$ rpki-client -vvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft File: KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft (raw, json) Hash identifier: sdDkQVnBq/5orIvid974juwgr5UBOq2WoE67l46szQA= Subject key identifier: 9D:A1:85:87:DA:80:E4:38:32:E4:B4:B8:D8:D6:67:A5:3F:95:AE:8F Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F Certificate issuer: /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft Manifest number: 01E1 Signing time: Tue 09 Sep 2025 02:47:36 +0000 Manifest this update: Tue 09 Sep 2025 02:47:36 +0000 Manifest next update: Tue 16 Sep 2025 02:47:36 +0000 Files and hashes: 1: KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl (hash: GTM3WGBxpx6r4KkIxQf0XSvFceiCed+I42LsCNaspEw=) 2: 6AA5FC16905211EE840DED1DC4F9AE02.roa (hash: 7Dqx51HWm5FHrY3yqH5za3wPDKkHA22oTIJYfgHsb38=) 3: FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (hash: fXQJZHONbxHqV0/XhxdMVhavc2gV0JF7ZuHG+631NZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171927, serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Validity Not Before: Sep 9 02:47:36 2025 GMT Not After : Sep 16 02:47:36 2025 GMT Subject: CN=68bf9548-b5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:3c:40:e6:39:b1:36:a7:61:3d:36:be:27: 31:35:0a:ec:2a:99:ef:32:c7:0e:2c:08:79:35:6a: 4e:79:ff:13:70:6b:7b:4b:11:c1:e8:d8:df:9d:fb: 3c:c8:4d:f4:b2:ef:c0:42:78:c9:83:1e:87:92:3f: bf:df:d8:b4:1e:bb:0a:10:ef:01:f4:a2:69:c6:e5: b2:da:30:3d:3d:29:4b:dd:6e:e9:66:0b:05:10:cd: c2:54:12:c9:1a:81:cb:0d:52:56:bf:6a:71:67:2a: c1:9a:13:05:43:e6:4c:87:2c:ea:f6:f2:36:ab:a7: 2c:af:b5:73:c0:8a:c9:e9:8a:12:2e:ea:1b:9a:d6: 43:81:1b:10:09:a7:fb:f4:a0:29:08:56:ca:03:85: 4b:93:27:a1:9f:10:14:66:05:4c:10:d2:ec:bd:a1: f6:76:20:6a:73:e4:79:c1:32:33:ae:a1:77:6b:e0: ec:1a:5c:ff:3d:e6:0c:6a:f4:b4:62:95:be:65:f6: 1b:cc:04:8e:cc:15:53:bc:12:71:a7:82:9c:65:e7: ad:5c:33:95:05:03:59:29:53:2a:70:36:d7:9e:ba: 99:41:d3:d2:ed:5e:34:15:6b:da:b2:7d:c0:93:30: ea:14:c9:dc:42:bd:b6:06:d4:62:ad:90:f6:90:bc: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A1:85:87:DA:80:E4:38:32:E4:B4:B8:D8:D6:67:A5:3F:95:AE:8F X509v3 Authority Key Identifier: keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e0:12:d7:04:74:8d:e1:e7:ba:69:e8:3d:fa:ad:c1:d1:86: 45:4e:7d:78:4d:1a:bc:fd:63:7a:4c:e9:57:a8:85:12:de:24: 92:bc:63:61:8f:19:10:9e:55:c3:34:20:0c:5c:ab:67:d2:75: 21:1f:3c:ea:f6:5b:af:28:29:1d:d9:30:a5:14:23:d6:6c:3a: 3e:59:53:90:0f:19:5c:95:dd:2d:92:e4:ac:44:6d:57:4a:d9: 1d:2b:9f:76:0a:1f:42:90:9a:f0:43:3a:16:58:88:e3:09:d4: 58:36:ab:c3:12:43:24:05:33:19:a9:b7:eb:ae:ac:5e:93:40: 66:86:f1:31:93:c4:22:3a:35:c5:cc:e8:3f:1a:0b:c4:02:15: cf:2c:64:b7:b6:a3:7d:02:09:fe:50:5f:5c:38:ff:8b:09:14: 21:16:4f:e1:ba:3d:6c:02:2c:72:ee:85:22:8d:3b:ed:39:04: c8:98:8a:22:e5:dd:66:81:1f:f2:99:59:ce:7b:89:cb:fc:ff: 90:7e:d7:a2:63:8f:fd:08:dc:30:7e:6f:09:0e:8c:17:f6:aa: 57:17:f2:56:93:35:d9:bf:76:ad:99:1b:f7:00:c1:12:bf:b9: 43:6e:65:c6:3a:39:3e:fa:d2:78:f5:48:5e:64:c8:30:e7:93: c8:f9:dd:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MjcxMTAvBgNVBAUTKDJBNjlENjk5RjEzQzA0MUJGREEzREFBNTdFMjFGRkFC M0M1M0VENUYwHhcNMjUwOTA5MDI0NzM2WhcNMjUwOTE2MDI0NzM2WjAYMRYwFAYD VQQDEw02OGJmOTU0OC1iNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAle48QOY5sTanYT02vicxNQrsKpnvMscOLAh5NWpOef8TcGt7SxHB6Njfnfs8 yE30su/AQnjJgx6Hkj+/39i0HrsKEO8B9KJpxuWy2jA9PSlL3W7pZgsFEM3CVBLJ GoHLDVJWv2pxZyrBmhMFQ+ZMhyzq9vI2q6csr7VzwIrJ6YoSLuobmtZDgRsQCaf7 9KApCFbKA4VLkyehnxAUZgVMENLsvaH2diBqc+R5wTIzrqF3a+DsGlz/PeYMavS0 YpW+ZfYbzASOzBVTvBJxp4KcZeetXDOVBQNZKVMqcDbXnrqZQdPS7V40FWvasn3A kzDqFMncQr22BtRirZD2kLzzwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2hhYfa gOQ4MuS0uNjWZ6U/la6PMB8GA1UdIwQYMBaAFCpp1pnxPAQb/aPapX4h/6s8U+1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkyNy9GRDhCMjJCMEJD MkYxMUVEQThGNzY1M0VDNEY5QUUwMi9LbW5XbWZFOEJCdjlvOXFsZmlIX3F6eFQ3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttbldtZkU4QkJ2OW85cWxmaUhfcXp4VDdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkyNy9GRDhCMjJCMEJDMkYxMUVEQThGNzY1M0VDNEY5QUUwMi9LbW5XbWZFOEJC djlvOXFsZmlIX3F6eFQ3VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM4BLXBHSN4ee6aeg9+q3B0YZFTn14TRq8/WN6TOlXqIUS3iSSvGNh jxkQnlXDNCAMXKtn0nUhHzzq9luvKCkd2TClFCPWbDo+WVOQDxlcld0tkuSsRG1X StkdK592Ch9CkJrwQzoWWIjjCdRYNqvDEkMkBTMZqbfrrqxek0BmhvExk8QiOjXF zOg/GgvEAhXPLGS3tqN9Agn+UF9cOP+LCRQhFk/huj1sAixy7oUijTvtOQTImIoi 5d1mgR/ymVnOe4nL/P+QfteiY4/9CNwwfm8JDowX9qpXF/JWkzXZv3atmRv3AMES v7lDbmXGOjk++tJ49UheZMgw55PI+d1q -----END CERTIFICATE-----Generated at Tue Sep 9 09:43:57 2025 by rpki-client