$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json) Hash identifier: LnY8Kw5w11sLDnRtnDA9wxQHIZkdDEtxqTBVOdGYTeA= Subject key identifier: D3:0C:06:66:05:1A:00:76:5E:5C:16:9F:D9:ED:21:DB:D7:F9:F9:A7 Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft Manifest number: 01C0 Signing time: Fri 05 Sep 2025 03:20:21 +0000 Manifest this update: Fri 05 Sep 2025 03:20:21 +0000 Manifest next update: Fri 12 Sep 2025 03:20:21 +0000 Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: pfi1PdY0iEDIrdr2ss7T8Lq6HEwdxHsEsEQ66qkfCvs=) 2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: KmbLnAg6ov5pbSc4GHHtI4bgompHpB3w8fab5eJbYog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Validity Not Before: Sep 5 03:20:21 2025 GMT Not After : Sep 12 03:20:21 2025 GMT Subject: CN=68ba56f5-588f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:25:2f:ff:83:73:64:83:3b:a2:67:bb:13: 5e:13:db:e0:21:8f:90:ef:b8:44:a0:58:90:28:59: 70:c4:41:78:d3:54:b4:21:76:8e:74:24:a2:22:54: ce:8d:4a:b0:ad:7e:4e:09:8b:84:04:58:f1:42:79: ec:5f:f1:43:60:58:02:3e:46:60:a6:c0:26:b5:03: eb:fa:5f:c0:05:c9:53:57:0b:9b:f5:12:40:95:37: da:03:4b:cc:6a:b8:42:57:26:31:44:1b:ff:47:60: a1:5e:89:cd:55:76:eb:2f:88:c9:0b:57:80:b4:36: ba:c8:51:05:20:89:a1:f4:ec:87:f7:d2:5e:2b:0c: d0:94:a8:5d:90:59:17:2b:ac:a1:f0:9c:3c:65:70: f2:df:4c:45:5c:82:84:9b:df:c9:a0:83:8c:44:62: a1:5a:48:f3:ea:c8:c8:93:c6:47:98:15:ad:94:45: a4:15:41:96:e8:49:ad:48:bf:43:0c:0c:e0:96:69: 91:7c:d4:dd:bb:51:a7:92:7a:83:0f:5f:84:72:00: a4:6b:42:5b:14:07:c3:81:20:a9:95:d4:5b:b8:8a: 4f:80:7f:3b:48:41:8f:01:52:47:dc:3b:75:9c:60: 5f:2f:d8:ac:27:f0:50:06:ef:66:22:1b:33:89:93: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0C:06:66:05:1A:00:76:5E:5C:16:9F:D9:ED:21:DB:D7:F9:F9:A7 X509v3 Authority Key Identifier: keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:9e:4f:52:13:55:f2:b9:b5:54:5c:cb:ae:8f:dd:7a:fa:4c: 6b:15:63:ca:28:a4:e3:b4:ee:4f:1b:66:09:a2:01:e2:25:44: fa:14:e3:e4:a5:4d:e8:36:ab:cd:8e:e9:9b:40:4a:52:00:15: 67:e0:e8:75:44:c0:3b:e9:cf:a2:ef:04:c0:12:df:cd:88:9a: 6a:74:ff:58:a2:c0:e8:cc:07:38:eb:e2:ed:45:3c:8b:7a:4a: 7d:b2:54:03:85:5f:06:af:6f:83:c9:80:a1:f1:27:21:84:20: 3f:c0:9b:94:c4:c6:0a:1c:27:dd:96:be:33:52:48:ea:c8:fc: f0:35:48:4d:81:fc:fa:d0:92:ab:68:0b:d8:ba:a8:29:0c:d6: 7a:0e:01:06:9b:6b:3b:01:d0:a9:16:f6:5e:be:0e:02:8c:4f: b5:98:49:fd:30:69:43:a8:a4:7c:c2:14:2d:b5:ad:af:d6:a9: 00:48:81:0d:72:38:9b:c1:be:22:05:42:b7:50:dd:1f:66:08: 04:7b:3f:cc:10:4c:14:27:d3:e3:94:b3:f4:6e:cb:17:5b:a4: ff:9c:06:58:8d:0c:8c:1b:70:e2:1c:3d:b1:bd:13:9c:60:7b: 56:2c:85:79:d8:50:68:a1:46:a7:71:fa:8e:77:97:e2:78:36: a2:64:fb:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKDJBODEzQUU1RDYxNTI5NjA0NURCM0UyQzQyQ0I4RkNE QUM2QUQyMEMwHhcNMjUwOTA1MDMyMDIxWhcNMjUwOTEyMDMyMDIxWjAYMRYwFAYD VQQDEw02OGJhNTZmNS01ODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzIlL/+Dc2SDO6JnuxNeE9vgIY+Q77hEoFiQKFlwxEF401S0IXaOdCSiIlTO jUqwrX5OCYuEBFjxQnnsX/FDYFgCPkZgpsAmtQPr+l/ABclTVwub9RJAlTfaA0vM arhCVyYxRBv/R2ChXonNVXbrL4jJC1eAtDa6yFEFIImh9OyH99JeKwzQlKhdkFkX K6yh8Jw8ZXDy30xFXIKEm9/JoIOMRGKhWkjz6sjIk8ZHmBWtlEWkFUGW6EmtSL9D DAzglmmRfNTdu1GnknqDD1+EcgCka0JbFAfDgSCpldRbuIpPgH87SEGPAVJH3Dt1 nGBfL9isJ/BQBu9mIhsziZN5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMMBmYF GgB2XlwWn9ntIdvX+fmnMB8GA1UdIwQYMBaAFCqBOuXWFSlgRds+LELLj82satIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BMjJCRDE1OEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktXQkYyejRzUXN1UHpheHEw Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tvRTY1ZFlWS1dCRjJ6NHNRc3VQemF4cTBndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BMjJCRDE1OEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktX QkYyejRzUXN1UHpheHEwZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2nk9SE1XyubVUXMuuj916+kxrFWPKKKTjtO5PG2YJogHiJUT6FOPk pU3oNqvNjumbQEpSABVn4Oh1RMA76c+i7wTAEt/NiJpqdP9YosDozAc46+LtRTyL ekp9slQDhV8Gr2+DyYCh8SchhCA/wJuUxMYKHCfdlr4zUkjqyPzwNUhNgfz60JKr aAvYuqgpDNZ6DgEGm2s7AdCpFvZevg4CjE+1mEn9MGlDqKR8whQtta2v1qkASIEN cjibwb4iBUK3UN0fZggEez/MEEwUJ9PjlLP0bssXW6T/nAZYjQyMG3DiHD2xvROc YHtWLIV52FBooUancfqOd5fieDaiZPt5 -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:59 2025 by rpki-client