$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json) Hash identifier: YrAsDJJsor1XlPLxBI+IkqaTWP74pSwm6wU1HoQg3cs= Subject key identifier: 5A:F0:F3:2C:74:E2:27:EB:FE:11:A7:32:D6:55:50:EB:A0:04:F4:32 Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft Manifest number: 010F Signing time: Mon 11 Aug 2025 05:09:00 +0000 Manifest this update: Mon 11 Aug 2025 05:09:00 +0000 Manifest next update: Mon 18 Aug 2025 05:09:00 +0000 Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: yh5cHMOXSJ3i3drXLP1mxFgmhKt9Q127Ozo/ZO14VB8=) 2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: d6abLKyd7fr1z0R2GJ3OwWkvRu3wB2ZUv3mxpyp6whI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Validity Not Before: Aug 11 05:09:00 2025 GMT Not After : Aug 18 05:09:00 2025 GMT Subject: CN=68997aec-64c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:40:04:6f:85:5b:ad:c3:79:83:0a:04:b3: ee:45:3a:1a:95:fa:9a:28:6e:3f:f9:1a:ec:60:9a: fd:cf:04:27:34:e6:dc:42:ac:59:d7:1f:98:9b:aa: a3:50:93:ec:95:24:9b:62:91:b1:38:c9:a5:7d:6f: 6d:2d:a3:2e:fb:ce:f0:d3:a0:a0:b1:89:6d:7f:4b: 9b:51:a3:29:20:b6:55:6e:6f:10:93:78:9a:27:a1: d8:ee:6f:ff:2f:7f:3b:7c:89:21:ba:aa:fc:d8:b8: 2d:ed:71:85:cc:90:2b:da:10:47:9a:8d:d0:82:7a: 35:a5:89:5f:eb:4d:11:55:d8:9d:1d:9d:ec:ec:86: b0:76:38:75:2d:83:45:03:4e:e5:64:71:0c:25:06: b6:54:25:42:1b:68:de:b4:c6:42:f8:c1:8f:87:27: f2:99:c5:6a:69:19:fd:b8:c6:b8:50:30:fb:a2:58: c7:f8:b7:b8:27:eb:1c:84:97:e1:cf:6f:96:b5:86: 79:f2:a7:e1:0f:07:da:b1:fc:35:e8:27:5f:4e:b2: 63:ad:64:e4:fa:45:a2:c9:40:82:2b:2b:e7:81:c0: 13:15:74:54:b4:61:7e:0f:73:a0:31:32:4f:4d:ca: ed:2d:dd:9d:59:34:19:ba:e2:46:12:b9:ff:f5:fb: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F0:F3:2C:74:E2:27:EB:FE:11:A7:32:D6:55:50:EB:A0:04:F4:32 X509v3 Authority Key Identifier: keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:74:59:9c:54:df:6e:57:f4:3d:20:b1:80:6b:81:93:35:a8: 15:52:0a:84:71:c4:e5:7e:b7:98:f1:69:d3:88:cf:24:13:2c: 9e:a0:ef:e4:97:40:c7:ed:eb:91:76:bc:c2:b6:01:08:ae:de: 06:6b:13:d3:54:89:5f:69:46:17:01:55:93:2e:89:98:a5:01: 29:26:87:0b:c9:d0:dd:63:ab:11:4d:44:d9:02:4f:f8:13:4a: d1:9e:13:78:74:11:a7:cc:c0:0d:c9:40:47:45:c4:9e:ba:50: 1d:4d:a3:6e:f4:a3:0e:32:6a:bc:6a:d3:df:5b:9f:87:c0:c3: 9a:8a:91:90:45:c4:c1:56:8b:14:e6:3e:ed:a5:0a:04:ba:0b: f6:f6:06:c2:d8:ae:ab:a8:42:35:38:08:12:a9:43:0a:d4:50: 28:3d:21:6d:c8:c3:27:bb:b1:b0:e1:f8:7f:b2:ff:23:ff:37: 5d:02:ec:2f:2a:7b:54:ce:55:e3:4a:9a:f1:93:31:76:ec:3d: 79:49:86:50:6c:31:8e:0b:c8:51:5c:94:ce:d1:a6:6d:43:2f: 81:7e:7e:c9:91:5a:0c:32:55:bc:b4:0f:36:f1:8f:3d:31:c9: cc:1e:78:d9:34:f7:59:58:97:2c:e9:a2:cd:a0:f7:67:3f:24: 6b:d0:54:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy NDlDQ0M4RjQwHhcNMjUwODExMDUwOTAwWhcNMjUwODE4MDUwOTAwWjAYMRYwFAYD VQQDEw02ODk5N2FlYy02NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18xABG+FW63DeYMKBLPuRToalfqaKG4/+RrsYJr9zwQnNObcQqxZ1x+Ym6qj UJPslSSbYpGxOMmlfW9tLaMu+87w06CgsYltf0ubUaMpILZVbm8Qk3iaJ6HY7m// L387fIkhuqr82Lgt7XGFzJAr2hBHmo3Qgno1pYlf600RVdidHZ3s7Iawdjh1LYNF A07lZHEMJQa2VCVCG2jetMZC+MGPhyfymcVqaRn9uMa4UDD7oljH+Le4J+schJfh z2+WtYZ58qfhDwfasfw16CdfTrJjrWTk+kWiyUCCKyvngcATFXRUtGF+D3OgMTJP TcrtLd2dWTQZuuJGErn/9ft0yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrw8yx0 4ifr/hGnMtZVUOugBPQyMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54 ajl5QzB3QjZuVFFrbk15UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIdFmcVN9uV/Q9ILGAa4GTNagVUgqEccTlfreY8WnTiM8kEyyeoO/k l0DH7euRdrzCtgEIrt4GaxPTVIlfaUYXAVWTLomYpQEpJocLydDdY6sRTUTZAk/4 E0rRnhN4dBGnzMANyUBHRcSeulAdTaNu9KMOMmq8atPfW5+HwMOaipGQRcTBVosU 5j7tpQoEugv29gbC2K6rqEI1OAgSqUMK1FAoPSFtyMMnu7Gw4fh/sv8j/zddAuwv KntUzlXjSprxkzF27D15SYZQbDGOC8hRXJTO0aZtQy+Bfn7JkVoMMlW8tA828Y89 McnMHnjZNPdZWJcs6aLNoPdnPyRr0FSh -----END CERTIFICATE-----Generated at Tue Aug 12 04:18:53 2025 by rpki-client