$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json) Hash identifier: nrJg04MAX0ykaQJSYS8AXz5tBpTaqveBXgvnNocsrUs= Subject key identifier: 4B:5B:92:2D:1D:76:04:B4:D8:62:2D:A0:AC:C7:F8:2E:9D:C2:55:A6 Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft Manifest number: 01C6 Signing time: Thu 07 Aug 2025 03:22:59 +0000 Manifest this update: Thu 07 Aug 2025 03:22:59 +0000 Manifest next update: Thu 14 Aug 2025 03:22:59 +0000 Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: STINoj2OwDri16qTjhE0bF583KQj+RkgM4XRi6trNCo=) 2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: la16kPDMZ0PGNGFfbiOJE4nU4r91VONeRM7xfP7lGe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650, serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: Aug 7 03:22:59 2025 GMT Not After : Aug 14 03:22:59 2025 GMT Subject: CN=68941c13-404c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:58:ad:70:27:92:ef:d2:0e:00:ce:c8:26: 7e:74:1a:87:66:02:e5:6a:81:61:3a:9c:9e:ff:d0: d0:ce:a0:03:6a:8c:9e:cd:89:fa:24:65:68:40:17: 3b:8d:ab:79:33:72:bf:43:88:ae:f6:4a:57:0b:24: 37:19:89:33:b4:30:91:68:6c:c3:10:f8:14:11:d6: 07:17:6c:b9:93:c8:fd:77:c0:20:8c:74:29:60:b4: 08:d9:c0:36:4d:55:54:03:be:ff:e0:dc:0d:a3:d7: 97:fc:e7:4d:19:5e:10:a9:cf:97:53:72:bf:82:2a: 7d:50:2e:5e:35:e9:8a:33:d6:11:18:a4:e3:4c:3e: 2d:56:f5:b0:bd:57:5f:73:ac:ca:f9:da:ca:76:c6: 37:f2:fa:f7:51:b2:d2:7c:2d:fb:f5:d5:68:9d:d3: bf:9a:dd:ee:91:35:6b:d7:64:36:0f:23:3a:3c:16: 01:41:da:5e:10:79:6a:a9:f1:31:72:94:3e:3f:54: 3c:28:d6:1d:a8:89:4e:5b:c6:11:02:30:2a:58:fb: d2:a8:67:9f:ce:98:df:28:ea:3a:0c:63:b3:38:56: d3:89:10:27:97:39:35:d0:d2:2b:3d:4d:29:28:29: 1a:f5:f3:0e:24:8b:cb:d9:ee:8a:ea:75:6d:23:97: f0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5B:92:2D:1D:76:04:B4:D8:62:2D:A0:AC:C7:F8:2E:9D:C2:55:A6 X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a5:12:0b:7f:7e:b9:2e:86:6c:eb:fc:83:2f:d8:ce:73:5a: cf:7e:a1:49:4d:8d:c1:20:a8:dc:16:c4:6f:01:85:fd:01:4e: b3:e0:34:0e:e8:a8:3d:0d:11:da:57:b9:a7:6b:6b:b7:36:a8: 7a:80:e5:fa:85:ce:ff:e4:c1:fa:85:36:2e:9d:22:46:69:ea: 88:8f:26:92:b3:35:ed:b2:5c:7e:45:4c:54:2a:23:ca:a5:99: 17:c9:45:b3:0c:78:ce:e4:fe:ab:a7:7d:a6:dd:fb:7a:54:67: 75:43:a2:22:6c:de:69:85:3b:45:d2:bd:1c:67:51:fb:30:d5: 46:99:94:dd:8f:c9:d2:6a:10:ce:25:5e:78:33:bf:0b:57:f6: 62:e8:62:60:6d:b4:5d:70:e2:f0:6f:9e:4d:65:62:74:d4:2a: 82:75:e7:43:a0:04:6b:50:f0:8e:bd:39:ca:2e:f6:85:ef:d1: 7d:90:df:e2:2d:73:ae:a6:93:ab:97:f4:54:1a:cc:5b:67:5a: 2b:2d:2e:26:81:f5:7c:6b:48:f0:a2:96:f7:27:65:14:df:b3: cd:ce:19:5b:69:dd:38:f4:70:be:a6:50:3b:b0:36:4a:84:06: 88:96:95:47:d0:3d:aa:a3:1f:d9:17:fb:8f:49:07:dd:a3:e7: bf:a3:b4:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjUwODA3MDMyMjU5WhcNMjUwODE0MDMyMjU5WjAYMRYwFAYD VQQDEw02ODk0MWMxMy00MDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cNYrXAnku/SDgDOyCZ+dBqHZgLlaoFhOpye/9DQzqADaoyezYn6JGVoQBc7 jat5M3K/Q4iu9kpXCyQ3GYkztDCRaGzDEPgUEdYHF2y5k8j9d8AgjHQpYLQI2cA2 TVVUA77/4NwNo9eX/OdNGV4Qqc+XU3K/gip9UC5eNemKM9YRGKTjTD4tVvWwvVdf c6zK+drKdsY38vr3UbLSfC379dVondO/mt3ukTVr12Q2DyM6PBYBQdpeEHlqqfEx cpQ+P1Q8KNYdqIlOW8YRAjAqWPvSqGefzpjfKOo6DGOzOFbTiRAnlzk10NIrPU0p KCka9fMOJIvL2e6K6nVtI5fwcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtbki0d dgS02GItoKzH+C6dwlWmMB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF R2EzTTdqREU2SG9rMHY5WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCppRILf365LoZs6/yDL9jOc1rPfqFJTY3BIKjcFsRvAYX9AU6z4DQO 6Kg9DRHaV7mna2u3Nqh6gOX6hc7/5MH6hTYunSJGaeqIjyaSszXtslx+RUxUKiPK pZkXyUWzDHjO5P6rp32m3ft6VGd1Q6IibN5phTtF0r0cZ1H7MNVGmZTdj8nSahDO JV54M78LV/Zi6GJgbbRdcOLwb55NZWJ01CqCdedDoARrUPCOvTnKLvaF79F9kN/i LXOuppOrl/RUGsxbZ1orLS4mgfV8a0jwopb3J2UU37PNzhlbad049HC+plA7sDZK hAaIlpVH0D2qox/ZF/uPSQfdo+e/o7RR -----END CERTIFICATE-----Generated at Fri Aug 8 00:34:30 2025 by rpki-client