$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: 3oAhsgwPgGdcaKmtmOKi2VMmJ1q+R5MnLXSCPpMOn/w= Subject key identifier: 4E:41:08:C6:57:F1:06:CD:2B:26:5E:64:84:2C:3B:63:6C:D2:81:6F Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 0643 Signing time: Fri 22 Aug 2025 21:35:43 +0000 Manifest this update: Fri 22 Aug 2025 21:35:43 +0000 Manifest next update: Fri 29 Aug 2025 21:35:43 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: WkT9Ir/QCSpZ57hQCGTbl0ggJn+0/RBH4sHL0aqf8xg=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: iU7wUJ3hXR1AJP4W6iQ9Q4xhVfpuGa8z3zC49Uy6j+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Aug 22 21:35:43 2025 GMT Not After : Aug 29 21:35:43 2025 GMT Subject: CN=68a8e2af-71e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:ee:41:2b:bb:56:4d:a9:a2:11:24:c4:69: 2d:e9:f6:e8:65:1e:f8:1b:d0:19:cb:85:eb:f6:4a: d7:20:0d:fa:66:a7:d7:72:df:f8:ad:be:a1:df:69: c6:57:95:7f:77:0b:48:e7:10:b8:74:c9:b0:99:ee: 8e:b5:74:c8:2f:81:66:a0:83:bf:32:9a:21:3f:af: f1:a3:ea:36:7c:8d:d1:9b:3a:ac:c0:8d:df:57:82: d1:d2:ce:90:a0:0e:28:d5:6d:70:e9:ab:f4:4c:25: ce:b9:b7:ad:3a:2a:ac:59:d7:8b:39:6d:41:be:3d: 58:be:54:89:c0:d9:b2:df:6e:f7:97:93:a2:fd:7c: 04:c6:57:4a:ba:25:f1:0e:2a:a3:0d:2c:05:30:80: ea:26:ae:60:64:00:7e:41:7c:87:36:8b:e9:eb:61: 4c:a7:e8:39:cc:09:8e:b8:77:a9:bf:75:66:ea:3b: 44:d5:0a:3f:fd:f4:88:7a:4a:72:74:55:d9:d0:34: 42:30:38:82:5d:ae:b7:32:2a:be:2c:1e:78:b0:d3: 6c:85:58:94:cc:57:62:39:17:e4:78:f7:50:1a:21: d8:41:03:99:88:f1:82:6b:56:a1:c1:c4:db:39:90: cb:2b:f3:50:59:cf:f7:9f:7a:dc:7d:88:53:26:05: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:41:08:C6:57:F1:06:CD:2B:26:5E:64:84:2C:3B:63:6C:D2:81:6F X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:94:e5:d6:be:a9:85:66:d8:6a:c8:d5:15:6b:e2:52:46:09: 26:94:66:42:b6:21:1c:88:94:27:a7:37:a6:11:ef:de:60:d4: 1e:af:60:49:d2:27:79:a1:af:ea:d0:62:4b:8e:91:07:a0:3f: d0:a4:2b:1b:3c:e1:86:98:68:bb:d1:0b:00:d2:14:b1:d6:14: 7e:67:b8:4c:79:9a:49:aa:ac:f5:24:86:09:d8:b1:6a:63:8f: b0:91:57:46:5b:e0:28:45:48:07:b4:9b:d0:a8:41:68:4d:fc: 29:1b:2a:08:dc:d6:f7:0a:1e:f9:70:29:76:75:09:7e:58:d4: f8:94:d5:d2:be:6a:a4:ea:07:bb:b4:b9:4f:02:c5:04:3a:34: 17:94:02:83:64:bb:02:18:ef:ca:4c:11:63:fe:5c:3f:5d:68: f0:7b:bf:31:24:03:95:62:8e:1a:43:05:1b:32:17:fb:f6:5e: 26:3b:47:11:94:ab:f5:85:cc:3f:ae:b8:a7:2b:c6:5a:c2:57: e5:7c:c9:42:1a:91:e5:1a:92:89:35:a9:ad:69:ac:98:78:f8: 3b:38:3b:07:d7:1a:05:09:31:e2:d0:0f:02:ba:c7:fb:de:d8: 58:ec:3c:30:d3:0e:47:3a:c5:05:4d:82:e3:9c:b0:43:04:12: d5:77:22:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUwODIyMjEzNTQzWhcNMjUwODI5MjEzNTQzWjAYMRYwFAYD VQQDEw02OGE4ZTJhZi03MWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVjuQSu7Vk2pohEkxGkt6fboZR74G9AZy4Xr9krXIA36ZqfXct/4rb6h32nG V5V/dwtI5xC4dMmwme6OtXTIL4FmoIO/MpohP6/xo+o2fI3RmzqswI3fV4LR0s6Q oA4o1W1w6av0TCXOubetOiqsWdeLOW1Bvj1YvlSJwNmy3273l5Oi/XwExldKuiXx DiqjDSwFMIDqJq5gZAB+QXyHNovp62FMp+g5zAmOuHepv3Vm6jtE1Qo//fSIekpy dFXZ0DRCMDiCXa63Miq+LB54sNNshViUzFdiORfkePdQGiHYQQOZiPGCa1ahwcTb OZDLK/NQWc/3n3rcfYhTJgXl4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5BCMZX 8QbNKyZeZIQsO2Ns0oFvMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9lOXWvqmFZthqyNUVa+JSRgkmlGZCtiEciJQnpzemEe/eYNQer2BJ 0id5oa/q0GJLjpEHoD/QpCsbPOGGmGi70QsA0hSx1hR+Z7hMeZpJqqz1JIYJ2LFq Y4+wkVdGW+AoRUgHtJvQqEFoTfwpGyoI3Nb3Ch75cCl2dQl+WNT4lNXSvmqk6ge7 tLlPAsUEOjQXlAKDZLsCGO/KTBFj/lw/XWjwe78xJAOVYo4aQwUbMhf79l4mO0cR lKv1hcw/rrinK8ZawlflfMlCGpHlGpKJNamtaayYePg7ODsH1xoFCTHi0A8Cusf7 3thY7Dww0w5HOsUFTYLjnLBDBBLVdyKG -----END CERTIFICATE-----Generated at Sat Aug 23 10:39:10 2025 by rpki-client