$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: fJFaqkeOrw/kGJx1rzyIHgm2dwr5Wy6N6xkUVAyKMeU= Subject key identifier: 73:A8:71:69:89:45:B4:C8:CF:85:3B:4C:65:E4:1E:F5:E1:22:0D:9E Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 02A5 Signing time: Fri 05 Sep 2025 01:53:52 +0000 Manifest this update: Fri 05 Sep 2025 01:53:51 +0000 Manifest next update: Fri 12 Sep 2025 01:53:51 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: LOWfrdEOMHouGWkTMJCurFlQ+8nZ0co0lG43+aasVSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Sep 5 01:53:51 2025 GMT Not After : Sep 12 01:53:51 2025 GMT Subject: CN=68ba42b0-0510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:d4:3f:1e:14:9e:81:53:5d:f9:63:52:a1: a0:88:71:b4:26:76:16:19:79:42:d9:7d:5d:55:1f: dc:4e:39:85:56:80:b3:f1:e4:4c:d8:46:6f:63:46: 45:12:90:58:b5:0f:0d:2d:20:98:09:da:44:a7:43: 74:87:1a:f6:d8:34:bc:7f:39:dc:5a:7a:1c:16:43: 95:fd:39:db:41:be:8f:55:6c:78:99:c7:f7:4e:8f: 85:9f:96:f8:27:ff:c2:24:13:97:45:86:e0:4d:99: ed:a5:f8:1b:ea:e9:77:7f:3a:66:b7:3f:ea:7b:9a: 41:fa:2f:93:88:23:e2:4f:4a:27:fa:90:b2:6d:d9: 49:b8:ba:f9:59:80:13:3a:26:33:df:12:ac:7a:38: cb:54:b2:7b:aa:93:d2:58:36:25:01:73:9c:0c:bc: d0:26:78:7b:50:fa:20:0d:35:a5:51:a7:53:e4:9d: 04:12:6a:37:15:9a:56:77:74:26:95:78:b6:11:06: 7d:7d:65:55:11:ce:9b:dc:1e:51:46:91:eb:30:c6: 65:78:e8:8a:70:be:32:37:b2:e0:84:1b:97:79:b4: 02:7c:e0:98:2e:b1:22:85:0d:d9:dc:7e:87:13:65: f2:f1:f6:88:88:4c:4f:de:1e:2b:b7:3e:dc:7a:8f: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A8:71:69:89:45:B4:C8:CF:85:3B:4C:65:E4:1E:F5:E1:22:0D:9E X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:c7:72:83:9f:1b:80:f4:0f:fd:2a:eb:17:e0:09:d7:39:40: 81:8d:cc:bd:ab:13:57:a6:7b:58:af:18:76:a1:3f:63:48:98: 62:36:c7:cf:cf:8c:26:58:13:8c:94:3e:06:f6:ea:88:41:9c: 5e:85:43:c9:73:07:0a:82:25:dd:4d:85:cc:7b:b1:32:72:73: 08:d6:09:78:4b:ed:15:2c:72:17:c0:31:5a:7b:c1:84:a4:82: c1:a4:5d:8c:fe:57:69:a8:5d:ba:29:c4:61:1e:df:7c:63:cf: 4f:a1:c5:48:79:fc:d2:b4:ee:8b:50:69:ce:6c:a5:a4:1f:d5: e0:39:da:88:29:99:e6:f0:cf:e2:bf:dd:3f:ef:ac:b8:ed:35: 88:98:9e:39:bd:83:7b:66:13:a7:a9:14:86:f0:3a:d3:a4:5a: cc:d6:7a:6a:8e:ae:52:39:b2:79:ce:6b:ca:a7:83:ac:43:b4: c5:c5:ec:cb:4a:e9:eb:68:09:08:50:f2:2d:ef:2e:f8:1f:f9: 21:b3:25:a6:15:50:af:0f:4a:8f:f4:46:bf:99:f2:b0:86:80: 1d:f0:29:dd:aa:2c:8a:7b:e5:b8:95:ff:c5:97:f6:fc:9b:c4: 79:0f:67:5a:db:63:1f:08:7b:f2:26:70:85:90:2d:3b:39:7a: ae:f7:a9:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUwOTA1MDE1MzUxWhcNMjUwOTEyMDE1MzUxWjAYMRYwFAYD VQQDEw02OGJhNDJiMC0wNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdPUPx4UnoFTXfljUqGgiHG0JnYWGXlC2X1dVR/cTjmFVoCz8eRM2EZvY0ZF EpBYtQ8NLSCYCdpEp0N0hxr22DS8fzncWnocFkOV/TnbQb6PVWx4mcf3To+Fn5b4 J//CJBOXRYbgTZntpfgb6ul3fzpmtz/qe5pB+i+TiCPiT0on+pCybdlJuLr5WYAT OiYz3xKsejjLVLJ7qpPSWDYlAXOcDLzQJnh7UPogDTWlUadT5J0EEmo3FZpWd3Qm lXi2EQZ9fWVVEc6b3B5RRpHrMMZleOiKcL4yN7LghBuXebQCfOCYLrEihQ3Z3H6H E2Xy8faIiExP3h4rtz7ceo9yfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOocWmJ RbTIz4U7TGXkHvXhIg2eMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVx3KDnxuA9A/9KusX4AnXOUCBjcy9qxNXpntYrxh2oT9jSJhiNsfP z4wmWBOMlD4G9uqIQZxehUPJcwcKgiXdTYXMe7EycnMI1gl4S+0VLHIXwDFae8GE pILBpF2M/ldpqF26KcRhHt98Y89PocVIefzStO6LUGnObKWkH9XgOdqIKZnm8M/i v90/76y47TWImJ45vYN7ZhOnqRSG8DrTpFrM1npqjq5SObJ5zmvKp4OsQ7TFxezL SunraAkIUPIt7y74H/khsyWmFVCvD0qP9Ea/mfKwhoAd8CndqiyKe+W4lf/Fl/b8 m8R5D2da22MfCHvyJnCFkC07OXqu96kk -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:57 2025 by rpki-client