$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: W/nXEFj/AosyQlZwY/vcfOKSQ00KniOmfeky0rlj0AQ= Subject key identifier: CD:41:AF:AD:7F:8D:2F:A9:9C:A1:81:76:CE:F1:A9:7E:D7:4F:77:52 Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 1311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 130A Signing time: Sun 10 Aug 2025 17:02:04 +0000 Manifest this update: Sun 10 Aug 2025 17:02:04 +0000 Manifest next update: Sun 17 Aug 2025 17:02:04 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: GGLvwB6Tp0JmkHAy7PACudgkWlK7vj+GIxPnwclNuiA=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: rzftRMPtJ5B6XfKei48LV2pqboch+DlK8AP2NtHbsfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4881 (0x1311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: Aug 10 17:02:04 2025 GMT Not After : Aug 17 17:02:04 2025 GMT Subject: CN=6898d08c-b648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:7d:83:3f:25:b4:00:6c:ca:90:9f:51:a0: c5:ba:9a:7c:bc:17:87:af:83:81:fe:42:30:20:9b: d1:41:70:c0:0b:0e:e9:81:90:7c:6e:c4:e9:b7:71: 33:d5:8b:69:c8:54:d2:d5:dd:a0:9b:68:0d:8e:28: 7c:14:0a:ff:f1:67:81:a5:d5:c9:07:e0:a7:94:9a: 8d:4f:17:8e:e1:90:91:36:75:b9:36:75:52:21:ba: 5f:ad:31:1f:1f:e3:e6:47:24:cb:c4:95:28:83:4b: 94:b8:55:a7:fe:17:fd:95:a5:2c:50:6e:7c:b5:18: 8f:1d:42:70:0c:36:25:0b:0b:1d:18:a3:a4:18:27: 33:3b:cb:22:6e:3f:a2:0d:80:99:57:f3:76:3e:26: 0c:a7:5e:5f:e3:ab:d4:ec:c2:e1:7f:e8:fe:bf:11: f4:20:fc:8e:72:de:4d:6a:de:28:db:46:69:14:f8: 98:c0:d1:ef:b9:59:c8:a3:6f:f0:72:f5:c3:f1:ce: c5:97:c3:01:ef:54:35:e8:0e:f5:00:12:ba:8c:41: c5:b3:6f:20:f8:17:1d:76:37:f5:74:68:27:a5:ef: 5d:fa:25:d6:e9:8f:fa:22:ee:84:a5:b0:61:20:41: 6a:b8:81:81:e2:f6:e6:ac:6d:30:45:d8:41:70:f3: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:41:AF:AD:7F:8D:2F:A9:9C:A1:81:76:CE:F1:A9:7E:D7:4F:77:52 X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:68:36:99:3e:f2:49:ab:27:45:f7:55:8e:45:25:c3:eb:77: f2:fc:34:23:44:7e:38:11:04:45:42:db:ff:49:39:ac:70:09: 44:58:82:0c:9d:41:4a:8e:92:e7:cf:69:f5:2f:00:80:f1:e5: 90:bc:a2:20:c2:1a:17:d6:ef:d2:ac:36:47:66:0f:5d:87:66: 38:70:52:bc:46:da:0f:e7:f7:29:75:e3:4f:bd:fe:81:dc:13: d9:c3:e1:f7:4a:4f:01:4f:22:f8:c6:09:28:a5:1e:95:47:f0: e5:72:ad:b0:a3:60:d3:d2:7c:9d:09:a1:53:25:e6:17:96:5c: 37:8e:d6:99:96:d6:6c:84:ac:6c:66:5e:7b:e9:bf:74:b6:82: 1e:85:66:3c:37:c0:8a:c2:a7:9a:fb:3a:93:ea:b4:eb:4f:45: d6:ca:03:13:d5:b0:08:b0:e2:8e:48:73:f6:4e:e9:a2:f9:aa: 28:50:25:60:99:df:46:cf:21:c8:e9:4e:7c:18:12:78:b2:e0: 5c:54:39:2e:65:8d:de:dd:5d:15:a2:19:d2:b6:2c:67:95:74: 9c:df:6a:d3:c8:a2:42:9f:20:1b:23:af:ba:7f:d1:32:eb:74: 3a:8c:51:ef:49:75:0b:6f:28:80:0e:60:91:4a:86:a7:45:04: 69:d7:99:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjUwODEwMTcwMjA0WhcNMjUwODE3MTcwMjA0WjAYMRYwFAYD VQQDEw02ODk4ZDA4Yy1iNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2R59gz8ltABsypCfUaDFupp8vBeHr4OB/kIwIJvRQXDACw7pgZB8bsTpt3Ez 1YtpyFTS1d2gm2gNjih8FAr/8WeBpdXJB+CnlJqNTxeO4ZCRNnW5NnVSIbpfrTEf H+PmRyTLxJUog0uUuFWn/hf9laUsUG58tRiPHUJwDDYlCwsdGKOkGCczO8sibj+i DYCZV/N2PiYMp15f46vU7MLhf+j+vxH0IPyOct5Nat4o20ZpFPiYwNHvuVnIo2/w cvXD8c7Fl8MB71Q16A71ABK6jEHFs28g+Bcddjf1dGgnpe9d+iXW6Y/6Iu6EpbBh IEFquIGB4vbmrG0wRdhBcPNjMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1Br61/ jS+pnKGBds7xqX7XT3dSMB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMaDaZPvJJqydF91WORSXD63fy/DQjRH44EQRFQtv/STmscAlEWIIM nUFKjpLnz2n1LwCA8eWQvKIgwhoX1u/SrDZHZg9dh2Y4cFK8RtoP5/cpdeNPvf6B 3BPZw+H3Sk8BTyL4xgkopR6VR/Dlcq2wo2DT0nydCaFTJeYXllw3jtaZltZshKxs Zl576b90toIehWY8N8CKwqea+zqT6rTrT0XWygMT1bAIsOKOSHP2Tumi+aooUCVg md9GzyHI6U58GBJ4suBcVDkuZY3e3V0VohnStixnlXSc32rTyKJCnyAbI6+6f9Ey 63Q6jFHvSXULbyiADmCRSoanRQRp15mc -----END CERTIFICATE-----Generated at Mon Aug 11 07:42:11 2025 by rpki-client