$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json) Hash identifier: XWTX72+0nPnaPt4mlWBVpZmCcfH7QFfAsnNacEn4ZYk= Subject key identifier: 3B:89:9B:DD:A4:2A:86:50:59:F0:0B:E7:BD:EC:CB:35:E7:65:8A:07 Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft Manifest number: BA Signing time: Sat 09 Aug 2025 06:21:16 +0000 Manifest this update: Sat 09 Aug 2025 06:21:15 +0000 Manifest next update: Sat 16 Aug 2025 06:21:15 +0000 Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: w8CYgtdml7ESMcFnRWvt6A4alvm30KQTWOwAMXPDvws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Validity Not Before: Aug 9 06:21:15 2025 GMT Not After : Aug 16 06:21:15 2025 GMT Subject: CN=6896e8db-05ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9b:9c:e6:e0:e3:60:7a:c6:d3:af:67:45:c4: 08:c7:75:65:aa:21:eb:37:50:07:85:8b:c0:0c:ad: 02:e4:a5:95:48:56:1a:f6:f2:c5:32:f7:3d:65:f9: 50:b3:c3:06:de:de:ee:23:30:db:f7:0f:c1:96:7c: 5f:be:67:0f:c9:38:5a:6d:57:45:98:73:89:41:88: 5e:76:36:8a:b0:3f:0d:d0:eb:c5:fa:91:28:c7:37: b9:53:67:bd:fa:62:43:c0:8f:6b:cf:43:d4:ac:c6: 4f:f8:e1:0a:f8:17:0c:47:65:4c:c8:e6:fa:ed:2b: 60:8b:19:a6:99:6e:73:4d:7c:0e:32:fb:1a:52:d4: b7:18:70:f4:2b:24:8f:30:51:a6:47:83:0a:ea:88: 86:9a:99:0d:85:71:78:0f:3a:8e:03:2b:29:db:2e: 09:fa:ca:a9:a2:20:06:2d:83:20:6f:ed:0f:80:e3: 3a:d2:8d:98:dc:08:0c:b4:0d:a8:9b:93:5a:ab:ba: 16:aa:43:90:65:35:98:56:d6:5a:b6:46:dc:09:b4: 96:c3:5a:66:82:d8:a8:56:a5:ca:7b:01:25:a6:be: 35:07:39:87:db:6c:6d:3e:2e:05:84:eb:10:8c:21: 16:eb:d2:b0:26:48:97:ea:d2:63:ef:d8:b8:7a:79: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:89:9B:DD:A4:2A:86:50:59:F0:0B:E7:BD:EC:CB:35:E7:65:8A:07 X509v3 Authority Key Identifier: keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:82:de:ce:64:41:0a:2e:41:aa:db:07:17:41:5c:0f:5c:ba: b5:e4:50:36:d3:36:7b:33:df:5b:c6:ca:70:d5:85:fd:c7:4b: de:d2:a4:72:68:7f:e0:86:0a:d7:cf:30:b7:81:b9:d3:d5:eb: 9e:7d:f1:b2:b4:01:2f:20:04:ed:28:e5:0a:92:6a:d5:c5:13: b7:6d:ff:57:30:a5:58:64:b3:17:93:d7:40:4d:34:ef:6a:1a: 7a:7a:a4:56:2f:2e:fe:37:39:4c:43:7c:c9:f8:b6:51:c5:a7: 6e:80:a8:49:26:2a:28:f5:d4:05:3d:71:a8:e9:b5:63:d5:17: f5:77:6a:7a:ed:f9:ec:a6:b1:18:9d:89:4a:43:a6:ad:1f:59: 31:1a:31:29:ae:1e:12:f0:90:20:b9:5a:00:bf:bf:b9:a9:f3: 50:a7:ac:3b:9e:82:f2:b1:1f:78:03:a4:a1:22:5c:ba:82:29: 9b:25:89:54:0f:32:ed:83:ce:49:91:79:c9:9f:0e:99:90:6b: d2:c9:0d:e4:59:4b:15:39:59:83:34:8b:6f:d0:9b:2f:44:41: fe:de:3c:14:04:29:8c:9e:60:01:c5:cf:c3:e1:12:db:69:cd: 7b:d1:15:ba:9d:bf:6e:46:48:a6:b7:bc:ae:6f:67:e2:2d:32: bb:9f:a2:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDJCM0QyMTFGQzk5OThERjIwMzVFMjBEOTFBQTU1RURF QzYyOEYwQTMwHhcNMjUwODA5MDYyMTE1WhcNMjUwODE2MDYyMTE1WjAYMRYwFAYD VQQDEw02ODk2ZThkYi0wNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6puc5uDjYHrG069nRcQIx3VlqiHrN1AHhYvADK0C5KWVSFYa9vLFMvc9ZflQ s8MG3t7uIzDb9w/BlnxfvmcPyThabVdFmHOJQYhedjaKsD8N0OvF+pEoxze5U2e9 +mJDwI9rz0PUrMZP+OEK+BcMR2VMyOb67StgixmmmW5zTXwOMvsaUtS3GHD0KySP MFGmR4MK6oiGmpkNhXF4DzqOAysp2y4J+sqpoiAGLYMgb+0PgOM60o2Y3AgMtA2o m5Naq7oWqkOQZTWYVtZatkbcCbSWw1pmgtioVqXKewElpr41BzmH22xtPi4FhOsQ jCEW69KwJkiX6tJj79i4ennKOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuJm92k KoZQWfAL573syzXnZYoHMB8GA1UdIwQYMBaAFCs9IR/JmY3yA14g2RqlXt7GKPCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xQjIyRTFGRTVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpmSURYaURaR3FWZTNzWW84 S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xQjIyRTFGRTVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpm SURYaURaR3FWZTNzWW84S00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhgt7OZEEKLkGq2wcXQVwPXLq15FA20zZ7M99bxspw1YX9x0ve0qRy aH/ghgrXzzC3gbnT1eueffGytAEvIATtKOUKkmrVxRO3bf9XMKVYZLMXk9dATTTv ahp6eqRWLy7+NzlMQ3zJ+LZRxadugKhJJioo9dQFPXGo6bVj1Rf1d2p67fnsprEY nYlKQ6atH1kxGjEprh4S8JAguVoAv7+5qfNQp6w7noLysR94A6ShIly6gimbJYlU DzLtg85JkXnJnw6ZkGvSyQ3kWUsVOVmDNItv0JsvREH+3jwUBCmMnmABxc/D4RLb ac170RW6nb9uRkimt7yub2fiLTK7n6Io -----END CERTIFICATE-----Generated at Mon Aug 11 04:23:39 2025 by rpki-client