$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft File: k1ndLhIU62ulYiqzyAtqkhZoDMw.mft (raw, json) Hash identifier: c1PQ4Y8h5FrU0OCW2brBW0B1fpzGMMfTkiT2gLB9ACQ= Subject key identifier: 14:DA:11:01:4D:83:1A:FD:DF:68:C4:78:78:D1:F2:BB:FB:C7:7F:DD Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC Certificate issuer: /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft Manifest number: 061F Signing time: Fri 08 Aug 2025 23:13:21 +0000 Manifest this update: Fri 08 Aug 2025 23:13:21 +0000 Manifest next update: Fri 15 Aug 2025 23:13:21 +0000 Files and hashes: 1: k1ndLhIU62ulYiqzyAtqkhZoDMw.crl (hash: w/W8SHtqOhEVW2M8oukTeQDWGObag6GWtBnJMcY4O98=) 2: B8B720BEF9EF11EDA3C9C234C4F9AE02.roa (hash: My0gxkPTiPIufgJL4YRuXb9RXfxXNWfL0lWpF2RiHBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BBE6, serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Validity Not Before: Aug 8 23:13:21 2025 GMT Not After : Aug 15 23:13:21 2025 GMT Subject: CN=68968491-4bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:8e:42:76:50:7d:d7:25:29:19:61:3c:2c: a5:15:5b:f1:02:88:f3:ae:e4:0a:f0:c2:05:c3:4a: a3:ea:f6:7c:dc:da:d3:e3:82:b2:0e:c3:55:24:e2: 9a:a0:d6:63:b5:b9:51:ff:2f:4b:fd:ec:b5:0a:ec: 83:62:dc:a2:de:af:61:4f:16:5f:5b:60:5b:13:fe: f0:8d:4e:ca:6a:bf:4f:35:aa:40:ec:d2:6b:32:be: 2d:e2:a6:b9:f2:e6:90:75:22:b2:74:61:d5:6c:3d: a0:24:88:f4:43:cb:37:95:a2:41:f4:30:e8:31:9a: ac:39:4a:7f:e0:12:db:0f:6d:25:04:40:3e:87:e0: 99:08:22:d4:40:66:7e:e3:10:9a:f2:bb:07:55:23: 5c:e6:3c:ab:26:9c:82:33:6e:d5:32:ce:f1:e3:dd: 77:50:8e:01:a4:0f:0f:ba:0d:71:31:40:90:27:63: 87:e7:cd:9c:1e:57:fb:f6:4b:b1:8d:b5:78:c6:69: 13:f4:64:ae:c1:65:f6:db:52:b6:a8:06:1f:02:89: 8d:8a:e9:f0:46:c4:30:c1:cd:1a:af:22:d8:77:0a: 01:dd:9e:80:92:ad:de:94:60:6c:e5:d4:9e:f7:ad: ef:3b:1e:a7:e5:69:c1:a4:87:e4:15:c7:55:c1:95: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DA:11:01:4D:83:1A:FD:DF:68:C4:78:78:D1:F2:BB:FB:C7:7F:DD X509v3 Authority Key Identifier: keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:b3:2b:9b:2a:6c:e5:eb:3b:cf:f0:13:9c:d1:17:b4:0e:7c: 9d:2e:60:5c:1d:28:37:f6:b1:50:9f:cc:3a:b8:19:d3:4a:7f: f6:d8:a2:b2:96:7a:86:05:34:ff:87:61:be:8f:9f:69:04:be: a4:6c:4d:66:c2:37:3c:24:c3:a5:4f:1a:66:09:e7:c3:cf:f2: ce:8d:d2:e7:16:d7:e0:e0:f6:37:73:b4:54:98:8d:5c:a3:1f: a5:0d:7d:bb:9e:b2:c8:9f:40:a0:6c:0e:9b:55:44:fa:6a:4f: 0a:78:8c:1d:e8:f7:f3:e4:c8:8f:ea:ae:29:27:92:23:4c:c1: 36:ff:e6:67:37:fa:dd:92:45:5b:c1:0c:c8:3e:37:e5:95:7d: 51:22:50:1b:bd:07:81:72:ed:54:59:79:ba:d8:52:1b:e2:ae: 19:f5:64:9f:bf:a7:c1:61:e2:33:c1:7e:56:38:3d:38:f1:7e: 1a:0d:6b:a9:08:e0:e5:47:55:57:54:13:a5:7f:8f:40:54:ff: 7c:36:3f:26:c6:91:42:54:65:f5:9f:07:e8:74:5d:c3:e6:5b: 85:84:f6:16:d6:9b:98:22:c8:ce:8a:9d:f3:55:cf:30:2e:b6: c6:c7:25:15:3d:41:d9:9c:42:63:af:cd:92:69:94:ec:01:be: cc:df:62:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCRTYxMTAvBgNVBAUTKDkzNTlERDJFMTIxNEVCNkJBNTYyMkFCM0M4MEI2QTky MTY2ODBDQ0MwHhcNMjUwODA4MjMxMzIxWhcNMjUwODE1MjMxMzIxWjAYMRYwFAYD VQQDEw02ODk2ODQ5MS00YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu32OQnZQfdclKRlhPCylFVvxAojzruQK8MIFw0qj6vZ83NrT44KyDsNVJOKa oNZjtblR/y9L/ey1CuyDYtyi3q9hTxZfW2BbE/7wjU7Kar9PNapA7NJrMr4t4qa5 8uaQdSKydGHVbD2gJIj0Q8s3laJB9DDoMZqsOUp/4BLbD20lBEA+h+CZCCLUQGZ+ 4xCa8rsHVSNc5jyrJpyCM27VMs7x4913UI4BpA8Pug1xMUCQJ2OH582cHlf79kux jbV4xmkT9GSuwWX221K2qAYfAomNiunwRsQwwc0aryLYdwoB3Z6Akq3elGBs5dSe 963vOx6n5WnBpIfkFcdVwZXypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTaEQFN gxr932jEeHjR8rv7x3/dMB8GA1UdIwQYMBaAFJNZ3S4SFOtrpWIqs8gLapIWaAzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkJFNi9BMDk3RjBENEFE MzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYydWxZaXF6eUF0cWtoWm9E TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2sxbmRMaElVNjJ1bFlpcXp5QXRxa2hab0RNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkJFNi9BMDk3RjBENEFEMzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYy dWxZaXF6eUF0cWtoWm9ETXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+syubKmzl6zvP8BOc0Re0DnydLmBcHSg39rFQn8w6uBnTSn/22KKy lnqGBTT/h2G+j59pBL6kbE1mwjc8JMOlTxpmCefDz/LOjdLnFtfg4PY3c7RUmI1c ox+lDX27nrLIn0CgbA6bVUT6ak8KeIwd6Pfz5MiP6q4pJ5IjTME2/+ZnN/rdkkVb wQzIPjfllX1RIlAbvQeBcu1UWXm62FIb4q4Z9WSfv6fBYeIzwX5WOD048X4aDWup CODlR1VXVBOlf49AVP98Nj8mxpFCVGX1nwfodF3D5luFhPYW1puYIsjOip3zVc8w LrbGxyUVPUHZnEJjr82SaZTsAb7M32IW -----END CERTIFICATE-----Generated at Sun Aug 10 21:06:16 2025 by rpki-client