$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json) Hash identifier: aZE664utML6WhNhY61F1a0ZWGjA4yQHOw9Uw9G5Yf5I= Subject key identifier: D9:EB:57:19:9C:3E:3D:58:9F:AB:9F:6A:3A:17:B7:CB:97:BC:43:51 Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft Manifest number: C0 Signing time: Fri 19 Sep 2025 06:30:42 +0000 Manifest this update: Fri 19 Sep 2025 06:30:41 +0000 Manifest next update: Fri 26 Sep 2025 06:30:41 +0000 Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: DjmvuqLpvB6JL3vqLZLBEcVTWjPkl5Kt8a/7nS0tKgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Validity Not Before: Sep 19 06:30:41 2025 GMT Not After : Sep 26 06:30:41 2025 GMT Subject: CN=68ccf892-b98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:80:38:c6:22:23:21:17:ee:86:d0:44:52: 90:4d:35:53:02:01:c7:e4:ab:e6:08:4c:3f:9d:c3: 36:f7:ea:87:39:90:de:e2:eb:dd:09:18:e0:2b:25: 74:54:2d:8e:eb:b7:00:93:2a:2d:b2:e5:93:f4:15: e6:22:c6:61:4b:42:de:56:4c:76:f5:a9:bc:31:f8: 41:b3:74:96:6d:64:00:32:8d:10:e2:d7:68:39:7f: 37:f6:49:41:f5:07:bd:68:ac:55:7f:84:4e:ef:1f: 7f:26:50:f5:ee:50:fd:ab:26:90:54:02:b9:31:6e: 30:19:04:57:33:83:28:f6:8d:43:86:0b:30:b8:b1: 8f:35:2b:f9:ad:3b:fe:a9:71:6d:fe:59:f6:e7:4a: 9b:a1:bd:58:32:34:f0:db:b8:bc:73:72:1c:e1:2c: 95:6e:95:54:e7:c1:2e:a7:1f:4e:ad:ad:ff:f3:89: 65:83:0a:89:15:a4:1e:72:c4:62:82:34:25:0d:95: cf:4f:be:43:49:a7:7d:80:75:44:43:20:82:9e:72: d0:9c:2c:dd:18:3d:b8:02:62:7b:01:a4:bf:1b:e4: 2f:18:07:d5:fc:7a:85:56:46:3f:11:cd:88:0f:23: 8c:8b:2d:1d:29:ef:81:0a:4f:9b:8a:0d:29:8d:73: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EB:57:19:9C:3E:3D:58:9F:AB:9F:6A:3A:17:B7:CB:97:BC:43:51 X509v3 Authority Key Identifier: keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ab:dd:84:b5:a1:23:c0:cb:75:f1:09:b5:12:af:1f:36:89: ed:6f:60:21:5b:c6:2f:be:44:16:f3:fb:74:8f:85:2d:dc:40: c7:5f:4e:ea:d5:0e:d7:c3:a2:9f:de:0b:03:1e:26:09:bd:33: 9c:b9:c3:5a:1d:09:1a:4a:5b:b8:41:b7:58:ce:15:8b:fd:5e: e2:c8:38:da:b5:43:f2:e3:d0:8d:09:2d:47:05:a5:53:62:63: 98:8a:2b:4d:17:98:ad:b8:bd:72:26:80:23:b2:34:1d:ff:09: c6:51:5f:0f:bd:2d:fb:db:1d:d5:ea:09:3a:60:9f:e7:5e:29: 0a:1f:d9:54:00:fb:4d:17:ef:a8:35:d0:c3:b5:ca:23:17:46: e9:a9:43:ad:36:f8:a3:bd:de:0b:53:f6:f8:7c:08:44:87:a4: f0:1e:50:17:5d:e3:49:2d:2e:19:14:90:09:22:9d:04:5c:24: 04:7b:d7:e0:b4:49:4c:e5:39:a1:77:90:4a:ad:85:0a:c5:22: fa:b2:b5:15:99:b0:ae:9c:65:dd:48:d6:10:76:58:fa:7c:25: 35:eb:8b:f0:28:4d:b2:77:08:7d:61:26:07:25:54:37:98:f2: 23:8b:9a:0b:84:03:b6:1c:a7:61:40:86:0e:8e:a2:30:42:3e: 6a:38:d7:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDkxNDZCNzgyRUI4MjQ2N0IxOUQ4QjQxRDFDQzQwRUJG MDQ4OTkwNjYwHhcNMjUwOTE5MDYzMDQxWhcNMjUwOTI2MDYzMDQxWjAYMRYwFAYD VQQDEw02OGNjZjg5Mi1iOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuriAOMYiIyEX7obQRFKQTTVTAgHH5KvmCEw/ncM29+qHOZDe4uvdCRjgKyV0 VC2O67cAkyotsuWT9BXmIsZhS0LeVkx29am8MfhBs3SWbWQAMo0Q4tdoOX839klB 9Qe9aKxVf4RO7x9/JlD17lD9qyaQVAK5MW4wGQRXM4Mo9o1DhgswuLGPNSv5rTv+ qXFt/ln250qbob1YMjTw27i8c3Ic4SyVbpVU58Eupx9Ora3/84llgwqJFaQecsRi gjQlDZXPT75DSad9gHVEQyCCnnLQnCzdGD24AmJ7AaS/G+QvGAfV/HqFVkY/Ec2I DyOMiy0dKe+BCk+big0pjXPesQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnrVxmc Pj1Yn6ufajoXt8uXvENRMB8GA1UdIwQYMBaAFJFGt4LrgkZ7Gdi0HRzEDr8EiZBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9EMEM1RjRFMjZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Juc1oyTFFkSE1RT3Z3U0pr R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9EMEM1RjRFMjZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Ju c1oyTFFkSE1RT3Z3U0prR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+q92EtaEjwMt18Qm1Eq8fNontb2AhW8YvvkQW8/t0j4Ut3EDHX07q 1Q7Xw6Kf3gsDHiYJvTOcucNaHQkaSlu4QbdYzhWL/V7iyDjatUPy49CNCS1HBaVT YmOYiitNF5ituL1yJoAjsjQd/wnGUV8PvS372x3V6gk6YJ/nXikKH9lUAPtNF++o NdDDtcojF0bpqUOtNvijvd4LU/b4fAhEh6TwHlAXXeNJLS4ZFJAJIp0EXCQEe9fg tElM5Tmhd5BKrYUKxSL6srUVmbCunGXdSNYQdlj6fCU164vwKE2ydwh9YSYHJVQ3 mPIji5oLhAO2HKdhQIYOjqIwQj5qONfW -----END CERTIFICATE-----Generated at Fri Sep 19 10:22:49 2025 by rpki-client