$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json) Hash identifier: AGFGuYTbR17iUbUlEeohSgRJDmfWL1feTW0TgwcIiqM= Subject key identifier: AC:DA:DF:19:D6:A8:5C:DC:11:7E:8A:8C:AE:99:BA:18:8F:11:E8:BE Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft Manifest number: CA Signing time: Wed 17 Sep 2025 06:26:51 +0000 Manifest this update: Wed 17 Sep 2025 06:26:51 +0000 Manifest next update: Wed 24 Sep 2025 06:26:51 +0000 Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: DrDFzE7LPvDqUDogBEWN+IUZYIrH9/1VxYTi9Dd3WMA=) 2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: HQpJTfgqUX8sx/Vj8e61bP6mPFBvq/NcDI8+HFxFJJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Validity Not Before: Sep 17 06:26:51 2025 GMT Not After : Sep 24 06:26:51 2025 GMT Subject: CN=68ca54ab-d2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:b4:4b:2e:0c:e6:71:1a:17:c4:b7:c6:92: 9f:15:d5:e4:04:af:6d:2f:ea:7a:c2:4d:20:2d:ec: ea:2f:1f:04:dd:45:ac:ed:44:eb:b7:88:01:c4:b8: 2a:ea:cc:b8:7e:f7:4d:39:98:c9:8d:51:ff:e1:fc: 2f:9e:5a:8c:c2:6f:e9:63:b8:9f:c3:20:be:3a:f5: a7:12:af:1e:09:b9:ae:ec:43:bd:d3:09:84:95:3e: 24:f4:da:cd:31:b5:a4:9f:8d:70:ca:e6:25:86:c1: 1c:84:0d:0b:13:57:34:d3:78:a9:72:19:33:fd:fc: 2b:2d:4f:24:db:67:1f:bd:a5:eb:2f:e5:5c:ed:a2: 91:e0:32:08:0e:ef:d5:5b:f0:9a:c9:8c:6d:b0:6f: e4:bf:0d:d7:41:35:5a:d1:d7:e5:50:4a:51:1a:cf: 69:f5:44:fc:dd:84:8d:ba:84:03:e0:41:c7:f6:f8: 70:d3:cc:6e:22:fd:34:78:27:80:1c:3b:c6:d8:fc: 36:a4:b1:2c:f4:2d:1a:86:92:b5:88:64:d8:88:54: 0a:8a:2c:08:0a:44:a2:5a:64:a1:b5:65:0a:4a:81: 36:30:f5:eb:a3:3a:44:0c:bc:e5:9d:d9:38:ae:78: 86:fb:f7:23:e9:c4:3b:d8:ab:4f:d9:78:f6:c3:cb: df:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DA:DF:19:D6:A8:5C:DC:11:7E:8A:8C:AE:99:BA:18:8F:11:E8:BE X509v3 Authority Key Identifier: keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5b:76:e3:2e:dc:a9:98:47:88:7b:d4:d0:fa:61:e4:4e:57: 72:7e:bf:fe:f6:2b:c8:c5:44:ef:25:9e:6e:90:78:5a:40:f0: a2:a6:4f:16:45:58:ca:53:be:85:df:78:5e:79:1d:a6:92:80: 93:42:d4:cc:c9:f4:d4:f9:7e:b9:08:cb:6f:28:b5:b1:b6:1e: 08:1e:93:52:3e:41:11:dd:44:f8:12:76:10:ca:ac:cc:bb:8f: 01:f8:2b:c9:45:9a:4b:3e:8b:0b:c9:1b:7b:7c:85:a0:33:90: 84:19:04:75:d2:d2:40:78:a0:7e:3a:aa:cf:39:f9:bf:81:09: 15:f1:ff:8e:90:02:89:32:c3:40:78:c7:b4:58:ba:16:ea:82: c6:c3:74:5b:d3:f6:3e:4c:0a:19:02:12:9d:d1:aa:da:53:e8: b4:9a:69:0f:ea:a4:10:88:17:32:78:34:79:80:c5:35:73:d4: df:e4:86:de:3c:24:d0:71:13:92:d4:61:08:26:87:79:93:88: c7:6a:79:b0:04:f4:ec:b2:91:a0:ca:13:e9:7b:e5:d2:2e:71: 63:a5:7a:db:3b:a4:68:af:b3:09:2e:d8:78:9e:a2:63:76:6d: 58:62:8a:83:9c:60:39:03:cd:40:72:36:45:56:70:f4:de:77: 33:77:a8:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGOEQxMTAvBgNVBAUTKDJBMDFDOEZFOTY3OTY5NDQ3ODMxRUMwMUMwMkJDNEU5 Q0I5QUNFMkMwHhcNMjUwOTE3MDYyNjUxWhcNMjUwOTI0MDYyNjUxWjAYMRYwFAYD VQQDEw02OGNhNTRhYi1kMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvC0Sy4M5nEaF8S3xpKfFdXkBK9tL+p6wk0gLezqLx8E3UWs7UTrt4gBxLgq 6sy4fvdNOZjJjVH/4fwvnlqMwm/pY7ifwyC+OvWnEq8eCbmu7EO90wmElT4k9NrN MbWkn41wyuYlhsEchA0LE1c003ipchkz/fwrLU8k22cfvaXrL+Vc7aKR4DIIDu/V W/CayYxtsG/kvw3XQTVa0dflUEpRGs9p9UT83YSNuoQD4EHH9vhw08xuIv00eCeA HDvG2Pw2pLEs9C0ahpK1iGTYiFQKiiwICkSiWmShtWUKSoE2MPXrozpEDLzlndk4 rniG+/cj6cQ72KtP2Xj2w8vfwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKza3xnW qFzcEX6KjK6ZuhiPEei+MB8GA1UdIwQYMBaAFCoByP6WeWlEeDHsAcArxOnLms4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEY4RC9BMTc5RTUzQzY0 NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFVUjRNZXdCd0N2RTZjdWF6 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tnSElfcFo1YVVSNE1ld0J3Q3ZFNmN1YXppdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEY4RC9BMTc5RTUzQzY0NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFV UjRNZXdCd0N2RTZjdWF6aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEW3bjLtypmEeIe9TQ+mHkTldyfr/+9ivIxUTvJZ5ukHhaQPCipk8W RVjKU76F33heeR2mkoCTQtTMyfTU+X65CMtvKLWxth4IHpNSPkER3UT4EnYQyqzM u48B+CvJRZpLPosLyRt7fIWgM5CEGQR10tJAeKB+OqrPOfm/gQkV8f+OkAKJMsNA eMe0WLoW6oLGw3Rb0/Y+TAoZAhKd0araU+i0mmkP6qQQiBcyeDR5gMU1c9Tf5Ibe PCTQcROS1GEIJod5k4jHanmwBPTsspGgyhPpe+XSLnFjpXrbO6Ror7MJLth4nqJj dm1YYoqDnGA5A81AcjZFVnD03nczd6g9 -----END CERTIFICATE-----Generated at Fri Sep 19 03:48:47 2025 by rpki-client