$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json) Hash identifier: BRzwRgDkfzD2fbsHotgBhdkEb+Y9cOkAh6XkOxbIvEA= Subject key identifier: 96:B7:18:8F:BF:21:38:C6:69:1D:0B:B0:78:0E:29:3B:0A:C2:52:13 Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft Manifest number: 6D Signing time: Mon 11 Aug 2025 06:27:35 +0000 Manifest this update: Mon 11 Aug 2025 06:27:35 +0000 Manifest next update: Mon 18 Aug 2025 06:27:35 +0000 Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: hvTsEbZO4k1P8CmbdfD2nDs04R3Mf3aCaezFuFgDlSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Validity Not Before: Aug 11 06:27:35 2025 GMT Not After : Aug 18 06:27:35 2025 GMT Subject: CN=68998d57-069c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:b8:89:11:4d:01:e7:aa:09:e9:dd:49:aa: 94:da:6c:b8:61:89:be:72:d0:17:f6:0b:4f:5d:62: 15:82:6c:99:15:45:82:e9:e8:ca:77:64:c7:13:7c: 41:ff:46:70:22:9c:9e:45:f9:73:cc:bd:d2:1a:9b: 40:12:aa:b6:1f:3c:af:9e:d4:41:17:19:64:52:a2: 98:dc:c5:0d:2d:af:3b:d7:76:02:ca:76:a5:a1:fd: 35:fc:e6:54:59:c9:ec:b6:32:4e:69:38:9d:42:2c: 7b:5c:da:90:7a:36:a3:5f:f7:52:2e:77:68:16:7e: 8b:81:c7:98:f3:cc:ce:f0:00:2b:cd:43:1e:94:00: f5:93:db:97:f3:95:c9:5c:27:7a:ac:29:bd:6e:24: df:98:90:46:3e:4a:68:ee:bf:30:46:87:83:c2:48: 2b:83:58:18:be:10:16:8f:16:be:d1:fd:fc:9d:cb: 90:c2:c7:c3:fb:ae:9c:b2:94:c4:0c:92:2b:38:e0: ef:f6:56:f3:39:44:9b:51:ed:22:55:86:53:a9:a4: 26:5c:2f:86:70:57:48:df:1e:1c:12:83:43:10:ee: 57:db:74:ff:b9:47:c8:8f:94:0e:f8:02:52:9a:b1: 1d:af:ff:f3:b5:33:6f:3a:54:ae:af:9c:4c:c2:ac: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B7:18:8F:BF:21:38:C6:69:1D:0B:B0:78:0E:29:3B:0A:C2:52:13 X509v3 Authority Key Identifier: keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ce:6c:db:97:bd:2b:f7:76:b4:2a:67:3e:af:c2:1e:47:b9: 59:87:6f:db:ef:a0:1d:f5:86:c3:51:d9:26:45:b2:c6:1a:6d: 28:82:84:0e:de:28:e6:6a:7a:9d:ca:5f:4f:47:f2:e4:ab:05: c9:73:98:77:ac:2f:6a:b0:5b:fd:fe:08:7c:e5:02:78:23:1e: bb:38:6f:1b:b2:b4:b8:89:6d:c2:65:9a:5c:30:c8:5c:0c:32: 5e:d9:62:d3:d8:21:22:ec:24:24:f8:00:24:15:a1:13:9c:35: c5:fd:c5:11:16:62:7e:64:75:85:f6:b7:67:22:37:5e:e9:05: bb:3d:15:02:09:81:fd:90:10:9f:5e:69:c1:06:d3:26:e6:e2: fa:15:53:32:a3:26:a3:d6:ae:9d:53:0b:40:1e:24:6e:1d:c9: fc:d9:40:be:7c:82:e7:91:db:9b:1f:0a:99:46:3c:46:ef:1c: d2:bd:40:f7:fc:7c:0d:c5:7a:94:11:df:19:c3:7c:90:fe:aa: a8:01:0c:2f:91:a9:07:50:e3:83:15:c1:81:ce:6c:9b:e1:af: 08:e3:99:6b:0e:ee:3a:71:d2:f0:d9:00:97:8b:a6:95:ba:ea: 83:d6:7c:7b:58:04:b9:6e:2f:f9:fc:59:c8:2c:57:ec:c8:b0: e4:0a:6a:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkUxRTExMC8GA1UEBRMoMjhFREE3Qjk1RDVFOEQ0NTYyQTc1OTc0QzZERDdEQTY0 QzJBMkE4NjAeFw0yNTA4MTEwNjI3MzVaFw0yNTA4MTgwNjI3MzVaMBgxFjAUBgNV BAMTDTY4OTk4ZDU3LTA2OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLWriJEU0B56oJ6d1JqpTabLhhib5y0Bf2C09dYhWCbJkVRYLp6Mp3ZMcTfEH/ RnAinJ5F+XPMvdIam0ASqrYfPK+e1EEXGWRSopjcxQ0trzvXdgLKdqWh/TX85lRZ yey2Mk5pOJ1CLHtc2pB6NqNf91Iud2gWfouBx5jzzM7wACvNQx6UAPWT25fzlclc J3qsKb1uJN+YkEY+SmjuvzBGh4PCSCuDWBi+EBaPFr7R/fydy5DCx8P7rpyylMQM kis44O/2VvM5RJtR7SJVhlOppCZcL4ZwV0jfHhwSg0MQ7lfbdP+5R8iPlA74AlKa sR2v//O1M286VK6vnEzCrFkhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlrcYj78h OMZpHQuweA4pOwrCUhMwHwYDVR0jBBgwFoAUKO2nuV1ejUVip1l0xt19pkwqKoYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFL0Q0MDlGODJBRDE2 OTExRUZCNzZGQjUyMEM0RjlBRTAyL0tPMm51VjFlalVWaXAxbDB4dDE5cGt3cUtv WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS08ybnVWMWVqVVZpcDFsMHh0MTlwa3dxS29ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RTFFL0Q0MDlGODJBRDE2OTExRUZCNzZGQjUyMEM0RjlBRTAyL0tPMm51VjFlalVW aXAxbDB4dDE5cGt3cUtvWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAADObNuXvSv3drQqZz6vwh5HuVmHb9vvoB31hsNR2SZFssYabSiChA7e KOZqep3KX09H8uSrBclzmHesL2qwW/3+CHzlAngjHrs4bxuytLiJbcJlmlwwyFwM Ml7ZYtPYISLsJCT4ACQVoROcNcX9xREWYn5kdYX2t2ciN17pBbs9FQIJgf2QEJ9e acEG0ybm4voVUzKjJqPWrp1TC0AeJG4dyfzZQL58gueR25sfCplGPEbvHNK9QPf8 fA3FepQR3xnDfJD+qqgBDC+RqQdQ44MVwYHObJvhrwjjmWsO7jpx0vDZAJeLppW6 6oPWfHtYBLluL/n8WcgsV+zIsOQKaik= -----END CERTIFICATE-----Generated at Mon Aug 11 12:54:01 2025 by rpki-client