$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json) Hash identifier: q9lI7RF7H4y3KHh7VJhzo2uHuMdQHKrpFjnCXP+QnFM= Subject key identifier: E1:20:51:40:AE:DB:82:3A:A4:55:76:3E:0F:60:0C:4A:F2:EA:D1:4D Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft Manifest number: 2564 Signing time: Fri 22 Aug 2025 16:25:01 +0000 Manifest this update: Fri 22 Aug 2025 16:25:00 +0000 Manifest next update: Fri 29 Aug 2025 16:25:00 +0000 Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: lLRKPnhEui011RvoYRsGJpRIrJ/eC0AISkJ3YSFeRJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Validity Not Before: Aug 22 16:25:00 2025 GMT Not After : Aug 29 16:25:00 2025 GMT Subject: CN=68a899dd-6761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:66:ca:84:cd:56:cf:6e:f3:eb:3b:c4:29:33: ca:47:02:c6:3b:4b:5a:1f:a8:3a:6b:80:20:ef:ca: a5:f1:89:09:bd:e3:38:88:05:c6:40:23:e8:88:20: f9:07:c3:04:ea:8a:35:7a:f1:a6:e9:90:ac:ee:ac: 38:5e:48:3e:e2:06:95:02:b9:fe:af:e6:60:e6:aa: 9f:02:08:47:55:93:bd:22:09:b8:70:9f:f3:26:3f: 86:3f:f9:65:1d:e4:c4:f7:f0:4d:1b:07:5e:e5:ea: 1a:dc:30:39:66:5d:f4:99:74:5c:7c:57:52:9d:36: 37:ae:fa:39:ea:13:1e:25:f4:16:13:fd:ab:df:f0: df:bb:0c:03:f4:4d:6f:e2:e4:a5:ea:11:cd:cc:2f: ac:a3:44:72:ca:5c:d9:61:a8:e0:50:43:e5:43:2a: 06:e3:ca:99:ca:a2:82:7b:49:b8:33:52:da:81:39: 5b:1b:c5:e0:72:8e:f0:1a:fe:7c:4c:a6:e2:ad:ad: e0:73:ee:6f:4b:70:03:da:09:8d:f6:33:9d:c4:66: 74:71:d9:2c:56:8f:30:d6:8b:4c:c3:49:ec:2b:e3: eb:a6:af:6e:fb:e8:bf:ad:55:5b:46:96:99:f1:8d: 3b:08:5b:89:87:9a:47:71:32:b8:77:4b:8d:bb:0c: ab:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:20:51:40:AE:DB:82:3A:A4:55:76:3E:0F:60:0C:4A:F2:EA:D1:4D X509v3 Authority Key Identifier: keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:15:cc:d8:f7:aa:b8:93:56:db:29:3e:b1:42:48:a8:ef:24: 30:11:f4:9b:d5:3a:f5:f8:10:c9:bc:23:8e:33:47:b3:b6:26: 4f:52:10:43:08:16:71:9f:da:b3:8a:01:51:b4:4f:bf:71:9c: 43:a5:45:c6:4b:59:bb:19:a5:a7:50:41:9a:64:d4:0a:3c:cc: 9e:11:11:5a:d4:63:3d:61:40:8f:35:b8:9e:32:17:e5:5e:f3: 7f:28:33:5f:29:8f:64:3e:3c:26:70:9a:18:fc:5b:67:e2:1e: f1:4a:03:a0:2f:53:22:71:65:74:3f:f4:e9:41:bc:fc:1d:40: 20:3f:76:fc:76:a4:1a:d5:d4:a3:42:da:f2:88:fc:9e:72:21: 0c:bb:4e:ed:63:5b:8f:12:f2:e4:c7:52:f4:82:ff:a6:b0:47: d1:e5:9d:26:c1:ed:36:a5:d3:9a:0f:2a:c9:2e:60:60:33:0a: a8:e9:e9:53:dd:a2:15:ac:82:1e:d3:47:d9:f5:72:20:b4:76: 2c:fc:92:7c:dd:90:36:7b:a8:9e:0d:b0:ac:7d:13:5b:87:37: 3c:dd:ac:04:a3:2c:7b:f8:6e:b6:8a:c7:57:3c:ab:cf:48:be: 43:d8:31:e2:77:ab:07:e6:52:82:92:7f:af:a1:e2:49:0a:ef: 88:a1:cd:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE Nzk1RkZDODQwHhcNMjUwODIyMTYyNTAwWhcNMjUwODI5MTYyNTAwWjAYMRYwFAYD VQQDEw02OGE4OTlkZC02NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GbKhM1Wz27z6zvEKTPKRwLGO0taH6g6a4Ag78ql8YkJveM4iAXGQCPoiCD5 B8ME6oo1evGm6ZCs7qw4Xkg+4gaVArn+r+Zg5qqfAghHVZO9Igm4cJ/zJj+GP/ll HeTE9/BNGwde5eoa3DA5Zl30mXRcfFdSnTY3rvo56hMeJfQWE/2r3/DfuwwD9E1v 4uSl6hHNzC+so0RyylzZYajgUEPlQyoG48qZyqKCe0m4M1LagTlbG8Xgco7wGv58 TKbira3gc+5vS3AD2gmN9jOdxGZ0cdksVo8w1otMw0nsK+Prpq9u++i/rVVbRpaZ 8Y07CFuJh5pHcTK4d0uNuwyrcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEgUUCu 24I6pFV2Pg9gDEry6tFNMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUFczY96q4k1bbKT6xQkio7yQwEfSb1Tr1+BDJvCOOM0eztiZPUhBD CBZxn9qzigFRtE+/cZxDpUXGS1m7GaWnUEGaZNQKPMyeERFa1GM9YUCPNbieMhfl XvN/KDNfKY9kPjwmcJoY/Ftn4h7xSgOgL1MicWV0P/TpQbz8HUAgP3b8dqQa1dSj QtryiPyeciEMu07tY1uPEvLkx1L0gv+msEfR5Z0mwe02pdOaDyrJLmBgMwqo6elT 3aIVrIIe00fZ9XIgtHYs/JJ83ZA2e6ieDbCsfRNbhzc83awEoyx7+G62isdXPKvP SL5D2DHid6sH5lKCkn+voeJJCu+Ioc1L -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:39 2025 by rpki-client