$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json) Hash identifier: VuXe0x54DJtUf1WYyU3tubXSfQvAtKjw49KBLyAmj5A= Subject key identifier: 9E:04:FC:5A:F7:4B:92:53:CD:CC:D8:CE:3A:1C:AB:BE:82:98:6D:56 Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Certificate serial: 05D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft Manifest number: 05CD Signing time: Mon 08 Sep 2025 23:06:40 +0000 Manifest this update: Mon 08 Sep 2025 23:06:40 +0000 Manifest next update: Mon 15 Sep 2025 23:06:40 +0000 Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: WcLq8McMpscf6Jh3kiqwWgOF0wDkaIgthjhH7gm7f4Q=) 2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: v0ecUflCYhVKX7WWipZns2LjtpkfsuPLOo5CXM1V1Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Validity Not Before: Sep 8 23:06:40 2025 GMT Not After : Sep 15 23:06:40 2025 GMT Subject: CN=68bf6180-827d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:8f:91:d5:8b:bf:39:4c:15:69:54:15:40: 28:7e:dc:06:97:62:4d:08:87:e9:58:90:82:4e:34: 30:b3:05:a9:4e:31:47:fb:46:60:af:3a:52:bf:e1: b8:2c:8f:65:84:3e:d3:22:f2:3b:45:6c:25:f8:86: 8c:7d:fe:c8:9c:87:b6:90:4e:99:3b:23:2b:3a:4e: cf:3a:b5:fa:f5:a5:16:5e:45:94:26:9b:ac:0a:0a: a7:d1:d7:05:42:6c:e7:fa:7d:04:17:df:97:8c:fb: d0:6f:7f:07:66:ff:74:b2:63:6a:29:03:7d:a6:c2: 8e:32:8c:e6:3b:96:fe:dc:5f:3b:d9:53:53:d9:59: ce:37:5e:8a:7d:aa:0d:a0:aa:f4:60:c2:44:95:2c: e2:c9:c1:c5:60:50:96:95:c8:bd:79:22:7e:c6:3c: 39:d0:46:4b:7a:79:9c:bf:52:f9:b2:ea:45:ca:d5: 8f:6b:f1:cb:06:15:b5:f9:c1:ba:cd:60:32:97:cb: 17:b8:29:09:d5:d5:d3:7d:7d:b3:b5:b4:13:1d:d1: ba:9d:35:d5:80:74:a7:10:37:3d:40:23:04:0c:40: 1f:24:88:c4:bd:25:29:f8:a5:37:8d:76:ee:d7:f8: fc:86:a2:94:16:0d:80:02:43:38:07:57:26:a2:fe: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:04:FC:5A:F7:4B:92:53:CD:CC:D8:CE:3A:1C:AB:BE:82:98:6D:56 X509v3 Authority Key Identifier: keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:95:a2:43:00:aa:f2:92:a2:49:c7:8b:0a:6a:44:2c:41:ea: 77:cd:bb:8d:2b:8c:c2:6b:3a:8f:15:58:1b:68:79:14:d5:cb: f2:c2:92:6f:37:44:30:28:a4:d7:3a:4b:c0:28:1f:ef:cf:b6: 9b:ea:df:1c:c4:1c:dd:6a:c4:1b:bd:9b:56:68:31:36:99:16: 04:e7:8a:4c:9f:b2:eb:38:44:86:15:00:98:59:fd:56:7a:1b: 10:d4:14:64:e0:fe:26:74:c2:c9:4e:fb:10:ae:9b:3d:27:f5: 7d:52:a4:64:ee:d2:33:ba:4c:8f:19:55:aa:52:b1:49:8d:66: 4f:0d:1e:8b:93:b6:af:8e:7f:34:b2:cf:90:48:53:fd:9c:3e: 29:e1:14:2c:33:19:50:c0:62:96:ef:70:ea:3e:3c:7d:0c:76: ca:08:12:ab:dd:97:54:dc:20:77:db:1a:82:5c:08:4b:94:81: c7:14:cf:06:8b:dc:c9:c9:03:d7:0f:87:32:88:2f:7d:b1:1c: 78:2c:17:09:37:ef:63:7e:e8:24:b0:24:64:38:ae:47:36:6d: 0e:10:60:8c:49:15:ba:ff:cd:f6:68:14:5f:08:4e:28:5f:26: c2:62:27:20:bd:3e:1c:99:98:a8:6f:54:b2:58:ef:a9:56:53: 8c:a7:0f:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2NDcxMTAvBgNVBAUTKDk4QTVBOTU1OTJDMDRFQkVEMzg3MTZCQzFEQ0UzNTE3 QjdCMTJEMDgwHhcNMjUwOTA4MjMwNjQwWhcNMjUwOTE1MjMwNjQwWjAYMRYwFAYD VQQDEw02OGJmNjE4MC04MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxImPkdWLvzlMFWlUFUAoftwGl2JNCIfpWJCCTjQwswWpTjFH+0ZgrzpSv+G4 LI9lhD7TIvI7RWwl+IaMff7InIe2kE6ZOyMrOk7POrX69aUWXkWUJpusCgqn0dcF Qmzn+n0EF9+XjPvQb38HZv90smNqKQN9psKOMozmO5b+3F872VNT2VnON16KfaoN oKr0YMJElSziycHFYFCWlci9eSJ+xjw50EZLenmcv1L5supFytWPa/HLBhW1+cG6 zWAyl8sXuCkJ1dXTfX2ztbQTHdG6nTXVgHSnEDc9QCMEDEAfJIjEvSUp+KU3jXbu 1/j8hqKUFg2AAkM4B1cmov6zUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4E/Fr3 S5JTzczYzjocq76CmG1WMB8GA1UdIwQYMBaAFJilqVWSwE6+04cWvB3ONRe3sS0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjY0Ny8wMTU3QkFERUQy NDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRyN1RoeGE4SGM0MUY3ZXhM UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21LV3BWWkxBVHI3VGh4YThIYzQxRjdleExRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjY0Ny8wMTU3QkFERUQyNDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRy N1RoeGE4SGM0MUY3ZXhMUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnlaJDAKrykqJJx4sKakQsQep3zbuNK4zCazqPFVgbaHkU1cvywpJv N0QwKKTXOkvAKB/vz7ab6t8cxBzdasQbvZtWaDE2mRYE54pMn7LrOESGFQCYWf1W ehsQ1BRk4P4mdMLJTvsQrps9J/V9UqRk7tIzukyPGVWqUrFJjWZPDR6Lk7avjn80 ss+QSFP9nD4p4RQsMxlQwGKW73DqPjx9DHbKCBKr3ZdU3CB32xqCXAhLlIHHFM8G i9zJyQPXD4cyiC99sRx4LBcJN+9jfugksCRkOK5HNm0OEGCMSRW6/832aBRfCE4o XybCYicgvT4cmZiob1SyWO+pVlOMpw9t -----END CERTIFICATE-----Generated at Tue Sep 9 05:26:21 2025 by rpki-client