$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json) Hash identifier: 3dhc7WFyILA+CodE73kSPBjOXYfUT4vnJZBeGnr5Yiw= Subject key identifier: FF:CA:FD:19:82:10:68:B6:CA:61:04:A0:59:65:FD:54:54:31:11:0E Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 1805 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft Manifest number: 1795 Signing time: Sat 02 Aug 2025 16:45:11 +0000 Manifest this update: Sat 02 Aug 2025 16:45:10 +0000 Manifest next update: Sat 09 Aug 2025 16:45:10 +0000 Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: Oo6QL3qQIK5spxaEHYdHyUQQMaEPU3g0rB5SanWCJSI=) 2: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: l9PAtv4FmfKEbsr39kSblkIdk4l36jBShaU/yhiu3EA=) 3: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: pRnYMFn3MsmdKZMCcupGBS8xip66wFsc4Vhu+CVQM8s=) 4: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: Ki+ZYv+WbFodfUBA0Z9kcHIRNA0D2B2/Fqh0gMIddSg=) 5: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: 1XIBkz1xrsmaIEUuPCKysFF+5jDC/AbJdnY6h8iCmzA=) 6: B04675FC959711EA9F290A33C4F9AE02.roa (hash: ivQeuywrXd2HV3FA6lQn6A/OFE5M8rNHrmCwXxaSoOo=) 7: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: Q50guEdFQrac2WGNIOWOMwAPEusnnVtr+0WbjS+0Iw8=) 8: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: 6dC3vmSVGgmkSh9nUR6cyWb5UZYgtCMEtbXtHWZQ+Ms=) 9: 696975861A3611EEA597E872C4F9AE02.roa (hash: oIGClTM3lHim9PRA3fKoX8EMPndg1+r8p0Zu4BUJRhA=) 10: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: K/ybxERnMroT+/HivxwCKoEx2WZjUMXQikxQf2o4Wtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6149 (0x1805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: Aug 2 16:45:10 2025 GMT Not After : Aug 9 16:45:10 2025 GMT Subject: CN=688e4097-e490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:fc:1b:0c:7e:e7:bf:4f:f6:f1:82:a0:bb: 8f:41:61:51:fd:40:e7:9f:3f:54:2e:45:5f:5d:a0: ce:65:1b:5f:91:9e:20:49:cc:48:03:a6:a5:21:fa: 68:5c:55:da:01:72:4a:39:fc:04:f1:55:2c:fb:11: a7:9a:9e:7e:59:cd:89:b0:2c:4a:61:23:04:78:6c: 3c:21:bc:ce:ee:c8:25:e8:70:72:14:10:83:e2:9a: c6:2c:33:49:25:9d:68:b5:45:a6:8e:cd:79:5f:1e: 4d:68:29:91:82:8d:8d:1a:d8:b1:ed:69:27:3b:1b: a2:67:e4:4e:a8:90:3c:87:1c:15:f7:74:2a:8d:ab: fd:73:18:7d:9d:48:b8:2c:93:b4:d2:77:bd:c3:a8: f1:78:d5:05:79:31:8b:f7:b8:9d:07:2c:b5:05:74: 26:a3:4f:7e:b8:78:43:c1:10:c7:1c:ff:a9:89:c6: 97:b6:1a:08:22:ab:22:5d:14:be:0b:c2:c8:35:40: 94:13:79:7d:26:f6:a8:17:77:4b:6e:1c:83:30:85: 47:e0:b0:70:9e:f4:33:e2:99:f1:86:a1:4a:ae:b6: 68:ab:75:00:bc:10:fe:ae:31:7a:7f:8f:71:89:83: f1:9c:1d:bd:f3:4b:5b:89:d1:8c:56:98:8f:94:d3: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CA:FD:19:82:10:68:B6:CA:61:04:A0:59:65:FD:54:54:31:11:0E X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b7:86:65:b3:c6:2b:4c:c1:e1:7a:cf:03:3a:d8:8e:f3:3f: 34:cb:14:cb:03:4c:85:ea:ac:45:a7:6b:d3:b6:b1:d3:1f:45: 4b:0e:85:46:cc:44:2f:f6:bd:a9:c3:be:ae:d8:79:6d:39:82: ef:d5:82:c4:8f:13:e4:71:05:f6:de:19:71:10:f0:66:51:ef: 1c:06:89:c6:c2:da:52:8b:6c:49:7d:b5:f5:8c:1d:53:0e:6f: d0:6c:56:b1:4d:88:c6:8d:4f:25:ad:c4:f4:e0:2e:92:de:a2: 98:4b:f2:f7:dd:61:a4:fb:be:2a:23:ed:1a:fa:4f:24:ac:70: 12:dc:b4:bb:86:97:98:28:0a:76:ae:05:53:8f:1c:4c:11:05: 66:72:bd:ca:fe:f2:31:d5:a6:31:8d:7b:98:76:de:08:99:54: 8d:be:3f:9a:6f:3f:1a:49:f1:42:6b:d5:f6:97:c1:98:dc:d5: 3a:3a:11:8b:65:60:7e:3e:09:13:91:7b:a8:7f:ae:97:0f:9c: 54:60:b8:ec:0e:2d:d0:5b:07:e8:bd:b1:9e:c7:9f:f6:a5:61: 26:ac:19:22:4d:70:79:7d:8e:c6:02:f2:79:70:65:27:e9:0b: 88:bb:d1:53:fb:38:c0:09:19:50:46:be:3c:66:ae:23:3d:fc: dd:78:59:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjUwODAyMTY0NTEwWhcNMjUwODA5MTY0NTEwWjAYMRYwFAYD VQQDEw02ODhlNDA5Ny1lNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtP8Gwx+579P9vGCoLuPQWFR/UDnnz9ULkVfXaDOZRtfkZ4gScxIA6alIfpo XFXaAXJKOfwE8VUs+xGnmp5+Wc2JsCxKYSMEeGw8IbzO7sgl6HByFBCD4prGLDNJ JZ1otUWmjs15Xx5NaCmRgo2NGtix7WknOxuiZ+ROqJA8hxwV93Qqjav9cxh9nUi4 LJO00ne9w6jxeNUFeTGL97idByy1BXQmo09+uHhDwRDHHP+picaXthoIIqsiXRS+ C8LINUCUE3l9JvaoF3dLbhyDMIVH4LBwnvQz4pnxhqFKrrZoq3UAvBD+rjF6f49x iYPxnB2980tbidGMVpiPlNM6EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/K/RmC EGi2ymEEoFll/VRUMREOMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri84NDhDODU3Q0RGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRv N1BhMThlTWcwSHN0R3MyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXt4Zls8YrTMHhes8DOtiO8z80yxTLA0yF6qxFp2vTtrHTH0VLDoVG zEQv9r2pw76u2HltOYLv1YLEjxPkcQX23hlxEPBmUe8cBonGwtpSi2xJfbX1jB1T Dm/QbFaxTYjGjU8lrcT04C6S3qKYS/L33WGk+74qI+0a+k8krHAS3LS7hpeYKAp2 rgVTjxxMEQVmcr3K/vIx1aYxjXuYdt4ImVSNvj+abz8aSfFCa9X2l8GY3NU6OhGL ZWB+PgkTkXuof66XD5xUYLjsDi3QWwfovbGex5/2pWEmrBkiTXB5fY7GAvJ5cGUn 6QuIu9FT+zjACRlQRr48Zq4jPfzdeFn4 -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:33 2025 by rpki-client