$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: 4kec8RE33X0UatkxMkKptzgk7nUFqaYssjM2nATd0SU= Subject key identifier: AB:30:2D:29:77:20:8A:FA:6F:35:99:A7:5A:5D:23:D2:BC:06:67:D4 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0775 Signing time: Wed 02 Jul 2025 21:49:11 +0000 Manifest this update: Wed 02 Jul 2025 21:49:10 +0000 Manifest next update: Wed 09 Jul 2025 21:49:10 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: tMA9eQy7Xq9kRZokHYRrXJ0Y4jtu6AyGWbtcaUqfuMA=) 2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: bPVen4Q79bQMysYZB+1SSkGirdnYsj/wax4oaPllL9M=) 3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: U4O6uXSOF+3gB8WDqXNclHvwBePMcUEtPgGRnogD3Pk=) 4: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: EPNFm1X8MnpnhMfq1ASr/F02aUDuHCY7XYN9aoUZxhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1925 (0x785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Jul 2 21:49:10 2025 GMT Not After : Jul 9 21:49:10 2025 GMT Subject: CN=6865a956-cf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:57:97:d4:fd:02:5d:7b:5b:64:14:cc:0c:3c: 26:5c:67:94:e2:96:9c:42:f6:2b:cc:60:d3:79:ea: 06:e3:0b:c1:bc:7a:0f:8d:47:8a:19:3e:b0:99:68: 51:97:5e:90:93:d6:d9:22:c0:13:b3:dc:ae:1f:00: 2a:ab:9b:cd:54:d9:90:c6:82:c2:11:d6:61:86:3b: e3:22:5a:e9:9e:09:4e:70:b8:ed:50:84:de:66:0b: 0e:6a:ce:6e:9c:31:f6:82:a5:3e:1c:43:74:6c:3d: 12:77:87:02:65:a8:a8:f8:7f:3a:f3:fa:ec:19:81: 8a:1e:e3:38:c6:54:ed:3e:da:86:af:d2:6c:ba:79: a9:0b:cd:16:97:82:53:35:4e:a0:34:e4:a8:33:a3: 12:dd:96:b5:f7:f2:95:5d:82:fa:8a:af:3a:dc:8a: d0:f0:b6:99:2b:37:a3:f5:93:7a:e7:98:b8:b0:0b: 46:12:6b:43:f3:b9:28:eb:3e:48:0b:9e:bc:b2:3a: a4:5a:ad:15:f3:af:ce:a3:aa:ed:61:7b:c5:50:49: 54:8b:84:01:68:0e:fe:67:29:21:e7:f6:ad:8b:06: 76:c8:ec:85:db:6a:d7:50:a8:90:51:21:ac:39:12: ba:34:53:66:f7:da:31:92:e5:d9:d0:7a:57:dc:b0: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:30:2D:29:77:20:8A:FA:6F:35:99:A7:5A:5D:23:D2:BC:06:67:D4 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3c:97:e2:72:4d:0d:ef:1e:a0:89:cb:94:f6:d7:eb:05:79: a4:be:6c:da:35:f9:0e:05:35:e0:82:43:80:35:c6:b7:18:1d: 3e:51:c8:95:77:71:3a:e9:1e:89:02:8b:61:20:d8:bf:2c:71: b5:1c:35:4f:61:15:54:63:59:e9:dd:a3:cc:1f:63:c7:8d:16: f3:1d:dc:47:99:ed:c0:d6:1b:76:09:75:b5:52:79:0d:05:0d: a0:29:93:cc:55:ce:aa:e7:4d:bd:22:cc:88:e5:0b:e3:7d:02: 26:79:b6:c6:ba:d6:7d:66:bb:5b:00:b2:9b:64:7d:b3:e8:de: 82:bc:1e:ef:38:27:94:e3:f9:c1:7c:dd:c4:8b:e8:ae:83:a4: a4:46:f5:e3:01:7f:f7:dc:8c:56:46:4a:2a:55:9c:d5:c6:cc: cc:8e:05:40:b4:68:37:6d:38:8e:05:17:19:5b:1e:85:9f:24: c7:d5:80:11:74:93:ec:57:69:85:ef:ce:69:92:b9:51:26:9b: cb:7a:9e:d8:ee:8d:eb:6e:9c:14:0d:95:16:10:66:f2:e6:15: 49:56:08:99:68:83:8f:bd:b3:56:fe:1d:ce:a1:da:05:b5:dd: be:da:1b:83:26:da:19:a5:8d:94:f4:c1:b6:7d:0b:39:5f:df: d5:eb:d3:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjUwNzAyMjE0OTEwWhcNMjUwNzA5MjE0OTEwWjAYMRYwFAYD VQQDEw02ODY1YTk1Ni1jZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FeX1P0CXXtbZBTMDDwmXGeU4pacQvYrzGDTeeoG4wvBvHoPjUeKGT6wmWhR l16Qk9bZIsATs9yuHwAqq5vNVNmQxoLCEdZhhjvjIlrpnglOcLjtUITeZgsOas5u nDH2gqU+HEN0bD0Sd4cCZaio+H868/rsGYGKHuM4xlTtPtqGr9JsunmpC80Wl4JT NU6gNOSoM6MS3Za19/KVXYL6iq863IrQ8LaZKzej9ZN655i4sAtGEmtD87ko6z5I C568sjqkWq0V86/Oo6rtYXvFUElUi4QBaA7+Zykh5/atiwZ2yOyF22rXUKiQUSGs ORK6NFNm99oxkuXZ0HpX3LAaPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKswLSl3 IIr6bzWZp1pdI9K8BmfUMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEPJfick0N7x6gicuU9tfrBXmkvmzaNfkOBTXggkOANca3GB0+UciV d3E66R6JAothINi/LHG1HDVPYRVUY1np3aPMH2PHjRbzHdxHme3A1ht2CXW1UnkN BQ2gKZPMVc6q5029IsyI5QvjfQImebbGutZ9ZrtbALKbZH2z6N6CvB7vOCeU4/nB fN3Ei+iug6SkRvXjAX/33IxWRkoqVZzVxszMjgVAtGg3bTiOBRcZWx6FnyTH1YAR dJPsV2mF785pkrlRJpvLep7Y7o3rbpwUDZUWEGby5hVJVgiZaIOPvbNW/h3OodoF td2+2huDJtoZpY2U9MG2fQs5X9/V69Mq -----END CERTIFICATE-----Generated at Thu Jul 3 15:07:12 2025 by rpki-client