$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: kYHGau9ysTaK/uC6zdDdoy5xoNGPnGq1la7um07fTDg= Subject key identifier: 2C:51:36:BC:65:78:37:75:3C:07:BE:B4:6D:33:B5:0D:73:AB:C0:78 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 01FB Signing time: Sat 09 Aug 2025 02:47:53 +0000 Manifest this update: Sat 09 Aug 2025 02:47:52 +0000 Manifest next update: Sat 16 Aug 2025 02:47:52 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: YhXDNd1iiQQ2KMWU4FjW23pb5Ock//dlEpY2dMuXB5c=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Aug 9 02:47:52 2025 GMT Not After : Aug 16 02:47:52 2025 GMT Subject: CN=6896b6d8-b293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:50:76:bd:d2:3f:28:c9:cc:c8:bc:d4:9e:b2: 34:8b:59:0b:6e:63:cb:9c:66:3d:b0:83:98:47:3d: aa:ac:85:ea:b6:c6:e3:da:32:2f:9e:18:55:af:fc: e6:5b:5f:02:c0:6b:9d:e9:fb:36:d2:b7:0c:bf:2d: 7d:6b:d1:80:d3:be:ee:34:d3:d1:83:1a:71:6a:27: af:08:2e:65:b5:81:58:7d:5f:d1:f0:53:c6:33:eb: 90:ae:48:3f:6b:8c:2a:94:bb:a5:a5:8b:62:6b:6a: f4:2d:db:00:3b:29:1c:55:3f:24:4e:3e:c1:d8:5d: 08:dd:fc:8e:c2:dd:b1:94:23:0e:52:35:a2:a5:02: ad:25:ee:47:c2:3f:5c:b7:11:b0:2b:91:d7:0c:24: ca:2b:ef:76:e5:6b:c1:aa:aa:98:f0:e6:d8:75:63: 46:55:0a:a7:ce:b8:cc:8f:b4:7a:b5:f9:93:a6:0d: 1b:0f:59:6d:5c:04:83:4c:34:46:88:23:86:1f:19: aa:84:6b:15:0d:4f:69:c3:4e:de:d6:ef:f9:42:3b: 9d:20:94:4e:44:30:c0:1c:a7:cd:74:c7:7b:bd:f6: 77:f1:e7:54:2b:91:6b:e6:a4:12:c1:97:d3:33:58: 8f:ad:72:91:05:66:ed:1e:82:aa:3a:e3:2d:18:77: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:51:36:BC:65:78:37:75:3C:07:BE:B4:6D:33:B5:0D:73:AB:C0:78 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:2e:d5:b7:8e:8b:91:36:07:57:d4:2b:d8:3f:7a:c1:ed:82: fe:7f:10:84:b1:64:9e:e8:4c:0b:75:9a:61:b1:4c:1b:64:28: 09:13:f9:f1:f6:42:e1:aa:ce:bd:32:35:80:89:ca:54:3c:bc: ca:b8:40:80:94:2c:a9:a3:d9:bb:15:f9:8d:d8:b5:68:a3:6b: 33:c7:8f:dd:57:3c:81:10:1f:58:a0:9d:02:38:8e:3b:d0:9a: ae:c9:9c:8f:ec:a1:59:48:bd:c0:1a:09:13:3d:4f:b2:e9:1f: a2:8c:e6:74:fc:e3:4b:f4:ff:d7:96:60:73:88:96:a3:16:45: ae:1c:1f:d3:be:82:95:e2:71:d3:87:c6:9d:10:70:5c:4c:1b: 0a:ba:d4:70:73:dd:91:4d:eb:0c:52:20:74:90:9f:64:a3:e4: 21:f5:7e:1d:04:c8:ef:d7:bd:52:ea:7e:dd:1d:8d:7a:3a:c4: 8b:e8:e4:5c:88:55:64:30:51:9c:ff:e4:62:11:fa:7c:b7:3c: 08:07:81:ac:8e:92:26:f7:55:a7:87:32:6d:6f:ce:b9:67:34: 66:e2:d2:9f:10:1c:2d:12:42:e7:09:61:a8:67:ee:fe:8b:b5: aa:46:4f:4c:74:5b:6d:ed:c5:55:e2:c7:25:e4:6b:f3:30:0c: 93:54:1c:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwODA5MDI0NzUyWhcNMjUwODE2MDI0NzUyWjAYMRYwFAYD VQQDEw02ODk2YjZkOC1iMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VB2vdI/KMnMyLzUnrI0i1kLbmPLnGY9sIOYRz2qrIXqtsbj2jIvnhhVr/zm W18CwGud6fs20rcMvy19a9GA077uNNPRgxpxaievCC5ltYFYfV/R8FPGM+uQrkg/ a4wqlLulpYtia2r0LdsAOykcVT8kTj7B2F0I3fyOwt2xlCMOUjWipQKtJe5Hwj9c txGwK5HXDCTKK+925WvBqqqY8ObYdWNGVQqnzrjMj7R6tfmTpg0bD1ltXASDTDRG iCOGHxmqhGsVDU9pw07e1u/5QjudIJRORDDAHKfNdMd7vfZ38edUK5Fr5qQSwZfT M1iPrXKRBWbtHoKqOuMtGHfnbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxRNrxl eDd1PAe+tG0ztQ1zq8B4MB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDLtW3jouRNgdX1CvYP3rB7YL+fxCEsWSe6EwLdZphsUwbZCgJE/nx 9kLhqs69MjWAicpUPLzKuECAlCypo9m7FfmN2LVoo2szx4/dVzyBEB9YoJ0COI47 0JquyZyP7KFZSL3AGgkTPU+y6R+ijOZ0/ONL9P/XlmBziJajFkWuHB/TvoKV4nHT h8adEHBcTBsKutRwc92RTesMUiB0kJ9ko+Qh9X4dBMjv171S6n7dHY16OsSL6ORc iFVkMFGc/+RiEfp8tzwIB4GsjpIm91WnhzJtb865ZzRm4tKfEBwtEkLnCWGoZ+7+ i7WqRk9MdFtt7cVV4scl5GvzMAyTVByf -----END CERTIFICATE-----Generated at Sat Aug 9 23:28:24 2025 by rpki-client