$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: TvtnoYcZ4NnndqTabCgU6isjPIFJNcgcA8e6dFREVlk= Subject key identifier: DF:89:22:44:59:3C:09:0C:0E:1F:63:21:C4:0A:AC:04:26:D5:AF:53 Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: 81 Signing time: Mon 11 Aug 2025 06:59:31 +0000 Manifest this update: Mon 11 Aug 2025 06:59:31 +0000 Manifest next update: Mon 18 Aug 2025 06:59:31 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: iTAKumz654o6PwmN21JWXjqLgwloR1dPjFFfngcJhno=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: HSb6XjCDD/PrExNgC4kkLXSRksHnMNuj8kokihkx5ZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Aug 11 06:59:31 2025 GMT Not After : Aug 18 06:59:31 2025 GMT Subject: CN=689994d3-0bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f7:35:d3:70:17:2f:67:d8:0b:0c:d7:f4:cc: ca:8e:61:f5:a5:40:85:f7:e2:e9:fe:64:04:5c:a0: bd:21:3b:29:24:7d:bb:65:2f:98:f0:a6:6e:e9:20: ae:7d:f1:aa:eb:ec:c8:34:92:34:47:17:c5:0d:23: 76:5d:67:f7:3e:c8:f4:72:f0:1b:51:62:fd:5d:3c: 37:7c:aa:b3:96:81:52:3b:ba:68:a5:65:8f:15:06: 7a:e9:60:d2:15:0d:e8:aa:5c:d7:ac:68:00:b0:61: a1:64:a9:0f:66:cb:6f:83:18:08:53:c6:55:b2:7d: 94:28:da:5b:f7:0a:59:3c:97:54:8b:fe:f0:81:75: d2:f7:a2:ed:5b:19:b4:da:e6:6f:2c:07:f4:a4:af: 39:4e:80:24:5f:1a:74:71:9e:fa:de:dd:ed:eb:f2: eb:52:5c:2f:c6:26:88:c3:6c:e8:bf:77:64:6f:30: 11:3e:bf:d3:8d:9f:71:fa:a7:05:fa:ee:c5:6a:fd: ed:b3:e6:63:d0:a2:7f:ac:cc:61:27:4e:4a:87:47: 84:f4:14:21:64:ca:e9:5a:b4:7b:50:d3:db:62:00: 8e:08:f8:88:a2:c9:11:9a:1e:38:85:cc:55:77:8e: be:9b:dc:3a:34:8c:29:1e:32:75:df:88:3c:77:0f: a4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:89:22:44:59:3C:09:0C:0E:1F:63:21:C4:0A:AC:04:26:D5:AF:53 X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:fd:1f:24:99:ad:04:1c:96:5e:2f:58:ab:1c:d4:81:a0:49: b9:8d:bd:bf:36:35:f5:c0:ee:3f:5b:da:47:2e:ca:4f:33:52: a5:57:8b:73:ef:22:61:45:e8:e9:25:cd:b8:1a:d4:66:3d:22: fb:64:40:14:fd:4a:04:62:8c:cf:71:aa:93:10:1a:9d:fc:23: 56:0d:44:a0:6d:ae:d1:20:4a:de:16:ad:83:af:28:4d:95:37: e9:56:db:7a:c0:39:0a:06:89:ac:f0:8e:66:20:ca:e6:42:2b: 6a:75:80:43:a2:dc:be:0c:52:ec:10:f5:38:02:de:e2:ca:a6: 66:ce:f8:1d:30:14:0d:7c:05:38:be:b3:83:0c:af:66:20:b7: 67:34:54:e5:0f:e4:36:f1:3e:08:57:5b:b2:1d:d9:31:ea:45: 14:cd:6f:f6:2d:ef:d1:17:43:c8:b2:04:b4:00:0a:da:61:b5: 2e:f4:fa:8b:13:c7:c9:f8:eb:13:74:9c:53:0e:74:1f:e9:1f: 3c:dd:d8:83:e6:99:57:27:18:ff:27:3d:43:cd:f6:7f:f2:53: dc:54:6d:c4:ea:39:cb:d1:cb:86:2c:7d:16:41:7a:11:ac:3f: 3e:c9:41:12:0f:e3:9b:ef:2e:39:51:f2:b7:07:84:c3:25:07: 83:1f:44:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjUwODExMDY1OTMxWhcNMjUwODE4MDY1OTMxWjAYMRYwFAYD VQQDEw02ODk5OTRkMy0wYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvc103AXL2fYCwzX9MzKjmH1pUCF9+Lp/mQEXKC9ITspJH27ZS+Y8KZu6SCu ffGq6+zINJI0RxfFDSN2XWf3Psj0cvAbUWL9XTw3fKqzloFSO7popWWPFQZ66WDS FQ3oqlzXrGgAsGGhZKkPZstvgxgIU8ZVsn2UKNpb9wpZPJdUi/7wgXXS96LtWxm0 2uZvLAf0pK85ToAkXxp0cZ763t3t6/LrUlwvxiaIw2zov3dkbzARPr/TjZ9x+qcF +u7Fav3ts+Zj0KJ/rMxhJ05Kh0eE9BQhZMrpWrR7UNPbYgCOCPiIoskRmh44hcxV d46+m9w6NIwpHjJ134g8dw+kKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+JIkRZ PAkMDh9jIcQKrAQm1a9TMB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDA4Ri8xNkNEOTg1OEI3NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5 cnRmQ0hjUnkzRnhZeEZpRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ/R8kma0EHJZeL1irHNSBoEm5jb2/NjX1wO4/W9pHLspPM1KlV4tz 7yJhRejpJc24GtRmPSL7ZEAU/UoEYozPcaqTEBqd/CNWDUSgba7RIEreFq2DryhN lTfpVtt6wDkKBoms8I5mIMrmQitqdYBDoty+DFLsEPU4At7iyqZmzvgdMBQNfAU4 vrODDK9mILdnNFTlD+Q28T4IV1uyHdkx6kUUzW/2Le/RF0PIsgS0AAraYbUu9PqL E8fJ+OsTdJxTDnQf6R883diD5plXJxj/Jz1DzfZ/8lPcVG3E6jnL0cuGLH0WQXoR rD8+yUESD+Ob7y45UfK3B4TDJQeDH0RE -----END CERTIFICATE-----Generated at Tue Aug 12 14:48:49 2025 by rpki-client