$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft File: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json) Hash identifier: syTunuR/zrtVbwD7bBUXlMff7KmbkOW9y7tlXiWlzq0= Subject key identifier: F0:1A:39:AB:BD:FC:F0:AB:D3:47:48:38:55:61:EF:90:78:98:BC:4C Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 Certificate issuer: /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft Manifest number: ED Signing time: Tue 09 Sep 2025 05:24:20 +0000 Manifest this update: Tue 09 Sep 2025 05:24:20 +0000 Manifest next update: Tue 16 Sep 2025 05:24:20 +0000 Files and hashes: 1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: BFvSdqRim1xQJqIIG35AqTet9AByKpOQWZlgHz0TIZE=) 2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: GgtpbCe0DWHXE3n4d7zrRXZLNfKbReC9s/SOQ0QeSio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Validity Not Before: Sep 9 05:24:20 2025 GMT Not After : Sep 16 05:24:20 2025 GMT Subject: CN=68bfba04-7e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:12:1a:0a:76:a4:55:4e:48:9d:14:43:f1: c4:1b:cb:71:cd:02:e7:b0:d8:e6:06:ee:57:1b:cf: 84:e5:a0:37:04:b2:55:ce:b3:1c:c4:91:ee:46:41: 9c:0d:e4:38:b6:e0:4e:e9:51:f7:b7:e1:69:b4:fd: 3b:8d:29:25:61:f2:31:3b:dd:cd:2d:88:88:e6:a1: f5:36:ee:de:9e:2b:ba:77:96:a0:0b:48:16:07:b0: 20:73:fa:4f:a3:fa:fa:af:55:9a:b5:5c:f4:13:94: d6:24:5d:1b:e6:ef:5c:3f:bf:19:79:bd:a5:e4:64: 35:ad:3a:84:30:5b:51:3f:9b:c4:aa:36:50:6f:cd: 86:6d:21:f9:07:43:5c:d7:7c:d6:fb:4c:c2:ce:6f: 11:5d:c1:c0:de:ca:9b:0e:8e:67:76:bf:31:07:5d: db:c5:d2:c4:5d:10:40:1d:00:84:6f:49:ba:66:35: 5c:ce:ba:c5:67:d6:01:4c:7d:44:a6:ef:e5:60:3c: 15:55:61:40:80:cf:40:b2:2b:a3:28:84:c1:a9:85: 27:55:63:cd:43:da:b4:a8:8b:f3:70:d4:2d:8d:98: b4:fb:68:eb:54:3b:bc:a9:30:28:bf:a2:e2:82:40: a9:7d:44:df:ab:ca:c6:df:7b:95:d9:b3:e4:be:8d: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1A:39:AB:BD:FC:F0:AB:D3:47:48:38:55:61:EF:90:78:98:BC:4C X509v3 Authority Key Identifier: keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0d:33:f3:05:b2:fe:ab:26:96:cc:72:70:b3:ea:1e:0d:29: f1:12:df:f2:c4:8e:21:be:9f:0a:86:e2:de:42:c8:b8:6d:6b: 59:90:ad:cd:8c:53:ed:93:9c:73:ad:00:46:b7:12:49:1e:b5: 90:f5:49:1d:e9:c9:aa:81:34:6f:2b:e9:16:11:d7:1e:51:60: 87:82:a4:4f:4e:85:82:f8:aa:29:f0:a4:0e:08:f4:7b:d8:d2: 8f:b7:cb:85:c2:0c:ea:fb:e6:aa:9e:4e:0f:35:4c:b5:2f:0b: a2:a7:2d:69:52:d8:68:ef:25:cd:2e:da:32:71:b1:1a:56:67: da:d4:95:81:2b:47:6a:e1:ab:27:26:12:f7:86:f8:e4:e2:89: 29:39:0e:c2:56:d3:03:7d:91:2d:f6:b7:a2:cc:64:35:9e:1a: 51:26:ea:a2:8f:c9:7f:ae:55:03:14:cd:08:ab:6d:5e:0a:93: 8d:43:09:58:e3:e8:89:8f:1a:de:c8:63:eb:e1:a0:00:7f:c2: ba:86:4e:c6:2a:2c:2d:59:bc:b1:d9:c8:c4:da:ea:e2:9c:44: 94:a4:31:19:b0:8b:56:8c:fa:66:df:d4:96:c9:d7:b2:95:ab: e0:9b:16:8c:fb:c2:64:4e:5e:13:47:94:b3:36:67:96:b3:c2: 21:2d:48:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNEMxMTAvBgNVBAUTKDJBNDQ1NkQxNzJCMkI4NkRDREE3MTJFNjYxRjZEOUYy RkYxOTIwMzgwHhcNMjUwOTA5MDUyNDIwWhcNMjUwOTE2MDUyNDIwWjAYMRYwFAYD VQQDEw02OGJmYmEwNC03ZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUkSGgp2pFVOSJ0UQ/HEG8txzQLnsNjmBu5XG8+E5aA3BLJVzrMcxJHuRkGc DeQ4tuBO6VH3t+FptP07jSklYfIxO93NLYiI5qH1Nu7eniu6d5agC0gWB7Agc/pP o/r6r1WatVz0E5TWJF0b5u9cP78Zeb2l5GQ1rTqEMFtRP5vEqjZQb82GbSH5B0Nc 13zW+0zCzm8RXcHA3sqbDo5ndr8xB13bxdLEXRBAHQCEb0m6ZjVczrrFZ9YBTH1E pu/lYDwVVWFAgM9AsiujKITBqYUnVWPNQ9q0qIvzcNQtjZi0+2jrVDu8qTAov6Li gkCpfUTfq8rG33uV2bPkvo3fVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAaOau9 /PCr00dIOFVh75B4mLxMMB8GA1UdIwQYMBaAFCpEVtFysrhtzacS5mH22fL/GSA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI0Qy9BQkNCRUJENjIz RDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVHM05weExtWWZiWjh2OFpJ RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trUlcwWEt5dUczTnB4TG1ZZmJaOHY4WklEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI0Qy9BQkNCRUJENjIzRDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVH M05weExtWWZiWjh2OFpJRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBADTPzBbL+qyaWzHJws+oeDSnxEt/yxI4hvp8KhuLeQsi4bWtZkK3N jFPtk5xzrQBGtxJJHrWQ9Ukd6cmqgTRvK+kWEdceUWCHgqRPToWC+Kop8KQOCPR7 2NKPt8uFwgzq++aqnk4PNUy1Lwuipy1pUtho7yXNLtoycbEaVmfa1JWBK0dq4asn JhL3hvjk4okpOQ7CVtMDfZEt9reizGQ1nhpRJuqij8l/rlUDFM0Iq21eCpONQwlY 4+iJjxreyGPr4aAAf8K6hk7GKiwtWbyx2cjE2urinESUpDEZsItWjPpm39SWydey lavgmxaM+8JkTl4TR5SzNmeWs8IhLUjC -----END CERTIFICATE-----Generated at Tue Sep 9 09:49:34 2025 by rpki-client