Wed 23 Jul 2025 05:57:14 +0000 Manifest next update: Wed 30 Jul 2025 05:57:14 +0000 Files and hashes: 1: kI2z-bdG9SC7uahMhT9pJsFeub0.crl (hash: HNrgPQU7V1IknbSaczl0tcxvPEize1GB9xfHVtG9O0s=) 2: 879152E62E4811EF929FE162C4F9AE02.roa (hash: 1IspOhl6gwbhdZvL5rloqYpEEE+IPoe5ali+fyL8EWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD Validity Not Before: Jul 23 05:57:14 2025 GMT Not After : Jul 30 05:57:14 2025 GMT Subject: CN=688079ba-64a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:90:cd:24:d6:a1:13:0b:68:52:49:76:b2: da:3a:d3:f0:c8:5e:cc:be:19:f5:7f:75:d8:58:f4: 14:34:c6:5d:a5:86:5e:51:92:8f:1e:0f:07:3d:a7: 94:f0:a1:71:04:d2:bd:69:04:c2:fe:ba:e5:f6:fc: 22:3a:92:c4:29:ae:da:2a:10:a8:63:11:31:29:c6: c5:3c:20:06:f0:95:d6:3c:72:cb:44:74:50:a5:70: f4:1b:5d:f1:a7:99:52:18:0c:91:0a:5c:93:af:14: 51:25:b3:a0:19:1c:9e:71:3c:fa:48:0a:a1:cb:79: 18:5e:14:5f:82:2a:05:2d:ab:9c:f7:ac:91:13:b6: af:1a:b8:35:25:ae:b2:3c:00:ff:25:6f:72:2b:07: 12:5a:05:bb:3c:5b:f9:51:3a:d7:cb:58:01:09:75: e1:4a:c0:c2:db:e0:ac:8f:4e:2b:f1:fc:76:ef:5f: 96:e5:06:5d:1a:6a:1f:46:be:65:e0:56:c4:27:a5: 99:06:25:f9:8d:96:29:cb:ee:22:30:cc:bb:42:1f: 92:e8:bd:54:3a:26:db:5a:8f:bc:49:96:94:f0:db: fc:8a:0c:6d:b0:4e:87:ed:65:af:82:d8:07:56:4c: 78:bc:cf:71:f2:bf:fd:c7:0e:6c:d9:e6:af:1f:3d: c4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:52:D4:85:5A:8B:FA:A3:43:5E:AB:23:BC:10:3D:E5:AE:61:EC:CA X509v3 Authority Key Identifier: keyid:90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:a3:d3:c9:df:53:28:28:52:30:5e:46:20:58:04:54:89:43: c4:a9:5f:f7:2d:1d:62:e3:25:88:ba:42:55:04:22:69:13:03: 98:36:d8:f1:2d:c1:d6:05:31:5e:d8:83:a8:ce:e1:16:88:c8: 3f:55:dc:96:be:29:1e:b4:d0:52:49:cb:67:28:b7:d6:98:1d: 68:97:55:42:05:4e:7a:77:9d:ab:43:bb:49:ea:d5:73:7a:f5: 50:42:b0:77:c3:3a:57:1b:00:77:cf:0a:a5:28:51:ba:a2:6a: c6:b5:4f:a2:09:03:a1:7e:2e:59:5c:31:f3:35:5f:ea:a2:8e: a5:da:b4:17:17:a8:5a:c4:a6:0a:53:56:9d:82:0a:49:6b:5b: bc:37:2d:ab:aa:be:d2:d6:7a:ad:b4:88:ac:fd:7f:54:d4:a9: 5e:89:0d:92:4a:f0:96:f1:b0:bf:53:9a:c3:d8:14:36:a8:01: a9:ad:c9:f2:c1:4a:60:e2:52:9a:a3:c7:1f:34:d0:73:a9:9b: da:95:07:b9:37:51:1c:8c:1f:dd:74:98:ae:7a:27:cb:61:af: fc:eb:bf:a1:b9:e9:50:55:5a:05:6c:b9:17:0b:91:2d:ac:f0: 01:0b:cb:56:99:b9:8c:15:68:de:95:76:03:8a:e5:08:68:2f: 73:21:57:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5MDkxMTAvBgNVBAUTKDkwOERCM0Y5Qjc0NkY1MjBCQkI5QTg0Qzg1M0Y2OTI2 QzE1RUI5QkQwHhcNMjUwNzIzMDU1NzE0WhcNMjUwNzMwMDU1NzE0WjAYMRYwFAYD VQQDEw02ODgwNzliYS02NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteWQzSTWoRMLaFJJdrLaOtPwyF7Mvhn1f3XYWPQUNMZdpYZeUZKPHg8HPaeU 8KFxBNK9aQTC/rrl9vwiOpLEKa7aKhCoYxExKcbFPCAG8JXWPHLLRHRQpXD0G13x p5lSGAyRClyTrxRRJbOgGRyecTz6SAqhy3kYXhRfgioFLauc96yRE7avGrg1Ja6y PAD/JW9yKwcSWgW7PFv5UTrXy1gBCXXhSsDC2+Csj04r8fx271+W5QZdGmofRr5l 4FbEJ6WZBiX5jZYpy+4iMMy7Qh+S6L1UOibbWo+8SZaU8Nv8igxtsE6H7WWvgtgH Vkx4vM9x8r/9xw5s2eavHz3EDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpS1IVa i/qjQ16rI7wQPeWuYezKMB8GA1UdIwQYMBaAFJCNs/m3RvUgu7moTIU/aSbBXrm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8yMDlFRERDRTJB MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlTQzd1YWhNaFQ5cEpzRmV1 YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJMnotYmRHOVNDN3VhaE1oVDlwSnNGZXViMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTkwOS8yMDlFRERDRTJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlT Qzd1YWhNaFQ5cEpzRmV1YjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJo9PJ31MoKFIwXkYgWARUiUPEqV/3LR1i4yWIukJVBCJpEwOYNtjx LcHWBTFe2IOozuEWiMg/VdyWviketNBSSctnKLfWmB1ol1VCBU56d52rQ7tJ6tVz evVQQrB3wzpXGwB3zwqlKFG6omrGtU+iCQOhfi5ZXDHzNV/qoo6l2rQXF6haxKYK U1adggpJa1u8Ny2rqr7S1nqttIis/X9U1KleiQ2SSvCW8bC/U5rD2BQ2qAGprcny wUpg4lKao8cfNNBzqZvalQe5N1EcjB/ddJiueifLYa/867+huelQVVoFbLkXC5Et rPABC8tWmbmMFWjelXYDiuUIaC9zIVej -----END CERTIFICATE-----Generated at Fri Jul 25 01:05:31 2025 by rpki-client