$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json) Hash identifier: tGytQM4wPoQEJGDZjNo3zQbtH89DvopfWUPoiN9bnfY= Subject key identifier: 45:E4:42:5A:9A:5B:F8:DF:D4:97:BD:2A:44:2F:EF:43:2D:26:4B:46 Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft Manifest number: 0489 Signing time: Mon 11 Aug 2025 00:10:16 +0000 Manifest this update: Mon 11 Aug 2025 00:10:16 +0000 Manifest next update: Mon 18 Aug 2025 00:10:16 +0000 Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: Sb48EhxlLLJd8Eh7uHAOovFYWe4MzCdK4hUaBgdQxrw=) 2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Validity Not Before: Aug 11 00:10:16 2025 GMT Not After : Aug 18 00:10:16 2025 GMT Subject: CN=689934e8-232b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:4b:5a:83:1a:f9:f6:a5:cd:41:26:b8:98: cc:5a:54:7e:a4:77:7b:2a:eb:30:c8:1f:99:89:19: 91:f1:59:ac:9d:6c:f3:04:44:b0:a9:e4:a8:e5:d0: c6:54:57:b6:60:52:0e:fa:1c:87:fd:ef:de:10:61: 09:d6:25:8f:54:08:7d:bb:61:98:d8:50:de:e8:d3: b6:72:c0:4d:b2:0d:b0:eb:5b:9f:9d:1a:0b:33:48: c0:60:24:e0:75:fe:b2:22:99:40:68:7a:9c:5e:a9: 12:a9:23:b4:f9:ac:d1:99:40:10:f1:26:27:69:89: c5:e1:24:de:a5:65:67:7b:89:4a:b3:0a:60:57:a3: 2b:46:c1:9d:4e:83:02:91:87:48:69:76:15:42:35: 18:cc:29:2b:2c:da:e4:40:a9:56:f2:13:60:88:ed: 9c:c8:69:8f:ef:91:6d:69:e2:ef:e5:42:bb:62:b5: 50:99:54:61:95:c0:64:12:42:25:66:0c:bd:e3:c2: 26:1c:ee:4a:37:78:3c:2c:25:34:07:c7:17:38:d4: 38:75:0a:ac:c2:a6:50:bc:54:6b:22:07:5d:fa:cb: 27:da:57:77:82:35:9c:30:05:71:b4:af:d6:58:ae: 58:c4:bb:9e:16:17:5d:92:87:9d:fc:fe:a5:8b:87: 40:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E4:42:5A:9A:5B:F8:DF:D4:97:BD:2A:44:2F:EF:43:2D:26:4B:46 X509v3 Authority Key Identifier: keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:56:39:1c:3c:2a:aa:12:d6:e4:fd:f0:06:10:ed:a4:89:a8: 93:c1:d3:9b:9b:2a:67:b9:09:e2:e0:64:84:bc:97:ec:d9:e1: db:52:b7:17:ad:22:30:20:50:84:81:97:23:88:f7:d3:a9:25: 49:47:db:45:0b:75:0e:7e:25:d8:78:cf:c5:f7:80:f1:a3:d7: 19:b0:3a:33:90:26:b2:aa:9c:5e:a7:a3:96:a2:ac:32:60:1d: b8:dc:ba:56:51:a6:de:89:d2:29:ab:96:ef:09:dd:41:ce:0f: f3:16:29:03:e7:f6:b7:b1:6a:48:16:11:78:4a:23:b0:57:80: 66:6c:9a:7c:9e:2b:eb:a0:ac:9f:36:f8:dd:c3:2f:7f:68:e4: c8:6d:83:fa:d7:ac:8e:02:9f:4b:13:4d:bb:43:53:5a:da:e8: 2f:0a:41:4a:40:6b:67:03:d5:3e:2a:0c:2f:97:81:9e:32:5c: 2b:cc:7d:0a:16:ba:f6:40:52:2d:bb:f4:ce:98:0d:d5:ef:6d: d3:09:db:11:5d:38:0e:d4:db:6c:70:7b:37:8d:46:04:cb:a6: e8:f0:e8:6d:05:4c:86:3a:49:92:2b:2a:0d:6a:4e:f1:33:b9: d8:00:79:e0:a7:f7:f9:07:28:6d:da:fd:60:a0:56:94:bb:4c: 39:a0:4d:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCQkExMTAvBgNVBAUTKDJCNDRDODg5MUFBRTJCOEExRkRCNDhFQkY0QTU3RTk4 OUFFQjczNjMwHhcNMjUwODExMDAxMDE2WhcNMjUwODE4MDAxMDE2WjAYMRYwFAYD VQQDEw02ODk5MzRlOC0yMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyNLWoMa+falzUEmuJjMWlR+pHd7KuswyB+ZiRmR8VmsnWzzBESwqeSo5dDG VFe2YFIO+hyH/e/eEGEJ1iWPVAh9u2GY2FDe6NO2csBNsg2w61ufnRoLM0jAYCTg df6yIplAaHqcXqkSqSO0+azRmUAQ8SYnaYnF4STepWVne4lKswpgV6MrRsGdToMC kYdIaXYVQjUYzCkrLNrkQKlW8hNgiO2cyGmP75FtaeLv5UK7YrVQmVRhlcBkEkIl Zgy948ImHO5KN3g8LCU0B8cXONQ4dQqswqZQvFRrIgdd+ssn2ld3gjWcMAVxtK/W WK5YxLueFhddkoed/P6li4dAXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXkQlqa W/jf1Je9KkQv70MtJktGMB8GA1UdIwQYMBaAFCtEyIkariuKH9tI6/Slfpia63Nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJCQS9GOTEzQzBCQTRD NDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0b2YyMGpyOUtWLW1KcnJj Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swVElpUnF1SzRvZjIwanI5S1YtbUpycmMyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJCQS9GOTEzQzBCQTRDNDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0 b2YyMGpyOUtWLW1KcnJjMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdVjkcPCqqEtbk/fAGEO2kiaiTwdObmypnuQni4GSEvJfs2eHbUrcX rSIwIFCEgZcjiPfTqSVJR9tFC3UOfiXYeM/F94Dxo9cZsDozkCayqpxep6OWoqwy YB243LpWUabeidIpq5bvCd1Bzg/zFikD5/a3sWpIFhF4SiOwV4BmbJp8nivroKyf Nvjdwy9/aOTIbYP616yOAp9LE027Q1Na2ugvCkFKQGtnA9U+Kgwvl4GeMlwrzH0K Frr2QFItu/TOmA3V723TCdsRXTgO1NtscHs3jUYEy6bo8OhtBUyGOkmSKyoNak7x M7nYAHngp/f5Byht2v1goFaUu0w5oE1l -----END CERTIFICATE-----Generated at Tue Aug 12 22:46:08 2025 by rpki-client