$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json) Hash identifier: h8NnHYFbUNurUKoeu5iZuXYR3Y8InUF+FWC+LQI2eZ4= Subject key identifier: 55:09:69:89:8C:80:BB:81:24:DF:54:D5:DD:ED:8D:1A:28:8A:58:92 Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Certificate serial: 0C57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft Manifest number: 0C52 Signing time: Sun 24 Aug 2025 18:27:07 +0000 Manifest this update: Sun 24 Aug 2025 18:27:06 +0000 Manifest next update: Sun 31 Aug 2025 18:27:06 +0000 Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: ltQlG7gSE5t7ncG6viNx+b1gviP5ufEI1OmZtvuLpcY=) 2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: /6LQIDdmV3dE7MeUvHilah4V60fZn+m3/u3zkX+mGFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Validity Not Before: Aug 24 18:27:06 2025 GMT Not After : Aug 31 18:27:06 2025 GMT Subject: CN=68ab597b-d86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:ab:19:e7:b5:0a:d9:dd:60:9f:3d:60:69: 98:b3:b8:25:d3:6f:6e:81:47:01:66:4e:0e:ff:b1: 8d:21:40:42:dd:0f:b7:c5:7e:66:dd:60:b5:cf:c7: b4:cd:c4:70:e1:a6:b1:16:9a:9b:7a:6e:64:a2:08: b8:ff:c9:55:89:84:fb:5f:7b:c3:94:01:42:7e:4c: 00:0a:94:71:66:41:7e:b0:0b:18:e8:13:55:63:75: dc:1e:da:82:c5:29:d9:10:0c:9e:b8:1e:11:05:ea: f2:44:bd:62:80:31:0d:eb:83:a4:e9:c3:8e:5d:3d: 8a:73:39:43:9f:9c:29:46:fe:60:1c:3f:95:67:d3: 54:d2:59:fb:ea:4f:fa:31:c9:64:2f:08:fb:48:ed: 58:30:95:49:12:e4:98:5b:02:03:00:61:1f:69:9d: 14:a3:16:76:6a:d3:92:16:39:8f:a3:f0:fc:cc:9d: e7:b0:21:3e:0f:80:09:a3:7e:48:fe:1a:1d:5d:11: 3a:ae:ff:db:25:b9:75:6e:9a:dd:68:d1:c8:d6:31: 42:0f:9f:e3:e3:55:70:3c:49:f8:a9:af:fc:0b:da: 44:7d:46:a2:22:da:5b:55:68:3d:1f:76:c7:b3:e5: e9:bc:a7:88:85:ff:be:64:34:a5:ab:80:99:4e:32: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:09:69:89:8C:80:BB:81:24:DF:54:D5:DD:ED:8D:1A:28:8A:58:92 X509v3 Authority Key Identifier: keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4b:6a:8c:55:ca:d5:40:db:d5:4b:b8:d6:d6:2f:00:71:3b: eb:07:bb:18:e5:59:e7:37:4e:3e:b8:79:b3:fa:4b:85:0d:7e: 70:be:7c:e0:f2:59:ef:c2:d3:aa:88:9e:e1:58:ef:b9:77:c1: da:22:18:b5:eb:cf:7f:7c:92:44:aa:3a:d8:c9:92:c8:33:0a: 0d:5f:54:a0:7a:7a:7c:3e:94:9c:ac:55:08:cb:2e:94:2d:7c: 3e:80:46:16:fe:ae:c1:fc:dc:bd:a4:f3:0d:ff:44:c2:bd:ca: e8:2b:0a:4f:b7:76:72:89:d1:d7:55:c3:fd:d2:81:94:6c:7e: e5:49:75:f5:22:9f:6a:bd:40:08:50:af:7f:10:04:55:75:bd: 3b:6c:d4:cd:04:30:6d:c8:6b:06:ff:c1:2c:ed:79:1c:8d:58: bd:b3:11:55:e9:32:fe:b8:61:4a:60:6d:7e:68:01:83:a2:4e: 14:1f:af:d9:c1:51:f9:0d:56:94:52:2c:65:74:c2:ca:14:e0: bc:d5:29:05:ff:41:fc:13:fd:0c:f3:62:78:2d:cf:07:47:98: a1:34:70:3e:4c:fa:73:4f:de:91:54:e2:e4:17:ae:11:d8:8a: 51:24:13:4e:96:6d:9c:40:35:6d:b5:0f:a8:8b:13:a0:e6:33: 2f:be:7b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC OEQ5QUIyRUMwHhcNMjUwODI0MTgyNzA2WhcNMjUwODMxMTgyNzA2WjAYMRYwFAYD VQQDEw02OGFiNTk3Yi1kODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRGrGee1CtndYJ89YGmYs7gl029ugUcBZk4O/7GNIUBC3Q+3xX5m3WC1z8e0 zcRw4aaxFpqbem5kogi4/8lViYT7X3vDlAFCfkwACpRxZkF+sAsY6BNVY3XcHtqC xSnZEAyeuB4RBeryRL1igDEN64Ok6cOOXT2KczlDn5wpRv5gHD+VZ9NU0ln76k/6 MclkLwj7SO1YMJVJEuSYWwIDAGEfaZ0UoxZ2atOSFjmPo/D8zJ3nsCE+D4AJo35I /hodXRE6rv/bJbl1bprdaNHI1jFCD5/j41VwPEn4qa/8C9pEfUaiItpbVWg9H3bH s+XpvKeIhf++ZDSlq4CZTjJc6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUJaYmM gLuBJN9U1d3tjRooiliSMB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4 RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk Z05VcnRZTnBQREc0MmFzdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJS2qMVcrVQNvVS7jW1i8AcTvrB7sY5VnnN04+uHmz+kuFDX5wvnzg 8lnvwtOqiJ7hWO+5d8HaIhi1689/fJJEqjrYyZLIMwoNX1Sgenp8PpScrFUIyy6U LXw+gEYW/q7B/Ny9pPMN/0TCvcroKwpPt3ZyidHXVcP90oGUbH7lSXX1Ip9qvUAI UK9/EARVdb07bNTNBDBtyGsG/8Es7XkcjVi9sxFV6TL+uGFKYG1+aAGDok4UH6/Z wVH5DVaUUixldMLKFOC81SkF/0H8E/0M82J4Lc8HR5ihNHA+TPpzT96RVOLkF64R 2IpRJBNOlm2cQDVttQ+oixOg5jMvvnt1 -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:16 2025 by rpki-client