$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json) Hash identifier: dddLTYYZ1qYL33BVZL+Okm7017OziNMTLBBCVxQRgfw= Subject key identifier: FF:43:36:FA:54:23:9D:B6:C0:41:84:5A:01:6A:52:8C:67:80:F4:46 Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Certificate serial: 063C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft Manifest number: 0637 Signing time: Wed 06 Aug 2025 23:06:52 +0000 Manifest this update: Wed 06 Aug 2025 23:06:52 +0000 Manifest next update: Wed 13 Aug 2025 23:06:52 +0000 Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: 4CRtBKKIUxMaav6+hR3Rv86ijMekjgwvjUv/aRlep5s=) 2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1596 (0x63c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Validity Not Before: Aug 6 23:06:52 2025 GMT Not After : Aug 13 23:06:52 2025 GMT Subject: CN=6893e00c-a48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:4d:82:b7:87:ff:ce:a6:36:76:61:a2:b4: 2b:3f:b5:f3:10:30:56:b4:e4:2f:4e:12:a6:28:99: 5d:af:50:60:e1:88:26:88:0e:ba:64:f8:e6:07:f7: e7:7a:49:95:18:fc:a8:86:d0:f3:8d:14:98:ae:16: 52:b1:e8:08:22:b8:ea:bb:ca:81:2f:2d:dc:10:70: f2:51:3b:92:de:b5:83:47:42:00:9a:a2:34:55:c7: 95:b9:87:f0:12:c3:88:a9:dc:e5:86:3a:f1:22:0d: d3:83:2f:1a:cf:eb:89:78:6d:da:4d:c0:28:22:94: 1d:7e:4f:03:2d:7a:6b:91:1f:13:e6:ff:be:60:e2: 68:89:17:e5:88:2f:c2:85:3b:41:de:7f:ff:fa:ab: 7c:0a:a0:40:39:49:75:d2:05:1b:6b:23:84:b9:3b: 08:da:6d:ad:7c:9f:ca:1c:1c:68:4d:eb:01:0c:0c: 31:5e:92:16:8d:f6:a8:90:04:8d:d1:c8:18:34:3e: a0:24:20:b0:5c:60:26:f6:bb:cc:b1:d7:5a:c7:49: 30:78:7f:7f:d6:78:10:2a:d0:63:b7:c0:dc:0a:52: e8:e3:a0:74:48:eb:4c:55:80:24:85:ef:bf:9d:89: a0:ee:d9:2a:59:ae:13:32:26:8d:0b:56:06:66:6f: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:43:36:FA:54:23:9D:B6:C0:41:84:5A:01:6A:52:8C:67:80:F4:46 X509v3 Authority Key Identifier: keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:aa:08:e0:c1:e7:c5:0d:c2:40:f2:c8:d8:e0:40:78:42:69: d3:24:99:35:49:d8:bd:2f:66:49:15:85:ec:23:5b:26:d2:b7: f5:81:d1:31:5d:56:3b:df:06:7b:61:e4:5f:97:57:4e:48:3b: 4f:01:8b:82:68:65:e9:da:f5:dd:05:18:0c:61:5b:4f:6b:e5: 4a:09:e4:55:d9:9e:62:c9:5e:5b:f1:9b:06:29:78:fc:0d:e4: 6a:f7:e8:0c:21:f6:fb:b6:5a:8a:bd:56:95:6c:07:47:3f:66: de:64:6c:bd:05:1f:bf:4c:19:0e:f4:6e:40:c5:a3:07:74:74: 75:75:29:48:0c:f9:81:26:94:4b:7e:ab:b6:ba:a8:d6:ab:4c: 8b:21:a7:f9:b4:58:64:13:99:6c:76:83:f2:d7:8e:bf:50:49: 55:94:0d:df:28:ce:1b:e0:88:54:24:eb:54:34:11:0b:75:4d: b2:d1:fe:df:13:2c:79:5a:86:04:e2:67:6d:b3:95:e6:90:00: d3:dd:3a:81:d0:1e:0b:c6:2e:4f:24:33:bb:7a:3a:80:21:e2: 80:8d:ae:1e:fb:84:13:bc:28:2c:4a:ca:8c:da:1c:15:b9:1b: 97:34:e0:d4:c5:75:21:6f:44:30:ad:1b:ea:a4:eb:6f:4a:91: ad:0d:fc:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw MTIzNkIyN0MwHhcNMjUwODA2MjMwNjUyWhcNMjUwODEzMjMwNjUyWjAYMRYwFAYD VQQDEw02ODkzZTAwYy1hNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SlNgreH/86mNnZhorQrP7XzEDBWtOQvThKmKJldr1Bg4YgmiA66ZPjmB/fn ekmVGPyohtDzjRSYrhZSsegIIrjqu8qBLy3cEHDyUTuS3rWDR0IAmqI0VceVuYfw EsOIqdzlhjrxIg3Tgy8az+uJeG3aTcAoIpQdfk8DLXprkR8T5v++YOJoiRfliC/C hTtB3n//+qt8CqBAOUl10gUbayOEuTsI2m2tfJ/KHBxoTesBDAwxXpIWjfaokASN 0cgYND6gJCCwXGAm9rvMsddax0kweH9/1ngQKtBjt8DcClLo46B0SOtMVYAkhe+/ nYmg7tkqWa4TMiaNC1YGZm9U/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9DNvpU I522wEGEWgFqUoxngPRGMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs aE9Rck5ETk04WElCSTJzbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYqgjgwefFDcJA8sjY4EB4QmnTJJk1Sdi9L2ZJFYXsI1sm0rf1gdEx XVY73wZ7YeRfl1dOSDtPAYuCaGXp2vXdBRgMYVtPa+VKCeRV2Z5iyV5b8ZsGKXj8 DeRq9+gMIfb7tlqKvVaVbAdHP2beZGy9BR+/TBkO9G5AxaMHdHR1dSlIDPmBJpRL fqu2uqjWq0yLIaf5tFhkE5lsdoPy146/UElVlA3fKM4b4IhUJOtUNBELdU2y0f7f Eyx5WoYE4mdts5XmkADT3TqB0B4Lxi5PJDO7ejqAIeKAja4e+4QTvCgsSsqM2hwV uRuXNODUxXUhb0QwrRvqpOtvSpGtDfy0 -----END CERTIFICATE-----Generated at Fri Aug 8 19:26:46 2025 by rpki-client