$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json) Hash identifier: XutXvnLAXNLeONitpvbDsW8q2Z37gcrAy3vFpCILPAs= Subject key identifier: C4:D1:E0:EA:11:C5:7A:79:B4:25:EB:0E:FA:B1:B8:B9:1A:3C:DE:96 Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft Manifest number: 255F Signing time: Wed 20 Aug 2025 16:23:54 +0000 Manifest this update: Wed 20 Aug 2025 16:23:53 +0000 Manifest next update: Wed 27 Aug 2025 16:23:53 +0000 Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: 7JMqJs4QkfUSWGZZAhZxDkvdxPALxARfkNXZ/1pJ3dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Validity Not Before: Aug 20 16:23:53 2025 GMT Not After : Aug 27 16:23:53 2025 GMT Subject: CN=68a5f69a-4000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:d0:9d:42:9e:cb:19:db:d7:30:1e:c1:3d: 61:7a:9c:91:78:54:0b:11:aa:92:5f:41:ec:5c:a7: 30:5c:2a:e0:3a:dd:8d:8a:6f:32:1b:08:e7:b1:b3: 79:a0:15:47:9a:a8:ea:86:a2:0a:c5:43:62:2b:8b: 57:b8:99:1e:be:bb:f5:83:9f:a3:ed:61:13:eb:a6: af:33:68:2f:cc:58:b0:c2:13:28:11:17:ec:49:22: 97:ec:cb:d7:fb:22:b7:bd:b9:a2:3b:ee:32:f3:cf: 8a:88:a5:a0:35:72:e9:b6:e3:93:0e:42:11:92:09: b6:63:f8:48:4a:d2:21:90:cd:46:51:00:0a:8f:f5: 96:9b:e7:4f:39:95:ee:65:bd:56:72:bd:3e:48:43: 9f:93:c8:6b:07:bf:17:97:46:9f:7b:b7:93:ad:aa: 8d:3a:f8:f8:7c:d1:0d:78:df:a8:a4:76:f1:7a:c4: ef:98:54:e2:ef:8a:d7:f8:58:06:e2:d6:b5:c5:45: 95:af:da:bf:34:1f:df:6d:35:d0:22:61:75:94:8d: ef:e4:6a:1b:c0:3f:dc:78:f2:8f:16:2c:78:c4:e4: 7e:a3:1b:b9:e6:e6:42:4c:1f:ab:01:3d:66:8a:17: c7:d2:86:87:73:62:4e:70:96:ff:af:66:58:11:98: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D1:E0:EA:11:C5:7A:79:B4:25:EB:0E:FA:B1:B8:B9:1A:3C:DE:96 X509v3 Authority Key Identifier: keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e9:d6:d8:e7:30:ce:ed:a5:d9:bf:b2:a7:f4:2d:cb:74:d9: ab:80:20:ed:25:f9:68:49:db:90:cf:f3:89:17:58:b3:47:13: 68:84:77:21:06:a3:a7:80:ab:35:15:d4:70:02:fb:d5:79:84: 22:07:91:d6:af:52:29:19:66:54:73:95:47:61:32:dd:93:b8: f1:34:16:b7:b2:c0:93:57:77:9f:c1:07:57:57:ea:fa:5f:68: 39:3a:bd:89:e4:02:26:0c:d5:5e:13:3a:af:49:e5:75:ac:ba: f5:89:01:45:cb:32:12:e4:6a:70:8a:51:31:a2:57:43:71:0c: cf:ec:a8:73:e6:17:b6:69:31:1b:d0:31:8d:75:a5:11:99:14: 75:91:89:e3:78:81:ab:da:74:9d:f9:ea:01:cd:12:c8:64:fd: 41:4c:56:42:b2:c3:0b:ae:4c:c4:8a:d2:43:97:c9:af:eb:20: d3:b3:0c:fe:6d:3d:d9:54:a6:66:31:26:40:46:9c:c1:ac:b0: 9d:7f:8d:e6:1a:e2:ec:50:d2:e0:82:25:85:a0:39:7e:23:37: 5a:89:2a:33:ed:29:c4:3b:5e:92:67:b5:34:89:d5:ca:b5:a4: 9c:d6:03:1d:b2:f0:13:34:88:13:43:7a:a9:90:25:47:68:fc: 44:0a:5b:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE Nzk1RkZDODQwHhcNMjUwODIwMTYyMzUzWhcNMjUwODI3MTYyMzUzWjAYMRYwFAYD VQQDEw02OGE1ZjY5YS00MDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnM/QnUKeyxnb1zAewT1hepyReFQLEaqSX0HsXKcwXCrgOt2Nim8yGwjnsbN5 oBVHmqjqhqIKxUNiK4tXuJkevrv1g5+j7WET66avM2gvzFiwwhMoERfsSSKX7MvX +yK3vbmiO+4y88+KiKWgNXLptuOTDkIRkgm2Y/hIStIhkM1GUQAKj/WWm+dPOZXu Zb1Wcr0+SEOfk8hrB78Xl0afe7eTraqNOvj4fNENeN+opHbxesTvmFTi74rX+FgG 4ta1xUWVr9q/NB/fbTXQImF1lI3v5GobwD/cePKPFix4xOR+oxu55uZCTB+rAT1m ihfH0oaHc2JOcJb/r2ZYEZhUDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTR4OoR xXp5tCXrDvqxuLkaPN6WMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF6dbY5zDO7aXZv7Kn9C3LdNmrgCDtJfloSduQz/OJF1izRxNohHch BqOngKs1FdRwAvvVeYQiB5HWr1IpGWZUc5VHYTLdk7jxNBa3ssCTV3efwQdXV+r6 X2g5Or2J5AImDNVeEzqvSeV1rLr1iQFFyzIS5GpwilExoldDcQzP7Khz5he2aTEb 0DGNdaURmRR1kYnjeIGr2nSd+eoBzRLIZP1BTFZCssMLrkzEitJDl8mv6yDTswz+ bT3ZVKZmMSZARpzBrLCdf43mGuLsUNLggiWFoDl+IzdaiSoz7SnEO16SZ7U0idXK taSc1gMdsvATNIgTQ3qpkCVHaPxEClsV -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:02 2025 by rpki-client