$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: fIJWOS2yyRTDs7IO9nqvJJ8mX2pUoPNXrYzpW8BOPwY= Subject key identifier: 89:BB:E3:72:FF:D3:82:88:A5:4F:2C:FB:78:13:1F:19:62:46:43:2A Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1A99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1A77 Signing time: Mon 08 Sep 2025 16:21:52 +0000 Manifest this update: Mon 08 Sep 2025 16:21:51 +0000 Manifest next update: Mon 15 Sep 2025 16:21:51 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: iPoMC+TXdrJ+kFldmEJkVf/lXJW6+vBmAbwQqm3TWjc=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 1W3bZjmYo4y/faIyWLiaDn4cNEWTqd/xhoIAZdOleqM=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: D4FdDOMn9kYOe8wUYl/7g0SwBt2d9VcBYOrZDNcFK0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6809 (0x1a99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Sep 8 16:21:51 2025 GMT Not After : Sep 15 16:21:51 2025 GMT Subject: CN=68bf02a0-a1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:cd:4f:01:81:2b:17:22:3b:f5:fc:4e:5b: da:92:e8:fd:8c:73:46:b1:14:70:ba:d6:d7:d3:3c: 41:8c:68:a8:9a:41:07:a7:7e:46:66:bb:a0:32:60: bb:82:23:0f:a8:bf:27:6e:7d:17:10:ef:dc:7a:3a: ad:24:4a:70:a1:d6:b8:b5:a8:00:12:b8:d0:17:81: 9d:94:10:ce:c0:be:68:9b:47:e2:7a:5a:24:bf:ad: 25:e0:bb:86:99:a9:01:65:d4:6f:c7:60:66:94:22: 23:49:42:f0:eb:70:0f:e2:68:dc:ea:6d:15:d1:8d: bf:2d:db:a2:8f:af:f9:c4:30:d4:af:fb:11:f9:28: eb:ea:50:c2:11:bf:08:3f:b4:62:b4:19:4b:b6:93: f8:a8:07:98:43:a3:84:f7:9b:3f:77:35:4e:c6:e7: c0:5b:f1:d8:d6:50:08:b2:00:6c:d6:92:e9:92:85: 30:70:02:ef:7b:d4:16:62:d8:e1:40:ed:3b:0d:81: 31:69:55:08:06:1d:25:4f:7a:5d:2c:66:82:79:0c: 43:29:d4:1d:c5:5c:cc:3e:a0:8c:8d:c1:14:cf:5a: 83:6b:8b:e9:81:10:a1:d9:ef:55:47:be:6c:7f:67: e8:3e:41:58:56:c0:89:ea:26:2e:39:ea:9b:c6:ad: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BB:E3:72:FF:D3:82:88:A5:4F:2C:FB:78:13:1F:19:62:46:43:2A X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:df:18:4f:9f:59:ba:3b:5a:05:25:b0:d2:5e:fd:eb:11:25: 53:6f:6d:3d:b1:25:34:e8:05:55:1d:9b:86:2d:ae:73:d6:73: c2:f9:e7:57:b5:34:4d:d9:6c:98:46:c4:6e:4a:fb:fb:14:6d: bf:a6:f9:97:56:b3:3f:5e:8c:52:4e:c4:dc:27:b6:aa:31:55: 17:7b:a7:37:31:c0:23:89:0b:56:05:65:50:b8:9b:4c:bd:11: 7f:5d:ce:04:3d:ad:bf:aa:45:29:08:c0:84:c6:c1:c2:a6:3b: 7a:91:10:02:4c:fc:ca:04:65:20:c2:7e:6f:85:ad:92:34:bb: f2:28:0d:15:23:c2:37:17:81:fa:9c:47:c7:21:b5:00:38:4b: 19:43:83:26:78:e7:80:7b:7e:b0:5d:e0:c4:0d:ec:a7:1a:18: 10:87:bb:f7:bb:e9:d7:7d:82:a4:3e:fb:87:22:3e:41:fb:b8: 1b:ba:00:ba:5a:9d:e7:46:8f:48:8b:cb:cb:2d:f1:37:0c:e2: 31:3a:d7:41:fd:12:39:cf:0c:72:3c:f3:9d:b5:8b:7b:2c:23: bc:ae:c3:f2:a9:49:f4:a9:eb:bc:0d:e7:5f:d2:01:fd:d5:64: e6:f5:3a:f1:3c:fb:84:79:79:70:ab:28:5d:a9:a6:28:16:bf: 9a:86:8f:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUwOTA4MTYyMTUxWhcNMjUwOTE1MTYyMTUxWjAYMRYwFAYD VQQDEw02OGJmMDJhMC1hMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusnNTwGBKxciO/X8Tlvakuj9jHNGsRRwutbX0zxBjGiomkEHp35GZrugMmC7 giMPqL8nbn0XEO/cejqtJEpwoda4tagAErjQF4GdlBDOwL5om0fielokv60l4LuG makBZdRvx2BmlCIjSULw63AP4mjc6m0V0Y2/Lduij6/5xDDUr/sR+Sjr6lDCEb8I P7RitBlLtpP4qAeYQ6OE95s/dzVOxufAW/HY1lAIsgBs1pLpkoUwcALve9QWYtjh QO07DYExaVUIBh0lT3pdLGaCeQxDKdQdxVzMPqCMjcEUz1qDa4vpgRCh2e9VR75s f2foPkFYVsCJ6iYuOeqbxq2aOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm743L/ 04KIpU8s+3gTHxliRkMqMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB3xhPn1m6O1oFJbDSXv3rESVTb209sSU06AVVHZuGLa5z1nPC+edX tTRN2WyYRsRuSvv7FG2/pvmXVrM/XoxSTsTcJ7aqMVUXe6c3McAjiQtWBWVQuJtM vRF/Xc4EPa2/qkUpCMCExsHCpjt6kRACTPzKBGUgwn5vha2SNLvyKA0VI8I3F4H6 nEfHIbUAOEsZQ4MmeOeAe36wXeDEDeynGhgQh7v3u+nXfYKkPvuHIj5B+7gbugC6 Wp3nRo9Ii8vLLfE3DOIxOtdB/RI5zwxyPPOdtYt7LCO8rsPyqUn0qeu8Dedf0gH9 1WTm9TrxPPuEeXlwqyhdqaYoFr+aho+g -----END CERTIFICATE-----Generated at Tue Sep 9 13:36:52 2025 by rpki-client