$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: lTbY/XSJnw3Q292wJtUb+qzWw1rIKWe+z4ybAhWAU1M= Subject key identifier: EB:0C:69:76:85:95:DB:72:15:6F:9C:E1:6E:43:47:41:88:C1:B9:9B Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 063C Signing time: Fri 08 Aug 2025 21:51:38 +0000 Manifest this update: Fri 08 Aug 2025 21:51:38 +0000 Manifest next update: Fri 15 Aug 2025 21:51:37 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: 2iD19iHhrcIU0E1vMnZNJlFVTaaqSQ+G80/SOK8Q/L0=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: iU7wUJ3hXR1AJP4W6iQ9Q4xhVfpuGa8z3zC49Uy6j+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Aug 8 21:51:38 2025 GMT Not After : Aug 15 21:51:37 2025 GMT Subject: CN=6896716a-7ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:7a:8b:ca:0c:ec:45:da:08:54:16:d4:ca: d2:13:ef:b5:5c:68:8f:cc:62:36:a1:27:b1:62:a2: 4d:c4:73:b9:32:e9:52:d9:a3:ea:41:38:72:17:c3: a4:f7:63:0d:f5:12:a4:7c:ad:23:f1:e6:c0:08:1b: b6:4e:52:1e:a8:77:21:3b:36:78:67:12:74:57:91: 28:13:d7:7e:4d:a8:2f:6b:9f:2b:dc:a4:f7:dc:60: f7:ff:59:31:8a:a2:2b:f6:0f:b1:00:93:38:28:8a: 6b:f4:c7:ff:af:c1:03:3f:2b:35:46:36:07:7d:82: 9a:c8:10:56:4b:a7:b8:61:14:0e:63:ec:49:5b:a7: 65:6f:e4:7c:14:7d:b9:b7:6b:ea:23:0f:b0:7e:56: ff:88:59:33:76:cf:b5:d5:ee:fa:20:8d:b9:b2:c1: ae:62:4a:5a:e7:04:79:93:a7:a5:e3:2e:f3:32:33: 80:8b:7e:76:5e:4c:3c:2c:13:61:49:7b:4d:41:40: bb:6d:4d:6e:c4:f2:27:94:c9:d7:b7:fa:26:8c:44: 7a:ad:44:3f:f5:04:e7:35:e9:af:01:31:68:a3:f7: 3a:f6:8d:a2:0d:54:b7:54:be:b2:16:c0:83:06:8e: a4:7e:4c:08:7b:88:79:64:36:1b:21:e1:9a:c7:29: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0C:69:76:85:95:DB:72:15:6F:9C:E1:6E:43:47:41:88:C1:B9:9B X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:f6:5d:ec:60:5f:36:83:dd:d7:34:c7:53:f1:94:35:49:5d: 57:93:07:09:a9:59:2e:a0:6b:a3:48:27:74:45:d5:ed:42:0f: 7e:9a:30:e1:26:28:06:dc:f4:4d:bc:f8:92:f0:11:73:81:94: 35:37:6b:ff:d1:07:a9:af:66:16:12:48:c0:3e:81:dd:8f:75: dd:1d:6a:fb:fe:99:1f:88:1c:db:74:5c:83:f7:fe:4e:85:31: 42:91:13:40:57:2c:0d:4c:c3:9b:b3:b2:76:71:89:20:86:96: 6a:e1:2a:d4:6b:2d:81:27:52:37:9f:92:63:23:b5:f5:43:e9: 13:a2:df:13:53:00:da:01:16:d0:bf:c2:30:5b:80:f3:96:9e: 83:90:e6:3b:bc:2d:85:56:e6:f9:a6:8e:40:58:f5:5a:b3:dc: af:e5:4f:7b:98:37:18:6b:f3:3a:62:af:9c:8b:2c:56:41:40: ed:e4:e5:df:df:08:1f:25:dc:22:94:4f:13:ee:64:3f:0a:02: 01:52:1e:82:e7:07:9b:1a:6e:43:9c:8c:92:c5:fd:80:2b:a6: a7:95:e7:c7:57:f3:74:8e:cb:6d:02:88:59:5a:c9:9d:22:13: f7:33:5b:98:d2:34:87:7d:55:59:79:d8:85:38:6a:03:f0:dc: 08:1d:5e:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUwODA4MjE1MTM4WhcNMjUwODE1MjE1MTM3WjAYMRYwFAYD VQQDEw02ODk2NzE2YS03ZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue96i8oM7EXaCFQW1MrSE++1XGiPzGI2oSexYqJNxHO5MulS2aPqQThyF8Ok 92MN9RKkfK0j8ebACBu2TlIeqHchOzZ4ZxJ0V5EoE9d+Tagva58r3KT33GD3/1kx iqIr9g+xAJM4KIpr9Mf/r8EDPys1RjYHfYKayBBWS6e4YRQOY+xJW6dlb+R8FH25 t2vqIw+wflb/iFkzds+11e76II25ssGuYkpa5wR5k6el4y7zMjOAi352Xkw8LBNh SXtNQUC7bU1uxPInlMnXt/omjER6rUQ/9QTnNemvATFoo/c69o2iDVS3VL6yFsCD Bo6kfkwIe4h5ZDYbIeGaxynt/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsMaXaF ldtyFW+c4W5DR0GIwbmbMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+9l3sYF82g93XNMdT8ZQ1SV1XkwcJqVkuoGujSCd0RdXtQg9+mjDh JigG3PRNvPiS8BFzgZQ1N2v/0Qepr2YWEkjAPoHdj3XdHWr7/pkfiBzbdFyD9/5O hTFCkRNAVywNTMObs7J2cYkghpZq4SrUay2BJ1I3n5JjI7X1Q+kTot8TUwDaARbQ v8IwW4Dzlp6DkOY7vC2FVub5po5AWPVas9yv5U97mDcYa/M6Yq+ciyxWQUDt5OXf 3wgfJdwilE8T7mQ/CgIBUh6C5webGm5DnIySxf2AK6anlefHV/N0jsttAohZWsmd IhP3M1uY0jSHfVVZediFOGoD8NwIHV6x -----END CERTIFICATE-----Generated at Sat Aug 9 02:51:12 2025 by rpki-client