$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json) Hash identifier: n8jLBotB9x1iL6jWU5/WRf21ml9YhJa7n0k5npijS7k= Subject key identifier: 97:0B:A4:FC:60:8B:7F:E9:33:E6:BD:39:5B:16:87:F2:50:57:97:26 Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft Manifest number: 2541 Signing time: Fri 08 Aug 2025 16:29:17 +0000 Manifest this update: Fri 08 Aug 2025 16:29:17 +0000 Manifest next update: Fri 15 Aug 2025 16:29:17 +0000 Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: EGdcUrexItGgPUtni27ePDqAMiAr4N+avy3bBxbHkXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Validity Not Before: Aug 8 16:29:17 2025 GMT Not After : Aug 15 16:29:17 2025 GMT Subject: CN=689625dd-8783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:48:1b:82:a5:b2:df:fb:ba:13:c3:8c:3f: 22:b1:64:bb:e2:6a:0a:05:a5:2a:a9:55:7d:ca:b7: cd:48:13:94:2e:1e:a4:c0:83:8a:82:3e:47:a7:15: 44:8a:d0:86:e8:9c:54:7a:c3:9e:c4:23:2c:4d:f4: 07:77:e7:6b:b5:cb:dd:ad:97:64:51:82:e4:a1:1f: 15:b3:26:d2:13:0d:84:21:b5:8a:d0:ed:f9:d4:00: 33:a6:fa:b6:ed:ea:9e:7b:56:08:6c:ca:fe:eb:bc: a4:5f:c1:b9:5b:82:14:0a:a4:f7:af:fd:14:75:6e: 2d:de:a3:de:3d:4e:9a:d3:1c:72:ae:5d:a1:62:72: dd:50:e1:29:70:00:35:c9:e4:f0:04:6e:95:78:b8: f9:8d:25:5f:8b:c9:0b:23:b4:b2:95:13:36:ae:ea: bb:33:3f:56:8e:bd:b2:c4:f7:27:f1:b6:ee:47:a8: a9:e2:77:e7:25:75:c4:e7:3d:2f:8f:ea:ee:21:ab: 00:dd:ea:b8:94:38:a2:cf:a6:d7:ad:d0:d9:ca:09: 86:25:6d:40:19:fb:93:10:0c:d1:66:4b:2f:c1:88: 24:ad:e3:2e:4f:85:30:fb:b9:91:30:b5:5b:08:93: e9:c1:91:0b:16:be:f1:a8:95:c0:e4:31:10:df:0b: f7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:A4:FC:60:8B:7F:E9:33:E6:BD:39:5B:16:87:F2:50:57:97:26 X509v3 Authority Key Identifier: keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:38:1f:8b:0f:a3:88:27:db:9b:3e:e4:fb:21:c7:28:a4:6c: e9:99:3c:df:ce:82:ec:8e:5b:ad:30:7e:89:46:69:ff:b8:0b: c2:0d:be:6e:0c:6b:c7:3e:4e:5e:9e:66:9f:7e:52:64:bb:1a: ab:99:a1:23:b5:59:7b:f1:22:53:af:ff:f1:98:e9:5f:09:8f: ff:0e:45:12:f5:36:f9:a9:05:d5:74:77:7c:db:82:7b:95:e2: 8e:9a:6d:80:72:dc:f5:e2:d7:a3:1c:85:99:ef:58:77:d4:f7: 80:32:06:a0:c5:a9:45:af:ba:1d:27:2d:f8:2d:7d:26:46:1a: a4:0d:37:f3:cb:d2:30:07:cb:dc:c5:a6:4f:50:1e:51:f6:f7: 3b:4a:c7:54:4a:82:f6:2a:59:d3:f2:ea:60:ff:b2:41:5c:c2: 46:0b:b8:20:9e:30:7d:b1:30:f6:1c:ed:8c:a2:b4:1b:70:dc: 8f:8d:35:1f:bb:34:d7:d8:9b:e4:e5:e2:73:52:48:7f:d8:62: a0:4e:1b:ee:85:2c:97:85:27:e7:9e:30:90:ab:b6:74:07:1b: f9:28:97:fe:2c:a8:bd:2d:5d:85:e7:7b:24:a4:bf:36:e1:ea: 14:9e:66:4c:7f:40:9d:a3:cb:cc:1c:87:5e:8c:2f:82:4e:81: 9b:3f:f3:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE Nzk1RkZDODQwHhcNMjUwODA4MTYyOTE3WhcNMjUwODE1MTYyOTE3WjAYMRYwFAYD VQQDEw02ODk2MjVkZC04NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM9IG4Klst/7uhPDjD8isWS74moKBaUqqVV9yrfNSBOULh6kwIOKgj5HpxVE itCG6JxUesOexCMsTfQHd+drtcvdrZdkUYLkoR8VsybSEw2EIbWK0O351AAzpvq2 7eqee1YIbMr+67ykX8G5W4IUCqT3r/0UdW4t3qPePU6a0xxyrl2hYnLdUOEpcAA1 yeTwBG6VeLj5jSVfi8kLI7SylRM2ruq7Mz9Wjr2yxPcn8bbuR6ip4nfnJXXE5z0v j+ruIasA3eq4lDiiz6bXrdDZygmGJW1AGfuTEAzRZksvwYgkreMuT4Uw+7mRMLVb CJPpwZELFr7xqJXA5DEQ3wv3jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcLpPxg i3/pM+a9OVsWh/JQV5cmMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnOB+LD6OIJ9ubPuT7IccopGzpmTzfzoLsjlutMH6JRmn/uAvCDb5u DGvHPk5enmafflJkuxqrmaEjtVl78SJTr//xmOlfCY//DkUS9Tb5qQXVdHd824J7 leKOmm2Actz14tejHIWZ71h31PeAMgagxalFr7odJy34LX0mRhqkDTfzy9IwB8vc xaZPUB5R9vc7SsdUSoL2KlnT8upg/7JBXMJGC7ggnjB9sTD2HO2MorQbcNyPjTUf uzTX2Jvk5eJzUkh/2GKgThvuhSyXhSfnnjCQq7Z0Bxv5KJf+LKi9LV2F53skpL82 4eoUnmZMf0Cdo8vMHIdejC+CToGbP/NQ -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:33 2025 by rpki-client