$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: hzP8ugFAvArojMLsctqQHxa0RM8Bxw5tzDK4WTCKrF8= Subject key identifier: 96:64:22:F3:E9:74:8B:46:68:28:FF:BE:DA:05:23:8E:D7:FA:0C:CB Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: 0144 Signing time: Sat 23 Aug 2025 04:31:29 +0000 Manifest this update: Sat 23 Aug 2025 04:31:29 +0000 Manifest next update: Sat 30 Aug 2025 04:31:29 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: 1W0qxYsgnFCgu4x3hltL7h0kwjrOCQgG5qXwdkBpbJA=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: BrMg7LC27FVuPN/a8T84kbw3q38OJLbwQWRqwjiM6nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: Aug 23 04:31:29 2025 GMT Not After : Aug 30 04:31:29 2025 GMT Subject: CN=68a94421-f1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c7:7f:8a:14:05:8d:ea:2c:85:96:85:5c:52: e1:81:6d:21:50:16:3e:cf:aa:c6:ff:d0:24:ba:23: 63:be:4e:f7:46:68:30:8f:5b:9e:58:e6:bc:8f:ec: 84:45:9a:65:04:a9:39:b0:7a:6d:bb:de:09:f9:1f: 1a:19:27:d5:82:8e:4c:3b:3f:5b:ab:a1:74:f5:63: d0:02:c9:f2:e3:52:96:ba:7e:25:e3:f1:48:26:9d: 5a:ed:24:65:3d:57:e2:f5:d4:06:18:28:07:85:4f: 60:61:9c:00:8b:49:40:b3:36:a9:15:83:87:56:da: 0c:ae:f0:7e:9a:ec:bc:ad:7f:3d:d2:5f:b2:7f:b3: 13:c1:09:c0:c4:ed:93:a1:ac:d2:cb:31:08:00:52: 6e:23:c5:fa:ad:03:24:28:6b:9e:87:ea:9d:68:4f: 30:c7:3a:93:1a:c9:25:f7:87:46:7a:2f:1c:4a:b7: 88:d2:dc:27:a3:6a:93:91:dd:28:9b:e8:ad:07:42: 1f:e4:ba:52:f4:29:b6:05:30:30:41:fa:e1:a8:6d: fe:31:e8:b5:ae:d0:9b:21:b6:aa:f4:ae:e6:7c:0b: 49:cd:ae:25:35:93:29:dc:4e:a3:c2:bc:1c:01:c7: d9:57:41:81:ef:02:e4:05:d5:e6:95:8a:4b:45:37: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:64:22:F3:E9:74:8B:46:68:28:FF:BE:DA:05:23:8E:D7:FA:0C:CB X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:7e:aa:8b:e2:e7:30:6d:b1:48:7d:4e:94:23:86:f8:02:b0: e3:4a:8a:e9:1d:9a:00:53:47:a2:d5:9f:d0:ee:4f:66:dc:c4: 33:82:bc:f2:63:7c:4a:2b:ea:5f:ad:71:be:81:b1:2f:2f:58: 93:2d:41:b3:e2:35:ce:72:17:7c:e0:fb:30:25:e7:fe:97:6c: bd:67:35:23:4a:d7:10:f4:46:79:aa:03:68:ea:04:4b:f9:22: 84:de:06:01:b6:2e:f2:0f:ae:31:25:31:6e:cd:b3:22:b0:e5: 15:4e:78:81:f9:dc:15:0f:3d:d0:67:3e:40:1c:3b:d0:9a:7d: 3c:d2:1a:37:f4:e3:37:db:17:e3:90:33:3a:85:13:bf:74:bb: cd:3a:eb:cf:bc:43:d9:b6:70:59:b0:83:f3:71:80:cb:11:f3: c1:26:0c:70:d7:37:6f:ed:ee:51:f0:c4:30:fb:f1:ad:e5:d7: b1:19:21:a0:ad:0c:e9:d1:bf:fb:ef:95:14:45:f0:61:6d:7a: b1:4d:c1:e3:98:72:ad:69:bd:70:b4:7b:dc:4c:3d:96:f1:4c: f8:d4:9a:e1:6f:8e:bd:de:56:e6:32:65:ca:8e:53:29:15:b2: 32:b2:0c:3c:91:a9:c4:d2:b3:d2:fd:cd:69:89:3c:87:ef:92: af:06:13:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz OEU5QzJGMjUwHhcNMjUwODIzMDQzMTI5WhcNMjUwODMwMDQzMTI5WjAYMRYwFAYD VQQDEw02OGE5NDQyMS1mMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8d/ihQFjeoshZaFXFLhgW0hUBY+z6rG/9AkuiNjvk73Rmgwj1ueWOa8j+yE RZplBKk5sHptu94J+R8aGSfVgo5MOz9bq6F09WPQAsny41KWun4l4/FIJp1a7SRl PVfi9dQGGCgHhU9gYZwAi0lAszapFYOHVtoMrvB+muy8rX890l+yf7MTwQnAxO2T oazSyzEIAFJuI8X6rQMkKGueh+qdaE8wxzqTGskl94dGei8cSreI0twno2qTkd0o m+itB0If5LpS9Cm2BTAwQfrhqG3+Mei1rtCbIbaq9K7mfAtJza4lNZMp3E6jwrwc AcfZV0GB7wLkBdXmlYpLRTcpWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZkIvPp dItGaCj/vtoFI47X+gzLMB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzM3OC8wQTg4QzdGMjkzRTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckox ZEQtM0ZlRTFsMVk0NmNMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0fqqL4ucwbbFIfU6UI4b4ArDjSorpHZoAU0ei1Z/Q7k9m3MQzgrzy Y3xKK+pfrXG+gbEvL1iTLUGz4jXOchd84PswJef+l2y9ZzUjStcQ9EZ5qgNo6gRL +SKE3gYBti7yD64xJTFuzbMisOUVTniB+dwVDz3QZz5AHDvQmn080ho39OM32xfj kDM6hRO/dLvNOuvPvEPZtnBZsIPzcYDLEfPBJgxw1zdv7e5R8MQw+/Gt5dexGSGg rQzp0b/775UURfBhbXqxTcHjmHKtab1wtHvcTD2W8Uz41Jrhb4693lbmMmXKjlMp FbIysgw8kanE0rPS/c1piTyH75KvBhNL -----END CERTIFICATE-----Generated at Sun Aug 24 22:25:58 2025 by rpki-client