$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json) Hash identifier: RJRKJwZyOZ6TDI3GJO5EcMU0cS+9Q2Z0gho0O+/asvE= Subject key identifier: D4:8C:2C:15:9A:77:C9:66:9C:2F:D4:D1:D8:B8:1B:47:A3:81:11:98 Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft Manifest number: 0690 Signing time: Thu 18 Sep 2025 22:36:08 +0000 Manifest this update: Thu 18 Sep 2025 22:36:07 +0000 Manifest next update: Thu 25 Sep 2025 22:36:07 +0000 Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: IJHZsAm4ys0S3imjhGi1W1e1RwROlo+PdRsG2MhwZuU=) 2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: rH99d2UyS2BchbUPUbqFc9GOoYlWGp7hkjxEyr/ZGj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Validity Not Before: Sep 18 22:36:07 2025 GMT Not After : Sep 25 22:36:07 2025 GMT Subject: CN=68cc8958-14da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:9c:44:1e:44:a9:33:e1:15:47:34:ac:15: df:ef:82:5b:7e:0e:54:df:ba:81:4e:12:c5:40:17: dd:80:06:5d:3b:39:b5:35:bf:38:1c:e2:9f:84:3a: c8:69:b0:9a:c2:87:0f:e2:f3:24:0a:c9:03:cc:24: 07:ac:9e:e2:2c:2f:db:e8:79:f8:ac:e3:9a:cf:b8: e8:26:44:28:4d:57:a2:0b:66:0a:96:e9:b2:50:ab: 31:38:9f:c2:d9:1e:3f:c8:b4:2f:b7:42:c3:c5:c1: 17:71:f5:06:47:fd:87:7d:b0:28:b3:6b:4c:7b:41: 0c:e7:b2:0f:f4:c3:a2:d2:0e:53:e7:75:3f:8b:68: 9c:ca:32:1c:8a:6a:20:66:32:13:f5:90:4d:6d:3e: c2:3c:10:be:13:ad:b5:4e:55:46:49:59:9a:6b:70: 10:46:1d:5a:dc:1d:ca:d0:66:28:42:1a:47:2f:86: f8:4a:11:a8:45:fb:bf:49:34:c7:ef:4a:f7:99:79: 35:a0:bf:a6:33:06:38:ed:63:ff:49:b9:7b:4d:dc: 63:f9:05:80:54:fe:12:2a:b9:8f:ca:fe:22:e5:70: b5:f3:99:6f:30:d1:5e:d0:99:61:5a:a8:d6:b4:f0: ab:57:64:aa:04:6f:83:4a:10:0c:82:58:c3:03:f2: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8C:2C:15:9A:77:C9:66:9C:2F:D4:D1:D8:B8:1B:47:A3:81:11:98 X509v3 Authority Key Identifier: keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a7:47:2c:e8:94:cf:53:64:13:b7:18:14:9d:5f:c7:f3:c3: f2:7c:2e:7e:68:d8:c8:94:a6:de:df:bb:c5:6b:47:3f:78:22: 95:05:27:25:97:74:37:19:88:15:a6:22:e8:5a:6d:4a:dd:3e: 5f:1a:56:a7:99:69:e6:f9:ba:c0:80:6e:a8:13:a4:3b:15:93: 0a:4d:c6:89:fa:a6:50:52:61:16:4f:df:59:86:cd:e1:96:67: 93:fb:de:90:5d:b2:d6:f5:29:d5:e1:f5:45:3e:cc:16:5e:4b: 93:ba:58:8e:83:5c:db:72:55:2c:c6:58:fc:6b:da:38:1c:8d: b0:0a:0d:69:90:87:02:45:f0:53:5e:89:f0:f3:03:51:56:81: ce:3d:78:8a:5f:7e:1e:d2:c3:5d:95:ed:48:6e:59:8c:1f:2d: 03:df:70:be:31:a0:cd:3c:dd:c0:dd:32:af:39:9b:b3:15:e0: 33:06:fd:65:43:90:6e:c2:d6:99:bf:c4:2d:91:45:ad:41:db: 7e:fb:b2:0b:43:9b:77:c0:72:35:78:5b:d9:d9:ee:12:3a:20: 72:18:cf:4c:4e:c7:65:61:ee:9c:c7:42:c1:d2:69:e9:b2:44: 07:81:11:be:e8:34:48:d2:c1:fc:f5:62:97:75:71:ab:d1:f5: 80:af:49:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYxOTQzMTlDMTQ1 QzlDMENDQjUwHhcNMjUwOTE4MjIzNjA3WhcNMjUwOTI1MjIzNjA3WjAYMRYwFAYD VQQDEw02OGNjODk1OC0xNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEqcRB5EqTPhFUc0rBXf74Jbfg5U37qBThLFQBfdgAZdOzm1Nb84HOKfhDrI abCawocP4vMkCskDzCQHrJ7iLC/b6Hn4rOOaz7joJkQoTVeiC2YKlumyUKsxOJ/C 2R4/yLQvt0LDxcEXcfUGR/2HfbAos2tMe0EM57IP9MOi0g5T53U/i2icyjIcimog ZjIT9ZBNbT7CPBC+E621TlVGSVmaa3AQRh1a3B3K0GYoQhpHL4b4ShGoRfu/STTH 70r3mXk1oL+mMwY47WP/Sbl7Tdxj+QWAVP4SKrmPyv4i5XC185lvMNFe0JlhWqjW tPCrV2SqBG+DShAMgljDA/Kn8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSMLBWa d8lmnC/U0di4G0ejgRGYMB8GA1UdIwQYMBaAFJBY/tzsX4dvPf4WGUMZwUXJwMy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIwRi81MkQwQTEyMDg1 NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094ZmgyODlfaFlaUXhuQlJjbkF6 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tGai0zT3hmaDI4OV9oWVpReG5CUmNuQXpMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094Zmgy ODlfaFlaUXhuQlJjbkF6TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXp0cs6JTPU2QTtxgUnV/H88PyfC5+aNjIlKbe37vFa0c/eCKVBScl l3Q3GYgVpiLoWm1K3T5fGlanmWnm+brAgG6oE6Q7FZMKTcaJ+qZQUmEWT99Zhs3h lmeT+96QXbLW9SnV4fVFPswWXkuTuliOg1zbclUsxlj8a9o4HI2wCg1pkIcCRfBT Xonw8wNRVoHOPXiKX34e0sNdle1IblmMHy0D33C+MaDNPN3A3TKvOZuzFeAzBv1l Q5BuwtaZv8QtkUWtQdt++7ILQ5t3wHI1eFvZ2e4SOiByGM9MTsdlYe6cx0LB0mnp skQHgRG+6DRI0sH89WKXdXGr0fWAr0lG -----END CERTIFICATE-----Generated at Fri Sep 19 02:42:24 2025 by rpki-client