$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: MBa9vXQGLUh1d2fMK3DM1TCNRawCP48tsQaBAJcwNk4= Subject key identifier: FD:D2:04:BB:AF:E8:9C:73:F6:EC:AC:F6:F5:1D:77:0D:C1:A8:E5:16 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 0A13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 0A03 Signing time: Wed 06 Aug 2025 16:14:00 +0000 Manifest this update: Wed 06 Aug 2025 16:14:00 +0000 Manifest next update: Wed 13 Aug 2025 16:14:00 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: FwLHsfFNQ3BcUrG5cy8/SvVxZ1CMrIY8AKVrUuCldOo=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2579 (0xa13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Aug 6 16:14:00 2025 GMT Not After : Aug 13 16:14:00 2025 GMT Subject: CN=68937f48-9fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:90:d7:2f:06:d1:b0:dd:45:e9:df:7e:7b: 9a:58:1c:a5:42:14:ae:6e:e0:6f:e7:2f:95:96:68: d9:a9:c1:02:4c:8c:2b:4f:e1:28:95:db:51:70:73: 90:c1:ef:65:59:d2:6c:b5:b4:11:6b:48:a9:5f:39: f9:40:bd:18:4a:88:f6:99:e5:2b:16:32:24:9c:b3: 8b:30:dc:9f:f1:e4:ae:4c:5e:13:10:c7:6b:8a:da: ca:9d:03:f0:13:0e:e5:a8:22:0c:d9:d6:18:96:1e: 53:34:24:42:5d:79:04:5a:2c:b2:ab:5c:15:85:e0: 45:ef:94:49:1d:2b:ff:45:ca:31:41:71:e7:a6:57: e4:38:a6:cf:9f:d3:2e:0b:df:cc:06:33:75:3c:00: c6:c2:2c:85:b7:54:8d:b1:72:22:b3:24:6e:a2:c2: 83:fc:63:ad:d0:73:e2:a4:ce:ef:7e:04:40:65:be: 5c:fd:dc:1b:63:9b:e9:c9:26:85:5e:c3:2d:1a:90: 5e:19:00:49:6c:85:79:fa:3b:a1:a4:0d:8b:dc:7e: f3:af:d7:2c:c6:bd:b6:ba:f8:92:f5:e6:13:0e:a4: 6d:73:60:e2:22:ef:f3:2f:bd:80:dd:a0:ed:04:ed: d1:f6:63:7e:03:a3:ab:76:ca:1a:e8:bb:ef:5a:7a: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D2:04:BB:AF:E8:9C:73:F6:EC:AC:F6:F5:1D:77:0D:C1:A8:E5:16 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f2:2f:01:bf:6a:f5:0e:c8:d7:48:1c:67:ee:ea:f7:66:ff: bb:6c:fc:1b:12:34:df:6c:98:eb:5b:fd:54:95:07:56:d9:13: c6:65:8c:dd:a1:b9:4d:84:71:3e:6d:9d:d0:d0:53:7f:d2:ec: 8e:46:f1:3b:6d:00:f7:55:3f:36:63:22:99:9e:d7:2d:d2:35: 47:ee:58:db:fa:80:0a:d5:ff:db:32:28:ff:58:67:a3:48:ba: 89:f7:09:44:84:90:ce:ab:19:ca:3a:43:9f:03:70:88:9c:ba: c7:bd:52:bf:c3:95:48:1f:58:fa:97:8b:12:a7:c9:aa:1b:12: a1:a1:5b:b3:d7:ff:98:a6:7e:f7:ca:48:83:2f:b5:7d:cc:a5: 07:82:5d:c8:99:86:a9:b0:f3:6a:3c:34:a7:b2:7d:2c:2a:d7: 21:0e:58:16:0e:3c:31:3d:34:76:87:65:e9:95:78:f0:26:e1: 38:b4:62:51:76:8d:75:0c:13:c8:f9:b5:52:9e:f1:7a:9f:3e: 5d:5e:12:cd:cd:bb:43:4f:89:23:66:51:23:d4:99:e5:4a:14: 77:82:c8:c0:09:67:af:fb:55:60:bd:2c:69:c2:82:27:f5:dd: c4:30:a0:bb:07:aa:35:56:ed:11:c1:81:c6:b4:c0:d7:12:0c: f5:a5:b5:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwODA2MTYxNDAwWhcNMjUwODEzMTYxNDAwWjAYMRYwFAYD VQQDEw02ODkzN2Y0OC05ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG+Q1y8G0bDdRenffnuaWBylQhSubuBv5y+VlmjZqcECTIwrT+EoldtRcHOQ we9lWdJstbQRa0ipXzn5QL0YSoj2meUrFjIknLOLMNyf8eSuTF4TEMdritrKnQPw Ew7lqCIM2dYYlh5TNCRCXXkEWiyyq1wVheBF75RJHSv/RcoxQXHnplfkOKbPn9Mu C9/MBjN1PADGwiyFt1SNsXIisyRuosKD/GOt0HPipM7vfgRAZb5c/dwbY5vpySaF XsMtGpBeGQBJbIV5+juhpA2L3H7zr9csxr22uviS9eYTDqRtc2DiIu/zL72A3aDt BO3R9mN+A6Ordsoa6LvvWnqtMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3SBLuv 6Jxz9uys9vUddw3BqOUWMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh8i8Bv2r1DsjXSBxn7ur3Zv+7bPwbEjTfbJjrW/1UlQdW2RPGZYzd oblNhHE+bZ3Q0FN/0uyORvE7bQD3VT82YyKZntct0jVH7ljb+oAK1f/bMij/WGej SLqJ9wlEhJDOqxnKOkOfA3CInLrHvVK/w5VIH1j6l4sSp8mqGxKhoVuz1/+Ypn73 ykiDL7V9zKUHgl3ImYapsPNqPDSnsn0sKtchDlgWDjwxPTR2h2XplXjwJuE4tGJR do11DBPI+bVSnvF6nz5dXhLNzbtDT4kjZlEj1JnlShR3gsjACWev+1VgvSxpwoIn 9d3EMKC7B6o1Vu0RwYHGtMDXEgz1pbX1 -----END CERTIFICATE-----Generated at Fri Aug 8 00:33:23 2025 by rpki-client