$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: wFAt1H6IIVTRHQRZJrgC8Q9h8GBswl3VII3CQZlJeJo= Subject key identifier: 76:B5:31:4B:43:B5:E2:DE:68:DA:88:C9:12:0B:CD:D5:B2:F0:98:DF Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 0652 Signing time: Sat 06 Sep 2025 22:58:12 +0000 Manifest this update: Sat 06 Sep 2025 22:58:11 +0000 Manifest next update: Sat 13 Sep 2025 22:58:11 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: NM9969nJVo/tYDOqvyLihzBB0twg0X9V7pJGLZLQ0Vc=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: IsFTUXxsw7oP6sOsJZN0fFgsJ2mQPRr349bOV7EbeEQ=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: d0b5vUBWzMm2pz0E2OMmgEy+tuggoWEtsruTL8xevaE=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Sep 6 22:58:11 2025 GMT Not After : Sep 13 22:58:11 2025 GMT Subject: CN=68bcbc84-c700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:cc:8a:d0:68:f2:14:3e:3e:fd:cb:c4:e4: 83:63:43:2a:ef:6c:64:62:60:54:8a:8f:28:31:83: c0:1f:2b:df:25:8c:16:21:89:93:6c:24:69:b6:ba: db:31:db:fe:10:d1:b5:ae:96:94:15:66:4c:aa:ea: bd:d9:b5:fb:a6:52:16:ff:05:e3:cf:cb:70:c0:ee: 6e:12:0a:90:c2:3d:1e:5d:ba:b3:8a:46:38:3d:79: 71:b4:59:39:87:7d:64:19:8d:32:f1:5e:28:17:ee: 45:14:dc:f5:b0:c1:df:e8:ac:1b:ab:c9:96:72:cf: 2e:17:c7:a5:65:b9:be:83:49:96:00:a0:de:1b:8b: 03:18:99:a1:e6:6d:54:e5:fd:b9:11:0b:63:7a:ab: 18:82:a4:04:dc:fa:f8:34:c1:e0:8a:28:43:b3:b0: fb:70:4d:8d:75:df:e3:aa:a0:0a:c8:65:91:25:7c: ec:d4:42:df:fe:8b:10:5f:d9:86:9d:09:8c:27:0b: a7:0d:6b:ef:d8:25:06:7e:98:4a:98:36:42:8c:c3: 4f:64:9b:93:a2:ee:a5:6c:6f:40:20:d8:82:65:7a: 6c:2f:50:64:c7:0a:15:8b:2f:a2:bd:31:4b:98:df: a8:10:39:19:76:e6:da:04:72:95:90:90:d8:3e:22: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B5:31:4B:43:B5:E2:DE:68:DA:88:C9:12:0B:CD:D5:B2:F0:98:DF X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:bd:64:3e:c5:4c:9d:c7:45:29:5f:44:d4:c4:8a:60:22:88: cb:36:ce:39:82:c1:aa:14:62:eb:88:d8:76:cf:2c:97:9d:ea: b4:89:c6:88:f0:ab:d7:2a:3f:73:14:04:da:43:2d:8d:c8:a4: 73:b4:f8:8a:26:d6:53:72:6d:a6:54:34:11:3f:77:75:64:d0: 4d:93:8b:0e:74:db:fe:fb:dd:2a:c0:ce:ce:c6:50:1a:9b:92: 36:29:cc:db:8a:98:0f:ab:c2:d6:dc:a7:60:4c:53:a4:11:6a: 03:f8:d3:53:09:75:5a:94:d0:5e:a7:cc:1a:09:2f:62:50:d0: 3c:df:be:a7:cd:52:b9:66:b0:cc:24:3e:9b:07:2d:6e:ce:a0: 0e:39:5a:8e:51:ad:c7:52:7e:f6:f6:d8:ed:dc:da:59:43:74: 1f:93:d4:3d:a8:54:1a:c1:5a:88:5f:a4:41:dd:be:17:e0:a9: 50:fb:7c:e5:f2:87:77:34:c0:2f:46:f5:62:09:96:c4:26:32: 2d:91:a4:b4:f7:05:4a:1c:98:d9:bb:66:46:b4:a3:95:b2:62: ce:cb:c2:8e:e3:66:72:20:e5:51:78:61:cb:07:00:36:e1:35: cd:34:66:b7:9f:19:b9:10:2e:e8:34:ee:cc:18:3e:48:88:82: e7:37:93:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUwOTA2MjI1ODExWhcNMjUwOTEzMjI1ODExWjAYMRYwFAYD VQQDEw02OGJjYmM4NC1jNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTHMitBo8hQ+Pv3LxOSDY0Mq72xkYmBUio8oMYPAHyvfJYwWIYmTbCRptrrb Mdv+ENG1rpaUFWZMquq92bX7plIW/wXjz8twwO5uEgqQwj0eXbqzikY4PXlxtFk5 h31kGY0y8V4oF+5FFNz1sMHf6Kwbq8mWcs8uF8elZbm+g0mWAKDeG4sDGJmh5m1U 5f25EQtjeqsYgqQE3Pr4NMHgiihDs7D7cE2Ndd/jqqAKyGWRJXzs1ELf/osQX9mG nQmMJwunDWvv2CUGfphKmDZCjMNPZJuTou6lbG9AINiCZXpsL1BkxwoViy+ivTFL mN+oEDkZdubaBHKVkJDYPiKn/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHa1MUtD teLeaNqIyRILzdWy8JjfMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1vWQ+xUydx0UpX0TUxIpgIojLNs45gsGqFGLriNh2zyyXneq0icaI 8KvXKj9zFATaQy2NyKRztPiKJtZTcm2mVDQRP3d1ZNBNk4sOdNv++90qwM7OxlAa m5I2KczbipgPq8LW3KdgTFOkEWoD+NNTCXValNBep8waCS9iUNA8376nzVK5ZrDM JD6bBy1uzqAOOVqOUa3HUn729tjt3NpZQ3Qfk9Q9qFQawVqIX6RB3b4X4KlQ+3zl 8od3NMAvRvViCZbEJjItkaS09wVKHJjZu2ZGtKOVsmLOy8KO42ZyIOVReGHLBwA2 4TXNNGa3nxm5EC7oNO7MGD5IiILnN5PZ -----END CERTIFICATE-----Generated at Sun Sep 7 14:24:50 2025 by rpki-client