$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: 4Lsrd1jvTsYoIG+OfHLC6lUHlG2pu7+OL9gP/0kHkME= Subject key identifier: CE:1C:18:F7:3A:B5:82:C0:69:AA:21:AF:7D:91:17:D2:0A:75:47:B5 Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 2552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 253E Signing time: Sun 24 Aug 2025 15:43:22 +0000 Manifest this update: Sun 24 Aug 2025 15:43:21 +0000 Manifest next update: Sun 31 Aug 2025 15:43:21 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: +CHIDMzfMn8bINXNDovNdNOhZAnT9w/ZsEJ6sd8vePs=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: cn19kmgTI5pykmKU6ztYW1fuk/UgkkZVZQRR4mCHAg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9554 (0x2552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Aug 24 15:43:21 2025 GMT Not After : Aug 31 15:43:21 2025 GMT Subject: CN=68ab3319-e6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:b5:9f:d9:ba:a9:52:7e:8a:09:84:98:19: 1f:ee:41:9a:3d:90:fb:f1:9c:7e:da:6d:99:1b:69: 03:75:d5:00:28:7a:c2:bd:85:6b:0f:80:de:c0:c7: 95:cf:ce:9c:92:ed:ce:47:01:f3:f0:7c:df:cc:19: 31:db:d7:3d:d1:25:ac:39:05:83:ad:1a:f4:74:17: 1a:83:b0:13:ed:a6:ba:14:d0:b5:b6:ae:5b:92:bc: ef:c7:1e:32:6d:89:3a:ec:a2:80:7c:13:21:ff:72: 60:04:26:80:dc:94:a4:3a:40:6e:7b:af:b2:a5:92: af:45:11:85:b2:c3:70:2d:4b:18:29:34:18:7f:80: 8b:4d:4e:1e:86:b0:a8:b3:37:cc:f9:7c:92:ab:b3: 6a:92:14:0f:98:79:80:5e:2b:ec:9c:e9:e5:fd:b5: d8:53:6e:58:c2:c8:36:5f:40:64:81:a9:82:b5:f7: ce:b2:27:9e:c9:b6:01:d2:0c:c7:84:b8:09:4d:be: 40:0e:4c:e7:09:17:fd:76:a6:2f:1b:a1:df:3f:94: 69:4d:cb:d0:68:83:88:df:2d:2c:1a:51:d0:f1:c1: 18:23:af:f4:a2:7c:a7:38:0d:45:7d:f0:1b:91:73: d3:52:aa:1f:22:d1:58:9a:09:23:9a:af:34:ea:97: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1C:18:F7:3A:B5:82:C0:69:AA:21:AF:7D:91:17:D2:0A:75:47:B5 X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:54:a7:d1:20:d2:6d:8c:b3:b4:e4:d5:5e:e3:0f:cd:a7:13: 66:a0:4e:bb:a3:a5:57:fb:98:f6:f9:f0:3a:e2:86:96:2f:49: dd:60:29:38:5b:19:ca:d0:6a:8c:fb:c9:d6:eb:bd:68:b8:88: ef:01:ba:5e:a9:25:26:8c:cb:a4:a8:e4:cb:f5:e2:f6:0e:f8: 56:a5:b0:26:b5:82:88:51:93:d6:db:c1:90:fb:81:98:c4:fb: 90:09:ca:40:59:12:a7:be:29:5f:b4:70:e8:a7:0e:ab:94:c7: 8c:e1:2b:3a:a2:bd:fb:f7:81:b1:09:6e:08:82:c0:63:8f:53: 0c:a1:78:73:45:aa:7f:5a:0c:85:5f:65:7a:15:a5:c3:51:65: d1:a4:45:7d:f4:d4:dc:7a:fd:de:ca:e9:30:7c:5b:e4:ee:da: f6:3f:60:a5:34:39:4d:77:13:7b:29:69:cf:24:22:3f:70:5b: e3:11:63:78:dd:9e:9e:23:f9:c8:ab:45:e4:20:62:1b:e4:84: 49:15:a4:7d:ab:da:3d:46:13:c0:b7:45:2a:fe:81:b9:ab:f3: 52:d1:14:2b:76:b5:38:3c:07:2b:c3:e2:99:ee:2d:5e:7a:8b: ba:b1:71:02:7d:4c:1d:6b:d7:38:c5:de:fe:a0:32:49:7f:1a: 10:4f:5b:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjUwODI0MTU0MzIxWhcNMjUwODMxMTU0MzIxWjAYMRYwFAYD VQQDEw02OGFiMzMxOS1lNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMm1n9m6qVJ+igmEmBkf7kGaPZD78Zx+2m2ZG2kDddUAKHrCvYVrD4DewMeV z86cku3ORwHz8HzfzBkx29c90SWsOQWDrRr0dBcag7AT7aa6FNC1tq5bkrzvxx4y bYk67KKAfBMh/3JgBCaA3JSkOkBue6+ypZKvRRGFssNwLUsYKTQYf4CLTU4ehrCo szfM+XySq7NqkhQPmHmAXivsnOnl/bXYU25Ywsg2X0BkgamCtffOsieeybYB0gzH hLgJTb5ADkznCRf9dqYvG6HfP5RpTcvQaIOI3y0sGlHQ8cEYI6/0onynOA1FffAb kXPTUqofItFYmgkjmq806pd1rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4cGPc6 tYLAaaohr32RF9IKdUe1MB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsVKfRINJtjLO05NVe4w/NpxNmoE67o6VX+5j2+fA64oaWL0ndYCk4 WxnK0GqM+8nW671ouIjvAbpeqSUmjMukqOTL9eL2DvhWpbAmtYKIUZPW28GQ+4GY xPuQCcpAWRKnvilftHDopw6rlMeM4Ss6or3794GxCW4IgsBjj1MMoXhzRap/WgyF X2V6FaXDUWXRpEV99NTcev3eyukwfFvk7tr2P2ClNDlNdxN7KWnPJCI/cFvjEWN4 3Z6eI/nIq0XkIGIb5IRJFaR9q9o9RhPAt0Uq/oG5q/NS0RQrdrU4PAcrw+KZ7i1e eou6sXECfUwda9c4xd7+oDJJfxoQT1t/ -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:12 2025 by rpki-client