$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: K7STOYvxqu2vL0vzdmMnZ9gASYlnLjpcxVgdVxwOPpA= Subject key identifier: 2A:C0:33:DD:58:7B:96:6F:A3:9E:BE:D3:81:21:D1:42:19:CF:84:C1 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 0A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 0A30 Signing time: Sun 24 Aug 2025 19:45:45 +0000 Manifest this update: Sun 24 Aug 2025 19:45:44 +0000 Manifest next update: Sun 31 Aug 2025 19:45:44 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: iIxUkAuiLdWmhzep4OT0QoMdf4DVnM9xS9qzUCdK/bM=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: QAHIkspdc3TnmsVMtC5FECO+wrvdYFQYpTaiZNKj4yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2615 (0xa37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Aug 24 19:45:44 2025 GMT Not After : Aug 31 19:45:44 2025 GMT Subject: CN=68ab6be9-e8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:6a:09:8b:d1:d9:6b:5f:35:94:fe:f6:07: 4c:9f:2f:12:58:11:88:8b:db:be:96:47:5f:5c:a7: 1a:de:7b:34:6a:a7:b8:40:f9:f3:7d:9a:08:14:a7: a5:94:b2:99:18:70:73:d6:09:72:8f:57:77:51:4c: c9:5e:44:03:2f:c4:71:2a:a4:e7:c2:68:b2:b9:99: a2:d0:78:97:01:d4:c2:03:89:79:f4:fc:eb:51:10: 8a:11:f3:8b:de:ea:79:eb:75:d6:02:4d:85:5e:aa: bb:9f:bd:1c:fa:c0:99:87:94:ff:04:29:e9:6b:6f: 47:14:03:52:5c:21:4f:b7:7d:e4:6b:ed:c7:d0:5e: 98:3a:6e:79:13:b5:6b:cc:f7:5f:ca:61:a9:dc:6f: 7c:bc:ef:f6:38:28:66:69:0c:62:62:8b:64:9c:0c: 3f:14:c1:84:58:0f:31:e6:04:37:0a:2b:81:66:2e: 08:57:34:7c:96:2d:92:bd:13:fb:ee:a4:34:03:e0: 37:41:2a:7f:fe:1b:cf:7f:af:07:5e:96:87:3c:45: 70:9d:9d:01:1e:1a:a0:f5:5c:5f:e3:f7:39:e1:f9: ab:e4:48:ad:30:f2:7f:5f:8a:e8:5f:12:e4:ad:fb: 82:60:58:a9:4a:4f:f7:7d:26:23:75:2e:bf:c7:fd: b5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:33:DD:58:7B:96:6F:A3:9E:BE:D3:81:21:D1:42:19:CF:84:C1 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f0:43:b3:b5:cc:7a:d0:e7:17:6c:cc:6c:2f:fb:66:89:5c: 83:1a:7d:87:cd:7b:f8:86:4f:6c:de:2d:33:bd:3f:8e:aa:52: 66:d1:04:ef:39:e9:93:e5:46:1d:c2:37:73:01:35:1b:0c:4c: fa:1f:a6:9d:7d:36:30:44:34:db:32:e3:a9:9f:d6:a5:be:13: 74:c4:d8:5f:61:62:6d:c3:73:a6:bd:6d:54:fd:71:4d:a4:e0: 8b:be:eb:c0:72:7a:7b:25:34:10:27:94:2c:bd:b0:d3:76:2c: f5:d1:2a:8b:ef:ae:c6:56:ba:5c:5f:03:3b:7e:5c:19:5a:ee: 9f:05:55:f7:4d:07:27:ab:15:b9:ec:a3:e3:f0:d2:9a:70:ea: 96:a5:9d:b2:99:fc:0e:79:b1:b5:33:e8:84:72:c7:96:53:42: 28:fa:2d:f5:58:8b:ab:a1:e0:e3:bd:fa:06:03:ef:b7:c4:8b: 20:a6:1f:23:a0:b0:16:cd:a8:e9:38:30:9f:45:74:37:01:61: c8:08:d8:99:14:a9:b3:f9:c6:34:fd:ac:cd:3b:f6:69:85:9c: 83:94:e1:be:20:cb:38:25:69:d5:8e:dc:57:8c:c8:ab:5e:98: f6:5f:c1:0b:ec:61:43:42:b7:d3:75:51:f4:f7:80:96:b5:e4: cb:89:ba:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjUwODI0MTk0NTQ0WhcNMjUwODMxMTk0NTQ0WjAYMRYwFAYD VQQDEw02OGFiNmJlOS1lOGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wtqCYvR2WtfNZT+9gdMny8SWBGIi9u+lkdfXKca3ns0aqe4QPnzfZoIFKel lLKZGHBz1glyj1d3UUzJXkQDL8RxKqTnwmiyuZmi0HiXAdTCA4l59PzrURCKEfOL 3up563XWAk2FXqq7n70c+sCZh5T/BCnpa29HFANSXCFPt33ka+3H0F6YOm55E7Vr zPdfymGp3G98vO/2OChmaQxiYotknAw/FMGEWA8x5gQ3CiuBZi4IVzR8li2SvRP7 7qQ0A+A3QSp//hvPf68HXpaHPEVwnZ0BHhqg9Vxf4/c54fmr5EitMPJ/X4roXxLk rfuCYFipSk/3fSYjdS6/x/21/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrAM91Y e5Zvo56+04Eh0UIZz4TBMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI8EOztcx60OcXbMxsL/tmiVyDGn2HzXv4hk9s3i0zvT+OqlJm0QTv OemT5UYdwjdzATUbDEz6H6adfTYwRDTbMuOpn9alvhN0xNhfYWJtw3OmvW1U/XFN pOCLvuvAcnp7JTQQJ5QsvbDTdiz10SqL767GVrpcXwM7flwZWu6fBVX3TQcnqxW5 7KPj8NKacOqWpZ2ymfwOebG1M+iEcseWU0Io+i31WIuroeDjvfoGA++3xIsgph8j oLAWzajpODCfRXQ3AWHICNiZFKmz+cY0/azNO/ZphZyDlOG+IMs4JWnVjtxXjMir Xpj2X8EL7GFDQrfTdVH094CWteTLibpR -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:54 2025 by rpki-client