$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft File: kTeon0YQ2uLIjGlNyVLOWDVScHk.mft (raw, json) Hash identifier: xhZv8YUS22kZ5GNTZT4/ZFpAF+lkwYATBgDCyn/+SIk= Subject key identifier: 42:93:A3:83:8F:84:7A:1D:78:28:0F:4D:15:48:FE:38:FC:BF:C0:86 Authority key identifier: 91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79 Certificate issuer: /CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079 Certificate serial: 1013 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft Manifest number: 1007 Signing time: Sun 24 Aug 2025 17:25:58 +0000 Manifest this update: Sun 24 Aug 2025 17:25:58 +0000 Manifest next update: Sun 31 Aug 2025 17:25:58 +0000 Files and hashes: 1: kTeon0YQ2uLIjGlNyVLOWDVScHk.crl (hash: LUDIh4QXCImHdoFQWQRKcPpDfVyhiinb4YWt4n2aMbs=) 2: E9056E5A520611E9ABE43055C4F9AE02.roa (hash: h2Z0WowEDdcT+vihpwqc3ZmmFIzfzbEzcf903yWEHbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4115 (0x1013) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8BC, serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079 Validity Not Before: Aug 24 17:25:58 2025 GMT Not After : Aug 31 17:25:58 2025 GMT Subject: CN=68ab4b26-c608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:b4:38:b1:57:c2:f7:10:e8:3d:dd:16:13: 80:48:5f:89:96:0a:24:66:b1:47:b6:3b:01:1b:01: 03:7e:31:ba:a1:1e:02:54:0b:c3:ae:06:a9:e0:46: e3:48:9a:a7:85:54:4a:30:ac:22:21:d1:d1:85:bf: 5c:b9:e9:86:dc:5e:c3:66:7c:cf:88:1e:02:b3:41: 34:58:e1:27:87:32:7e:3d:99:b5:fe:02:bd:2f:a8: 48:45:18:f7:e8:0f:4d:7e:91:34:89:6f:92:5a:d6: e6:21:db:4e:14:b0:54:6c:cc:23:f4:ae:98:7a:fe: a6:93:9b:91:21:e4:34:00:d5:df:c5:84:96:c6:5b: 62:73:da:7f:56:07:5d:1a:fe:d8:07:2f:7e:c1:f1: 25:ed:44:07:fd:be:c7:c4:8e:3c:8f:e5:cd:c3:47: b5:78:f4:28:4c:c1:f4:ff:31:d7:02:8d:2d:eb:18: ca:77:29:97:9f:ac:eb:4f:f7:bc:b6:fc:0d:5a:d9: 9d:a6:0c:f9:68:a2:e1:29:af:04:c5:1b:11:5c:3e: 15:5a:45:83:20:1f:5a:5a:f5:67:31:4e:ac:f7:e8: 65:08:ff:28:d7:05:64:c8:b6:02:83:c9:b8:9c:05: 49:02:c7:0f:8e:b7:db:a6:96:ed:48:20:52:9d:65: 19:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:A3:83:8F:84:7A:1D:78:28:0F:4D:15:48:FE:38:FC:BF:C0:86 X509v3 Authority Key Identifier: keyid:91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fc:ca:0d:78:ae:e6:2a:f6:a3:18:84:31:30:e1:c5:11:89: ba:8d:d4:e9:e6:bd:e6:62:e4:ae:d8:05:6a:79:5a:8a:16:b4: 20:22:6e:05:d4:36:4d:47:a7:34:b7:0d:3a:81:f0:ad:9b:70: ca:be:c9:d2:99:36:b6:9d:b4:ce:b2:cf:73:56:6a:b4:82:5e: 0d:69:b6:a5:fa:6b:77:4a:ad:6e:e9:5b:c9:5e:f4:c3:a9:6f: 41:f3:42:51:88:a8:67:cd:2f:52:72:af:35:50:0e:a4:eb:9d: 57:cf:d4:2d:df:b2:87:85:ac:05:8d:18:eb:f5:2e:48:35:be: 4b:0c:4e:f9:d1:0c:d2:40:9f:6c:13:79:12:9c:b2:68:9d:ae: ae:2e:79:0b:a1:c5:30:bf:08:d9:d1:5e:bb:e1:cf:2c:df:26: 9b:75:e9:0a:d6:fb:6c:a6:53:1b:7b:3c:b9:ef:ea:8b:3a:2c: 27:74:36:94:f4:6a:80:ab:76:01:9e:0a:ea:8b:14:87:fe:3e: 0b:64:bf:1c:89:0f:a9:f4:a4:74:d9:7d:28:cd:e2:e3:c5:33: d6:da:e7:b9:ab:29:3a:3e:4a:b1:74:72:9d:f2:42:68:ce:17: 9b:52:df:d0:04:46:9c:7e:14:d4:ee:2d:71:56:51:9f:0f:2e: 71:7c:8d:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QkMxMTAvBgNVBAUTKDkxMzdBODlGNDYxMERBRTJDODhDNjk0REM5NTJDRTU4 MzU1MjcwNzkwHhcNMjUwODI0MTcyNTU4WhcNMjUwODMxMTcyNTU4WjAYMRYwFAYD VQQDEw02OGFiNGIyNi1jNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo020OLFXwvcQ6D3dFhOASF+JlgokZrFHtjsBGwEDfjG6oR4CVAvDrgap4Ebj SJqnhVRKMKwiIdHRhb9cuemG3F7DZnzPiB4Cs0E0WOEnhzJ+PZm1/gK9L6hIRRj3 6A9NfpE0iW+SWtbmIdtOFLBUbMwj9K6Yev6mk5uRIeQ0ANXfxYSWxltic9p/Vgdd Gv7YBy9+wfEl7UQH/b7HxI48j+XNw0e1ePQoTMH0/zHXAo0t6xjKdymXn6zrT/e8 tvwNWtmdpgz5aKLhKa8ExRsRXD4VWkWDIB9aWvVnMU6s9+hlCP8o1wVkyLYCg8m4 nAVJAscPjrfbppbtSCBSnWUZtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKTo4OP hHodeCgPTRVI/jj8v8CGMB8GA1UdIwQYMBaAFJE3qJ9GENriyIxpTclSzlg1UnB5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCQy80RTEzRjQwQzUy MDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1TElqR2xOeVZMT1dEVlNj SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tUZW9uMFlRMnVMSWpHbE55VkxPV0RWU2NIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCQy80RTEzRjQwQzUyMDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1 TElqR2xOeVZMT1dEVlNjSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8/MoNeK7mKvajGIQxMOHFEYm6jdTp5r3mYuSu2AVqeVqKFrQgIm4F 1DZNR6c0tw06gfCtm3DKvsnSmTa2nbTOss9zVmq0gl4Nabal+mt3Sq1u6VvJXvTD qW9B80JRiKhnzS9Scq81UA6k651Xz9Qt37KHhawFjRjr9S5INb5LDE750QzSQJ9s E3kSnLJona6uLnkLocUwvwjZ0V674c8s3yabdekK1vtsplMbezy57+qLOiwndDaU 9GqAq3YBngrqixSH/j4LZL8ciQ+p9KR02X0ozeLjxTPW2ue5qyk6PkqxdHKd8kJo zhebUt/QBEacfhTU7i1xVlGfDy5xfI1U -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:08 2025 by rpki-client