$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: eLNhXZInfKa6wcq1+yZU0lPMugG3pCWX2/pd2E0vfAw= Subject key identifier: 13:86:AE:E0:13:C3:1B:B1:BC:A0:D8:61:89:ED:9A:35:76:AC:CA:35 Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: F0 Signing time: Tue 05 Aug 2025 05:48:37 +0000 Manifest this update: Tue 05 Aug 2025 05:48:37 +0000 Manifest next update: Tue 12 Aug 2025 05:48:37 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: S1fa33fhYPFXdksZtAHsQHiuMty3mLS5WP4HgRQd/04=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: We+bh/dPouK8NlGju2k+lFoIHBb/HkpPfF89DMkSLSg=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: OvtEst3O8Yb7GSI88hSTYs6uncMGZjm+NzSGzxQ2axk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: Aug 5 05:48:37 2025 GMT Not After : Aug 12 05:48:37 2025 GMT Subject: CN=68919b35-61f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:13:1a:0c:17:cc:2a:61:fe:c1:e2:c0:f0: 3a:52:ee:b4:70:1c:74:b7:5b:33:bf:3b:9c:0c:7c: 95:21:a1:a8:ae:b6:6c:6f:7a:a1:dc:7d:fb:e7:62: 4b:b7:0c:f1:d3:35:1c:0e:97:25:e5:6a:4c:b3:c0: 7e:3c:16:0c:ad:59:c3:88:0d:ca:87:e1:06:7b:65: b9:2f:1f:7d:44:85:a5:30:6b:86:45:86:7a:09:cd: 7b:bd:bd:f4:a6:4c:49:c7:f3:e7:10:f9:de:c6:57: 3c:4e:2d:db:b2:f2:8a:bb:4c:3b:67:fd:ab:bf:2d: 0e:4d:fe:da:05:10:d2:8f:3e:4b:4d:9a:10:05:8e: ac:ad:cd:71:c4:e1:d0:4c:01:fb:60:9d:17:51:af: 34:d5:c4:43:f6:7d:01:61:5a:08:e0:b9:d7:c6:32: d6:9c:e6:26:c5:3b:50:a8:8a:6f:eb:c4:30:8a:12: 25:cc:63:d6:9d:49:58:1b:41:c7:e3:62:f6:46:fe: e2:8a:80:a5:40:16:5a:79:66:46:f4:52:bf:92:1d: b4:21:60:e7:d6:d9:b9:3e:42:77:66:4e:52:ad:b3: e6:e3:d6:02:3c:7a:60:cc:1e:0b:fe:03:f0:91:67: 25:22:de:aa:24:5f:b4:ce:f7:89:08:03:9b:40:8a: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:86:AE:E0:13:C3:1B:B1:BC:A0:D8:61:89:ED:9A:35:76:AC:CA:35 X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:16:c1:c5:17:f1:43:d5:58:f4:48:77:11:72:2d:58:09:03: 0c:48:ed:67:51:89:98:a7:cd:1d:e5:fd:99:51:04:70:d9:4b: 86:c1:20:7c:f6:f0:d1:6d:d5:c8:c9:24:c5:c8:e3:1b:9e:7a: b5:5a:6d:51:16:90:4c:ac:ec:d1:af:df:22:14:51:36:7a:3f: 73:ca:7e:27:67:c7:38:10:d3:3f:1c:da:80:77:55:67:ec:b3: ec:29:cf:be:e8:68:7c:33:d0:06:f9:40:c1:6b:95:f1:a8:a6: 9e:b8:1e:77:3c:5a:af:41:62:52:8c:42:b4:07:fa:37:57:dd: f8:43:d4:df:31:b6:f4:b1:31:20:d8:c9:f1:75:f3:6c:b4:0f: 4e:22:49:ab:57:23:94:ae:98:1e:81:ca:af:e2:7f:f6:89:2a: d8:3e:0e:00:d0:09:d4:f0:18:ef:23:b0:3a:6e:ff:0a:fc:62: d1:38:5a:1b:fe:79:95:f5:7c:86:85:09:56:51:17:05:00:7a: 8c:44:13:80:5a:71:1b:9f:1d:ea:36:3f:4f:59:11:78:00:84: a3:5c:a7:e9:bb:f7:4c:88:18:76:a0:31:f6:c9:21:6b:64:b5: 7d:f1:26:aa:2c:98:38:e1:37:8c:b9:ed:d8:a8:37:fa:62:38: bb:84:b4:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy M0UwQzIyODMwHhcNMjUwODA1MDU0ODM3WhcNMjUwODEyMDU0ODM3WjAYMRYwFAYD VQQDEw02ODkxOWIzNS02MWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznoTGgwXzCph/sHiwPA6Uu60cBx0t1szvzucDHyVIaGorrZsb3qh3H3752JL twzx0zUcDpcl5WpMs8B+PBYMrVnDiA3Kh+EGe2W5Lx99RIWlMGuGRYZ6Cc17vb30 pkxJx/PnEPnexlc8Ti3bsvKKu0w7Z/2rvy0OTf7aBRDSjz5LTZoQBY6src1xxOHQ TAH7YJ0XUa801cRD9n0BYVoI4LnXxjLWnOYmxTtQqIpv68QwihIlzGPWnUlYG0HH 42L2Rv7iioClQBZaeWZG9FK/kh20IWDn1tm5PkJ3Zk5SrbPm49YCPHpgzB4L/gPw kWclIt6qJF+0zveJCAObQIoGSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOGruAT wxuxvKDYYYntmjV2rMo1MB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdFsHFF/FD1Vj0SHcRci1YCQMMSO1nUYmYp80d5f2ZUQRw2UuGwSB8 9vDRbdXIySTFyOMbnnq1Wm1RFpBMrOzRr98iFFE2ej9zyn4nZ8c4ENM/HNqAd1Vn 7LPsKc++6Gh8M9AG+UDBa5XxqKaeuB53PFqvQWJSjEK0B/o3V934Q9TfMbb0sTEg 2MnxdfNstA9OIkmrVyOUrpgegcqv4n/2iSrYPg4A0AnU8BjvI7A6bv8K/GLROFob /nmV9XyGhQlWURcFAHqMRBOAWnEbnx3qNj9PWRF4AISjXKfpu/dMiBh2oDH2ySFr ZLV98SaqLJg44TeMue3YqDf6Yji7hLR4 -----END CERTIFICATE-----Generated at Wed Aug 6 13:15:47 2025 by rpki-client