$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json) Hash identifier: Do0F8k1eNUEcImnRF2sApbxSG71Pj7NWtZA35ebMtG4= Subject key identifier: 29:98:86:2E:E0:04:05:20:38:7B:66:E3:7D:0D:ED:47:E5:C0:47:3A Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft Manifest number: 7A Signing time: Thu 07 Aug 2025 07:23:48 +0000 Manifest this update: Thu 07 Aug 2025 07:23:48 +0000 Manifest next update: Thu 14 Aug 2025 07:23:48 +0000 Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: /ixZEjY3IP9wczQmlDYC74jqOpsnXC7q8S42NhpMt2w=) 2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: jqm9AvgV4FxQG5X3y3xKe8muOycM02nLSK2i0VaGmmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Validity Not Before: Aug 7 07:23:48 2025 GMT Not After : Aug 14 07:23:48 2025 GMT Subject: CN=68945484-c099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:75:d4:fc:fe:76:68:33:95:a3:bb:11:ea: e9:b7:4f:36:ef:c3:fd:55:b3:ec:12:da:be:c6:12: 6c:82:3e:00:ac:27:b4:8d:d1:52:15:b8:40:2f:ac: cd:46:9e:0f:92:87:5e:8c:9b:63:0d:81:05:fa:a8: cd:dd:e2:af:9e:64:d9:f9:8c:af:2c:0a:82:12:3f: 05:0a:d5:1e:2b:9b:c4:29:e4:e3:64:43:aa:af:bd: 1e:99:2a:49:94:f3:c4:4d:ba:bb:7f:f8:12:9f:64: bb:2c:9c:99:9f:0f:87:2a:9b:45:23:66:5d:e9:c3: 6d:9d:2b:98:ca:9f:45:56:71:e6:0c:e3:b2:cf:c8: 1a:5d:04:ee:8d:f3:40:64:f4:8d:e7:7a:4e:89:5b: 81:da:cd:37:e4:a0:fa:3c:10:37:59:68:97:b3:fa: ab:54:1d:39:b9:ea:bd:25:9c:b5:fc:48:3f:78:0b: 4e:6c:d1:ff:10:38:2f:2b:ae:72:0a:42:c8:2d:f2: b2:8d:5b:1b:69:f3:12:ab:6a:27:ac:f3:46:79:f4: bd:2d:3f:a6:2f:d0:58:9a:7e:cd:1e:57:b1:8f:97: dc:fe:f5:71:5f:56:bc:37:cb:7b:da:3b:dd:09:c7: 47:ff:3c:e7:3d:27:61:c4:a7:e2:81:70:62:34:4b: 2e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:98:86:2E:E0:04:05:20:38:7B:66:E3:7D:0D:ED:47:E5:C0:47:3A X509v3 Authority Key Identifier: keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:eb:74:54:05:98:a1:69:ce:0e:c6:88:a5:72:9c:33:0e:78: a2:01:ea:b0:cf:e8:3c:19:46:f1:66:70:18:01:e1:2f:a4:f6: c2:96:5a:24:90:8e:0d:34:b1:82:84:a4:ac:09:67:61:36:55: 47:5a:63:cc:bd:1b:a5:ee:bc:d4:c8:c0:d4:39:e0:0f:2d:25: c9:83:8c:a1:8e:64:e3:19:02:7a:7a:3b:1c:02:d5:e1:5f:79: fd:a5:7f:85:99:f5:1e:87:68:f0:57:aa:f7:98:46:13:f9:ea: 80:13:48:64:a4:51:a9:03:5a:f8:f2:33:d2:3f:8f:96:f5:cc: 11:ea:44:97:37:29:1a:7f:8a:eb:ce:b3:13:7f:5e:45:6d:3b: 7b:41:f7:69:f7:fd:6d:54:ee:24:47:6a:49:e7:79:63:9c:7f: 88:fb:77:77:60:db:c2:df:a6:5d:cb:97:1b:23:00:48:87:55: 36:8d:f5:3d:f1:a4:d3:ce:8b:ba:6b:49:e5:83:1b:cf:f4:d1: b9:d7:f0:a5:3d:fe:f4:cd:9d:a0:7a:cb:c8:8d:70:83:9f:c3: 94:0b:5c:91:fa:dd:2d:36:66:18:4c:b3:e2:05:1f:fa:34:4e: 23:33:cf:1a:7a:34:a6:d0:f3:87:01:ac:ac:c4:21:a5:ad:b1: 1a:d4:30:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I5NDExMC8GA1UEBRMoMkE1NzM5NkRDRTcwRUI1NkMwNzNERTFBNzYwQjYyQTcy MkIwNDc4RTAeFw0yNTA4MDcwNzIzNDhaFw0yNTA4MTQwNzIzNDhaMBgxFjAUBgNV BAMTDTY4OTQ1NDg0LWMwOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDASHXU/P52aDOVo7sR6um3Tzbvw/1Vs+wS2r7GEmyCPgCsJ7SN0VIVuEAvrM1G ng+Sh16Mm2MNgQX6qM3d4q+eZNn5jK8sCoISPwUK1R4rm8Qp5ONkQ6qvvR6ZKkmU 88RNurt/+BKfZLssnJmfD4cqm0UjZl3pw22dK5jKn0VWceYM47LPyBpdBO6N80Bk 9I3nek6JW4HazTfkoPo8EDdZaJez+qtUHTm56r0lnLX8SD94C05s0f8QOC8rrnIK Qsgt8rKNWxtp8xKraies80Z59L0tP6Yv0Fiafs0eV7GPl9z+9XFfVrw3y3vaO90J x0f/POc9J2HEp+KBcGI0Sy5ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKZiGLuAE BSA4e2bjfQ3tR+XARzowHwYDVR0jBBgwFoAUKlc5bc5w61bAc94adgtipyKwR44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjk0L0FGNDFCRDEwQkNE OTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFiQWM5NGFkZ3RpcHlLd1I0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2xjNWJjNXc2MWJBYzk0YWRndGlweUt3UjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz Qjk0L0FGNDFCRDEwQkNEOTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFi QWM5NGFkZ3RpcHlLd1I0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABTrdFQFmKFpzg7GiKVynDMOeKIB6rDP6DwZRvFmcBgB4S+k9sKWWiSQ jg00sYKEpKwJZ2E2VUdaY8y9G6XuvNTIwNQ54A8tJcmDjKGOZOMZAnp6OxwC1eFf ef2lf4WZ9R6HaPBXqveYRhP56oATSGSkUakDWvjyM9I/j5b1zBHqRJc3KRp/iuvO sxN/XkVtO3tB92n3/W1U7iRHaknneWOcf4j7d3dg28Lfpl3LlxsjAEiHVTaN9T3x pNPOi7prSeWDG8/00bnX8KU9/vTNnaB6y8iNcIOfw5QLXJH63S02ZhhMs+IFH/o0 TiMzzxp6NKbQ84cBrKzEIaWtsRrUMIk= -----END CERTIFICATE-----Generated at Fri Aug 8 13:06:39 2025 by rpki-client