$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft File: kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json) Hash identifier: 5wgLF/PGNgwVkeRYev4HLnoiAgJSfPM//myVGuIEt2A= Subject key identifier: B0:F5:4F:C5:A4:71:34:6E:37:FD:9C:74:51:58:88:A4:02:D5:94:81 Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B Certificate issuer: /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft Manifest number: 18 Signing time: Sat 09 Aug 2025 08:27:57 +0000 Manifest this update: Sat 09 Aug 2025 08:27:57 +0000 Manifest next update: Sat 16 Aug 2025 08:27:57 +0000 Files and hashes: 1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: YijidnqSOpD4llP5tGe96YKo3frfNfWjsxlXmfn5sMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Validity Not Before: Aug 9 08:27:57 2025 GMT Not After : Aug 16 08:27:57 2025 GMT Subject: CN=6897068d-bd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:96:b3:c6:b7:7e:4f:51:14:c7:ca:a1:23: a5:cb:aa:a0:5e:d0:a2:9b:85:01:6b:39:4b:17:97: aa:be:51:d9:eb:df:43:a5:82:45:6e:a5:50:15:6e: 57:8e:d1:b6:cc:6d:35:dd:40:e9:eb:23:3a:d0:81: 20:12:7e:0c:00:35:9c:25:d0:7e:74:a9:a9:82:a3: 5d:1e:16:d6:1b:13:0c:98:c1:f4:ae:00:83:f7:9d: 39:d2:74:2b:74:6a:5b:5d:d8:d2:84:f6:74:eb:91: e2:9b:00:c1:ab:36:50:d3:97:96:14:ff:3a:81:9e: a8:11:f6:a8:50:3b:99:3f:2f:81:d9:14:84:25:97: b4:2d:ce:6e:5a:3b:c6:f6:46:34:bf:05:39:76:37: 2c:a0:6b:ab:ad:32:1b:0e:f6:b8:d0:f9:c5:2f:5f: 0f:10:dd:6a:0b:93:c8:a3:95:d0:76:d3:0c:78:89: be:97:32:f8:4e:4a:fd:85:1f:f8:84:0a:fb:9d:4b: 39:fc:07:c8:c8:0e:bb:db:29:39:d5:c7:6a:de:af: 54:77:1d:1b:29:70:91:6d:91:be:eb:7c:88:9c:7e: 61:02:49:a5:2b:2f:9d:77:0d:ef:36:be:56:92:fe: dc:1e:a8:fe:25:81:95:8f:03:8d:10:42:56:f8:83: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F5:4F:C5:A4:71:34:6E:37:FD:9C:74:51:58:88:A4:02:D5:94:81 X509v3 Authority Key Identifier: keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:7b:42:6d:91:b4:2b:b0:c4:8e:0c:ab:44:0c:cc:19:93:02: c3:15:34:11:2e:a0:52:01:87:5a:d4:0f:72:d6:3c:4c:f2:0e: 09:d6:5a:32:7a:31:8d:69:dd:66:a5:f2:62:9b:44:ae:52:5e: 08:95:03:4f:8d:7f:47:5d:5f:62:2e:fd:96:74:d6:d0:50:a3: a9:65:09:2e:8b:6c:fd:db:bf:54:95:bd:8a:11:e0:c6:0a:77: 77:ae:6d:0f:c8:1d:dd:1a:eb:57:73:2b:63:b3:b0:d0:73:b6: 75:a3:c7:dd:0f:76:26:d3:cd:ab:cd:e4:8e:1a:74:11:08:d2: c2:e5:a3:aa:30:54:88:c6:a6:9c:a2:75:fe:a5:aa:15:3b:59: cc:f3:4e:45:98:ff:6c:cd:b6:df:d4:a7:bc:36:a0:ad:fb:fe: bf:b0:da:d2:26:f1:6d:da:05:73:4a:dc:6e:2c:f0:d4:da:0d: 99:31:8b:c5:ac:13:dc:82:a3:b8:10:89:12:72:e6:50:98:45: d9:6c:96:12:ee:42:f8:59:3b:b5:c8:66:e7:14:76:24:94:a9: 66:f3:9e:f8:d3:9c:e5:8e:87:32:ff:1e:7d:f7:92:5f:38:19: 7d:8b:1b:30:97:c2:06:87:de:07:eb:de:18:59:02:70:80:ba: 60:17:41:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkZCQzExMC8GA1UEBRMoOTExRDUwNTU4RDlGRjA5MkI5QzczOUVBMTBBNUI1MzNF MkU5RkUzQjAeFw0yNTA4MDkwODI3NTdaFw0yNTA4MTYwODI3NTdaMBgxFjAUBgNV BAMTDTY4OTcwNjhkLWJkMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQOpazxrd+T1EUx8qhI6XLqqBe0KKbhQFrOUsXl6q+Udnr30OlgkVupVAVbleO 0bbMbTXdQOnrIzrQgSASfgwANZwl0H50qamCo10eFtYbEwyYwfSuAIP3nTnSdCt0 altd2NKE9nTrkeKbAMGrNlDTl5YU/zqBnqgR9qhQO5k/L4HZFIQll7Qtzm5aO8b2 RjS/BTl2Nyyga6utMhsO9rjQ+cUvXw8Q3WoLk8ijldB20wx4ib6XMvhOSv2FH/iE CvudSzn8B8jIDrvbKTnVx2rer1R3HRspcJFtkb7rfIicfmECSaUrL513De82vlaS /tweqP4lgZWPA40QQlb4gy9fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsPVPxaRx NG43/Zx0UViIpALVlIEwHwYDVR0jBBgwFoAUkR1QVY2f8JK5xznqEKW1M+Lp/jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRkJDL0E5RTEzMjU2NTJG NzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpLNXh6bnFFS1cxTS1McF9q cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1IxUVZZMmY4Sks1eHpucUVLVzFNLUxwX2pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RkJDL0E5RTEzMjU2NTJGNzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpL NXh6bnFFS1cxTS1McF9qcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALd7Qm2RtCuwxI4Mq0QMzBmTAsMVNBEuoFIBh1rUD3LWPEzyDgnWWjJ6 MY1p3Wal8mKbRK5SXgiVA0+Nf0ddX2Iu/ZZ01tBQo6llCS6LbP3bv1SVvYoR4MYK d3eubQ/IHd0a61dzK2OzsNBztnWjx90PdibTzavN5I4adBEI0sLlo6owVIjGppyi df6lqhU7WczzTkWY/2zNtt/Up7w2oK37/r+w2tIm8W3aBXNK3G4s8NTaDZkxi8Ws E9yCo7gQiRJy5lCYRdlslhLuQvhZO7XIZucUdiSUqWbznvjTnOWOhzL/Hn33kl84 GX2LGzCXwgaH3gfr3hhZAnCAumAXQRs= -----END CERTIFICATE-----Generated at Sat Aug 9 23:19:31 2025 by rpki-client