$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: qg9o0XJX6ca3BVTAy/36FcgEi8Ks1Q1JQeTyrIPJU8I= Subject key identifier: D7:5C:30:9A:0B:4F:A6:5E:5C:2B:C6:6F:9C:DD:7B:74:14:C1:D9:91 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 0138 Signing time: Fri 05 Sep 2025 04:31:00 +0000 Manifest this update: Fri 05 Sep 2025 04:30:59 +0000 Manifest next update: Fri 12 Sep 2025 04:30:59 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: z1LUy/D3q61sxI4SV0mGFqnN7jybip4HyTlELTXASRw=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: LLGlR1swQUGpHRHzrbzk96I6Zx3kb8thD/xfxQf3uHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Sep 5 04:30:59 2025 GMT Not After : Sep 12 04:30:59 2025 GMT Subject: CN=68ba6783-e7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:68:3b:32:81:04:6e:73:db:a6:1c:0c:93:9e: 08:55:a4:39:d9:14:5e:e2:3f:2b:46:fa:b5:c3:fb: 89:95:ea:93:44:3a:79:b8:3e:55:a6:c9:41:bc:19: 83:06:4a:61:d2:fe:de:a6:48:ab:ba:34:21:95:80: 64:fe:df:e3:17:bc:05:6f:d7:ff:ce:fa:64:65:8a: b6:a4:a0:ab:bc:a9:af:ff:d5:da:27:88:8c:58:35: bc:a5:7d:b2:ab:a0:18:df:94:2b:ed:c9:9b:f0:07: 34:b2:60:ea:d5:c4:4d:b1:08:67:00:18:20:8f:d6: e4:e3:73:1a:07:96:01:06:fd:46:0b:80:a9:c3:7d: db:a9:0e:b4:1f:fe:40:73:01:6a:04:74:41:de:79: 14:ff:cc:d4:66:4b:4e:eb:12:13:e6:34:ff:4a:4a: 7e:35:f4:d9:32:75:1e:ed:a1:f6:ba:5c:77:d0:09: 4f:04:cf:74:83:c5:45:01:12:99:b6:c1:f7:c2:48: 55:fd:40:58:ca:cc:c4:e5:56:10:0e:02:76:43:c2: 78:b5:ed:2d:d7:6f:c8:23:90:c7:4a:b2:aa:42:e3: 32:20:dc:76:c9:f6:23:c4:be:23:03:ed:13:39:b2: 79:4c:27:f6:ed:8a:93:c9:2f:df:25:41:ba:7d:ee: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5C:30:9A:0B:4F:A6:5E:5C:2B:C6:6F:9C:DD:7B:74:14:C1:D9:91 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0d:f8:f9:35:c5:24:07:24:9a:de:3c:93:64:8d:03:aa:6b: 38:60:ed:f7:a1:08:85:9d:23:98:5c:81:f7:c6:26:99:e8:b5: b6:c8:7b:7c:e8:d9:94:02:8d:3d:38:b8:25:b5:05:e2:d5:de: 0e:50:91:ac:f2:c8:02:e1:d1:39:d9:78:a5:cb:9b:86:02:6f: 12:5c:c6:b0:5b:7d:61:4e:08:70:59:a2:83:94:3b:77:69:5f: f8:0d:4d:fa:67:d3:d1:b1:fe:46:97:33:a6:43:07:a1:6a:ea: 63:8e:ef:ad:42:3a:c7:d9:9b:67:ef:df:71:ff:6e:de:f6:40: 20:e3:a3:38:05:e6:ca:e8:4d:5e:30:86:cb:13:1b:1b:85:47: ee:bd:00:aa:33:95:8b:17:28:4d:4a:1d:e7:02:24:c4:a4:ef: e8:a7:da:fd:68:e7:fa:80:cd:09:42:40:56:07:b3:cd:2c:a0: 21:9e:3e:f3:4d:31:b7:8b:dc:f0:45:6c:6a:3e:06:48:3c:b2: a1:b2:90:b2:64:b4:1f:26:d7:00:10:b0:c1:21:7c:dd:95:0d: d4:64:35:0c:b2:09:85:51:df:cc:7e:33:59:d4:f9:93:3b:53: fb:af:9e:ee:29:aa:40:4e:4b:be:b9:47:45:85:c6:1d:df:32: 1e:c1:bb:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjUwOTA1MDQzMDU5WhcNMjUwOTEyMDQzMDU5WjAYMRYwFAYD VQQDEw02OGJhNjc4My1lN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02g7MoEEbnPbphwMk54IVaQ52RRe4j8rRvq1w/uJleqTRDp5uD5VpslBvBmD Bkph0v7epkirujQhlYBk/t/jF7wFb9f/zvpkZYq2pKCrvKmv/9XaJ4iMWDW8pX2y q6AY35Qr7cmb8Ac0smDq1cRNsQhnABggj9bk43MaB5YBBv1GC4Cpw33bqQ60H/5A cwFqBHRB3nkU/8zUZktO6xIT5jT/Skp+NfTZMnUe7aH2ulx30AlPBM90g8VFARKZ tsH3wkhV/UBYyszE5VYQDgJ2Q8J4te0t12/II5DHSrKqQuMyINx2yfYjxL4jA+0T ObJ5TCf27YqTyS/fJUG6fe7lDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdcMJoL T6ZeXCvGb5zde3QUwdmRMB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Dfj5NcUkBySa3jyTZI0Dqms4YO33oQiFnSOYXIH3xiaZ6LW2yHt8 6NmUAo09OLgltQXi1d4OUJGs8sgC4dE52Xily5uGAm8SXMawW31hTghwWaKDlDt3 aV/4DU36Z9PRsf5GlzOmQwehaupjju+tQjrH2Ztn799x/27e9kAg46M4BebK6E1e MIbLExsbhUfuvQCqM5WLFyhNSh3nAiTEpO/op9r9aOf6gM0JQkBWB7PNLKAhnj7z TTG3i9zwRWxqPgZIPLKhspCyZLQfJtcAELDBIXzdlQ3UZDUMsgmFUd/MfjNZ1PmT O1P7r57uKapATku+uUdFhcYd3zIewbtT -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:20 2025 by rpki-client