$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: KUNH/OAWU3bbHiRmg0bp3JmtmIeaX8f+XosEte1Zmek= Subject key identifier: 3C:FC:36:7E:71:BF:77:C8:AA:F5:4F:66:24:72:5C:2D:68:65:0F:74 Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 060D Signing time: Thu 04 Sep 2025 23:06:13 +0000 Manifest this update: Thu 04 Sep 2025 23:06:12 +0000 Manifest next update: Thu 11 Sep 2025 23:06:12 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: EQoVeynU5RtlIAfpit8w+BXciG5qKVNvNyPIyrprqmg=) 2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: z/OvD5EQcBmWZhdA8ip/E6h0FRzhkXq6osJ4yXLXzHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: Sep 4 23:06:12 2025 GMT Not After : Sep 11 23:06:12 2025 GMT Subject: CN=68ba1b64-58a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:79:c0:54:bb:7b:ec:ed:97:0a:7a:ad:81: 0a:67:4e:de:47:b3:66:44:e6:d1:6a:ab:f8:30:c7: 93:df:57:70:7d:33:27:97:cc:6d:be:b9:b2:d3:6e: a4:06:c6:f1:ae:fa:8d:6b:c8:5c:08:8b:f6:6f:a9: d3:9f:26:2c:a8:e2:c3:9c:b1:31:82:eb:7f:ce:8c: 2f:93:60:e8:0c:91:1b:7c:b1:10:3e:1a:51:3e:c4: 3e:e3:36:19:f8:52:7f:d5:9d:a5:db:9d:9c:be:a2: 2b:98:12:6e:ea:46:90:42:c3:a3:2f:50:5b:98:72: f3:0b:70:2c:39:95:26:e7:f0:94:ff:c4:64:12:50: 48:d5:50:e4:b0:7b:46:9d:98:13:fe:3a:c1:93:32: e0:90:fe:38:6a:7e:0f:7c:55:38:ec:95:45:8d:15: da:ea:f2:42:17:45:e3:c2:c8:9b:da:cf:8b:ab:45: 34:a7:bd:d6:6d:f1:4f:27:25:a3:3b:4a:db:a3:c3: 6d:08:da:f1:4a:ac:f7:87:1c:3a:1d:3f:df:85:7e: ea:00:07:88:c5:46:6c:59:eb:fa:a2:56:14:13:fe: db:55:aa:99:f1:b2:72:d8:43:08:9d:a7:b8:5b:89: ba:7a:39:fa:36:b9:b5:ae:ca:e3:e6:5a:a4:93:43: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FC:36:7E:71:BF:77:C8:AA:F5:4F:66:24:72:5C:2D:68:65:0F:74 X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:5e:90:c0:86:b3:11:18:8f:ef:27:d4:ee:ad:7e:7f:a8:78: e4:0f:5b:bf:a9:f7:55:03:f2:22:7e:3d:2f:d6:b7:de:72:c0: c5:b9:d7:ce:c6:ea:39:26:00:70:c1:66:52:14:50:6a:5a:a5: 06:1d:19:d7:18:61:e4:c0:0d:ea:c1:09:ac:da:65:32:d7:19: 10:2e:da:62:dc:5b:c1:8d:5b:cb:9e:6a:76:4c:9b:ea:3c:fb: 73:da:3e:e8:18:05:db:cc:e6:52:f5:45:48:d5:bd:78:47:d3: 8c:99:05:eb:b8:bb:c8:12:41:e7:ad:aa:f0:f6:a2:40:c4:bc: 94:ed:98:8f:e2:f1:e7:15:a3:42:e6:a7:55:40:e2:28:54:1d: 40:cf:e8:e6:a9:2c:39:eb:a1:e4:e3:a7:24:4c:91:5a:32:1e: f2:47:91:9f:48:3e:fb:ae:e2:65:16:46:0e:a1:67:f9:30:2a: 16:1b:01:96:d1:a1:d6:78:ca:16:19:40:62:1a:63:19:94:cc: 62:fa:3a:13:9d:d8:14:26:b5:bd:c2:96:30:f8:20:c3:f9:06: d1:45:76:34:a6:b7:60:51:19:49:8f:6c:8d:e5:f5:ab:13:d3: 6d:4b:5d:01:f0:1f:b7:cb:b7:93:a2:f2:0a:c1:e1:85:35:61: c4:54:5d:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjUwOTA0MjMwNjEyWhcNMjUwOTExMjMwNjEyWjAYMRYwFAYD VQQDEw02OGJhMWI2NC01OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyp5wFS7e+ztlwp6rYEKZ07eR7NmRObRaqv4MMeT31dwfTMnl8xtvrmy026k BsbxrvqNa8hcCIv2b6nTnyYsqOLDnLExgut/zowvk2DoDJEbfLEQPhpRPsQ+4zYZ +FJ/1Z2l252cvqIrmBJu6kaQQsOjL1BbmHLzC3AsOZUm5/CU/8RkElBI1VDksHtG nZgT/jrBkzLgkP44an4PfFU47JVFjRXa6vJCF0Xjwsib2s+Lq0U0p73WbfFPJyWj O0rbo8NtCNrxSqz3hxw6HT/fhX7qAAeIxUZsWev6olYUE/7bVaqZ8bJy2EMInae4 W4m6ejn6Nrm1rsrj5lqkk0POewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDz8Nn5x v3fIqvVPZiRyXC1oZQ90MB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4XpDAhrMRGI/vJ9TurX5/qHjkD1u/qfdVA/Iifj0v1rfecsDFudfO xuo5JgBwwWZSFFBqWqUGHRnXGGHkwA3qwQms2mUy1xkQLtpi3FvBjVvLnmp2TJvq PPtz2j7oGAXbzOZS9UVI1b14R9OMmQXruLvIEkHnrarw9qJAxLyU7ZiP4vHnFaNC 5qdVQOIoVB1Az+jmqSw566Hk46ckTJFaMh7yR5GfSD77ruJlFkYOoWf5MCoWGwGW 0aHWeMoWGUBiGmMZlMxi+joTndgUJrW9wpYw+CDD+QbRRXY0prdgURlJj2yN5fWr E9NtS10B8B+3y7eTovIKweGFNWHEVF3v -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:27 2025 by rpki-client