$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json) Hash identifier: d1sKBICvLp0AZALEA1T4Bx1nH6hlelDuC7yVHP0BQ6U= Subject key identifier: 76:B5:1D:C9:51:4F:98:2B:81:05:10:52:92:09:60:13:42:A9:E9:58 Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft Manifest number: 066A Signing time: Fri 08 Aug 2025 22:54:13 +0000 Manifest this update: Fri 08 Aug 2025 22:54:12 +0000 Manifest next update: Fri 15 Aug 2025 22:54:12 +0000 Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: mYM5QM0DEMn8R8/MYXLLMJrv1SepPVYSIGxIVZ2mMMc=) 2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: QIcvi4uK4+sV4KonLrCq7np3/p5FTh38+jPZf45l5Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: Aug 8 22:54:12 2025 GMT Not After : Aug 15 22:54:12 2025 GMT Subject: CN=68968015-5f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:09:4d:41:9e:a8:44:04:60:41:fa:d2:81: 8f:f2:99:3f:ad:82:51:96:de:56:12:fa:08:8e:e6: 9b:72:e8:39:4c:33:9f:8a:0f:f8:4e:24:e3:49:d2: 1b:69:90:0b:15:0d:4c:42:53:3c:4a:5c:7c:49:e0: 41:28:93:ec:d5:c2:07:f2:5c:60:db:06:2f:36:2c: bd:2b:d5:3d:f4:94:d2:88:14:3a:d7:ad:89:bc:65: cf:a6:bd:65:4c:da:b6:7e:f5:cb:dd:a3:cb:ab:fa: 68:85:c8:dd:88:da:99:a2:59:a5:e1:a8:30:62:e8: 6a:8e:38:c0:14:a7:ad:59:87:b5:84:9e:95:f1:d5: 20:56:5b:75:a0:3e:72:85:87:ff:71:1c:81:a1:c8: c0:85:f1:2e:64:62:e6:15:d4:4c:64:e5:be:7f:db: c1:9c:33:08:7b:97:8a:51:3e:c8:f7:5f:e6:ef:0c: 17:95:f2:b9:e3:4a:f7:4e:40:bf:1e:a0:9d:31:dc: ce:fd:cc:91:36:ea:b4:11:ff:5c:0b:ee:a3:65:e1: ba:7b:d7:ee:24:27:ea:73:03:b9:81:23:11:48:23: 7c:28:e4:8a:e5:93:66:26:1b:46:14:bb:f7:14:72: 41:9c:6a:05:0d:01:c1:62:a2:3c:f3:ee:86:25:5b: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B5:1D:C9:51:4F:98:2B:81:05:10:52:92:09:60:13:42:A9:E9:58 X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:8f:c2:72:68:47:e0:74:c8:47:54:7e:26:f9:4a:7a:b2: 2c:db:fc:c0:1a:ec:4a:c7:fa:3b:a6:b9:9c:e3:01:f5:85:2d: 26:d5:81:8c:aa:68:d9:a5:b6:3f:da:8e:d4:3d:96:a6:d2:73: dc:d5:9e:b7:7d:8e:f9:cc:b3:23:11:5a:80:96:d1:34:92:3a: b2:a6:9e:6d:8c:ac:e3:3a:fb:5c:cc:0f:b9:2b:ee:64:3c:51: 1e:cf:2f:d1:9c:0d:1c:fc:fc:78:4d:b9:17:57:05:fa:ca:9f: a0:6b:78:9f:f5:43:6e:dc:83:59:ce:c1:30:3e:1e:31:b5:73: 08:9a:f4:32:ae:42:a4:f4:da:a4:d8:c2:38:99:35:7e:36:19: d0:53:26:6b:19:dd:9a:7a:77:36:14:0e:31:7e:5b:a0:9d:6e: f6:b8:d3:2c:23:3e:ee:22:b4:51:46:e5:a9:66:09:04:9a:d9: f5:9c:63:19:cf:ee:8e:81:d5:5f:f8:ca:7f:c4:11:94:c5:e5: 51:07:88:df:10:36:70:64:c8:3c:93:e5:8e:81:00:f8:72:6b: 5a:e3:0f:81:24:ea:ed:80:a7:13:e0:bb:a8:a3:1a:f6:86:90: 14:87:26:10:37:a6:a1:4a:ed:4b:f2:1b:e1:09:51:ad:39:74: de:23:95:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjUwODA4MjI1NDEyWhcNMjUwODE1MjI1NDEyWjAYMRYwFAYD VQQDEw02ODk2ODAxNS01ZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEoJTUGeqEQEYEH60oGP8pk/rYJRlt5WEvoIjuabcug5TDOfig/4TiTjSdIb aZALFQ1MQlM8Slx8SeBBKJPs1cIH8lxg2wYvNiy9K9U99JTSiBQ6162JvGXPpr1l TNq2fvXL3aPLq/pohcjdiNqZolml4agwYuhqjjjAFKetWYe1hJ6V8dUgVlt1oD5y hYf/cRyBocjAhfEuZGLmFdRMZOW+f9vBnDMIe5eKUT7I91/m7wwXlfK540r3TkC/ HqCdMdzO/cyRNuq0Ef9cC+6jZeG6e9fuJCfqcwO5gSMRSCN8KOSK5ZNmJhtGFLv3 FHJBnGoFDQHBYqI88+6GJVs3DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHa1HclR T5grgQUQUpIJYBNCqelYMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjY5RC9CRjZFMjBBNjhEQUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlK UUUwWkR5bU1NczFnbjgtbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB23I/CcmhH4HTIR1R+JvlKerIs2/zAGuxKx/o7prmc4wH1hS0m1YGM qmjZpbY/2o7UPZam0nPc1Z63fY75zLMjEVqAltE0kjqypp5tjKzjOvtczA+5K+5k PFEezy/RnA0c/Px4TbkXVwX6yp+ga3if9UNu3INZzsEwPh4xtXMImvQyrkKk9Nqk 2MI4mTV+NhnQUyZrGd2aenc2FA4xflugnW72uNMsIz7uIrRRRuWpZgkEmtn1nGMZ z+6OgdVf+Mp/xBGUxeVRB4jfEDZwZMg8k+WOgQD4cmta4w+BJOrtgKcT4Luooxr2 hpAUhyYQN6ahSu1L8hvhCVGtOXTeI5Un -----END CERTIFICATE-----Generated at Sun Aug 10 18:53:52 2025 by rpki-client