$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft File: Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json) Hash identifier: hdLePSR/56AAI9JMk9ETo+amIPuqMoFu2trb+YWUsIA= Subject key identifier: B9:12:AB:F2:BA:A9:87:3C:79:6A:22:42:B7:DF:65:F2:2E:5F:73:1F Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 Certificate issuer: /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft Manifest number: 98 Signing time: Sat 19 Jul 2025 06:38:00 +0000 Manifest this update: Sat 19 Jul 2025 06:38:00 +0000 Manifest next update: Sat 26 Jul 2025 06:38:00 +0000 Files and hashes: 1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: wFATNY8Pk/Ci+O62m7qQAd0vIExO3+zh/NBK45ZAkgo=) 2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: VYuqdxkeY8VDCaP9z9fc7NoqICt3B9Gb1p23SFkZpM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Validity Not Before: Jul 19 06:38:00 2025 GMT Not After : Jul 26 06:38:00 2025 GMT Subject: CN=687b3d48-2414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:27:fa:ba:2f:f7:ba:9f:48:9f:f0:2a:b0:52: eb:a2:3b:16:0c:9b:3b:66:fc:b2:15:89:30:7e:a9: 55:a1:de:3a:e9:34:ef:d8:6c:97:ce:53:8b:f4:a1: 1c:8d:f3:18:84:97:64:fd:da:05:35:f0:25:65:14: 35:a3:3b:5c:22:bb:3c:be:8e:f4:ba:d7:b3:88:ed: 8a:03:b1:8c:a9:d5:31:e1:2f:69:da:fe:6a:78:bc: dc:94:dc:0f:7a:31:a1:b1:5b:ef:9c:f4:16:26:57: f2:99:88:b0:2d:5f:48:58:ce:54:fe:dd:74:b4:7d: 97:a2:b6:ec:2e:15:ef:35:52:d0:df:61:74:28:ac: ab:bb:69:c8:01:f9:74:9b:0b:ea:c2:b4:68:67:b1: 35:8e:5b:23:57:a8:fc:a1:54:cc:ac:8c:b0:99:2f: 3e:98:43:ad:06:b2:90:8d:07:13:0f:bf:6a:05:27: 48:c8:bb:a3:3c:0e:03:3f:46:4a:3c:e6:55:e3:92: 30:3f:77:0c:e1:7f:80:70:07:94:d6:e8:74:2b:3c: 8d:07:f3:ed:c9:b1:b5:30:e8:81:56:28:84:ce:8a: b1:79:f1:91:43:ff:db:ec:aa:3c:d3:0a:c0:e5:88: 83:68:db:00:14:51:97:09:e6:fa:d3:17:27:1a:c5: 20:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:AB:F2:BA:A9:87:3C:79:6A:22:42:B7:DF:65:F2:2E:5F:73:1F X509v3 Authority Key Identifier: keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:96:36:5e:4e:37:84:9d:58:bc:d3:de:97:2e:a6:8a:93: ae:4b:4e:39:4c:56:46:20:68:d2:19:7a:32:2e:b9:09:aa:2d: 70:8c:c5:24:39:0c:ec:bb:eb:10:ae:e6:1f:ad:09:59:cb:29: b3:c4:f9:a5:e7:69:59:7d:d1:a9:19:f5:f7:2d:5b:9b:c0:89: b4:d3:0d:5a:c4:6e:06:a8:91:f1:67:a5:fe:63:7d:ee:35:c8: 46:ea:e4:45:13:09:33:b2:14:d1:1c:e9:a7:57:bc:a4:f2:ae: 8f:46:ed:db:f0:4a:c2:8d:45:80:81:09:ab:9c:02:55:30:95: aa:08:97:b5:8c:49:77:91:ee:a5:9c:ce:67:3c:58:6a:a8:d4: b3:af:3c:90:94:b8:74:30:b9:96:5a:d1:a7:32:ec:cb:9c:a6: 78:33:e4:54:2a:e9:2a:17:49:60:05:4c:70:ee:d0:f1:44:9d: 28:4f:b6:ae:2a:66:8f:74:0b:3a:69:40:1a:b3:7b:62:12:bf: 95:8f:b3:19:4a:0f:aa:0d:ce:17:fa:b0:8f:41:a0:ff:c3:47: 3d:74:d2:c3:85:4e:4c:fc:18:b7:7c:65:f4:33:68:c1:c4:e6: 1d:90:14:7c:dc:12:56:a9:3a:47:58:15:5f:a7:cf:3d:1f:ee: b7:dc:d5:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1MjUxMTAvBgNVBAUTKDJCM0RCODVFRjk1MjIzOEQxOTJEQ0YxNzBFRTZCRUIx QzhEQjAzQTkwHhcNMjUwNzE5MDYzODAwWhcNMjUwNzI2MDYzODAwWjAYMRYwFAYD VQQDEw02ODdiM2Q0OC0yNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Cf6ui/3up9In/AqsFLrojsWDJs7ZvyyFYkwfqlVod466TTv2GyXzlOL9KEc jfMYhJdk/doFNfAlZRQ1oztcIrs8vo70uteziO2KA7GMqdUx4S9p2v5qeLzclNwP ejGhsVvvnPQWJlfymYiwLV9IWM5U/t10tH2XorbsLhXvNVLQ32F0KKyru2nIAfl0 mwvqwrRoZ7E1jlsjV6j8oVTMrIywmS8+mEOtBrKQjQcTD79qBSdIyLujPA4DP0ZK POZV45IwP3cM4X+AcAeU1uh0KzyNB/PtybG1MOiBViiEzoqxefGRQ//b7Ko80wrA 5YiDaNsAFFGXCeb60xcnGsUg9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkSq/K6 qYc8eWoiQrffZfIuX3MfMB8GA1UdIwQYMBaAFCs9uF75UiONGS3PFw7mvrHI2wOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FMTg3MTc3Njg0 RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0MFpMYzhYRHVhLXNjamJB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t6MjRYdmxTSTQwWkxjOFhEdWEtc2NqYkE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUyNS9FMTg3MTc3Njg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0 MFpMYzhYRHVhLXNjamJBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ZJY2Xk43hJ1YvNPely6mipOuS045TFZGIGjSGXoyLrkJqi1wjMUk OQzsu+sQruYfrQlZyymzxPml52lZfdGpGfX3LVubwIm00w1axG4GqJHxZ6X+Y33u NchG6uRFEwkzshTRHOmnV7yk8q6PRu3b8ErCjUWAgQmrnAJVMJWqCJe1jEl3ke6l nM5nPFhqqNSzrzyQlLh0MLmWWtGnMuzLnKZ4M+RUKukqF0lgBUxw7tDxRJ0oT7au KmaPdAs6aUAas3tiEr+Vj7MZSg+qDc4X+rCPQaD/w0c9dNLDhU5M/Bi3fGX0M2jB xOYdkBR83BJWqTpHWBVfp889H+633NWg -----END CERTIFICATE-----Generated at Sun Jul 20 03:24:11 2025 by rpki-client