$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft File: ko6KqA2ZpyP2qQIa5eewMqzt23o.mft (raw, json) Hash identifier: x1ZDbDFxLODXKKqCpsPnAdub7nxWbKWHNsNTrsWC8sw= Subject key identifier: 82:23:9B:2F:C6:F3:76:5F:8F:A7:23:24:5D:12:D7:FB:06:CA:5F:58 Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft Manifest number: 25 Signing time: Sat 23 Aug 2025 08:02:26 +0000 Manifest this update: Sat 23 Aug 2025 08:02:25 +0000 Manifest next update: Sat 30 Aug 2025 08:02:25 +0000 Files and hashes: 1: ko6KqA2ZpyP2qQIa5eewMqzt23o.crl (hash: M8LtLu89334ft5r/yBjwFxovnWxTiQ7aQwZlBIrpN6o=) 2: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (hash: 4yAYX9W5VLKXpjedVy4WI6T1jB7PFE1AtNymWoFIgLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Validity Not Before: Aug 23 08:02:25 2025 GMT Not After : Aug 30 08:02:25 2025 GMT Subject: CN=68a97591-9cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:3f:50:cf:0b:3e:87:4c:81:cc:64:32:d6: 18:3d:54:f6:46:3e:a0:2b:80:5a:04:ee:7f:51:9a: 6c:2b:37:5d:03:b8:13:f5:73:da:77:e6:6a:c4:a5: 09:bb:49:d5:7f:60:10:64:f1:0d:d5:f6:c1:c9:b3: c3:8b:df:57:62:24:93:e6:46:8f:bf:13:85:ba:42: 55:3d:8a:8c:1b:f3:ed:4f:80:45:46:36:77:6d:04: a0:a1:0b:c6:75:b5:e4:bd:6c:e6:e2:4d:13:c8:60: 15:ee:f9:44:da:2e:28:f8:bb:7a:22:61:d0:85:8f: cc:59:21:54:dd:a0:2c:43:dc:a8:aa:0f:40:8a:9e: 52:2f:3a:52:bd:3d:fe:6f:8c:22:4a:38:ec:3e:fa: a9:56:7e:3f:1c:8f:50:56:60:02:64:fd:09:b4:fa: 96:02:17:7a:3e:e6:1d:b9:f1:29:bf:00:94:81:7b: c5:81:d4:59:32:83:7a:fe:08:a5:92:08:b5:d6:f5: 0f:cb:0d:b6:78:78:d4:b3:18:ed:2a:a9:64:cc:73: 42:7f:fa:93:59:be:e2:bc:b4:fc:5c:9f:38:20:38: 79:7c:89:e3:07:b4:30:98:29:c1:17:2e:e0:f3:10: 34:28:f8:7a:84:7a:cf:4b:1c:26:0b:38:9e:54:9a: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:23:9B:2F:C6:F3:76:5F:8F:A7:23:24:5D:12:D7:FB:06:CA:5F:58 X509v3 Authority Key Identifier: keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1e:42:b0:96:ce:84:3c:ac:dc:09:89:28:56:9a:3e:15:ef: 87:36:fd:e9:2b:5b:41:a7:09:a4:22:5c:a8:0e:a0:14:2e:65: 80:53:97:47:e7:50:70:51:4c:5f:53:90:c9:69:27:49:42:b6: ef:53:56:0e:1d:27:65:bf:91:d6:1f:e9:c0:01:29:b0:09:c3: f7:fa:6c:81:40:bf:75:0c:31:2e:91:7e:bb:d8:fe:2f:c9:2d: 1f:1a:fa:82:ca:64:c0:33:40:31:69:e0:5d:4d:c6:f0:8d:1f: 0c:f6:5d:48:69:e5:f2:9e:87:9e:06:69:f7:a2:7f:5d:32:64: 7e:cb:c3:ed:d1:8d:fd:d8:31:e0:4b:08:0f:6c:0d:b3:28:ba: 97:fd:1a:d2:05:e0:fa:c4:bb:e4:cf:a3:bb:1b:f0:5f:ea:24: e0:94:3c:f6:c4:45:58:d2:ae:15:52:19:3a:a1:8c:b7:be:88: c8:f2:47:0f:76:b9:75:17:65:c1:12:ac:47:7f:15:95:e5:55: ed:b4:c5:6e:31:96:54:36:0e:88:5b:e7:99:f5:3c:19:7a:d3: 36:2c:4b:f4:b1:9d:59:9c:c4:a5:5e:2a:9f:97:fa:b0:03:42: 7d:6f:f0:99:44:e3:d3:a3:e6:3e:a9:fa:f2:81:9b:e9:b1:1c: 18:14:5b:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUEyNzExMC8GA1UEBRMoOTI4RThBQTgwRDk5QTcyM0Y2QTkwMjFBRTVFN0IwMzJB Q0VEREI3QTAeFw0yNTA4MjMwODAyMjVaFw0yNTA4MzAwODAyMjVaMBgxFjAUBgNV BAMTDTY4YTk3NTkxLTljZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnnz9Qzws+h0yBzGQy1hg9VPZGPqArgFoE7n9RmmwrN10DuBP1c9p35mrEpQm7 SdV/YBBk8Q3V9sHJs8OL31diJJPmRo+/E4W6QlU9iowb8+1PgEVGNndtBKChC8Z1 teS9bObiTRPIYBXu+UTaLij4u3oiYdCFj8xZIVTdoCxD3KiqD0CKnlIvOlK9Pf5v jCJKOOw++qlWfj8cj1BWYAJk/Qm0+pYCF3o+5h258Sm/AJSBe8WB1Fkyg3r+CKWS CLXW9Q/LDbZ4eNSzGO0qqWTMc0J/+pNZvuK8tPxcnzggOHl8ieMHtDCYKcEXLuDz EDQo+HqEes9LHCYLOJ5UmjuJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgiObL8bz dl+PpyMkXRLX+wbKX1gwHwYDVR0jBBgwFoAUko6KqA2ZpyP2qQIa5eewMqzt23ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1QTI3LzlEQzIyMDU0NEE1 ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQMnFRSWE1ZWV3TXF6dDIz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva282S3FBMlpweVAycVFJYTVlZXdNcXp0MjNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 QTI3LzlEQzIyMDU0NEE1ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQ MnFRSWE1ZWV3TXF6dDIzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABAeQrCWzoQ8rNwJiShWmj4V74c2/ekrW0GnCaQiXKgOoBQuZYBTl0fn UHBRTF9TkMlpJ0lCtu9TVg4dJ2W/kdYf6cABKbAJw/f6bIFAv3UMMS6RfrvY/i/J LR8a+oLKZMAzQDFp4F1NxvCNHwz2XUhp5fKeh54Gafeif10yZH7Lw+3Rjf3YMeBL CA9sDbMoupf9GtIF4PrEu+TPo7sb8F/qJOCUPPbERVjSrhVSGTqhjLe+iMjyRw92 uXUXZcESrEd/FZXlVe20xW4xllQ2Dohb55n1PBl60zYsS/SxnVmcxKVeKp+X+rAD Qn1v8JlE49Oj5j6p+vKBm+mxHBgUW3o= -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:15 2025 by rpki-client