$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft File: K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json) Hash identifier: kJJi+jwd78VEIdRbdlxdHT29GcbOgHwusY3zTrAergs= Subject key identifier: 43:74:B9:42:78:08:54:CF:62:FC:AE:B3:B5:E3:0F:A4:A9:C1:1A:5E Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft Manifest number: B9 Signing time: Thu 07 Aug 2025 06:29:37 +0000 Manifest this update: Thu 07 Aug 2025 06:29:37 +0000 Manifest next update: Thu 14 Aug 2025 06:29:36 +0000 Files and hashes: 1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: jkh8SX967sht2nlTDycpCkH4u+KRXYSSf+cgMQNYMcQ=) 2: 7490D0DE5AE111EFAD7EB82CC4F9AE02.roa (hash: 2zLHgEDWGwo9zlyqNnj3rIHawpIWGW43p4pSnf/kapk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Validity Not Before: Aug 7 06:29:37 2025 GMT Not After : Aug 14 06:29:36 2025 GMT Subject: CN=689447d1-2ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:3c:b6:48:4b:e0:16:74:e7:78:d6:9c:e8: 80:91:21:12:13:14:aa:c3:38:7d:85:b6:23:5f:95: 11:f2:2e:03:36:9d:5d:88:b9:15:88:28:65:1b:93: 89:35:d5:c8:e1:85:96:e0:09:d7:02:ff:ae:12:80: 65:20:8c:93:bb:a4:79:f8:53:8f:dc:bd:58:90:89: 1e:39:6e:c8:8d:7f:8b:25:a4:72:34:9e:0e:0c:a3: 3e:de:63:5f:f0:e2:7c:d6:a8:c6:a4:54:08:be:b3: de:fd:1e:60:a8:5e:7e:d3:3c:d0:b8:61:6c:8e:ac: 64:bc:6e:be:36:92:80:81:9c:59:cb:9e:96:d7:f3: 4f:7e:37:d5:8b:fc:d3:0d:63:4f:03:0e:aa:67:6e: f3:d3:3d:71:a6:bf:3b:53:30:b6:6e:c0:02:6a:6e: a3:fb:0e:ac:11:0e:7a:b3:d7:5a:8f:b1:8b:4b:8c: 60:b9:17:47:06:5f:95:14:bd:2f:90:cf:07:fc:e0: 79:38:ea:1f:2d:4e:c9:2f:5c:0f:f9:30:56:ed:2b: e6:fa:23:23:bc:58:ec:7b:66:b6:f1:fe:11:63:75: 48:80:bb:0c:6d:16:1c:b6:29:33:d0:64:be:b0:e5: 79:87:bd:04:be:43:cd:b8:fa:5f:7b:c4:0e:43:c8: 94:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:74:B9:42:78:08:54:CF:62:FC:AE:B3:B5:E3:0F:A4:A9:C1:1A:5E X509v3 Authority Key Identifier: keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7a:ad:1e:6a:c1:7a:f5:b6:1f:94:17:b6:5d:b0:05:ce:37: a9:c3:a6:99:04:f6:ef:56:78:6b:0b:a0:44:36:09:4b:b3:6f: 26:71:10:0d:8d:4f:08:a9:02:b1:e9:96:d2:51:3a:84:5f:00: a6:b9:c1:db:89:f8:b8:31:f7:fe:1a:ba:30:a4:e3:ad:82:46: f3:27:c4:fe:c9:e1:49:51:27:04:74:9e:b4:57:c5:50:3b:17: bc:c0:4b:f3:53:c6:66:e3:62:d2:f6:9b:98:8c:24:69:20:49: a3:16:29:85:f5:f5:22:e6:4a:62:1b:a3:14:fd:62:d7:2d:9d: 85:31:b6:f6:9f:89:e4:53:c7:36:53:28:5f:99:73:71:fd:a6: da:4a:96:28:cc:b7:c3:9c:c2:33:d9:6f:6c:bd:8f:ed:18:de: 7e:7a:0a:62:79:7f:fc:dc:9b:e9:49:e8:77:06:8b:07:a8:41: 5c:7d:5e:ac:57:2d:20:0a:1b:ff:d3:b0:ba:77:28:6d:a6:0a: bd:a0:bb:b5:48:f6:9d:20:73:f8:69:c4:16:e0:9b:91:57:1e: cd:05:2e:12:fe:b4:5f:4c:e0:65:7a:6b:1b:eb:05:1e:f0:75: 81:da:83:6d:f5:43:05:5b:93:c2:a0:ba:48:ba:71:90:c3:1e: f3:89:00:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRERUExMTAvBgNVBAUTKDJCQ0FDRjYxNjVCNTg3NDA1OTBFNTk3MTg0MzNEODE4 M0ZGOTQ2NkQwHhcNMjUwODA3MDYyOTM3WhcNMjUwODE0MDYyOTM2WjAYMRYwFAYD VQQDEw02ODk0NDdkMS0yYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEk8tkhL4BZ053jWnOiAkSESExSqwzh9hbYjX5UR8i4DNp1diLkViChlG5OJ NdXI4YWW4AnXAv+uEoBlIIyTu6R5+FOP3L1YkIkeOW7IjX+LJaRyNJ4ODKM+3mNf 8OJ81qjGpFQIvrPe/R5gqF5+0zzQuGFsjqxkvG6+NpKAgZxZy56W1/NPfjfVi/zT DWNPAw6qZ27z0z1xpr87UzC2bsACam6j+w6sEQ56s9daj7GLS4xguRdHBl+VFL0v kM8H/OB5OOofLU7JL1wP+TBW7Svm+iMjvFjse2a28f4RY3VIgLsMbRYctikz0GS+ sOV5h70EvkPNuPpfe8QOQ8iU8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEN0uUJ4 CFTPYvyus7XjD6SpwRpeMB8GA1UdIwQYMBaAFCvKz2FltYdAWQ5ZcYQz2Bg/+UZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NERFQS8zQkY1RjJFMDVB RTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgwQlpEbGx4aERQWUdEXzVS bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4clBZV1cxaDBCWkRsbHhoRFBZR0RfNVJtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NERFQS8zQkY1RjJFMDVBRTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgw QlpEbGx4aERQWUdEXzVSbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGeq0easF69bYflBe2XbAFzjepw6aZBPbvVnhrC6BENglLs28mcRAN jU8IqQKx6ZbSUTqEXwCmucHbifi4Mff+GrowpOOtgkbzJ8T+yeFJUScEdJ60V8VQ Oxe8wEvzU8Zm42LS9puYjCRpIEmjFimF9fUi5kpiG6MU/WLXLZ2FMbb2n4nkU8c2 UyhfmXNx/abaSpYozLfDnMIz2W9svY/tGN5+egpieX/83JvpSeh3BosHqEFcfV6s Vy0gChv/07C6dyhtpgq9oLu1SPadIHP4acQW4JuRVx7NBS4S/rRfTOBlemsb6wUe 8HWB2oNt9UMFW5PCoLpIunGQwx7ziQBs -----END CERTIFICATE-----Generated at Fri Aug 8 19:26:42 2025 by rpki-client