$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: RTZyLQ4/2kAKgTUD1EZWvJihvnPeqbhARrKRDPKKB7A= Subject key identifier: 06:AC:DE:F4:30:0A:44:29:CB:20:FC:6F:B3:1E:32:4A:E1:7B:70:02 Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 064A Signing time: Thu 04 Sep 2025 21:41:16 +0000 Manifest this update: Thu 04 Sep 2025 21:41:16 +0000 Manifest next update: Thu 11 Sep 2025 21:41:16 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: pgyAIlVfPz+wZgrTbXuMRZkGHWtJ8l8PcUq/uLg+jqU=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: iU7wUJ3hXR1AJP4W6iQ9Q4xhVfpuGa8z3zC49Uy6j+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Sep 4 21:41:16 2025 GMT Not After : Sep 11 21:41:16 2025 GMT Subject: CN=68ba077c-4be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:03:61:b9:d3:d3:aa:77:48:59:44:08:19:d4: 53:5e:c0:88:3d:1e:cb:a9:e7:e8:c5:15:52:b9:b6: 30:df:01:61:90:3f:e2:27:05:61:a6:af:9d:be:b2: 3e:dc:28:93:a3:ea:da:8c:41:07:3c:d0:c6:a5:33: 33:5b:04:e5:b2:72:c8:b7:7b:ce:ea:3c:0f:54:2c: 00:a7:db:5f:aa:97:23:26:18:7d:ac:92:44:4a:1e: 1f:51:71:34:c2:91:1e:32:60:ce:83:89:94:1b:35: 7f:87:f5:e0:0a:11:ec:1b:f8:10:77:b1:bf:20:1f: cb:98:1a:a5:18:eb:96:b9:83:db:35:8c:fd:44:8d: fa:46:c7:93:1f:91:14:79:cb:03:bd:d3:ed:ca:4f: 2d:aa:c1:86:97:9b:5c:9b:2b:59:48:ee:31:5e:81: dd:e2:7f:af:1f:f5:71:75:98:ce:c0:1d:df:5b:b5: 52:b5:a9:bf:35:e8:d1:0d:f4:a4:a7:b3:7c:c6:2d: 9f:26:f7:87:b3:c7:89:2a:ac:62:04:2b:3e:4e:08: 6b:ee:71:f2:21:33:37:02:f8:2a:6f:a6:27:fb:c8: f0:0b:2d:54:9e:17:94:4b:03:6f:1f:96:d3:f0:1c: 93:d7:66:af:09:18:3b:08:6d:8d:3b:22:2a:5c:ee: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AC:DE:F4:30:0A:44:29:CB:20:FC:6F:B3:1E:32:4A:E1:7B:70:02 X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:85:16:83:15:f8:e4:5a:99:b5:0f:45:0d:51:db:5f:53:d7: 7a:21:8a:76:1f:28:cb:17:16:5d:a5:d9:bd:66:5f:ab:08:c9: 10:0c:ea:cc:7d:af:73:db:7f:12:bf:07:ea:75:42:c6:f4:b5: 2e:fe:30:7d:d9:7c:88:74:98:f1:30:8e:42:ba:b7:d3:3a:6a: d7:88:3c:be:67:a1:7a:8d:e1:0d:f9:28:33:df:63:44:68:97: cd:1a:d2:ed:55:d9:ba:08:21:97:c5:00:5e:71:78:3b:30:8b: 5b:86:89:b1:e2:58:45:3a:a8:39:9a:2e:51:fd:28:e7:5b:ce: 8b:10:41:1d:25:fb:a0:e6:61:70:ed:b4:73:5c:0c:d7:9e:a9: 19:4c:09:56:1a:6f:9d:db:5a:35:d4:20:9d:f7:6d:17:ce:53: 0f:6c:96:c1:14:97:d2:2d:b6:17:54:a1:55:86:ec:4c:e6:c1: 6c:de:14:a3:9a:16:89:89:f0:4f:26:1a:fd:63:b6:b0:0c:db: 60:78:03:0a:7c:78:36:e9:1e:47:64:87:9d:23:05:1e:6f:32: 69:9d:42:e7:08:fb:5a:be:f7:7f:a4:69:b5:1c:b2:c9:d9:1a: 30:65:35:b9:7d:5a:f2:3f:82:9f:24:a5:3a:9d:c8:e6:06:b0: 87:e0:66:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUwOTA0MjE0MTE2WhcNMjUwOTExMjE0MTE2WjAYMRYwFAYD VQQDEw02OGJhMDc3Yy00YmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wNhudPTqndIWUQIGdRTXsCIPR7LqefoxRVSubYw3wFhkD/iJwVhpq+dvrI+ 3CiTo+rajEEHPNDGpTMzWwTlsnLIt3vO6jwPVCwAp9tfqpcjJhh9rJJESh4fUXE0 wpEeMmDOg4mUGzV/h/XgChHsG/gQd7G/IB/LmBqlGOuWuYPbNYz9RI36RseTH5EU ecsDvdPtyk8tqsGGl5tcmytZSO4xXoHd4n+vH/VxdZjOwB3fW7VStam/NejRDfSk p7N8xi2fJveHs8eJKqxiBCs+Tghr7nHyITM3Avgqb6Yn+8jwCy1UnheUSwNvH5bT 8ByT12avCRg7CG2NOyIqXO5HlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAas3vQw CkQpyyD8b7MeMkrhe3ACMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBahRaDFfjkWpm1D0UNUdtfU9d6IYp2HyjLFxZdpdm9Zl+rCMkQDOrM fa9z238SvwfqdULG9LUu/jB92XyIdJjxMI5CurfTOmrXiDy+Z6F6jeEN+Sgz32NE aJfNGtLtVdm6CCGXxQBecXg7MItbhomx4lhFOqg5mi5R/SjnW86LEEEdJfug5mFw 7bRzXAzXnqkZTAlWGm+d21o11CCd920XzlMPbJbBFJfSLbYXVKFVhuxM5sFs3hSj mhaJifBPJhr9Y7awDNtgeAMKfHg26R5HZIedIwUebzJpnULnCPtavvd/pGm1HLLJ 2RowZTW5fVryP4KfJKU6ncjmBrCH4Gav -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:13 2025 by rpki-client