$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: mBLVIi49CH4ozhrFmEkgZPhAwao9wB6SMEffD9IhM1Y= Subject key identifier: D0:29:59:17:3A:1B:50:43:C5:09:8A:AD:C3:B7:07:D3:0A:F0:22:9D Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 0A23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 0A13 Signing time: Sat 06 Sep 2025 16:11:53 +0000 Manifest this update: Sat 06 Sep 2025 16:11:53 +0000 Manifest next update: Sat 13 Sep 2025 16:11:53 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: 6Kav/BG7wK8FjQmMJ21Hp3ZLo4uAuKJtMzUUe1FetAk=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2595 (0xa23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Sep 6 16:11:53 2025 GMT Not After : Sep 13 16:11:53 2025 GMT Subject: CN=68bc5d49-980a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:d6:31:8d:0c:2a:c6:00:2e:30:cf:b5:9c: a2:54:55:a7:ec:85:a0:bd:86:34:7b:e3:e2:c4:3f: 6e:34:65:bd:da:21:b1:e5:1a:3b:c9:7b:ec:42:23: a4:aa:32:e5:03:aa:97:1c:e1:64:b3:be:60:be:aa: 83:05:db:f4:38:06:c2:b8:4c:11:5e:0b:f6:cf:9f: 34:39:94:c5:6c:05:42:9f:a8:be:79:e1:dd:db:b0: c6:7a:d5:5e:8d:e8:d8:0f:44:fb:5d:82:45:b1:01: 36:d4:f9:61:8b:c9:15:3b:db:81:e0:47:a6:f7:78: 21:8c:f8:f3:3a:eb:0a:23:6a:3b:70:15:45:db:ac: d1:11:3c:f4:2a:66:ec:cc:5d:a2:59:70:03:3a:f7: 4e:75:85:1f:b2:15:95:62:82:0a:36:e1:47:06:b4: 75:51:5b:39:d0:c2:b4:8d:0a:21:8d:42:e3:28:6f: c4:ad:bd:1a:22:4d:a0:c5:46:b3:cb:cc:60:47:8a: f8:33:98:2b:18:f9:fd:50:f4:3b:22:ec:e6:d0:0f: 95:92:54:4d:7b:e5:de:1d:ba:a5:53:0b:01:0b:8c: 28:af:f2:2c:2d:f7:b9:39:c6:54:dc:8b:2a:ec:4e: 3d:18:af:c8:42:31:99:34:08:19:3c:b1:65:7a:7a: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:29:59:17:3A:1B:50:43:C5:09:8A:AD:C3:B7:07:D3:0A:F0:22:9D X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:dd:67:bb:d0:5a:f9:7e:fc:5b:87:f2:a4:c7:90:0a:75:94: c4:ae:ea:6a:6e:3d:97:2b:a9:ea:9a:82:80:97:0c:75:29:56: b7:b8:91:d8:8c:70:89:ce:30:c5:a0:a1:8b:13:f1:6e:f5:b7: 1a:81:be:8e:f5:12:f5:e1:b9:13:a1:9a:ae:26:2e:73:ba:38: 31:6a:04:0b:f1:02:33:f4:93:b4:d3:ef:7a:16:e0:ab:43:23: 24:45:a1:13:21:e6:57:52:18:a1:0c:f3:72:77:cf:28:50:2c: 3c:59:3d:ca:17:f8:f1:42:44:c6:b2:11:06:59:07:cd:2b:aa: b9:4c:94:33:11:f6:a6:fd:aa:f4:ee:f8:99:c3:24:c2:dd:6a: 82:70:bd:99:2b:c9:6a:a7:02:eb:98:79:1e:31:2b:a6:2e:c1: 5c:a9:a9:bd:84:ee:77:47:e2:0c:a0:23:e5:8d:ba:92:b8:1f: f5:46:87:f1:f1:91:0f:24:58:8c:c8:ec:f7:91:1c:1a:f2:49: 19:23:57:42:18:2d:06:0b:47:b4:36:bc:9d:83:a6:32:7d:47: a1:b2:f2:b8:45:ef:b6:f4:5c:0a:90:2f:6d:8d:61:4e:d5:8a: 81:77:5d:fa:5b:4d:97:23:4d:3f:c1:cd:ff:86:6d:6d:a0:07: 92:5e:57:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwOTA2MTYxMTUzWhcNMjUwOTEzMTYxMTUzWjAYMRYwFAYD VQQDEw02OGJjNWQ0OS05ODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMXWMY0MKsYALjDPtZyiVFWn7IWgvYY0e+PixD9uNGW92iGx5Ro7yXvsQiOk qjLlA6qXHOFks75gvqqDBdv0OAbCuEwRXgv2z580OZTFbAVCn6i+eeHd27DGetVe jejYD0T7XYJFsQE21Plhi8kVO9uB4Eem93ghjPjzOusKI2o7cBVF26zRETz0Kmbs zF2iWXADOvdOdYUfshWVYoIKNuFHBrR1UVs50MK0jQohjULjKG/Erb0aIk2gxUaz y8xgR4r4M5grGPn9UPQ7Iuzm0A+VklRNe+XeHbqlUwsBC4wor/IsLfe5OcZU3Isq 7E49GK/IQjGZNAgZPLFlenqtPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNApWRc6 G1BDxQmKrcO3B9MK8CKdMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc3We70Fr5fvxbh/Kkx5AKdZTErupqbj2XK6nqmoKAlwx1KVa3uJHY jHCJzjDFoKGLE/Fu9bcagb6O9RL14bkToZquJi5zujgxagQL8QIz9JO00+96FuCr QyMkRaETIeZXUhihDPNyd88oUCw8WT3KF/jxQkTGshEGWQfNK6q5TJQzEfam/ar0 7viZwyTC3WqCcL2ZK8lqpwLrmHkeMSumLsFcqam9hO53R+IMoCPljbqSuB/1Rofx 8ZEPJFiMyOz3kRwa8kkZI1dCGC0GC0e0Nrydg6YyfUehsvK4Re+29FwKkC9tjWFO 1YqBd136W02XI00/wc3/hm1toAeSXldb -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:17 2025 by rpki-client