$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft File: KtUm39nH6QyjDDH8pOGCUBtwB1M.mft (raw, json) Hash identifier: YNzD+muRnlfGtWkVyLMRGvVB0aD4KYri6xbED+a9IEA= Subject key identifier: D5:70:49:FB:7B:8C:EE:67:41:75:9D:22:C9:B6:F3:11:A9:EC:1C:D3 Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 Certificate issuer: /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft Manifest number: 0662 Signing time: Fri 08 Aug 2025 23:00:15 +0000 Manifest this update: Fri 08 Aug 2025 23:00:14 +0000 Manifest next update: Fri 15 Aug 2025 23:00:14 +0000 Files and hashes: 1: KtUm39nH6QyjDDH8pOGCUBtwB1M.crl (hash: vbe5J/NeTETmMwX3IYFW+qc9rsESNjAbnLu/rgKnY0c=) 2: 4092F17AE64811EFA0F37560C4F9AE02.roa (hash: MuDOs+UNP3qWV7q9sz+FoRMoZ33SC0+8rektpH4Ht5s=) 3: 698130FEE60411EFA2DC3057C4F9AE02.roa (hash: Vt5tMPro7Yd+AkFJe3Cnn+BsDTWCkJWM0XoIlmggi2I=) 4: 5C75E87C95F511EBA6D31767C4F9AE02.roa (hash: lfQZb+Cu5k1P9aIBAVZr1VIcUuyX72bxEGl/rtrTc0A=) 5: 176E1D3E961411EB80BD4E1DC4F9AE02.roa (hash: guMsQztHXJe0nHYo+3sRzxnbrPq9rNiGro7Edp8V/SQ=) 6: 6CFB0FFCF65711EB8988A924C4F9AE02.roa (hash: 0e9NIIe4Eh6DQ3FvIOOg4nTVMnHbYlzq1N/yU/4pzQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AAA0, serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Validity Not Before: Aug 8 23:00:14 2025 GMT Not After : Aug 15 23:00:14 2025 GMT Subject: CN=6896817f-d723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:b6:50:e1:19:52:69:7e:3a:4b:c5:d0:b2: cf:db:33:af:bf:53:75:87:9a:c2:71:08:1f:fe:72: 58:03:ea:b2:fb:d6:49:72:bd:47:73:da:9f:1d:c2: 29:da:22:f1:81:3d:40:c2:b2:44:5f:88:83:35:cb: da:bb:af:17:ee:f6:3c:41:fd:a0:67:53:f5:d5:63: 5f:b1:54:65:c6:4f:22:f8:29:1c:64:1e:0b:f6:0f: 6e:01:3e:26:d5:b7:08:d8:59:52:94:7d:ea:61:34: 3e:54:e1:38:3d:af:d8:5f:a3:93:3e:21:f5:cb:f9: db:67:f2:d7:65:05:76:e9:dd:e3:82:d0:7a:69:88: 0d:f0:2c:3c:fd:67:c8:81:13:74:bc:3f:67:09:30: 7a:6f:bf:f0:f4:7a:7c:51:ec:79:32:49:df:32:dd: 25:32:f0:d9:c0:82:45:ee:13:87:39:92:00:7a:fe: 55:42:56:8a:d2:80:ef:16:ac:2a:c0:ba:17:f2:63: 56:49:da:32:44:64:c0:48:65:cb:a2:85:b6:25:24: c8:c6:af:bc:74:ac:0f:ff:f9:2b:fd:3e:b3:9b:33: 05:82:4b:77:8e:9a:d8:65:92:0d:70:6b:a9:59:05: 21:b9:9f:78:15:c4:8f:7b:5c:bc:de:0d:b3:18:81: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:70:49:FB:7B:8C:EE:67:41:75:9D:22:C9:B6:F3:11:A9:EC:1C:D3 X509v3 Authority Key Identifier: keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b6:ad:4e:1c:02:4a:47:4d:69:00:44:f5:9d:fb:3d:d4:11: 83:60:d8:0a:a9:e8:b9:b8:74:c7:b3:f0:c0:fa:6f:b2:9a:1e: e3:69:b5:1d:13:82:3f:97:f2:ac:d8:1c:29:70:71:1b:45:4f: 4b:60:bd:65:9a:5e:23:fa:16:0f:18:6f:8d:51:41:5b:0c:64: 1f:17:92:1b:c1:2e:7d:5e:dc:23:fb:b6:d7:c1:49:7b:bf:b5: 23:5b:b6:d2:13:51:a0:90:40:f7:fc:e8:aa:55:2e:7c:31:1d: 11:85:1d:ab:3a:a2:3f:06:41:db:18:1e:2d:71:08:b6:38:bf: ab:ac:9d:bc:cc:a8:5c:59:07:52:86:cd:52:47:2b:67:52:07: 2b:6d:13:3b:83:4d:b4:10:0a:d8:9c:55:fa:a7:bd:3b:4e:23: 1a:51:42:67:2f:9a:c9:7b:a0:44:e2:99:65:bb:5a:8d:a0:e3: 2b:7d:68:73:cb:f2:ff:86:46:fd:65:1d:98:17:59:f1:44:d1: b1:34:6f:49:01:2f:ff:32:f3:2f:16:dc:fa:d5:b8:82:2a:28: 79:81:7e:86:03:43:21:24:39:ee:ca:29:0b:2a:a1:83:1e:0d: 3b:eb:75:80:6e:9a:c8:40:e5:93:82:16:e4:27:4f:40:71:ce: a2:b4:e5:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFBQTAxMTAvBgNVBAUTKDJBRDUyNkRGRDlDN0U5MENBMzBDMzFGQ0E0RTE4MjUw MUI3MDA3NTMwHhcNMjUwODA4MjMwMDE0WhcNMjUwODE1MjMwMDE0WjAYMRYwFAYD VQQDEw02ODk2ODE3Zi1kNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHe2UOEZUml+OkvF0LLP2zOvv1N1h5rCcQgf/nJYA+qy+9ZJcr1Hc9qfHcIp 2iLxgT1AwrJEX4iDNcvau68X7vY8Qf2gZ1P11WNfsVRlxk8i+CkcZB4L9g9uAT4m 1bcI2FlSlH3qYTQ+VOE4Pa/YX6OTPiH1y/nbZ/LXZQV26d3jgtB6aYgN8Cw8/WfI gRN0vD9nCTB6b7/w9Hp8Uex5MknfMt0lMvDZwIJF7hOHOZIAev5VQlaK0oDvFqwq wLoX8mNWSdoyRGTASGXLooW2JSTIxq+8dKwP//kr/T6zmzMFgkt3jprYZZINcGup WQUhuZ94FcSPe1y83g2zGIHxVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVwSft7 jO5nQXWdIsm28xGp7BzTMB8GA1UdIwQYMBaAFCrVJt/Zx+kMowwx/KThglAbcAdT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUFBMC8yMjgzOTZCQTk1 RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZReWpEREg4cE9HQ1VCdHdC MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0VW0zOW5INlF5akRESDhwT0dDVUJ0d0IxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUFBMC8yMjgzOTZCQTk1RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZR eWpEREg4cE9HQ1VCdHdCMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXtq1OHAJKR01pAET1nfs91BGDYNgKqei5uHTHs/DA+m+ymh7jabUd E4I/l/Ks2BwpcHEbRU9LYL1lml4j+hYPGG+NUUFbDGQfF5IbwS59Xtwj+7bXwUl7 v7UjW7bSE1GgkED3/OiqVS58MR0RhR2rOqI/BkHbGB4tcQi2OL+rrJ28zKhcWQdS hs1SRytnUgcrbRM7g020EArYnFX6p707TiMaUUJnL5rJe6BE4pllu1qNoOMrfWhz y/L/hkb9ZR2YF1nxRNGxNG9JAS//MvMvFtz61biCKih5gX6GA0MhJDnuyikLKqGD Hg0763WAbprIQOWTghbkJ09Acc6itOWb -----END CERTIFICATE-----Generated at Sat Aug 9 10:41:24 2025 by rpki-client