$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: qMYTQoMyuYKCS1/jxvM+0a3eI8gsJg9Q5+FMmqBoNC0= Subject key identifier: ED:42:1E:3F:F8:0A:79:EE:29:02:C8:B6:AD:89:58:0A:77:9F:36:24 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 0A28 Signing time: Fri 08 Aug 2025 20:05:01 +0000 Manifest this update: Fri 08 Aug 2025 20:05:00 +0000 Manifest next update: Fri 15 Aug 2025 20:05:00 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: mE0E4I9IMzSyd2/tbGg08o4z3eVutu+szb2Ya029/so=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: QAHIkspdc3TnmsVMtC5FECO+wrvdYFQYpTaiZNKj4yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Aug 8 20:05:00 2025 GMT Not After : Aug 15 20:05:00 2025 GMT Subject: CN=6896586c-304a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:bc:61:15:15:ca:b9:8e:fe:50:68:93:56: af:dc:36:bf:d9:12:e8:b4:ba:07:24:bd:46:0a:46: fb:36:09:2f:5c:34:ab:eb:fe:6e:d5:c4:a0:3d:f1: df:3a:f2:89:27:97:ca:c6:2f:c2:6b:e6:cd:62:4c: 2f:04:73:5c:46:d3:a6:70:4e:6d:b1:55:ed:8f:99: dc:ba:0c:d5:79:91:af:82:53:af:d5:ae:8c:0c:98: 42:57:74:53:6c:40:30:e7:f7:14:67:7a:bd:e4:88: 47:cb:15:25:26:1a:d9:63:71:dd:8d:59:0d:19:2f: f5:60:ad:aa:5f:63:90:94:0a:2f:09:d0:85:38:24: 66:10:b3:ac:5b:eb:6e:ce:ca:d3:10:0c:3d:31:51: ba:85:5f:8e:4d:6d:db:e0:da:92:32:18:72:9b:ea: cb:d8:c7:95:f1:63:d6:0d:2d:cf:f9:dd:5a:86:2e: be:5d:b8:5a:f2:bf:9a:f6:a5:94:f7:d5:58:3e:7d: e2:31:c1:da:a5:1f:b5:1d:01:7b:b5:f7:3b:68:0f: 68:8d:90:d0:78:08:22:c2:78:92:9c:e3:63:45:e7: 69:13:a7:3c:7f:50:e5:3b:f0:3f:6c:d0:9b:90:a4: a6:86:fa:29:95:37:32:f4:9a:be:fe:84:7e:93:2b: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:42:1E:3F:F8:0A:79:EE:29:02:C8:B6:AD:89:58:0A:77:9F:36:24 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:14:76:2a:ac:e4:6a:2f:a8:b0:30:da:c9:69:f9:ff:61:2a: 96:51:65:a3:00:2c:c6:2f:2c:15:c0:41:31:6e:5b:a5:8e:b8: 36:b7:60:7f:ab:68:04:3d:9f:41:d2:38:6f:9f:1a:79:1d:89: 3e:2c:2b:c6:b2:39:34:60:1a:bb:14:ba:ad:98:68:2b:22:55: 49:44:06:13:33:48:38:88:41:0c:23:54:a9:2d:92:69:fd:d0: a4:9c:a1:dd:66:df:95:21:d9:ee:f8:f5:2d:66:52:76:14:0d: b6:06:0a:ea:f0:1d:00:23:a3:41:68:b6:d5:ae:22:71:5d:26: fd:ed:1c:a5:71:5c:e1:25:fb:f8:89:ac:90:78:74:cd:48:20: d8:3d:00:53:ee:16:21:d4:41:85:a5:56:d1:05:0f:70:f6:a4: 81:2a:f2:3d:d6:e8:21:08:81:df:9e:ef:7e:33:f0:ac:83:7b: 94:78:90:f3:43:b4:a0:1b:50:cd:1e:8d:20:ec:53:c2:a9:70: 75:08:38:0d:44:ed:19:14:70:17:47:1b:f7:b1:f8:54:e8:a3: 93:24:0e:f6:3c:da:b0:f8:da:c9:d0:1f:6c:a0:ed:44:e3:63: ed:fc:f6:93:ae:13:3f:5d:8a:0b:a1:db:3d:a6:28:9b:9c:d5: 08:6f:b3:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjUwODA4MjAwNTAwWhcNMjUwODE1MjAwNTAwWjAYMRYwFAYD VQQDEw02ODk2NTg2Yy0zMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8a8YRUVyrmO/lBok1av3Da/2RLotLoHJL1GCkb7NgkvXDSr6/5u1cSgPfHf OvKJJ5fKxi/Ca+bNYkwvBHNcRtOmcE5tsVXtj5ncugzVeZGvglOv1a6MDJhCV3RT bEAw5/cUZ3q95IhHyxUlJhrZY3HdjVkNGS/1YK2qX2OQlAovCdCFOCRmELOsW+tu zsrTEAw9MVG6hV+OTW3b4NqSMhhym+rL2MeV8WPWDS3P+d1ahi6+Xbha8r+a9qWU 99VYPn3iMcHapR+1HQF7tfc7aA9ojZDQeAgiwniSnONjRedpE6c8f1DlO/A/bNCb kKSmhvoplTcy9Jq+/oR+kyuNvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1CHj/4 CnnuKQLItq2JWAp3nzYkMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5FHYqrORqL6iwMNrJafn/YSqWUWWjACzGLywVwEExbluljrg2t2B/ q2gEPZ9B0jhvnxp5HYk+LCvGsjk0YBq7FLqtmGgrIlVJRAYTM0g4iEEMI1SpLZJp /dCknKHdZt+VIdnu+PUtZlJ2FA22Bgrq8B0AI6NBaLbVriJxXSb97RylcVzhJfv4 iayQeHTNSCDYPQBT7hYh1EGFpVbRBQ9w9qSBKvI91ughCIHfnu9+M/Csg3uUeJDz Q7SgG1DNHo0g7FPCqXB1CDgNRO0ZFHAXRxv3sfhU6KOTJA72PNqw+NrJ0B9soO1E 42Pt/PaTrhM/XYoLods9piibnNUIb7PR -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:14 2025 by rpki-client