$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: gUPlpTF3TbalpRNdDEcZYlo/XSHsKY2AKpG864PYULM= Subject key identifier: 12:F3:EA:32:89:26:14:5D:F3:DA:A7:9F:F9:51:5F:09:B0:EB:86:A4 Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 0606 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 05FF Signing time: Fri 08 Aug 2025 23:18:22 +0000 Manifest this update: Fri 08 Aug 2025 23:18:22 +0000 Manifest next update: Fri 15 Aug 2025 23:18:22 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: +65u4A9UNmSDqZgdVTBfv8HU9DoRvWzKpMA0zrRRVis=) 2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: z/OvD5EQcBmWZhdA8ip/E6h0FRzhkXq6osJ4yXLXzHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: Aug 8 23:18:22 2025 GMT Not After : Aug 15 23:18:22 2025 GMT Subject: CN=689685be-c2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:51:c8:b4:c1:30:03:ea:d0:ed:2a:fb:46: 94:73:97:c6:45:f0:38:49:22:2e:e4:17:07:d8:a3: 1f:d5:94:ea:cc:25:08:ad:08:72:0e:ed:13:83:78: 1f:96:57:9b:29:b9:02:bc:fd:92:d8:79:57:81:dd: c2:cb:63:5e:7f:b6:e0:06:41:a3:b0:b5:69:e8:85: 9e:ec:ed:24:a7:ed:bc:ab:bd:6b:65:8a:a4:a1:2d: 02:d3:83:70:8d:5b:92:c8:89:f8:ca:7a:85:b0:82: c4:66:73:d7:64:be:1b:f3:11:37:21:8f:5c:9d:c2: b3:08:fd:55:c2:7e:8f:73:5f:71:a0:27:0c:40:ab: 50:16:f7:9b:9a:45:5d:c1:22:64:44:67:04:16:b8: 8d:e6:9d:49:2d:ff:f8:32:da:34:43:a3:55:3f:3f: f3:87:64:80:73:42:7b:d0:e9:f9:e4:9c:79:07:aa: bc:8f:88:7b:a2:5a:34:c4:4f:ea:6f:48:12:d3:45: a4:25:e4:2c:4e:d4:ab:cb:7d:35:5e:22:dc:a6:25: 72:b0:a0:1b:2d:53:29:f4:f5:d1:41:d3:b8:7e:3a: 32:6a:3f:ff:a8:a2:7b:9c:01:9a:6e:82:52:a8:c9: 42:b0:4b:46:5c:29:d7:01:9f:3c:0a:70:49:84:d3: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F3:EA:32:89:26:14:5D:F3:DA:A7:9F:F9:51:5F:09:B0:EB:86:A4 X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:df:3d:22:04:ac:34:27:6b:53:21:99:a0:65:35:03:15:60: e8:8a:02:7d:01:72:ba:3d:89:8d:f8:38:a1:d6:d0:ca:c0:f7: 2c:be:eb:40:89:16:a2:4f:20:17:c9:3f:72:60:2b:2b:31:e7: d0:2c:b2:56:ba:54:39:13:c7:3b:05:f2:8b:6a:c6:e3:f6:c1: 89:34:aa:3e:57:5c:2f:db:8e:10:fa:dc:f9:5c:57:06:3a:c0: ed:bf:9a:9c:9c:91:37:80:51:68:fd:a1:a2:ca:ba:28:22:75: e5:f8:6b:41:3e:f5:74:18:8f:b8:b7:5f:4d:24:d3:a8:33:82: e2:d9:63:7e:c2:99:e9:26:9c:13:a9:93:c4:6c:fa:e2:16:33: 84:f2:a0:fd:38:a8:1f:e9:1c:12:01:af:6f:8d:e9:fa:f5:84: 5c:fa:a1:db:fc:6c:6a:16:9b:c3:44:40:5a:c9:df:85:d4:a8: a9:9f:00:23:3f:59:9b:1e:b4:01:cc:8e:d7:19:4d:1d:a9:bb: 9b:7a:da:74:76:b2:0a:09:66:59:6e:99:7d:b4:c0:b8:36:b5: b9:17:3c:dd:cb:18:b1:2f:6f:51:b6:3b:c9:70:1d:55:c4:cc: 37:59:2f:77:f6:17:90:47:ee:ed:eb:12:5e:ab:d8:69:c5:68: e5:a3:33:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjUwODA4MjMxODIyWhcNMjUwODE1MjMxODIyWjAYMRYwFAYD VQQDEw02ODk2ODViZS1jMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur5RyLTBMAPq0O0q+0aUc5fGRfA4SSIu5BcH2KMf1ZTqzCUIrQhyDu0Tg3gf llebKbkCvP2S2HlXgd3Cy2Nef7bgBkGjsLVp6IWe7O0kp+28q71rZYqkoS0C04Nw jVuSyIn4ynqFsILEZnPXZL4b8xE3IY9cncKzCP1Vwn6Pc19xoCcMQKtQFvebmkVd wSJkRGcEFriN5p1JLf/4Mto0Q6NVPz/zh2SAc0J70On55Jx5B6q8j4h7olo0xE/q b0gS00WkJeQsTtSry301XiLcpiVysKAbLVMp9PXRQdO4fjoyaj//qKJ7nAGaboJS qMlCsEtGXCnXAZ88CnBJhNMnrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLz6jKJ JhRd89qnn/lRXwmw64akMB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm3z0iBKw0J2tTIZmgZTUDFWDoigJ9AXK6PYmN+Dih1tDKwPcsvutA iRaiTyAXyT9yYCsrMefQLLJWulQ5E8c7BfKLasbj9sGJNKo+V1wv244Q+tz5XFcG OsDtv5qcnJE3gFFo/aGiyrooInXl+GtBPvV0GI+4t19NJNOoM4Li2WN+wpnpJpwT qZPEbPriFjOE8qD9OKgf6RwSAa9vjen69YRc+qHb/GxqFpvDREBayd+F1KipnwAj P1mbHrQBzI7XGU0dqbubetp0drIKCWZZbpl9tMC4NrW5FzzdyxixL29RtjvJcB1V xMw3WS939heQR+7t6xJeq9hpxWjlozNx -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:29 2025 by rpki-client