$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: 2G024aRvjdYQkS0Ynre5Nflo+ES9B3ZUvU+xAdwHLho= Subject key identifier: E1:3E:81:E2:3D:B7:DF:49:C4:24:32:8C:AD:66:AA:34:5F:FE:4A:1D Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 020B Signing time: Tue 09 Sep 2025 02:18:37 +0000 Manifest this update: Tue 09 Sep 2025 02:18:37 +0000 Manifest next update: Tue 16 Sep 2025 02:18:37 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: rJmMjHyKN5nQgXOKUXGTpU0Md7gqLyA6iDpmNMYUceI=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Sep 9 02:18:37 2025 GMT Not After : Sep 16 02:18:37 2025 GMT Subject: CN=68bf8e7d-5738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:7e:a0:76:da:f2:fa:44:17:28:04:cc:7e: 9e:da:6a:c5:cb:04:14:2d:da:c3:0c:4d:de:67:e1: b0:ba:a4:af:70:e0:aa:62:74:b5:91:05:99:96:2d: 55:ff:a0:b7:68:c8:37:12:55:fe:d2:e8:d0:44:71: 29:84:d9:03:d9:18:07:ff:45:69:70:1a:cc:7b:9b: 69:e1:b4:29:51:8e:96:30:6d:61:a8:52:7e:16:95: 0c:20:f5:4f:9e:31:50:91:44:2e:bb:86:0e:0e:25: 6f:b1:65:9e:d0:d6:21:2c:ef:86:93:ea:49:6d:3d: 92:bf:8e:34:16:42:3d:2d:5c:29:46:1e:cd:70:d5: f6:1e:40:82:31:92:51:67:99:97:50:93:75:17:5b: e6:45:e2:94:84:0d:78:3f:7d:fa:8e:da:d1:b9:0d: 8d:9a:b3:e8:71:94:97:06:02:9e:6d:9f:45:fd:35: 4c:82:95:8b:47:4a:4c:44:54:43:ec:04:df:40:72: c7:14:08:1c:76:bc:3e:59:9e:92:7c:d3:31:71:a1: 2b:4a:9d:92:14:66:b5:cc:87:9e:49:04:01:ea:ba: cd:ab:ec:b6:65:89:8c:b2:a1:6e:16:5a:2b:2c:dc: 29:ee:ba:cc:38:97:93:42:63:40:91:bf:3c:2a:06: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3E:81:E2:3D:B7:DF:49:C4:24:32:8C:AD:66:AA:34:5F:FE:4A:1D X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:76:9a:64:3c:82:1f:6c:53:13:82:74:c0:ac:81:dc:99:4c: f5:54:9f:46:e7:89:c0:09:63:e7:92:25:67:45:0f:5a:59:2c: 22:e0:05:74:90:d2:aa:df:b2:cd:74:a6:6b:e8:e9:28:1f:d6: 9a:36:10:3b:09:86:d3:3e:e3:1e:ec:b9:2e:96:e1:26:97:b8: 6a:fb:32:79:39:6c:e2:dc:ea:24:14:92:c7:e7:53:e2:94:7a: d4:a4:9a:01:e4:87:37:b4:04:c8:60:97:de:2a:39:77:e4:93: f1:c0:20:96:64:8c:85:21:1a:27:a8:ce:f4:b1:b1:05:60:e1: e1:bd:a0:db:0e:ba:2e:68:c9:02:ab:33:01:12:55:09:4c:d9: b2:80:d6:03:e4:41:62:47:d4:4e:30:63:25:58:49:25:b1:69: 68:5b:a5:25:93:a2:d1:b8:8a:23:dc:a7:25:a6:3b:c1:02:9e: 32:7d:b1:20:99:31:85:67:2d:91:04:ed:63:f8:33:f8:07:41: 6f:55:c0:aa:57:62:6f:0b:b9:76:4e:77:a0:00:17:13:d0:ef: 09:91:0e:e3:cf:28:44:c0:e6:f3:7b:8e:e4:79:b9:28:26:8f: 49:41:a7:3d:27:b1:6d:58:07:9b:a4:65:e7:1b:f9:8a:18:80: 13:02:ba:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwOTA5MDIxODM3WhcNMjUwOTE2MDIxODM3WjAYMRYwFAYD VQQDEw02OGJmOGU3ZC01NzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5d+oHba8vpEFygEzH6e2mrFywQULdrDDE3eZ+GwuqSvcOCqYnS1kQWZli1V /6C3aMg3ElX+0ujQRHEphNkD2RgH/0VpcBrMe5tp4bQpUY6WMG1hqFJ+FpUMIPVP njFQkUQuu4YODiVvsWWe0NYhLO+Gk+pJbT2Sv440FkI9LVwpRh7NcNX2HkCCMZJR Z5mXUJN1F1vmReKUhA14P336jtrRuQ2NmrPocZSXBgKebZ9F/TVMgpWLR0pMRFRD 7ATfQHLHFAgcdrw+WZ6SfNMxcaErSp2SFGa1zIeeSQQB6rrNq+y2ZYmMsqFuFlor LNwp7rrMOJeTQmNAkb88KgZzJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOE+geI9 t99JxCQyjK1mqjRf/kodMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUdppkPIIfbFMTgnTArIHcmUz1VJ9G54nACWPnkiVnRQ9aWSwi4AV0 kNKq37LNdKZr6OkoH9aaNhA7CYbTPuMe7LkuluEml7hq+zJ5OWzi3OokFJLH51Pi lHrUpJoB5Ic3tATIYJfeKjl35JPxwCCWZIyFIRonqM70sbEFYOHhvaDbDrouaMkC qzMBElUJTNmygNYD5EFiR9ROMGMlWEklsWloW6Ulk6LRuIoj3KclpjvBAp4yfbEg mTGFZy2RBO1j+DP4B0FvVcCqV2JvC7l2TnegABcT0O8JkQ7jzyhEwObze47kebko Jo9JQac9J7FtWAebpGXnG/mKGIATArq1 -----END CERTIFICATE-----Generated at Tue Sep 9 09:51:19 2025 by rpki-client