$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: XpUJiHTPiSX2NODEaZ12RDVWjQc4mzdVpHftmX89SD8= Subject key identifier: DB:7E:77:88:9A:1E:46:01:E7:D4:5F:AB:19:E1:AF:55:AE:20:06:F9 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: 09 Signing time: Sat 05 Jul 2025 08:29:51 +0000 Manifest this update: Sat 05 Jul 2025 08:29:51 +0000 Manifest next update: Sat 12 Jul 2025 08:29:51 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: bF/eEgLFtI2cGd5bp+UkCx6ONvQYUddpkkPEsYfFics=) 2: 10676C34517211F0AB672330C4F9AE02.roa (hash: iNwtEE4vpbgtamGh9Rt3zwBDGCds5c6NdLwqNO9h0fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 08:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Jul 5 08:29:51 2025 GMT Not After : Jul 12 08:29:51 2025 GMT Subject: CN=6868e27f-8742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:51:e7:09:5a:ac:f2:88:99:30:ee:4a:05: c4:4a:ee:94:50:14:d8:5e:91:37:70:f2:91:22:cf: ac:32:17:71:4c:8f:14:e7:4e:a4:e6:ac:ff:e7:49: 9f:ff:94:84:ed:30:25:a7:20:23:83:b2:9a:4c:79: e4:7e:4d:31:0b:31:44:cd:79:cb:e6:e0:86:2e:1f: ee:15:f0:b3:97:4c:45:0a:4b:08:65:2b:a0:48:ed: 13:f3:ac:8f:4e:7d:31:81:7b:86:46:aa:e0:c1:76: 2f:0f:53:1a:44:1c:09:5b:79:50:6d:5b:95:66:31: e6:69:6a:4f:38:c5:85:e9:e4:c5:b4:ae:3a:37:11: 34:91:9d:b9:5c:a9:3d:a0:bb:70:29:60:65:35:a8: 98:c5:a9:a2:a5:57:ab:16:af:2b:cb:5f:52:ba:40: 85:61:43:5a:72:48:82:83:48:be:fe:88:65:8d:e5: ff:fb:ee:d2:e8:00:3f:e4:d7:a3:98:e1:c4:b9:d2: 10:c2:d5:50:81:a5:18:8a:19:d4:f8:c2:2e:5c:01: b7:99:4e:2e:56:a9:ff:69:d5:d2:d4:14:da:02:cb: 7e:03:9f:2b:9f:86:c5:53:f3:c6:36:f7:32:04:64: 21:6b:a3:ce:e7:2b:7f:19:7e:c0:03:13:c1:eb:11: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7E:77:88:9A:1E:46:01:E7:D4:5F:AB:19:E1:AF:55:AE:20:06:F9 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:72:a2:95:33:02:c5:dc:29:20:38:49:fe:07:a4:79:89:7d: b6:d7:c0:5f:70:11:25:de:bf:5e:34:ac:7d:1c:df:4c:d4:86: 12:eb:33:88:41:2e:fe:6c:0a:17:b3:3a:37:10:d4:df:4e:61: fa:08:8a:a4:73:c7:4e:f8:23:cf:3d:55:c3:dc:8c:60:0e:f7: 0e:4d:34:9a:27:68:de:92:1c:a5:3f:7d:a0:a4:da:02:76:9d: 56:d4:29:2e:07:41:fd:aa:ce:75:73:25:4a:fa:f2:ba:62:6e: e3:d2:05:48:27:26:6e:c7:4e:d7:f8:a5:14:77:ce:c0:65:62: 10:09:a7:33:4a:b3:9c:4b:a0:2e:38:31:f7:d5:e1:07:df:f5: 36:12:0f:cb:e9:ea:59:91:bd:28:3e:61:76:75:ad:3c:4f:3c: d9:0b:a2:aa:32:19:47:9a:53:d4:d8:91:da:c6:e7:4c:ad:bd: ca:f0:33:5a:3f:f8:18:35:31:46:13:ac:c0:d8:46:30:bf:ac: ca:bd:ee:ba:72:49:c9:45:d4:28:64:38:ad:21:9a:66:d4:e2: 70:3e:54:7e:63:6c:f5:d9:60:10:76:cc:08:f2:d8:7e:74:88: de:94:73:e6:65:6d:83:76:93:8b:a0:c6:57:3b:4c:c8:c6:e3: e5:f4:f2:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkU5RjExMC8GA1UEBRMoMjhEQUQ4RDRDQzZGNzQwRkEwMDBENDM2ODY5QUUwRjE3 NkVBRTkzMzAeFw0yNTA3MDUwODI5NTFaFw0yNTA3MTIwODI5NTFaMBgxFjAUBgNV BAMTDTY4NjhlMjdmLTg3NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw91HnCVqs8oiZMO5KBcRK7pRQFNhekTdw8pEiz6wyF3FMjxTnTqTmrP/nSZ// lITtMCWnICODsppMeeR+TTELMUTNecvm4IYuH+4V8LOXTEUKSwhlK6BI7RPzrI9O fTGBe4ZGquDBdi8PUxpEHAlbeVBtW5VmMeZpak84xYXp5MW0rjo3ETSRnblcqT2g u3ApYGU1qJjFqaKlV6sWryvLX1K6QIVhQ1pySIKDSL7+iGWN5f/77tLoAD/k16OY 4cS50hDC1VCBpRiKGdT4wi5cAbeZTi5Wqf9p1dLUFNoCy34DnyufhsVT88Y29zIE ZCFro87nK38ZfsADE8HrEZbVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2353iJoe RgHn1F+rGeGvVa4gBvkwHwYDVR0jBBgwFoAUKNrY1MxvdA+gANQ2hprg8Xbq6TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRTlGLzIzMDI3MTI0NTE3 MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS05yWTFNeHZkQS1nQU5RMmhwcmc4WGJxNlRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RTlGLzIzMDI3MTI0NTE3MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEt Z0FOUTJocHJnOFhicTZUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAJyopUzAsXcKSA4Sf4HpHmJfbbXwF9wESXev140rH0c30zUhhLrM4hB Lv5sChezOjcQ1N9OYfoIiqRzx074I889VcPcjGAO9w5NNJonaN6SHKU/faCk2gJ2 nVbUKS4HQf2qznVzJUr68rpibuPSBUgnJm7HTtf4pRR3zsBlYhAJpzNKs5xLoC44 MffV4Qff9TYSD8vp6lmRvSg+YXZ1rTxPPNkLoqoyGUeaU9TYkdrG50ytvcrwM1o/ +Bg1MUYTrMDYRjC/rMq97rpySclF1ChkOK0hmmbU4nA+VH5jbPXZYBB2zAjy2H50 iN6Uc+ZlbYN2k4ugxlc7TMjG4+X08oo= -----END CERTIFICATE-----Generated at Mon Jul 7 09:31:53 2025 by rpki-client