$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: fXaQphYv0D7FOEuOl0mz16qhSYR8b4puWup/CBN15kY= Subject key identifier: 73:37:C4:93:6D:74:58:8A:FE:20:41:F5:9D:33:90:B1:2A:0F:8F:C0 Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0A80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0A6E Signing time: Wed 20 Aug 2025 19:44:37 +0000 Manifest this update: Wed 20 Aug 2025 19:44:37 +0000 Manifest next update: Wed 27 Aug 2025 19:44:37 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: 6pEQ8vUul4+3zadoIL9Bdg2pO73nZwjtWEFctuVSmpk=) 2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=) 3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2688 (0xa80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Aug 20 19:44:37 2025 GMT Not After : Aug 27 19:44:37 2025 GMT Subject: CN=68a625a5-f822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:7e:99:54:0c:1c:9e:2f:4f:55:19:a6:8c: 29:86:62:df:65:0d:96:61:3e:bf:ac:c7:4a:bc:1a: 28:d0:c0:8a:d8:30:ad:50:ca:98:f6:07:9a:67:41: 7d:a4:6a:10:80:14:ed:e6:89:be:01:fd:50:f9:20: 2d:53:c3:09:7d:f9:5a:fa:b1:01:2a:a1:0b:26:dd: ec:f8:fc:5e:01:cf:02:d1:62:9e:31:c4:50:79:ad: e8:c6:dc:0e:ec:c2:e6:82:47:d1:42:98:69:5a:67: 79:1c:81:81:4a:0c:62:7d:0e:c9:e6:d6:ab:1d:dd: 27:25:84:59:f6:91:d0:42:c3:9a:d6:5d:c7:b5:70: 9e:8e:4b:bf:ea:a3:fa:d7:56:32:01:80:ef:13:9f: ef:b8:b4:5c:3f:bd:95:7b:49:81:01:66:81:92:aa: de:fb:e9:50:ec:7c:93:98:38:a9:d8:a0:c9:32:27: 5d:c3:63:2c:2e:4b:19:30:aa:b1:a3:df:fb:76:81: e2:e9:0a:96:30:6b:ad:d7:d5:14:d5:ed:b9:11:06: c6:a1:90:8e:19:77:6e:40:7e:66:71:22:df:2f:21: 9f:40:b7:0d:2a:c4:47:d0:e2:51:34:6a:b1:7c:68: e6:bf:a4:9d:cf:b5:f3:6a:77:db:b2:26:95:39:6a: f4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:37:C4:93:6D:74:58:8A:FE:20:41:F5:9D:33:90:B1:2A:0F:8F:C0 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b5:a4:77:12:fe:04:35:4e:2b:4f:61:da:cc:01:94:9e:d4: 3a:31:15:3f:b2:6c:ae:47:4e:8a:36:16:97:d2:1c:3c:43:62: a9:37:0a:c5:f3:af:46:0d:f9:76:6e:e1:c6:1e:5f:9d:b0:ab: 5b:41:30:9c:52:95:f9:83:e2:c2:5b:e2:ff:16:aa:c2:ee:a0: 84:49:f5:ed:23:50:dd:43:40:de:a5:a1:34:05:00:5a:c6:16: 78:09:5b:8f:10:b5:93:b9:10:ff:ab:74:84:38:16:f5:65:5d: f3:3f:e0:14:fe:dd:b0:80:31:59:4a:a8:43:04:b1:23:f2:fe: c3:26:e5:1a:49:a9:cf:e2:99:fc:d3:cf:89:d8:85:bf:93:d6: 13:3c:2f:36:1b:45:01:81:8a:09:90:dc:f1:95:0c:f3:f4:99: 5c:08:06:1d:31:ce:31:81:41:78:d7:3b:44:c5:47:b0:cd:5f: c8:27:fe:31:30:c6:06:b5:e6:84:87:c2:23:db:7b:98:28:b2: 91:7f:85:f9:29:05:1c:f2:45:d8:38:fd:2d:d6:99:9e:7b:59: 75:d4:48:90:6c:bd:1e:7a:71:5c:89:e8:cb:8c:86:ad:40:97: 7c:4a:77:a0:da:bc:86:cc:f1:1b:74:0d:a4:2a:8b:9f:76:b3: 08:fe:a6:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjUwODIwMTk0NDM3WhcNMjUwODI3MTk0NDM3WjAYMRYwFAYD VQQDEw02OGE2MjVhNS1mODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Mx+mVQMHJ4vT1UZpowphmLfZQ2WYT6/rMdKvBoo0MCK2DCtUMqY9geaZ0F9 pGoQgBTt5om+Af1Q+SAtU8MJffla+rEBKqELJt3s+PxeAc8C0WKeMcRQea3oxtwO 7MLmgkfRQphpWmd5HIGBSgxifQ7J5tarHd0nJYRZ9pHQQsOa1l3HtXCejku/6qP6 11YyAYDvE5/vuLRcP72Ve0mBAWaBkqre++lQ7HyTmDip2KDJMiddw2MsLksZMKqx o9/7doHi6QqWMGut19UU1e25EQbGoZCOGXduQH5mcSLfLyGfQLcNKsRH0OJRNGqx fGjmv6Sdz7XzanfbsiaVOWr0FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM3xJNt dFiK/iBB9Z0zkLEqD4/AMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQButaR3Ev4ENU4rT2HazAGUntQ6MRU/smyuR06KNhaX0hw8Q2KpNwrF 869GDfl2buHGHl+dsKtbQTCcUpX5g+LCW+L/FqrC7qCESfXtI1DdQ0DepaE0BQBa xhZ4CVuPELWTuRD/q3SEOBb1ZV3zP+AU/t2wgDFZSqhDBLEj8v7DJuUaSanP4pn8 08+J2IW/k9YTPC82G0UBgYoJkNzxlQzz9JlcCAYdMc4xgUF41ztExUewzV/IJ/4x MMYGteaEh8Ij23uYKLKRf4X5KQUc8kXYOP0t1pmee1l11EiQbL0eenFciejLjIat QJd8Sneg2ryGzPEbdA2kKoufdrMI/qYH -----END CERTIFICATE-----Generated at Thu Aug 21 18:01:55 2025 by rpki-client