$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: RpOhOWKQIIiuKRGQCPhPQBPtahSOidEKEV5z+OxghAs= Subject key identifier: AB:34:10:1B:C0:3D:B8:D3:24:63:C6:A2:39:96:C0:52:1C:F5:92:9C Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0A81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0A6F Signing time: Fri 22 Aug 2025 19:47:47 +0000 Manifest this update: Fri 22 Aug 2025 19:47:47 +0000 Manifest next update: Fri 29 Aug 2025 19:47:47 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: dFDSLB8KfcC/lhP8pJud2guJCj7aSIKr5jJZqM85m8Q=) 2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=) 3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2689 (0xa81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Aug 22 19:47:47 2025 GMT Not After : Aug 29 19:47:47 2025 GMT Subject: CN=68a8c963-5461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:21:d7:04:75:5b:96:14:c9:7f:5b:35:29: aa:83:28:5a:62:b0:6f:f0:1c:59:c5:4d:b8:fe:5f: bc:32:61:69:ff:4f:f1:66:d9:8c:36:da:33:07:b5: 8f:37:01:47:d5:e2:d7:15:cf:b5:17:0c:c9:e1:a0: ea:8b:ff:0c:56:bc:c6:4f:a1:6c:e1:6a:9f:31:d4: 2e:07:1a:20:fa:5b:49:35:a7:8d:1a:1f:c4:7b:45: 03:0d:da:e7:a8:bb:ff:59:86:52:ec:37:00:25:59: 97:91:2c:9f:b6:f8:ee:15:fd:fe:97:e1:a1:a0:57: 55:c7:64:d9:ec:eb:5a:e5:80:1e:6b:5e:4f:d2:30: 36:52:8e:69:5c:62:db:b1:39:b1:8a:fc:bf:5b:07: 5d:b7:ab:9a:d1:8b:3e:7d:bf:16:e4:54:06:aa:71: e1:fe:7e:90:a9:69:bc:d9:39:59:41:50:fd:c5:10: 09:0b:43:f6:8d:f5:e3:7c:06:35:21:04:2c:c5:d0: 15:2c:5f:6d:3c:48:b4:ee:e7:3e:d0:69:61:2f:ad: b0:b1:ac:14:50:2d:00:07:1b:4d:e1:19:8f:96:2d: 6d:f3:22:8f:86:9f:c7:ed:8c:d6:f6:65:59:56:11: bd:ab:23:52:79:d1:79:bf:86:15:34:af:ec:19:90: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:34:10:1B:C0:3D:B8:D3:24:63:C6:A2:39:96:C0:52:1C:F5:92:9C X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:43:5e:b9:b2:03:47:a1:5c:6f:07:f5:ca:54:f3:f8:74:53: a1:6b:16:e1:a2:ec:64:9e:a0:b7:44:76:12:98:c0:c9:69:91: 63:44:cb:80:42:78:cc:51:75:2b:5f:18:6b:fb:b8:95:e4:36: f0:a1:32:3e:57:4c:ba:17:12:50:16:1a:ff:1f:c8:6d:1b:fe: 18:11:a4:8d:bb:66:63:b1:a7:24:dc:40:ba:12:8a:6f:95:4b: 60:74:a0:c4:a2:89:a0:0f:ba:ad:09:e2:69:5e:46:c2:d1:18: 25:12:5b:4c:19:00:ac:e7:55:4c:30:4f:3c:af:71:29:ed:5b: 40:ee:9e:9e:3a:e3:d5:fe:ba:24:1e:de:e6:67:99:c2:5e:a1: 5a:68:38:0c:f3:92:38:12:eb:6d:34:f6:bf:27:2b:a7:be:91: ba:7c:0f:49:ec:2d:c9:56:a7:5f:5e:26:03:f4:4a:fe:0c:9c: 75:d2:34:46:a1:8c:7d:4e:43:37:99:5b:0a:f9:30:1c:09:c6: f5:02:3f:58:3b:27:53:20:a4:8e:cc:66:90:05:8e:bd:7e:fe: 29:8c:0d:a8:ed:29:c9:5b:44:dc:dc:79:a5:55:16:ca:7e:38: 5a:62:ce:72:1c:be:c7:52:b9:a5:b5:13:65:5b:30:80:8d:3a: 11:d7:2d:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjUwODIyMTk0NzQ3WhcNMjUwODI5MTk0NzQ3WjAYMRYwFAYD VQQDEw02OGE4Yzk2My01NDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFYh1wR1W5YUyX9bNSmqgyhaYrBv8BxZxU24/l+8MmFp/0/xZtmMNtozB7WP NwFH1eLXFc+1FwzJ4aDqi/8MVrzGT6Fs4WqfMdQuBxog+ltJNaeNGh/Ee0UDDdrn qLv/WYZS7DcAJVmXkSyftvjuFf3+l+GhoFdVx2TZ7Ota5YAea15P0jA2Uo5pXGLb sTmxivy/Wwddt6ua0Ys+fb8W5FQGqnHh/n6QqWm82TlZQVD9xRAJC0P2jfXjfAY1 IQQsxdAVLF9tPEi07uc+0GlhL62wsawUUC0ABxtN4RmPli1t8yKPhp/H7YzW9mVZ VhG9qyNSedF5v4YVNK/sGZDOqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs0EBvA PbjTJGPGojmWwFIc9ZKcMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVQ165sgNHoVxvB/XKVPP4dFOhaxbhouxknqC3RHYSmMDJaZFjRMuA QnjMUXUrXxhr+7iV5DbwoTI+V0y6FxJQFhr/H8htG/4YEaSNu2Zjsack3EC6Eopv lUtgdKDEoomgD7qtCeJpXkbC0RglEltMGQCs51VMME88r3Ep7VtA7p6eOuPV/rok Ht7mZ5nCXqFaaDgM85I4EuttNPa/JyunvpG6fA9J7C3JVqdfXiYD9Er+DJx10jRG oYx9TkM3mVsK+TAcCcb1Aj9YOydTIKSOzGaQBY69fv4pjA2o7SnJW0Tc3HmlVRbK fjhaYs5yHL7HUrmltRNlWzCAjToR1y0J -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:58 2025 by rpki-client