$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: g71KLlrVmZBsOAvepSP9OxYfio/FK9UF9n0FgqN3Z58= Subject key identifier: 22:9D:97:A2:C7:FD:FE:C3:E7:AC:0F:89:15:61:43:09:83:DB:D4:D5 Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 4E Signing time: Sat 23 Aug 2025 07:34:20 +0000 Manifest this update: Sat 23 Aug 2025 07:34:20 +0000 Manifest next update: Sat 30 Aug 2025 07:34:20 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: iY8z/bjQFobBR99LkDVbs9CYwuaq4wQVbmL7YLkU0ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: Aug 23 07:34:20 2025 GMT Not After : Aug 30 07:34:20 2025 GMT Subject: CN=68a96efc-15c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:db:1c:b2:60:2e:8f:05:a9:33:40:7a:27: 89:5c:80:dc:83:ce:3c:fc:21:c0:77:0a:1b:88:2d: 9c:15:8f:7a:ce:bd:d3:d3:47:ea:68:37:61:d4:ce: a2:ca:ed:e2:67:a7:4e:aa:f0:d8:14:7d:cc:f3:3c: a0:37:90:31:fd:23:c8:66:d4:8c:c8:ed:b3:ff:ec: 3b:08:4d:f6:59:22:27:4d:46:cb:44:0e:10:1c:83: 50:a0:39:b2:e6:6b:32:5f:de:6f:6e:62:5d:fe:e8: 6a:9b:96:92:f9:79:11:c7:77:48:f3:50:c6:f5:a7: 15:a4:65:80:11:8f:05:16:a3:b7:8d:68:88:54:a8: d4:ff:33:b8:ce:92:79:38:bd:45:f8:aa:3c:46:dd: 27:4c:b2:eb:2c:80:a6:47:2d:6d:88:b4:85:7a:4e: 8c:20:0b:e1:30:9e:c3:5c:fc:90:9f:84:c5:54:bc: 99:df:a2:4e:20:6f:1a:a9:f3:3f:d4:e5:ec:d4:f5: d5:03:e5:d2:4d:0d:3b:53:cd:ea:29:2a:c2:61:2b: 2e:df:ad:63:60:1b:5c:b1:38:50:df:f2:bc:d7:46: 96:ca:c2:82:8d:fc:3d:cd:cf:ed:ed:ca:9d:d3:b7: 8a:20:07:dd:07:40:84:1d:a6:64:8d:40:ec:e6:d5: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:97:A2:C7:FD:FE:C3:E7:AC:0F:89:15:61:43:09:83:DB:D4:D5 X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:dc:9c:74:5c:d0:b6:dd:65:a2:f5:5f:2b:a4:bd:12:b7:f7: 28:90:ab:0b:b1:d4:2f:d3:fe:15:d8:33:dd:51:d6:dc:98:b5: 58:e7:a7:40:fe:a5:c4:7a:d4:96:f9:8e:7f:14:49:69:40:9c: 57:e6:84:66:20:e4:f8:1c:78:4c:07:e8:56:c3:c7:2e:db:51: b9:60:77:c3:6d:1f:1a:db:f3:21:8d:9b:53:b1:bc:22:1d:2d: 73:10:96:42:be:2e:a4:8b:98:f0:01:c2:9a:61:c0:ec:ae:cf: 21:7d:b5:9e:4b:57:df:25:cd:c4:2a:62:d9:28:11:64:2e:d6: fa:45:91:37:6f:4f:03:06:25:b3:d5:e9:81:01:b3:88:3b:12: 1f:8b:18:ea:ae:be:e4:ab:24:fa:94:03:6d:04:2b:62:78:f3: c1:f5:e0:73:85:de:6a:2c:36:2f:68:b4:0e:f5:18:f9:ce:d0: 57:81:bc:05:dc:ea:38:63:8f:a6:78:f8:91:98:99:54:ec:ab: 80:4d:47:a8:c1:10:97:7c:96:82:2d:5e:c1:2a:f8:49:68:e1: 4f:d7:d9:4c:b4:be:3a:51:ac:03:ea:ae:14:53:77:fa:a6:52: 84:e2:cd:34:fc:a3:24:14:c2:7a:07:3d:87:6b:95:6f:1e:30: 5e:37:7c:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoOTIwRTdEMDkxRjE1NTY5RjJEODM0MEM2NTgyQjk1OTVF QzA2NTY4MDAeFw0yNTA4MjMwNzM0MjBaFw0yNTA4MzAwNzM0MjBaMBgxFjAUBgNV BAMTDTY4YTk2ZWZjLTE1YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGKtscsmAujwWpM0B6J4lcgNyDzjz8IcB3ChuILZwVj3rOvdPTR+poN2HUzqLK 7eJnp06q8NgUfczzPKA3kDH9I8hm1IzI7bP/7DsITfZZIidNRstEDhAcg1CgObLm azJf3m9uYl3+6GqblpL5eRHHd0jzUMb1pxWkZYARjwUWo7eNaIhUqNT/M7jOknk4 vUX4qjxG3SdMsussgKZHLW2ItIV6TowgC+EwnsNc/JCfhMVUvJnfok4gbxqp8z/U 5ezU9dUD5dJNDTtTzeopKsJhKy7frWNgG1yxOFDf8rzXRpbKwoKN/D3Nz+3typ3T t4ogB90HQIQdpmSNQOzm1bFDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIp2Xosf9 /sPnrA+JFWFDCYPb1NUwHwYDVR0jBBgwFoAUkg59CR8VVp8tg0DGWCuVlewGVoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0YxQzc0NDdFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1Zv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2c1OUNSOFZWcDh0ZzBER1dDdVZsZXdHVm9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0YxQzc0NDdFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4 dGcwREdXQ3VWbGV3R1ZvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTcnHRc0LbdZaL1XyukvRK39yiQqwux1C/T/hXYM91R1tyYtVjnp0D+ pcR61Jb5jn8USWlAnFfmhGYg5PgceEwH6FbDxy7bUblgd8NtHxrb8yGNm1OxvCId LXMQlkK+LqSLmPABwpphwOyuzyF9tZ5LV98lzcQqYtkoEWQu1vpFkTdvTwMGJbPV 6YEBs4g7Eh+LGOquvuSrJPqUA20EK2J488H14HOF3mosNi9otA71GPnO0FeBvAXc 6jhjj6Z4+JGYmVTsq4BNR6jBEJd8loItXsEq+Elo4U/X2Uy0vjpRrAPqrhRTd/qm UoTizTT8oyQUwnoHPYdrlW8eMF43fHE= -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:02 2025 by rpki-client