$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json) Hash identifier: N0xqQAEV6Z7bcmIHEH2FHwwzweyckRNHFc/sepsqgNo= Subject key identifier: 01:E3:5A:0B:8C:44:3B:7E:A7:B7:E3:CB:08:30:9B:C6:81:C3:8C:85 Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Certificate serial: 100D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft Manifest number: 100D Signing time: Fri 08 Aug 2025 17:38:02 +0000 Manifest this update: Fri 08 Aug 2025 17:38:01 +0000 Manifest next update: Fri 15 Aug 2025 17:38:01 +0000 Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: ASUu6gFeg2zjSesMWapaSu2f1hXhX7vvIfNZgcFsPGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4109 (0x100d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Validity Not Before: Aug 8 17:38:01 2025 GMT Not After : Aug 15 17:38:01 2025 GMT Subject: CN=689635f9-d086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:73:04:7d:26:0b:a2:2a:b8:a0:ec:40:4f: 0d:90:4c:6c:5f:66:9f:ae:95:69:18:36:b6:94:77: d0:23:a4:f9:c5:c1:8d:af:9f:64:75:a0:69:7c:ff: b4:5b:29:f8:ef:97:81:09:d8:ff:ac:68:96:0c:f9: 59:34:89:d6:18:f0:d8:12:e4:87:68:c3:2d:34:27: 86:a0:1b:ca:a3:13:d5:bb:88:bc:a2:d3:9d:27:6c: e9:e6:62:2e:b5:25:0e:0a:ea:07:63:2b:a9:c0:e1: e6:31:54:a9:3e:62:c6:a3:a9:f9:45:df:13:51:c9: 5d:20:41:69:5a:3c:d2:8c:ff:14:1d:93:76:64:f1: 9d:46:94:29:ad:27:6c:be:82:ca:6f:8a:44:e0:46: 9b:c4:75:92:60:15:11:c2:32:51:5a:c7:64:45:5f: 9b:45:fa:37:2a:7c:9b:09:38:c0:50:4d:e2:ce:1f: 01:19:76:7a:ec:4c:46:45:a8:90:64:5c:5c:93:a1: 67:35:6b:e2:2d:31:b7:e8:f3:db:73:eb:99:6f:8f: 7b:28:e5:bc:cc:70:88:a6:5c:2b:18:c6:cc:fa:e3: 85:89:af:27:22:78:8d:46:d9:df:82:28:5a:80:66: 24:69:aa:b7:fb:38:92:fa:61:da:63:3e:62:65:9e: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E3:5A:0B:8C:44:3B:7E:A7:B7:E3:CB:08:30:9B:C6:81:C3:8C:85 X509v3 Authority Key Identifier: keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5a:6b:50:46:27:62:e3:bc:16:f2:1f:f2:ed:bb:75:52:3d: 09:a6:f7:a5:9f:4c:f0:81:d3:1d:e3:b7:39:4b:42:31:82:c4: 70:12:bb:cd:e7:6b:84:42:70:e8:cd:e6:c6:f9:3e:f4:76:f2: 54:43:cc:88:c8:92:c2:13:76:e3:0b:71:fb:89:f6:26:5d:3d: 89:c0:c9:00:05:b3:8a:90:73:19:9e:31:fa:0d:3b:49:17:43: 99:06:c0:dc:ef:3f:a0:ed:16:71:80:d4:b1:05:48:38:c7:84: 0e:c0:a1:77:f5:50:21:18:69:6f:e1:7c:54:64:1a:9e:7d:de: ca:4c:e7:c4:f9:39:f3:bc:20:62:49:31:44:92:86:82:9e:a5: 47:bc:42:b2:2b:df:7c:c5:42:23:c5:53:c3:7b:71:27:ba:9a: 92:d4:54:56:ef:1b:bf:0d:3b:3b:a5:de:f2:a2:9d:1a:95:34: eb:f2:a4:0a:d9:5a:d2:08:cc:97:d4:95:32:55:a5:9a:e3:16: 2e:e3:55:74:87:8d:bd:0b:a8:5e:af:81:9d:79:1a:f4:e9:98: 36:87:f6:e7:56:17:f7:24:14:0c:7c:11:d1:65:bd:74:f1:b7: bc:68:82:2d:f7:08:dc:7e:07:c0:cd:b8:03:34:3e:27:7d:64: 3a:88:2c:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUExNjExMTAvBgNVBAUTKDkwMkIzRUIzQ0Q0OEQwOUFBMEExMEM5QjJDQjI4MEQw QTBDRDJEQkEwHhcNMjUwODA4MTczODAxWhcNMjUwODE1MTczODAxWjAYMRYwFAYD VQQDEw02ODk2MzVmOS1kMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPBzBH0mC6IquKDsQE8NkExsX2afrpVpGDa2lHfQI6T5xcGNr59kdaBpfP+0 Wyn475eBCdj/rGiWDPlZNInWGPDYEuSHaMMtNCeGoBvKoxPVu4i8otOdJ2zp5mIu tSUOCuoHYyupwOHmMVSpPmLGo6n5Rd8TUcldIEFpWjzSjP8UHZN2ZPGdRpQprSds voLKb4pE4EabxHWSYBURwjJRWsdkRV+bRfo3KnybCTjAUE3izh8BGXZ67ExGRaiQ ZFxck6FnNWviLTG36PPbc+uZb497KOW8zHCIplwrGMbM+uOFia8nIniNRtnfgiha gGYkaaq3+ziS+mHaYz5iZZ6xZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHjWguM RDt+p7fjywgwm8aBw4yFMB8GA1UdIwQYMBaAFJArPrPNSNCaoKEMmyyygNCgzS26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE2MS9CMDdCMkFCODRC MTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBKcWdvUXliTExLQTBLRE5M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDcy1zODFJMEpxZ29ReWJMTEtBMEtETkxiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTE2MS9CMDdCMkFCODRCMTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBK cWdvUXliTExLQTBLRE5MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArWmtQRidi47wW8h/y7bt1Uj0Jpveln0zwgdMd47c5S0IxgsRwErvN 52uEQnDozebG+T70dvJUQ8yIyJLCE3bjC3H7ifYmXT2JwMkABbOKkHMZnjH6DTtJ F0OZBsDc7z+g7RZxgNSxBUg4x4QOwKF39VAhGGlv4XxUZBqefd7KTOfE+TnzvCBi STFEkoaCnqVHvEKyK998xUIjxVPDe3EnupqS1FRW7xu/DTs7pd7yop0alTTr8qQK 2VrSCMyX1JUyVaWa4xYu41V0h429C6her4GdeRr06Zg2h/bnVhf3JBQMfBHRZb10 8be8aIIt9wjcfgfAzbgDND4nfWQ6iCxs -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:46 2025 by rpki-client