$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: 55CSx15HlP97qShWR3URcIy5mbrC3ByJhQ240JC+5GM= Subject key identifier: 79:BE:48:73:AB:4A:7D:67:DF:81:39:8B:49:7E:E0:1D:A9:62:F8:BE Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1A69 Signing time: Tue 12 Aug 2025 16:26:52 +0000 Manifest this update: Tue 12 Aug 2025 16:26:51 +0000 Manifest next update: Tue 19 Aug 2025 16:26:51 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: vbMT1NyWQmFLeNHaeuFs5Fszz6xw6GxPbS5ml7iVCBU=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 1W3bZjmYo4y/faIyWLiaDn4cNEWTqd/xhoIAZdOleqM=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: D4FdDOMn9kYOe8wUYl/7g0SwBt2d9VcBYOrZDNcFK0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6795 (0x1a8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Aug 12 16:26:51 2025 GMT Not After : Aug 19 16:26:51 2025 GMT Subject: CN=689b6b4b-4786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:2d:75:c5:21:bc:7b:9a:90:17:e1:db:0c: b4:1d:51:66:3a:aa:f1:ed:95:71:2c:6c:0e:5d:a8: 75:05:72:6e:d2:34:48:f3:56:30:c0:72:e5:cb:66: 06:30:5f:84:bb:8e:0c:cd:4a:65:21:a1:00:48:e8: 1b:54:30:78:e3:f7:e5:56:a0:d4:84:d2:86:84:3d: 35:6c:75:78:ab:70:8e:54:69:aa:87:09:4f:90:95: 47:df:98:c8:a7:f2:74:db:15:bf:56:92:be:41:c4: 5b:a4:84:fc:56:d0:68:9d:d7:bc:2b:d0:55:47:78: b2:92:ad:4c:03:fe:43:1f:94:d9:65:67:ce:d4:2b: e0:06:5f:11:c0:27:59:71:88:9d:85:bd:2c:3e:d6: bf:72:8e:5f:2a:c9:ca:d1:27:0e:e2:d8:9b:a9:82: 75:8d:8d:d8:2d:89:86:1c:69:2b:c9:fb:1e:66:6e: 25:37:c5:f5:89:3d:55:11:e4:09:1a:e4:3e:db:25: a9:66:84:50:2c:04:5b:bc:ed:43:e4:4d:ce:9e:aa: 6c:64:0d:ca:44:83:03:ba:33:0c:c6:80:70:0c:05: ca:40:86:43:10:73:3c:f0:ff:df:ce:96:3d:22:74: 01:cb:30:9e:6d:2a:f3:bb:92:d5:fa:c9:c3:dc:0b: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BE:48:73:AB:4A:7D:67:DF:81:39:8B:49:7E:E0:1D:A9:62:F8:BE X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:64:45:ca:26:cc:41:5f:b4:df:98:2d:5d:a9:a4:c9:c7:de: 04:7a:63:22:9a:b0:3e:03:63:82:b4:b7:fe:91:09:38:be:bb: 04:cb:10:ec:ec:f6:ba:5e:c4:c1:3b:e4:41:b5:4c:e6:44:de: f7:73:8a:71:58:59:c2:40:dd:1c:ba:ea:2b:e3:6c:1e:1e:7f: e0:01:4e:37:e1:05:f2:85:ff:f5:15:17:3a:e5:40:16:17:28: 9a:f8:1e:90:0a:cc:fe:bd:4b:37:53:09:56:34:19:36:a5:ad: 11:14:1f:8d:d0:29:04:18:b4:95:7f:f8:cb:f8:43:28:5d:2b: 5b:fc:02:0a:f7:d6:8a:c7:08:98:9b:91:c6:4d:32:27:38:98: f6:54:7f:19:71:8c:aa:da:91:8a:7b:95:46:4a:59:b7:d4:3b: 05:8a:fd:d2:1e:8a:c6:bc:13:a4:d0:b1:cb:44:19:cd:f1:4f: 8c:e5:22:5a:62:51:b8:0f:25:55:69:bf:db:9c:24:57:57:e0: 20:3e:e7:81:6d:e5:e2:ce:31:50:c8:7e:ec:2b:a2:89:9e:16: 69:c1:dc:69:af:ac:a7:48:da:7a:16:ca:ba:32:ff:00:66:f2: c9:16:c5:59:bb:fa:34:91:a7:f3:48:19:b7:3f:d0:80:ee:97: 6d:4b:9b:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUwODEyMTYyNjUxWhcNMjUwODE5MTYyNjUxWjAYMRYwFAYD VQQDEw02ODliNmI0Yi00Nzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveMtdcUhvHuakBfh2wy0HVFmOqrx7ZVxLGwOXah1BXJu0jRI81YwwHLly2YG MF+Eu44MzUplIaEASOgbVDB44/flVqDUhNKGhD01bHV4q3COVGmqhwlPkJVH35jI p/J02xW/VpK+QcRbpIT8VtBonde8K9BVR3iykq1MA/5DH5TZZWfO1CvgBl8RwCdZ cYidhb0sPta/co5fKsnK0ScO4tibqYJ1jY3YLYmGHGkryfseZm4lN8X1iT1VEeQJ GuQ+2yWpZoRQLARbvO1D5E3OnqpsZA3KRIMDujMMxoBwDAXKQIZDEHM88P/fzpY9 InQByzCebSrzu5LV+snD3AtJFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm+SHOr Sn1n34E5i0l+4B2pYvi+MB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFZEXKJsxBX7TfmC1dqaTJx94EemMimrA+A2OCtLf+kQk4vrsEyxDs 7Pa6XsTBO+RBtUzmRN73c4pxWFnCQN0cuuor42weHn/gAU434QXyhf/1FRc65UAW Fyia+B6QCsz+vUs3UwlWNBk2pa0RFB+N0CkEGLSVf/jL+EMoXStb/AIK99aKxwiY m5HGTTInOJj2VH8ZcYyq2pGKe5VGSlm31DsFiv3SHorGvBOk0LHLRBnN8U+M5SJa YlG4DyVVab/bnCRXV+AgPueBbeXizjFQyH7sK6KJnhZpwdxpr6ynSNp6Fsq6Mv8A ZvLJFsVZu/o0kafzSBm3P9CA7pdtS5uC -----END CERTIFICATE-----Generated at Wed Aug 13 07:37:01 2025 by rpki-client