$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: kC7dwD2EEKgMfl2+2iAOt+7Dr63k/9rzyczuCoRzx6A= Subject key identifier: A4:60:45:3A:1D:A4:74:09:03:68:52:4F:FA:5B:B3:E3:7F:F5:BC:D9 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E3F Signing time: Sun 24 Aug 2025 17:44:29 +0000 Manifest this update: Sun 24 Aug 2025 17:44:28 +0000 Manifest next update: Sun 31 Aug 2025 17:44:28 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: t2UNtZmiAkbVl+qtNTiuJbpLHzNTi4enBF+Ui7ESLaM=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NeUqjo2VYHUQAlZoEGW65z9tYOjTgZvuRZo90c+p6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3656 (0xe48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Aug 24 17:44:28 2025 GMT Not After : Aug 31 17:44:28 2025 GMT Subject: CN=68ab4f7d-4d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:d4:6a:cd:d6:60:23:37:74:06:2f:96:c9: 94:9f:2d:2d:73:b0:5b:ff:2f:bc:42:f4:63:b0:85: b0:70:51:84:78:0f:89:ab:c5:54:2c:d5:c1:5a:50: 75:94:fa:d7:8e:41:5e:14:69:9e:65:b0:79:bd:56: 6f:c5:e9:f1:32:f1:2d:eb:35:03:77:b0:e0:4d:64: fe:25:7d:51:a3:94:bb:47:82:f6:34:02:85:86:54: 56:5d:0a:e7:97:42:1d:8a:58:e2:41:12:ae:47:75: b6:16:71:cc:21:4c:ea:e7:b1:ad:b2:b7:66:f6:34: 13:3d:99:13:47:63:35:c9:c3:9f:d5:c9:7b:ff:60: e8:b4:dc:88:d9:ce:23:f6:49:a6:7a:a0:30:95:5b: dd:98:5d:1f:b7:9b:30:f0:a3:95:3a:c3:49:48:04: bd:6b:6c:64:a5:d3:2e:38:0d:28:4a:e2:d5:d1:cc: a8:f3:00:06:a3:85:1b:7c:5e:48:3f:38:93:92:14: 51:0c:17:79:e3:eb:de:b1:f6:a9:bd:dd:44:15:e2: d4:ad:f8:2e:44:25:0c:0a:58:46:04:1b:c4:68:0f: 9e:96:9f:87:73:4a:c6:5c:5d:2e:27:45:6c:a8:1b: 99:10:c1:2c:36:f5:79:60:c0:61:c2:3c:d4:ba:30: 9b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:60:45:3A:1D:A4:74:09:03:68:52:4F:FA:5B:B3:E3:7F:F5:BC:D9 X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:87:d8:e3:e4:71:10:80:d4:a9:e6:11:b3:a2:c9:c6:7f:00: 2e:fb:9f:08:48:63:8a:70:43:6c:d9:7f:de:70:ed:49:32:c0: 74:aa:0b:20:95:80:90:29:3f:15:3f:3b:53:3b:4e:fb:53:3b: b8:95:50:e6:ce:ec:14:e9:be:9a:2b:96:03:55:ca:58:88:ea: 5a:8d:7a:91:20:92:f6:18:e9:ac:79:c3:b8:ae:16:49:6d:e2: 5e:b7:89:6d:e2:00:ac:a0:f7:94:64:8e:08:39:59:c3:06:08: 0c:54:3a:09:00:c2:d4:90:95:6e:9b:c0:f6:11:d4:a3:58:57: 92:60:76:d9:b8:8b:72:1e:af:b4:d9:63:76:00:05:3e:34:2c: e6:fd:36:bd:8f:a8:64:d5:eb:a9:3f:f0:68:c6:48:fe:c8:21: ff:6a:aa:f1:a4:24:9a:0a:1c:39:a4:26:10:68:dc:49:86:16: 3d:2e:e9:b0:87:02:1f:7f:26:84:1e:95:a7:e0:53:08:18:0b: 1e:b4:b1:85:e5:8f:b2:3b:35:8e:bf:c0:79:a1:3a:ea:6e:23: 15:6e:4d:30:d9:b8:5e:7c:08:96:38:40:a1:26:c6:2f:fa:ab: 97:14:b9:01:cc:7a:24:f6:d3:3f:80:9e:7f:1b:22:8a:d3:fc: 1c:13:f9:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUwODI0MTc0NDI4WhcNMjUwODMxMTc0NDI4WjAYMRYwFAYD VQQDEw02OGFiNGY3ZC00ZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XLUas3WYCM3dAYvlsmUny0tc7Bb/y+8QvRjsIWwcFGEeA+Jq8VULNXBWlB1 lPrXjkFeFGmeZbB5vVZvxenxMvEt6zUDd7DgTWT+JX1Ro5S7R4L2NAKFhlRWXQrn l0IdiljiQRKuR3W2FnHMIUzq57Gtsrdm9jQTPZkTR2M1ycOf1cl7/2DotNyI2c4j 9kmmeqAwlVvdmF0ft5sw8KOVOsNJSAS9a2xkpdMuOA0oSuLV0cyo8wAGo4UbfF5I PziTkhRRDBd54+vesfapvd1EFeLUrfguRCUMClhGBBvEaA+elp+Hc0rGXF0uJ0Vs qBuZEMEsNvV5YMBhwjzUujCbRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRgRTod pHQJA2hST/pbs+N/9bzZMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkh9jj5HEQgNSp5hGzosnGfwAu+58ISGOKcENs2X/ecO1JMsB0qgsg lYCQKT8VPztTO077Uzu4lVDmzuwU6b6aK5YDVcpYiOpajXqRIJL2GOmsecO4rhZJ beJet4lt4gCsoPeUZI4IOVnDBggMVDoJAMLUkJVum8D2EdSjWFeSYHbZuItyHq+0 2WN2AAU+NCzm/Ta9j6hk1eupP/Boxkj+yCH/aqrxpCSaChw5pCYQaNxJhhY9Lumw hwIffyaEHpWn4FMIGAsetLGF5Y+yOzWOv8B5oTrqbiMVbk0w2bhefAiWOEChJsYv +quXFLkBzHok9tM/gJ5/GyKK0/wcE/kU -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:09 2025 by rpki-client