$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: tiStCJQoydYrQ/TGydPDZdCLz/T9l4kUs95+3Tlav/Y= Subject key identifier: 21:27:67:0F:C3:78:5C:1E:D6:2D:C3:F1:F9:38:79:C3:0F:F5:1A:5D Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 0868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 0856 Signing time: Fri 22 Aug 2025 20:49:19 +0000 Manifest this update: Fri 22 Aug 2025 20:49:19 +0000 Manifest next update: Fri 29 Aug 2025 20:49:19 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: N3h+8W4z4vzfhZyB+1utx8ciVgM3FIuTCoScNXJLQe8=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Aug 22 20:49:19 2025 GMT Not After : Aug 29 20:49:19 2025 GMT Subject: CN=68a8d7cf-30b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:d4:e7:d3:d6:a1:78:c8:22:d9:f8:a0:7a: 41:50:45:b7:d6:f7:70:98:1d:16:79:2b:08:00:5b: aa:aa:a5:e6:8e:4d:e9:b8:87:85:e1:28:af:89:9d: 61:49:a5:96:ad:2e:49:6b:6c:5d:fe:3a:30:bf:5e: 02:fc:65:fc:3b:37:16:4b:2f:f8:b7:97:e3:15:69: 8e:e3:72:5c:32:0d:89:4d:b9:cd:65:18:5f:59:99: 91:b1:26:75:0c:86:46:1f:10:68:11:e9:84:97:f6: e3:b4:1a:83:ca:46:2f:01:af:7a:01:22:61:43:ac: 0e:b3:bf:f1:87:17:7c:b9:64:cb:f9:28:cd:4b:f2: ff:8b:e9:f8:ac:24:0f:81:3d:df:60:fb:fd:22:83: f9:2f:da:f6:78:d4:de:86:4e:4d:ae:3a:ee:ab:0c: 73:bf:29:f9:ee:d8:e4:5e:f9:84:ec:e3:39:ff:c9: f5:24:8f:59:84:68:53:ea:40:af:87:15:8f:ad:bf: ce:8f:61:18:d1:25:42:d2:1c:43:c4:fa:0a:38:b1: 1c:19:ea:8c:93:3e:e8:22:69:1f:b0:47:6b:d9:c3: e5:a8:51:a1:2d:88:bc:3c:24:88:7c:c9:69:8f:91: 83:5d:bb:e4:a2:a7:4e:02:0c:b7:b1:9e:9f:90:a8: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:27:67:0F:C3:78:5C:1E:D6:2D:C3:F1:F9:38:79:C3:0F:F5:1A:5D X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:03:4a:74:e3:67:6d:0b:af:d0:64:d1:6a:02:88:00:58:de: ea:f8:af:bd:51:16:c9:92:3a:97:19:98:ed:70:ed:1a:78:cf: 63:b9:10:21:1a:53:1c:8a:68:af:54:1c:8e:21:90:24:ab:c1: 46:a3:97:f8:7a:c3:4a:ba:2b:5d:7b:60:7c:64:5d:48:8b:af: b1:dc:56:5b:66:38:e1:d1:95:3f:7d:58:b4:3b:b9:08:fa:7e: 82:42:04:7d:2f:8b:7b:13:8a:6d:0e:b0:10:be:61:2a:f3:a7: 5b:7c:6d:a4:be:45:3d:70:5a:5e:11:fc:eb:3c:6f:54:29:5f: 1c:b6:fc:82:93:f1:af:43:65:c1:00:ce:83:bc:24:11:bb:38: 2b:e1:47:2b:16:ff:f9:99:38:0c:d3:90:3a:1d:f6:d0:1e:f2: 07:91:9b:8f:28:35:48:15:ee:f0:4b:db:ad:f3:52:c1:1d:e9: 86:b8:58:29:75:9f:22:6e:dd:de:7e:90:7f:c8:b3:3f:0c:43: 25:91:cf:40:33:fb:af:ed:46:a1:92:e0:2a:69:a8:b2:6c:da: 2c:cb:a8:6b:63:c2:6c:bf:b5:a6:cd:34:92:d1:53:35:f2:7e: 15:69:6f:7b:ff:65:eb:bc:ac:73:7f:37:79:18:1d:53:9a:b9: 25:53:a1:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjUwODIyMjA0OTE5WhcNMjUwODI5MjA0OTE5WjAYMRYwFAYD VQQDEw02OGE4ZDdjZi0zMGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs73U59PWoXjIItn4oHpBUEW31vdwmB0WeSsIAFuqqqXmjk3puIeF4SiviZ1h SaWWrS5Ja2xd/jowv14C/GX8OzcWSy/4t5fjFWmO43JcMg2JTbnNZRhfWZmRsSZ1 DIZGHxBoEemEl/bjtBqDykYvAa96ASJhQ6wOs7/xhxd8uWTL+SjNS/L/i+n4rCQP gT3fYPv9IoP5L9r2eNTehk5Nrjruqwxzvyn57tjkXvmE7OM5/8n1JI9ZhGhT6kCv hxWPrb/Oj2EY0SVC0hxDxPoKOLEcGeqMkz7oImkfsEdr2cPlqFGhLYi8PCSIfMlp j5GDXbvkoqdOAgy3sZ6fkKgm1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEnZw/D eFwe1i3D8fk4ecMP9RpdMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEA0p042dtC6/QZNFqAogAWN7q+K+9URbJkjqXGZjtcO0aeM9juRAh GlMcimivVByOIZAkq8FGo5f4esNKuitde2B8ZF1Ii6+x3FZbZjjh0ZU/fVi0O7kI +n6CQgR9L4t7E4ptDrAQvmEq86dbfG2kvkU9cFpeEfzrPG9UKV8ctvyCk/GvQ2XB AM6DvCQRuzgr4UcrFv/5mTgM05A6HfbQHvIHkZuPKDVIFe7wS9ut81LBHemGuFgp dZ8ibt3efpB/yLM/DEMlkc9AM/uv7UahkuAqaaiybNosy6hrY8Jsv7WmzTSS0VM1 8n4VaW97/2XrvKxzfzd5GB1TmrklU6Eu -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:45 2025 by rpki-client