$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft File: krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json) Hash identifier: wm+OrSRUqWGui3SzjdEdO40fic+z7LGPplx1MhOOyQU= Subject key identifier: DC:00:82:97:7A:12:E7:C5:45:85:06:E5:A1:2A:EF:86:CA:9A:D1:D0 Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft Manifest number: 09 Signing time: Wed 17 Sep 2025 08:52:08 +0000 Manifest this update: Wed 17 Sep 2025 08:52:07 +0000 Manifest next update: Wed 24 Sep 2025 08:52:07 +0000 Files and hashes: 1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: 32ygOu3zgZ9uZQL8e3DXYiNiVzHMFBGnix2755BYR5A=) 2: 0D06C406887511F094C09643C4F9AE02.roa (hash: 8NVdhPpscq33NdTMYxVu51BUZJlZbS+DpruUrgyU1TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Sep 17 08:52:07 2025 GMT Not After : Sep 24 08:52:07 2025 GMT Subject: CN=68ca76b8-9935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:0c:e1:e7:57:00:c4:a3:b4:da:82:8b:38: 3e:11:18:a4:af:d1:6d:24:4c:1e:f6:e9:99:a7:f8: 9e:65:a4:26:3d:49:d6:30:06:fd:cb:fc:8c:9f:a6: 37:12:0f:2a:ba:7c:54:9d:73:a8:16:16:75:52:16: e7:47:27:11:32:3c:71:f4:10:bc:ae:3e:98:04:b3: 70:18:6e:47:36:3d:b1:8a:e9:28:e5:ea:3c:a7:55: 96:3f:be:d1:72:0c:30:dd:93:87:5b:35:0c:e8:fe: 97:b3:04:eb:68:80:92:f0:a2:03:65:82:cc:aa:23: 90:9a:9a:4a:66:69:81:45:ec:96:fc:17:02:95:5f: 09:72:fe:b6:ad:6d:a7:03:66:8d:fa:22:99:b1:8e: b0:e2:46:a0:b2:18:da:2e:89:e9:3c:ad:3b:22:35: ff:b7:94:75:a4:47:a8:ff:a2:bd:1e:79:73:66:30: c2:a4:98:56:0b:76:f4:84:7c:f6:18:57:d5:ed:19: 10:db:65:24:23:54:ce:30:ce:27:58:56:1b:86:62: a1:6d:1a:64:29:44:0a:83:cd:9f:9b:d5:85:c7:c2: 8b:e3:4a:65:ae:06:c7:2f:26:f9:66:b5:aa:35:4d: cd:dd:29:da:8e:37:4b:29:ec:42:c3:49:e3:4a:b7: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:00:82:97:7A:12:E7:C5:45:85:06:E5:A1:2A:EF:86:CA:9A:D1:D0 X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c1:8e:26:ad:07:43:4f:e5:60:d0:14:03:69:54:cf:05:a5: 3f:91:23:94:8a:21:bc:8a:46:ea:0d:57:88:1f:9c:1a:0f:6c: 23:2f:76:e0:35:f2:5f:a9:53:71:0a:81:8c:2a:3a:50:c2:5d: 26:31:79:ee:a1:59:f6:02:74:c5:5e:5e:4e:08:a6:85:21:b4: b6:b2:89:59:81:a1:a1:aa:74:f0:40:e8:b9:bf:4c:07:19:2b: 4f:6b:27:be:93:98:f3:7b:d9:11:c9:e6:de:a8:17:ea:ae:38: 09:e5:ef:52:ad:fe:66:f9:e9:a9:ab:8e:ea:54:46:c7:fa:52: a0:e2:8b:96:70:17:b8:60:52:86:9d:a1:b5:7c:ba:45:5f:56: 1d:03:5f:75:32:26:3f:eb:72:4a:a3:46:b6:07:21:b2:cc:41: 67:bb:dd:82:12:a2:63:22:00:be:6a:59:d8:56:41:53:68:2e: 29:ef:6a:46:b0:4b:9a:ca:29:14:fb:a2:ad:1d:6e:dc:50:d7: 79:da:5f:fc:0b:6d:87:09:25:59:56:cf:74:c1:0f:0f:25:35: 40:8d:08:3a:3d:a6:47:2f:c5:74:8f:04:71:86:ba:3e:73:5c: ae:f3:25:43:38:84:8f:6b:79:af:57:b7:5e:cb:95:e3:b8:48: 47:e1:db:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkREMDExMC8GA1UEBRMoOTJCNEMyQTY5Mjk0MEI1NDhFNjM1MDQ0MzM1QTk4NUJF RTIyQkRBMTAeFw0yNTA5MTcwODUyMDdaFw0yNTA5MjQwODUyMDdaMBgxFjAUBgNV BAMTDTY4Y2E3NmI4LTk5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi6Azh51cAxKO02oKLOD4RGKSv0W0kTB726Zmn+J5lpCY9SdYwBv3L/IyfpjcS Dyq6fFSdc6gWFnVSFudHJxEyPHH0ELyuPpgEs3AYbkc2PbGK6Sjl6jynVZY/vtFy DDDdk4dbNQzo/pezBOtogJLwogNlgsyqI5CamkpmaYFF7Jb8FwKVXwly/ratbacD Zo36IpmxjrDiRqCyGNouiek8rTsiNf+3lHWkR6j/or0eeXNmMMKkmFYLdvSEfPYY V9XtGRDbZSQjVM4wzidYVhuGYqFtGmQpRAqDzZ+b1YXHwovjSmWuBscvJvlmtao1 Tc3dKdqON0sp7ELDSeNKt3ZjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3ACCl3oS 58VFhQbloSrvhsqa0dAwHwYDVR0jBBgwFoAUkrTCppKUC1SOY1BEM1qYW+4ivaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGREQwLzlFMEVFODQ0ODg3 NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZh RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3JUQ3BwS1VDMVNPWTFCRU0xcVlXLTRpdmFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG REQwLzlFMEVFODQ0ODg3NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFT T1kxQkVNMXFZVy00aXZhRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHBjiatB0NP5WDQFANpVM8FpT+RI5SKIbyKRuoNV4gfnBoPbCMvduA1 8l+pU3EKgYwqOlDCXSYxee6hWfYCdMVeXk4IpoUhtLayiVmBoaGqdPBA6Lm/TAcZ K09rJ76TmPN72RHJ5t6oF+quOAnl71Kt/mb56amrjupURsf6UqDii5ZwF7hgUoad obV8ukVfVh0DX3UyJj/rckqjRrYHIbLMQWe73YISomMiAL5qWdhWQVNoLinvakaw S5rKKRT7oq0dbtxQ13naX/wLbYcJJVlWz3TBDw8lNUCNCDo9pkcvxXSPBHGGuj5z XK7zJUM4hI9rea9Xt17LleO4SEfh2/A= -----END CERTIFICATE-----Generated at Fri Sep 19 02:48:58 2025 by rpki-client