$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: Tc92X1CJpbFhpRjdkteVqBLTiX+xwd8HMuhDeBgZVPM= Subject key identifier: 70:59:13:98:18:F9:FE:A2:70:6D:EC:57:D9:1F:F5:C9:93:80:0F:A8 Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 0162 Signing time: Sat 23 Aug 2025 04:28:55 +0000 Manifest this update: Sat 23 Aug 2025 04:28:55 +0000 Manifest next update: Sat 30 Aug 2025 04:28:55 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: Kmv412PtpibJXM0kmjF8QHtAXrtRTcPaY3RW3dQbWok=) 2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: wRjDxSYF9ME/+w7UeeO+MKXvgDC5w3qNX+JKTSzXhtw=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: jM6outMgdpJ44HUHhOOUfnOx+r280G0rdmU4B0AEX90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Aug 23 04:28:55 2025 GMT Not After : Aug 30 04:28:55 2025 GMT Subject: CN=68a94387-76ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:1a:72:a2:c7:29:1d:7c:86:a9:42:64:29: 51:91:76:ab:a1:23:95:42:f9:3e:b9:6d:0b:0f:a7: 87:91:d4:5e:4b:39:57:25:67:8a:04:4d:9d:1e:7a: 4c:d1:42:ee:23:b0:c4:86:9f:1a:d2:97:e0:4f:bb: 45:ae:29:47:bc:71:0a:c3:4f:9b:48:74:4d:25:ce: 8d:ee:82:92:ae:4c:9f:18:a8:c9:3b:3c:9e:8f:87: db:ab:a2:da:6a:05:e5:50:6e:e3:88:13:e5:d6:cd: 8b:55:6f:d5:27:9e:be:b4:d6:56:28:d4:c8:ac:24: 91:73:fa:e0:5f:cb:23:64:07:50:7e:e9:c1:30:1d: c1:7d:7b:c4:b5:48:95:d1:0e:20:22:bb:ba:bc:48: 86:e5:62:c4:89:8b:76:87:76:2e:fe:f1:e8:4d:48: df:de:e8:38:5c:95:b9:2e:54:7b:4d:19:a5:2c:79: cd:6d:b0:85:5c:47:d3:46:ea:70:d4:b3:a9:90:39: c6:21:a9:d3:69:5e:a7:90:9c:7d:2c:75:50:1d:c5: 89:73:81:b1:54:b8:be:80:dd:1a:6f:50:80:b5:c1: 26:0c:fd:3d:fb:15:4f:7d:be:27:58:36:ce:23:12: 5a:26:bf:80:ff:ef:05:e9:99:30:48:bc:d7:23:cc: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:13:98:18:F9:FE:A2:70:6D:EC:57:D9:1F:F5:C9:93:80:0F:A8 X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:8d:04:b7:13:65:d8:d5:67:81:57:7e:74:7f:01:26:f2:c8: 61:99:20:44:3c:ac:42:ce:fa:b6:28:c5:c4:f4:20:28:26:5e: 38:2d:b0:c0:87:67:ab:e0:62:cc:fe:19:88:17:36:6e:36:dd: d6:19:7f:6f:ab:2c:1e:bf:84:9c:7e:4a:c1:ab:9c:8b:99:14: a6:7b:8a:aa:9a:90:20:89:24:25:e1:45:04:7a:72:b1:3f:c0: 95:29:84:44:14:bb:84:79:1d:9b:32:77:7b:d5:9d:cf:64:b9: 3f:c0:23:01:8a:59:e9:4e:78:1c:d3:ad:d3:3f:35:7a:d9:79: b7:6a:e0:54:1a:a1:84:64:40:18:6f:76:f4:0e:29:a0:cf:82: 67:af:45:7d:f3:89:13:f8:c4:ec:72:39:b9:5c:9f:05:8f:92: 97:97:86:20:62:bd:a7:a1:8c:e7:95:ec:80:ec:8d:70:e7:87: d1:96:99:61:d5:a0:5d:1f:b3:43:9a:07:94:58:71:67:da:f4: 3c:b4:ba:71:f7:77:73:51:86:6e:ae:0e:44:d0:55:2c:c4:e6: 2f:57:11:6a:6a:a3:e2:96:af:8d:82:70:48:3c:57:ec:59:21: 2b:ac:11:57:b9:40:0a:bf:a5:c8:ad:b3:9d:82:cf:c8:25:93: 60:58:64:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjUwODIzMDQyODU1WhcNMjUwODMwMDQyODU1WjAYMRYwFAYD VQQDEw02OGE5NDM4Ny03NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gUacqLHKR18hqlCZClRkXaroSOVQvk+uW0LD6eHkdReSzlXJWeKBE2dHnpM 0ULuI7DEhp8a0pfgT7tFrilHvHEKw0+bSHRNJc6N7oKSrkyfGKjJOzyej4fbq6La agXlUG7jiBPl1s2LVW/VJ56+tNZWKNTIrCSRc/rgX8sjZAdQfunBMB3BfXvEtUiV 0Q4gIru6vEiG5WLEiYt2h3Yu/vHoTUjf3ug4XJW5LlR7TRmlLHnNbbCFXEfTRupw 1LOpkDnGIanTaV6nkJx9LHVQHcWJc4GxVLi+gN0ab1CAtcEmDP09+xVPfb4nWDbO IxJaJr+A/+8F6ZkwSLzXI8yJkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBZE5gY +f6icG3sV9kf9cmTgA+oMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAjQS3E2XY1WeBV350fwEm8shhmSBEPKxCzvq2KMXE9CAoJl44LbDA h2er4GLM/hmIFzZuNt3WGX9vqywev4ScfkrBq5yLmRSme4qqmpAgiSQl4UUEenKx P8CVKYREFLuEeR2bMnd71Z3PZLk/wCMBilnpTngc063TPzV62Xm3auBUGqGEZEAY b3b0Dimgz4Jnr0V984kT+MTscjm5XJ8Fj5KXl4YgYr2noYznleyA7I1w54fRlplh 1aBdH7NDmgeUWHFn2vQ8tLpx93dzUYZurg5E0FUsxOYvVxFqaqPilq+NgnBIPFfs WSErrBFXuUAKv6XIrbOdgs/IJZNgWGSx -----END CERTIFICATE-----Generated at Sat Aug 23 14:18:59 2025 by rpki-client