$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: NG7vgzFuWjdkjhsC8QR28MWzvd0DbCy+SMBns2b/wdo= Subject key identifier: A8:00:D2:97:AA:62:6B:70:ED:C7:ED:CB:97:50:7A:A2:62:E1:7D:D0 Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 010F Signing time: Thu 07 Aug 2025 05:25:21 +0000 Manifest this update: Thu 07 Aug 2025 05:25:21 +0000 Manifest next update: Thu 14 Aug 2025 05:25:21 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: kcJ0chaP12XwkRsj3VjegYKTEZHgMWmD88whrgc8DB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Aug 7 05:25:21 2025 GMT Not After : Aug 14 05:25:21 2025 GMT Subject: CN=689438c1-2c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:29:72:f9:c1:85:de:b7:76:8d:b3:a6:e5: 3e:ff:65:d3:95:34:07:ae:5f:a4:f0:a7:f2:f2:99: 02:79:bc:7f:66:06:27:e4:59:36:12:0c:63:2c:b1: c6:02:b8:dd:16:f2:b6:c1:29:87:0f:ce:bb:91:1a: a2:70:5b:56:69:99:86:a1:79:c7:e9:81:54:76:b2: bb:d1:96:30:34:1d:e6:6f:48:02:e7:da:4d:37:b3: d9:01:28:90:9f:d5:e3:d8:23:8b:5a:ab:43:41:02: 12:f8:c3:c3:5f:85:91:f9:29:8b:ed:9b:9b:5b:16: 73:4e:e7:1e:cc:ee:81:59:38:11:f3:d7:c2:d9:6e: 4c:ec:24:d2:8c:02:71:70:23:30:33:21:db:8e:aa: 7c:38:7a:b3:6f:c7:eb:78:d2:c5:1b:e0:83:59:7f: d6:8e:94:01:1e:2c:d1:b2:39:d7:21:a5:e9:62:9e: cb:8c:1d:c5:eb:79:18:5d:3f:ec:9d:fd:4c:ca:d6: 22:6e:6f:a3:18:93:7e:4e:06:89:96:0d:05:ae:f4: c2:d4:7f:0d:a1:a6:f3:b5:59:66:b8:a1:60:cb:bc: a7:60:05:98:16:98:a4:04:be:30:07:bf:55:06:4f: 6b:0d:b7:f0:06:c5:7a:52:cc:4a:ec:48:98:5a:7e: fc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:00:D2:97:AA:62:6B:70:ED:C7:ED:CB:97:50:7A:A2:62:E1:7D:D0 X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:49:0b:3e:dd:fb:b6:ea:b4:ee:4e:45:20:94:80:59:05:5e: a1:57:28:3c:40:6f:3d:7e:59:c6:32:3e:46:07:41:a7:ad:29: f1:c7:6e:85:5a:ac:c5:27:12:9b:66:64:27:7b:75:66:84:75: c0:46:40:26:33:9c:5f:78:1d:c6:54:38:12:af:dc:35:75:e9: 76:d8:f5:c0:3d:f3:b5:c9:0c:3b:8e:76:36:17:9f:89:2e:1e: fe:95:cd:62:8c:26:52:ff:69:4d:30:2c:f9:e7:7b:e6:91:a0: 6d:89:2f:ab:26:b6:4a:2e:b2:43:b1:1a:be:a7:ea:5b:e3:af: 5a:a8:65:1f:31:1b:57:05:07:c3:61:3f:1f:52:e4:97:e7:92: a9:2e:19:ab:32:d7:ef:f1:c0:e7:69:95:84:4d:3e:50:f0:e3: f8:ab:3d:57:f7:45:19:f5:56:f1:64:c2:9c:51:89:69:52:35: f1:4d:f5:ca:12:44:19:21:d2:0d:6f:b2:18:da:94:84:a6:5c: 76:0c:44:7c:4f:f7:97:70:fe:b0:b4:4c:86:88:e2:64:51:9d: d0:7c:4d:e8:f3:eb:75:e7:af:33:82:67:4a:00:da:4c:84:77: f7:7f:5b:e9:bd:ad:a2:e3:79:79:bc:d8:af:3c:a5:8e:08:5b: 73:9c:1e:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUwODA3MDUyNTIxWhcNMjUwODE0MDUyNTIxWjAYMRYwFAYD VQQDEw02ODk0MzhjMS0yYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQEpcvnBhd63do2zpuU+/2XTlTQHrl+k8Kfy8pkCebx/ZgYn5Fk2EgxjLLHG ArjdFvK2wSmHD867kRqicFtWaZmGoXnH6YFUdrK70ZYwNB3mb0gC59pNN7PZASiQ n9Xj2COLWqtDQQIS+MPDX4WR+SmL7ZubWxZzTucezO6BWTgR89fC2W5M7CTSjAJx cCMwMyHbjqp8OHqzb8freNLFG+CDWX/WjpQBHizRsjnXIaXpYp7LjB3F63kYXT/s nf1MytYibm+jGJN+TgaJlg0FrvTC1H8NoabztVlmuKFgy7ynYAWYFpikBL4wB79V Bk9rDbfwBsV6UsxK7EiYWn788QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgA0peq Ymtw7cfty5dQeqJi4X3QMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzSQs+3fu26rTuTkUglIBZBV6hVyg8QG89flnGMj5GB0GnrSnxx26F WqzFJxKbZmQne3VmhHXARkAmM5xfeB3GVDgSr9w1del22PXAPfO1yQw7jnY2F5+J Lh7+lc1ijCZS/2lNMCz553vmkaBtiS+rJrZKLrJDsRq+p+pb469aqGUfMRtXBQfD YT8fUuSX55KpLhmrMtfv8cDnaZWETT5Q8OP4qz1X90UZ9VbxZMKcUYlpUjXxTfXK EkQZIdINb7IY2pSEplx2DER8T/eXcP6wtEyGiOJkUZ3QfE3o8+t1568zgmdKANpM hHf3f1vpva2i43l5vNivPKWOCFtznB7D -----END CERTIFICATE-----Generated at Fri Aug 8 19:29:41 2025 by rpki-client