$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: ctyQZxsi7J2YcV+ysS07Jt7iMJ0XCdigF+RVWBSp6E0= Subject key identifier: 8F:47:9F:FB:77:22:CB:69:C4:03:FF:B5:89:C2:25:10:3F:8C:34:39 Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 0A00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 09F9 Signing time: Fri 08 Aug 2025 20:10:31 +0000 Manifest this update: Fri 08 Aug 2025 20:10:30 +0000 Manifest next update: Fri 15 Aug 2025 20:10:30 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: rynlSNJIx/mAdTuqqwulrrvasGvY5No5xRMMAQqRBAs=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: KpSjUunjUeMLLOQiLXWBsxc7UsA+gj+cxEsO4RdQ2oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: Aug 8 20:10:30 2025 GMT Not After : Aug 15 20:10:30 2025 GMT Subject: CN=689659b6-ba9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:4e:48:76:6e:e4:a2:17:38:17:79:ef:2d: 89:38:05:9c:f7:67:f4:6a:2d:99:3e:7e:01:33:84: 60:bd:4d:85:69:d6:c5:8b:f8:aa:97:75:b3:db:e4: e4:f4:62:d2:e4:92:21:9d:c0:88:f2:fe:d9:19:a9: d5:a4:ef:91:28:7c:08:71:0b:d9:d6:69:d9:1c:b8: cd:1f:d0:73:60:74:d2:88:0d:89:62:84:50:38:24: fd:3e:40:92:00:b4:8a:f3:17:75:0e:ab:da:21:e0: 34:5d:30:bb:ce:b4:00:a2:cf:98:b9:4d:35:fb:8a: 54:d2:18:8e:ae:79:de:86:3a:9c:cc:7c:21:0e:6f: e8:4d:b2:6a:dc:d9:1d:61:29:5e:d3:e4:6e:89:0a: 2f:7f:70:5a:a5:f9:cf:9f:43:3e:c5:ef:a8:24:95: b2:81:6f:85:95:20:8e:fd:36:73:66:bc:7f:df:34: 08:44:2a:03:33:32:24:7a:94:fb:9c:39:c6:e4:7e: 9e:16:84:7b:6a:6d:88:a8:30:63:9d:f2:9d:2c:e1: f1:00:24:23:1d:99:62:83:94:56:db:f4:f3:ef:42: bb:a5:31:a5:bf:cf:10:99:dc:f2:7b:a4:18:91:c4: 4c:cd:26:96:f4:d2:42:4d:d1:43:22:1e:fb:b6:3d: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:47:9F:FB:77:22:CB:69:C4:03:FF:B5:89:C2:25:10:3F:8C:34:39 X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:3a:eb:41:72:0f:31:ab:50:65:e7:a0:24:06:9d:78:10:5f: fd:cf:fa:43:1d:57:c8:87:64:ee:72:99:83:5e:52:90:50:3c: 6d:65:9f:7b:70:ba:f5:ee:e9:ed:87:83:48:7e:fd:48:a4:86: 6d:e5:fc:18:0b:7a:23:d4:1e:f7:33:1f:40:8e:53:ba:e7:61: a5:b3:e2:4a:dc:b4:d4:bb:30:0a:9d:a9:62:84:d2:a9:23:9e: ea:b1:c9:9e:63:cb:c3:47:11:a3:67:7b:ce:68:e9:f3:ac:ee: f2:20:fe:b5:b8:12:8c:96:0b:4b:02:8e:f6:fc:b3:31:04:2c: da:c3:dc:99:f2:9b:55:7d:b2:ca:4f:22:04:8f:38:e3:86:d8: b3:1b:ae:8c:30:55:c5:da:b7:2c:39:47:a2:c4:1a:d0:11:d7: b0:12:43:d8:70:d9:2c:f5:2e:9d:e9:84:f6:6c:dd:32:5c:74: cb:a7:d4:22:6e:7a:7b:8d:8d:0e:09:07:30:1d:e9:7b:91:79: 19:75:7e:eb:f6:3a:cb:b4:d3:f2:4f:1e:e3:7e:87:f3:ef:d8: 19:5e:2b:a5:a8:88:e8:b7:ec:8d:cf:8e:bd:c3:be:28:3e:84: 52:f6:ac:58:81:78:48:16:2d:75:27:30:e2:88:32:fb:1e:e9: 50:ac:3f:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjUwODA4MjAxMDMwWhcNMjUwODE1MjAxMDMwWjAYMRYwFAYD VQQDEw02ODk2NTliNi1iYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxtOSHZu5KIXOBd57y2JOAWc92f0ai2ZPn4BM4RgvU2FadbFi/iql3Wz2+Tk 9GLS5JIhncCI8v7ZGanVpO+RKHwIcQvZ1mnZHLjNH9BzYHTSiA2JYoRQOCT9PkCS ALSK8xd1DqvaIeA0XTC7zrQAos+YuU01+4pU0hiOrnnehjqczHwhDm/oTbJq3Nkd YSle0+RuiQovf3BapfnPn0M+xe+oJJWygW+FlSCO/TZzZrx/3zQIRCoDMzIkepT7 nDnG5H6eFoR7am2IqDBjnfKdLOHxACQjHZlig5RW2/Tz70K7pTGlv88Qmdzye6QY kcRMzSaW9NJCTdFDIh77tj1k8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9Hn/t3 IstpxAP/tYnCJRA/jDQ5MB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCROutBcg8xq1Bl56AkBp14EF/9z/pDHVfIh2TucpmDXlKQUDxtZZ97 cLr17unth4NIfv1IpIZt5fwYC3oj1B73Mx9AjlO652Gls+JK3LTUuzAKnalihNKp I57qscmeY8vDRxGjZ3vOaOnzrO7yIP61uBKMlgtLAo72/LMxBCzaw9yZ8ptVfbLK TyIEjzjjhtizG66MMFXF2rcsOUeixBrQEdewEkPYcNks9S6d6YT2bN0yXHTLp9Qi bnp7jY0OCQcwHel7kXkZdX7r9jrLtNPyTx7jfofz79gZXiulqIjot+yNz469w74o PoRS9qxYgXhIFi11JzDiiDL7HulQrD/M -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:39 2025 by rpki-client