$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: zdPAMdtbK7bNmOpPKKZazN1L5W0ps2rIztR/n55U2fE= Subject key identifier: 02:D5:F5:E0:8F:2D:75:50:A6:94:8B:23:E4:8F:F6:F1:B1:64:47:8F Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: 7F Signing time: Sat 09 Aug 2025 07:11:47 +0000 Manifest this update: Sat 09 Aug 2025 07:11:46 +0000 Manifest next update: Sat 16 Aug 2025 07:11:46 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: J3wDLgwYrM9GF1iBlHpjEVvyJ/C4rHXgNPtz02uQoIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Aug 9 07:11:46 2025 GMT Not After : Aug 16 07:11:46 2025 GMT Subject: CN=6896f4b3-dc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:c2:a5:4c:d4:da:93:8a:9d:20:4d:fb:5c: 0c:94:b0:6b:c9:ca:15:7e:07:53:d1:da:07:43:0b: 27:f4:06:6a:06:61:ed:96:ac:2c:5f:bd:ad:35:93: f3:2c:18:75:07:87:3e:79:54:16:69:a1:55:5b:a4: d7:16:ce:4f:d5:11:77:26:91:8c:bb:b9:2f:c4:f9: 9a:75:0f:0e:44:b9:27:45:d7:e5:88:8a:75:7b:ac: 0f:4c:5a:3c:36:15:e1:2b:1e:0b:b1:e9:11:89:5c: 33:08:86:71:fc:b3:32:70:15:2d:2b:40:93:82:32: 0b:b2:91:9c:f0:e3:1b:6a:54:b5:89:9d:42:b9:7b: af:37:42:02:dc:ce:75:64:22:d7:ea:21:fd:a2:2e: 23:37:a4:84:4e:f6:7c:90:bd:f9:66:2a:08:07:3c: ba:17:4c:6f:d3:8f:b9:13:35:85:44:1b:9b:e7:50: f4:50:97:1b:ec:60:cc:aa:2f:5e:07:68:c2:76:a1: 23:34:cd:01:d2:c5:1e:42:49:e9:4d:4e:cb:8c:7b: 65:1d:74:a2:6b:0b:eb:2d:29:76:90:fb:a0:5f:d4: b8:92:29:21:4d:37:a4:f8:6c:5d:db:89:d0:f8:1f: 5d:a2:d0:59:53:fc:d1:44:20:4a:03:0c:5e:91:a6: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D5:F5:E0:8F:2D:75:50:A6:94:8B:23:E4:8F:F6:F1:B1:64:47:8F X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:4e:ff:07:8f:e1:07:41:e0:06:09:1a:80:e8:d3:39:8f:fd: 39:c6:24:44:24:c8:d0:30:0f:c3:79:7c:ce:96:96:1e:c5:f9: b2:8a:cd:cb:ec:9e:f5:2f:e3:45:87:34:65:1b:8a:21:c1:c8: fb:f4:20:33:38:ce:10:d2:bf:33:e6:b7:90:7a:62:e5:5a:44: 3e:90:00:05:a5:a4:c2:77:f4:32:0d:23:63:4e:14:49:3b:13: 96:01:db:9f:77:e3:35:20:70:8d:4b:3b:07:27:c4:e2:cf:29: 18:e7:2c:a8:2a:c9:16:14:7c:e7:51:fe:d6:ef:36:02:39:71: 56:14:d2:a3:78:ec:ec:01:f0:f7:00:6a:56:09:fa:2f:b4:f4: 69:59:92:d3:8a:0e:05:69:ee:28:14:82:03:28:47:02:ce:24: e3:60:9a:83:2b:ae:a2:c6:9d:4b:73:02:61:18:27:dc:d1:67: e6:12:d3:57:8b:5d:1c:04:71:64:4a:5a:44:45:f0:de:99:be: c8:22:c5:8f:b6:42:dd:99:b1:e3:09:2a:f8:23:b9:80:ab:77: 99:f2:31:72:c0:99:9d:aa:ab:08:da:cf:1a:b5:5e:3f:51:6c: 4a:23:bd:96:99:85:98:b1:ba:1d:34:61:02:27:ad:7d:0a:f6: ae:1c:3e:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjZFMzExMC8GA1UEBRMoMkJGMEFFNjc5MEQyRjAxREQxREI2NzM4MzEzMkRDNDAz QjY3NDUyMjAeFw0yNTA4MDkwNzExNDZaFw0yNTA4MTYwNzExNDZaMBgxFjAUBgNV BAMTDTY4OTZmNGIzLWRjMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDME8KlTNTak4qdIE37XAyUsGvJyhV+B1PR2gdDCyf0BmoGYe2WrCxfva01k/Ms GHUHhz55VBZpoVVbpNcWzk/VEXcmkYy7uS/E+Zp1Dw5EuSdF1+WIinV7rA9MWjw2 FeErHgux6RGJXDMIhnH8szJwFS0rQJOCMguykZzw4xtqVLWJnUK5e683QgLcznVk ItfqIf2iLiM3pIRO9nyQvflmKggHPLoXTG/Tj7kTNYVEG5vnUPRQlxvsYMyqL14H aMJ2oSM0zQHSxR5CSelNTsuMe2UddKJrC+stKXaQ+6Bf1LiSKSFNN6T4bF3bidD4 H12i0FlT/NFEIEoDDF6RpkFXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAtX14I8t dVCmlIsj5I/28bFkR48wHwYDVR0jBBgwFoAUK/CuZ5DS8B3R22c4MTLcQDtnRSIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0YyRkI4MjUwQjVE RDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS19DdVo1RFM4QjNSMjJjNE1UTGNRRHRuUlNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NkUzL0YyRkI4MjUwQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIz UjIyYzRNVExjUUR0blJTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKBO/weP4QdB4AYJGoDo0zmP/TnGJEQkyNAwD8N5fM6Wlh7F+bKKzcvs nvUv40WHNGUbiiHByPv0IDM4zhDSvzPmt5B6YuVaRD6QAAWlpMJ39DINI2NOFEk7 E5YB25934zUgcI1LOwcnxOLPKRjnLKgqyRYUfOdR/tbvNgI5cVYU0qN47OwB8PcA alYJ+i+09GlZktOKDgVp7igUggMoRwLOJONgmoMrrqLGnUtzAmEYJ9zRZ+YS01eL XRwEcWRKWkRF8N6ZvsgixY+2Qt2ZseMJKvgjuYCrd5nyMXLAmZ2qqwjazxq1Xj9R bEojvZaZhZixuh00YQInrX0K9q4cPrc= -----END CERTIFICATE-----Generated at Sun Aug 10 14:00:38 2025 by rpki-client