$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json) Hash identifier: z8NGmauGjUGYZChUMwTsZJvUbIjFNPXRgnPW/M8P0GY= Subject key identifier: 61:79:55:56:2D:95:3D:70:BC:EF:4A:68:65:31:81:CE:02:C4:60:CE Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft Manifest number: 0206 Signing time: Thu 21 Aug 2025 02:19:58 +0000 Manifest this update: Thu 21 Aug 2025 02:19:58 +0000 Manifest next update: Thu 28 Aug 2025 02:19:58 +0000 Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: F+lEbiMd4FbUUu54exl6JAdZGGuLjEUWGXEZlNbrOX8=) 2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: hbdkOUT0eBQ98Cc0oj/9P37h6+6Kubs6FMec8+3wPTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Aug 21 02:19:58 2025 GMT Not After : Aug 28 02:19:58 2025 GMT Subject: CN=68a6824e-a2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:6f:f9:f1:d8:13:f7:a0:70:16:99:4b:3f: b2:ec:1d:52:7c:01:60:72:04:e4:e8:bd:16:00:38: 11:5b:a6:c7:85:ec:af:61:c8:fc:43:31:dc:69:f8: 3e:c8:ac:ca:2f:5c:d1:af:b8:3b:73:91:bf:fb:19: fa:a9:83:48:76:c9:73:1d:77:0a:a9:79:b3:fd:cc: 47:7b:cd:31:2c:33:34:39:37:02:ea:1c:90:9a:0d: df:fd:76:e0:d7:fb:3d:d0:d6:66:c1:be:7c:a8:cf: e7:cf:04:34:c9:1c:02:a2:2c:b4:66:3c:39:32:ae: d0:9d:f1:65:b4:5c:18:50:94:43:1b:12:cf:e2:96: 44:5e:7d:80:65:96:e8:c2:4c:76:03:b2:38:30:e8: 25:94:f8:53:57:2c:1e:88:ca:3d:aa:9d:2b:ee:a8: e5:f3:df:f9:71:2b:42:e9:cf:c5:52:e1:7f:dc:25: 12:cd:39:c0:70:d6:9e:49:3d:7b:2b:36:7a:b4:51: f7:f4:15:21:08:b9:dd:e3:61:ad:0a:f8:6d:2b:4f: 9b:9a:73:07:e9:52:de:d2:02:a3:9b:66:ae:98:a5: c3:f5:86:32:30:f7:5f:43:51:38:82:ad:79:67:da: 30:82:de:fd:2d:63:e9:21:a7:55:c2:a4:80:1b:49: e0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:79:55:56:2D:95:3D:70:BC:EF:4A:68:65:31:81:CE:02:C4:60:CE X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:8d:c1:b5:4c:f8:1d:49:8c:71:0c:92:40:4b:f6:11:2a:6b: df:52:1e:bf:b4:7b:8a:32:13:99:04:39:84:c4:60:10:39:85: 34:8b:65:34:10:4b:e8:19:a6:05:b4:4a:01:ae:5d:af:49:b7: 65:b4:15:1e:0b:68:f1:41:e1:28:fc:9f:df:c6:b9:df:76:88: 84:f5:d6:e6:fc:88:3a:00:0c:a6:82:0c:97:69:86:3a:fa:51: 92:0e:aa:a9:d8:2c:e2:e5:d6:24:e8:a9:19:d4:9a:a3:4c:c4: f2:2f:f9:ae:71:d8:e7:69:0d:70:cf:f0:ff:a5:25:52:4d:98: 63:8c:34:f3:3e:c0:10:d1:b6:f5:0e:6f:38:4e:46:51:d4:1b: bd:af:25:b0:eb:4a:6d:5c:91:50:aa:53:68:0c:b6:11:02:f4: 0f:94:f4:5a:14:11:0b:06:ff:c4:45:86:79:72:0f:09:67:4b: c9:2e:67:be:39:ef:28:e5:30:b1:84:4a:b4:29:5c:7c:7b:50: 4f:c1:5b:88:01:26:b2:b7:f1:7f:b6:ef:36:0c:52:a3:af:bc: 5b:c3:49:e1:b5:41:26:86:a1:7e:69:5e:5f:8e:c6:8d:89:b0: 0e:ce:a9:a7:94:39:d4:fe:d1:02:aa:98:07:f4:d7:6d:6c:14: 56:50:ff:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjUwODIxMDIxOTU4WhcNMjUwODI4MDIxOTU4WjAYMRYwFAYD VQQDEw02OGE2ODI0ZS1hMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxktv+fHYE/egcBaZSz+y7B1SfAFgcgTk6L0WADgRW6bHheyvYcj8QzHcafg+ yKzKL1zRr7g7c5G/+xn6qYNIdslzHXcKqXmz/cxHe80xLDM0OTcC6hyQmg3f/Xbg 1/s90NZmwb58qM/nzwQ0yRwCoiy0Zjw5Mq7QnfFltFwYUJRDGxLP4pZEXn2AZZbo wkx2A7I4MOgllPhTVyweiMo9qp0r7qjl89/5cStC6c/FUuF/3CUSzTnAcNaeST17 KzZ6tFH39BUhCLnd42GtCvhtK0+bmnMH6VLe0gKjm2aumKXD9YYyMPdfQ1E4gq15 Z9owgt79LWPpIadVwqSAG0ngzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF5VVYt lT1wvO9KaGUxgc4CxGDOMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjREMy82ODAzNEM2ODYyNjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8x TWY3dVJVbXJNTF9ucFVWUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+jcG1TPgdSYxxDJJAS/YRKmvfUh6/tHuKMhOZBDmExGAQOYU0i2U0 EEvoGaYFtEoBrl2vSbdltBUeC2jxQeEo/J/fxrnfdoiE9dbm/Ig6AAymggyXaYY6 +lGSDqqp2Czi5dYk6KkZ1JqjTMTyL/mucdjnaQ1wz/D/pSVSTZhjjDTzPsAQ0bb1 Dm84TkZR1Bu9ryWw60ptXJFQqlNoDLYRAvQPlPRaFBELBv/ERYZ5cg8JZ0vJLme+ Oe8o5TCxhEq0KVx8e1BPwVuIASayt/F/tu82DFKjr7xbw0nhtUEmhqF+aV5fjsaN ibAOzqmnlDnU/tECqpgH9NdtbBRWUP+q -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:52 2025 by rpki-client