$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: l4wmuUTZKv3X4xdR4z0wr8gqrq7+nSlmwlOGN14+1rA= Subject key identifier: 91:BB:E9:8D:EC:9B:F1:CD:31:C2:EA:06:6B:4C:9C:6F:5E:6D:70:68 Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 057C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 0571 Signing time: Fri 22 Aug 2025 23:29:21 +0000 Manifest this update: Fri 22 Aug 2025 23:29:21 +0000 Manifest next update: Fri 29 Aug 2025 23:29:21 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: kOzjyh9k0uiX09wh2bP7tfAuFSHe+H97FB5omftMFTk=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: li3UtGYjrBf3C8NwlkMmtocNy8KFUcDjCj/BKLVAeWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Validity Not Before: Aug 22 23:29:21 2025 GMT Not After : Aug 29 23:29:21 2025 GMT Subject: CN=68a8fd51-49b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:3b:54:79:44:4b:cc:7b:fc:46:aa:8a:5c: 88:11:92:72:9d:a4:86:75:01:74:15:66:5f:e3:7e: 51:c6:6d:7d:eb:3a:2b:f2:61:61:89:9a:36:4a:3a: e9:d2:59:1f:c4:e2:3f:3a:85:8e:50:b4:66:c5:11: 32:5c:72:9a:84:45:8d:7d:5a:13:ec:fd:1e:1a:a2: b6:b8:26:8e:25:8e:91:a6:7a:c1:a5:82:72:77:32: 26:3f:20:d2:29:95:05:cd:ce:42:99:b9:a2:eb:af: 42:84:de:2d:83:86:1d:40:64:bd:ae:ff:e5:39:bd: 4e:59:ef:c9:1a:58:ff:fe:5d:30:37:0a:30:9e:2b: e0:27:02:ed:e6:c8:a8:83:b5:5f:ed:81:76:ae:7c: 49:8f:42:75:2b:0f:01:34:2c:59:6b:5b:7e:05:c1: 07:4e:af:29:78:8d:81:11:87:4a:ba:14:4f:9d:ee: 28:2f:ba:37:c8:1c:f1:0e:d3:12:e9:d4:11:68:62: aa:5f:b8:ca:34:6f:59:0a:9d:02:48:5a:ef:a3:96: 98:85:6e:b8:d3:e8:73:ce:7c:b3:93:28:de:0e:1b: e1:53:ba:24:5b:02:89:6e:6e:e0:1f:9c:58:dd:1a: 18:a1:28:39:54:5e:6b:9c:c7:14:09:7f:ed:76:02: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BB:E9:8D:EC:9B:F1:CD:31:C2:EA:06:6B:4C:9C:6F:5E:6D:70:68 X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e5:4a:a0:31:88:06:2b:2a:9c:76:ab:9c:fe:ab:0f:27:81: d1:fc:74:a0:3c:73:2b:95:61:03:dc:df:0b:13:3d:20:cd:63: 80:4e:1d:f1:63:3e:b0:38:9e:80:15:e5:e3:05:f1:b6:1d:7a: 27:8f:82:ac:f7:54:46:78:87:71:a1:01:b0:67:40:76:46:44: 64:f9:cc:96:52:0f:1f:bc:50:19:df:14:6f:29:2b:d2:97:9b: 67:43:ac:ba:bd:d4:72:ad:8e:cc:aa:f8:16:68:25:b7:37:12: 81:fe:bb:c6:0b:04:32:56:b9:b7:ef:84:3c:b1:f8:0e:cf:ed: 94:0a:74:b3:08:1a:ee:46:8d:16:04:ec:2b:a9:26:12:66:bf: 24:4b:77:92:ed:f4:5e:08:ca:4a:fe:80:23:90:8d:0b:11:d9: a8:c5:4b:11:fb:05:38:43:ee:18:c3:17:2a:c5:7d:3a:12:74: a1:84:17:29:d6:16:ac:86:7e:6c:f1:2e:fe:41:da:22:61:b7: e4:71:22:61:40:f4:f3:c0:b2:8d:cd:7b:2e:cd:03:30:25:de: 7d:c4:03:a6:93:f2:4f:8b:c5:f0:2f:4f:b9:c2:3d:1b:57:a2: c8:ad:2a:c1:14:c4:e8:c0:16:6e:dd:41:cd:f9:de:e0:16:e8: a9:60:c6:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjUwODIyMjMyOTIxWhcNMjUwODI5MjMyOTIxWjAYMRYwFAYD VQQDEw02OGE4ZmQ1MS00OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXA7VHlES8x7/EaqilyIEZJynaSGdQF0FWZf435Rxm196zor8mFhiZo2Sjrp 0lkfxOI/OoWOULRmxREyXHKahEWNfVoT7P0eGqK2uCaOJY6RpnrBpYJydzImPyDS KZUFzc5Cmbmi669ChN4tg4YdQGS9rv/lOb1OWe/JGlj//l0wNwownivgJwLt5sio g7Vf7YF2rnxJj0J1Kw8BNCxZa1t+BcEHTq8peI2BEYdKuhRPne4oL7o3yBzxDtMS 6dQRaGKqX7jKNG9ZCp0CSFrvo5aYhW640+hzznyzkyjeDhvhU7okWwKJbm7gH5xY 3RoYoSg5VF5rnMcUCX/tdgJgmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG76Y3s m/HNMcLqBmtMnG9ebXBoMB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ5UqgMYgGKyqcdquc/qsPJ4HR/HSgPHMrlWED3N8LEz0gzWOATh3x Yz6wOJ6AFeXjBfG2HXonj4Ks91RGeIdxoQGwZ0B2RkRk+cyWUg8fvFAZ3xRvKSvS l5tnQ6y6vdRyrY7MqvgWaCW3NxKB/rvGCwQyVrm374Q8sfgOz+2UCnSzCBruRo0W BOwrqSYSZr8kS3eS7fReCMpK/oAjkI0LEdmoxUsR+wU4Q+4YwxcqxX06EnShhBcp 1hashn5s8S7+QdoiYbfkcSJhQPTzwLKNzXsuzQMwJd59xAOmk/JPi8XwL0+5wj0b V6LIrSrBFMTowBZu3UHN+d7gFuipYMaf -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:42 2025 by rpki-client