$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json) Hash identifier: cO+Zp+8T/+eFj19zEKfR34bPP64dM1W9/KtNzemwkYk= Subject key identifier: 39:A2:8E:E7:F5:F5:7C:F5:72:B3:4A:1F:BA:A2:31:A9:BA:B1:9F:62 Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft Manifest number: 0C90 Signing time: Sun 24 Aug 2025 18:11:17 +0000 Manifest this update: Sun 24 Aug 2025 18:11:16 +0000 Manifest next update: Sun 31 Aug 2025 18:11:16 +0000 Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: OjUnuQR12UaoPhw7rf/vtAMGCBPe484g2F2csk5mKi8=) 2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: dvi0NiJsfBapKtj0ISklbEMBQ4R3yCT+QGTIlcMVI/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: Aug 24 18:11:16 2025 GMT Not After : Aug 31 18:11:16 2025 GMT Subject: CN=68ab55c4-3c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:55:60:17:86:ea:2a:a5:23:20:86:b9:f1: 4c:c2:93:2a:4b:4c:3a:a6:5c:99:47:ab:03:4b:80: f1:de:0c:38:23:0e:d2:cd:1a:a2:fe:f2:4e:98:4a: 07:1f:d2:f4:fc:5c:b4:72:70:63:1c:9f:1c:6d:14: 16:8f:81:e3:73:2b:7b:45:45:1f:10:32:7d:c8:07: 4a:ab:8c:d8:59:b1:35:75:52:04:e5:25:ca:39:92: 95:5c:70:83:3b:8b:92:db:5f:1a:fa:96:2a:a6:86: df:59:be:65:c6:c6:05:60:a2:e3:be:60:4f:3a:30: a0:ff:fd:6a:a4:bd:c9:71:78:30:a7:4b:99:24:d0: 7f:57:be:a7:a2:89:22:1b:00:11:ed:9b:5a:4f:c5: d5:74:db:4c:e0:4b:41:cf:10:1b:6b:f1:92:ba:7f: 37:ec:12:32:64:14:35:85:10:8c:c3:49:5f:3a:3f: fa:54:5b:54:15:a0:32:fd:14:4b:e6:21:fa:8c:bc: b9:4a:17:71:5e:b3:5f:43:9f:00:cd:4f:9f:48:f6: be:32:fa:57:59:ba:9a:49:0b:36:35:3e:34:5d:60: 3a:e9:e4:5f:24:14:66:fb:22:5d:d7:22:22:e6:3f: 83:88:18:2e:01:73:3e:05:f7:64:e0:da:fb:a5:8a: cb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A2:8E:E7:F5:F5:7C:F5:72:B3:4A:1F:BA:A2:31:A9:BA:B1:9F:62 X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:44:af:f4:ba:d2:7a:80:18:80:17:c3:bb:e5:63:a5:61:8e: ad:4d:73:fa:bb:a1:f4:89:20:5c:41:e0:1c:65:f2:8d:57:62: 82:fc:cb:f9:20:15:1d:2a:c4:da:a3:07:73:0a:ed:dc:0f:4e: 1f:47:ff:70:81:f0:c7:6f:1b:64:38:60:af:2f:1a:fa:5a:86: d9:1c:89:90:83:3f:3f:a9:f6:c1:e0:f7:e0:08:64:78:54:82: c6:b3:3c:77:f9:98:1e:ec:60:19:cc:c6:c8:fd:27:a4:39:db: f6:db:4b:e1:a1:8d:bd:05:e8:fb:9a:70:a8:48:63:18:6b:82: 8a:34:bf:20:3e:b3:6c:e3:d9:3c:aa:fa:fa:fc:5f:69:e5:0d: 7f:fc:b6:71:7c:16:18:6f:f5:9d:6d:8c:07:1c:4a:17:3a:8f: 7a:f6:14:b7:06:9e:08:39:b7:f5:de:f2:d7:b7:41:48:0f:85: d9:0b:96:de:18:f2:4f:93:d5:2d:e2:e8:9f:58:f6:3e:90:7d: f2:33:90:48:c1:40:6b:2e:79:2c:a1:b1:2e:af:f3:1d:8d:8c: 03:d4:5a:1b:2a:23:35:8c:5c:46:d2:72:a5:89:90:3b:9f:e0: fc:71:64:1b:32:67:af:ba:b6:fa:ea:27:7e:fe:72:b4:cd:be: 19:a2:e2:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjUwODI0MTgxMTE2WhcNMjUwODMxMTgxMTE2WjAYMRYwFAYD VQQDEw02OGFiNTVjNC0zYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6BVYBeG6iqlIyCGufFMwpMqS0w6plyZR6sDS4Dx3gw4Iw7SzRqi/vJOmEoH H9L0/Fy0cnBjHJ8cbRQWj4Hjcyt7RUUfEDJ9yAdKq4zYWbE1dVIE5SXKOZKVXHCD O4uS218a+pYqpobfWb5lxsYFYKLjvmBPOjCg//1qpL3JcXgwp0uZJNB/V76nooki GwAR7ZtaT8XVdNtM4EtBzxAba/GSun837BIyZBQ1hRCMw0lfOj/6VFtUFaAy/RRL 5iH6jLy5ShdxXrNfQ58AzU+fSPa+MvpXWbqaSQs2NT40XWA66eRfJBRm+yJd1yIi 5j+DiBguAXM+Bfdk4Nr7pYrLMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmijuf1 9Xz1crNKH7qiMam6sZ9iMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ QnZ1eWpHSWw2VU9XT21zQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXRK/0utJ6gBiAF8O75WOlYY6tTXP6u6H0iSBcQeAcZfKNV2KC/Mv5 IBUdKsTaowdzCu3cD04fR/9wgfDHbxtkOGCvLxr6WobZHImQgz8/qfbB4PfgCGR4 VILGszx3+Zge7GAZzMbI/SekOdv220vhoY29Bej7mnCoSGMYa4KKNL8gPrNs49k8 qvr6/F9p5Q1//LZxfBYYb/WdbYwHHEoXOo969hS3Bp4IObf13vLXt0FID4XZC5be GPJPk9Ut4uifWPY+kH3yM5BIwUBrLnksobEur/MdjYwD1FobKiM1jFxG0nKliZA7 n+D8cWQbMmevurb66id+/nK0zb4ZouId -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:31 2025 by rpki-client