$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: 32O4l89vzqK6LUCjNRsFjljgg16xl9Sbzu4Hh+AKWHQ= Subject key identifier: B7:A0:01:0C:CE:39:35:57:0D:1A:C5:BF:C4:28:93:3A:A1:55:0B:E3 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0798 Signing time: Mon 08 Sep 2025 21:28:43 +0000 Manifest this update: Mon 08 Sep 2025 21:28:42 +0000 Manifest next update: Mon 15 Sep 2025 21:28:42 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: 08iaQfikCo6nWPoK7D9h/4p3dyz8FXHeVUeEWL/IBOU=) 2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: bPVen4Q79bQMysYZB+1SSkGirdnYsj/wax4oaPllL9M=) 3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: U4O6uXSOF+3gB8WDqXNclHvwBePMcUEtPgGRnogD3Pk=) 4: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: EPNFm1X8MnpnhMfq1ASr/F02aUDuHCY7XYN9aoUZxhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 21:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Sep 8 21:28:42 2025 GMT Not After : Sep 15 21:28:42 2025 GMT Subject: CN=68bf4a8a-f039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d5:a7:e3:1f:46:5d:fe:b7:ae:eb:7d:26:f9: 2f:13:21:b6:09:55:6d:4e:33:27:45:6a:b7:86:91: 24:0d:ec:c6:02:e1:05:f5:30:4e:b2:07:b3:e9:9e: d9:6d:7e:d4:23:c1:30:ae:bc:c8:77:0b:d1:6c:9e: 1b:fa:6d:4f:6b:47:e0:aa:29:26:33:b5:4a:f4:98: c0:41:a5:71:0c:ea:21:e3:45:14:9a:bc:12:da:d9: 98:21:c9:9c:1d:bc:c1:3d:f7:bf:3b:98:77:56:74: 41:f0:63:41:51:43:77:ed:55:4e:25:9d:bb:71:a4: ba:30:74:f0:dc:7a:54:a2:46:8e:6f:c8:b8:2b:a8: fa:e5:3a:8e:2c:cd:9d:e2:50:93:bf:b5:6b:56:1f: 7f:e4:ee:2a:37:7f:2b:ea:ff:d1:11:ca:83:0f:04: 09:9a:cb:93:55:b1:8b:f9:d6:45:0a:e1:19:81:75: 6f:4d:e6:fa:93:7b:98:c2:5e:c8:06:fe:e5:c8:a5: 5f:ab:c0:7e:fa:de:71:9b:fa:b3:38:66:54:40:c9: 44:ad:97:0f:07:aa:89:ac:69:62:3e:df:91:f8:31: e3:88:ef:d1:2a:6b:41:b4:4a:7d:7c:5f:c4:66:ac: d0:47:08:9f:1f:b5:39:6a:78:74:1a:04:a5:98:69: b4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A0:01:0C:CE:39:35:57:0D:1A:C5:BF:C4:28:93:3A:A1:55:0B:E3 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:53:c1:63:4e:c4:64:55:a1:7f:d2:6f:08:a2:9a:8a:31:5d: 03:28:02:2d:c5:b5:25:1b:8b:aa:e6:4c:4d:b6:9a:94:47:87: ce:b7:a9:31:f3:09:1c:95:18:0d:fc:21:e9:9e:4a:ce:60:e1: b7:06:86:cc:d1:a0:9f:e0:e5:8f:4a:93:4a:46:ae:28:82:c3: f8:0f:a0:42:23:a5:4b:80:97:1e:da:43:47:b5:9e:24:55:0a: b5:9b:45:ca:ad:a0:c3:74:5f:13:4d:9e:15:34:00:a9:d6:c6: 4a:8f:03:86:7a:cf:0d:58:f9:42:00:e8:96:9e:da:9f:e6:c7: 61:78:a6:69:ce:af:6e:a9:76:3c:7e:37:b7:13:26:97:3a:8e: 5e:84:ca:63:04:60:2f:f1:36:25:e2:74:e0:31:7e:fd:5b:4d: 05:0f:c7:35:e2:ef:97:dd:55:e9:08:22:f3:ad:1f:4c:8c:e7: 5b:a3:f4:47:fa:42:75:ad:df:c4:3f:d1:19:54:8a:58:8e:78: ac:27:51:91:03:8d:7f:49:ab:b0:f8:32:73:16:51:c8:42:0f: 60:21:cb:9d:b2:15:be:35:92:e9:9f:11:a1:7c:87:64:84:55: d3:10:97:f2:ef:8f:05:08:75:85:2b:af:0f:60:0d:1e:2b:ba: e6:86:6d:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjUwOTA4MjEyODQyWhcNMjUwOTE1MjEyODQyWjAYMRYwFAYD VQQDEw02OGJmNGE4YS1mMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NWn4x9GXf63rut9JvkvEyG2CVVtTjMnRWq3hpEkDezGAuEF9TBOsgez6Z7Z bX7UI8EwrrzIdwvRbJ4b+m1Pa0fgqikmM7VK9JjAQaVxDOoh40UUmrwS2tmYIcmc HbzBPfe/O5h3VnRB8GNBUUN37VVOJZ27caS6MHTw3HpUokaOb8i4K6j65TqOLM2d 4lCTv7VrVh9/5O4qN38r6v/REcqDDwQJmsuTVbGL+dZFCuEZgXVvTeb6k3uYwl7I Bv7lyKVfq8B++t5xm/qzOGZUQMlErZcPB6qJrGliPt+R+DHjiO/RKmtBtEp9fF/E ZqzQRwifH7U5anh0GgSlmGm0rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLegAQzO OTVXDRrFv8QokzqhVQvjMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGU8FjTsRkVaF/0m8IopqKMV0DKAItxbUlG4uq5kxNtpqUR4fOt6kx 8wkclRgN/CHpnkrOYOG3BobM0aCf4OWPSpNKRq4ogsP4D6BCI6VLgJce2kNHtZ4k VQq1m0XKraDDdF8TTZ4VNACp1sZKjwOGes8NWPlCAOiWntqf5sdheKZpzq9uqXY8 fje3EyaXOo5ehMpjBGAv8TYl4nTgMX79W00FD8c14u+X3VXpCCLzrR9MjOdbo/RH +kJ1rd/EP9EZVIpYjnisJ1GRA41/Sauw+DJzFlHIQg9gIcudshW+NZLpnxGhfIdk hFXTEJfy748FCHWFK68PYA0eK7rmhm3R -----END CERTIFICATE-----Generated at Tue Sep 9 13:41:35 2025 by rpki-client