$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json) Hash identifier: SYJfAIp3Jlr6LTkFK+OPHE4ZmwVC2lptWwy+qV5dpEc= Subject key identifier: 50:E9:0B:CC:92:09:5F:05:89:43:34:8C:EB:BF:9A:A9:84:0B:62:43 Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft Manifest number: 063F Signing time: Fri 22 Aug 2025 22:51:48 +0000 Manifest this update: Fri 22 Aug 2025 22:51:47 +0000 Manifest next update: Fri 29 Aug 2025 22:51:47 +0000 Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: MDkbUnYR+j+s6NUEMO/T80/9EY9ipZoYmgh6bTQKRQU=) 2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Validity Not Before: Aug 22 22:51:47 2025 GMT Not After : Aug 29 22:51:47 2025 GMT Subject: CN=68a8f484-54c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:c3:eb:cc:bd:1c:8a:51:a6:6f:f6:e1:07: 0d:bc:a5:5e:37:74:18:88:da:fa:be:a6:13:c4:13: 6e:25:2c:44:df:fa:60:62:f3:24:0d:0e:5a:69:a1: 6e:5c:44:75:7b:58:a2:cd:26:b8:b4:43:58:52:d5: 4a:6e:fb:5c:c0:d1:6a:f8:8d:7e:1c:42:5f:47:82: 56:d5:ba:24:ad:94:29:47:10:65:02:9d:05:8d:05: d6:9c:81:11:f0:77:d4:ff:ce:75:88:f4:d8:cd:89: ac:74:6c:b3:5a:fa:fa:a5:7e:3b:2b:b1:a1:cc:fa: e6:ca:0c:46:c7:5d:ce:2e:e7:f9:96:ff:19:27:35: 4d:9d:3e:a8:44:6a:61:f8:b1:0d:48:68:ae:b8:0e: e7:48:2f:f0:f1:29:fb:9e:a5:33:a2:f4:cc:66:a7: 22:8c:87:71:75:42:2a:42:66:66:45:4c:8d:ec:07: 61:a4:d0:14:d7:8a:33:10:6b:c8:1e:29:89:ef:de: 30:ba:65:df:b1:e2:d4:67:ef:31:81:2f:aa:9b:9a: d5:5c:11:b2:ac:6f:b4:6c:a4:77:2e:07:48:93:00: 03:37:6f:9b:65:31:cc:49:8a:c5:6d:64:e5:1f:6c: 69:38:41:5d:0c:c7:24:20:cc:87:e4:2a:2d:3f:7d: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:0B:CC:92:09:5F:05:89:43:34:8C:EB:BF:9A:A9:84:0B:62:43 X509v3 Authority Key Identifier: keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:06:e4:07:90:b9:ff:96:74:87:2d:79:01:54:49:fe:78:b8: 89:eb:d0:3a:12:a8:de:80:7c:6a:3b:fb:7e:0c:38:68:c1:62: da:1a:b4:7c:dd:1f:56:44:89:72:c9:1e:9d:01:56:50:d4:0b: b4:dd:2d:72:26:3f:f3:71:e9:5b:67:3a:c2:bd:a3:c4:e8:20: c4:89:ea:c8:8f:71:54:de:b5:ba:a5:ef:4c:e8:6a:57:34:56: 02:1f:e9:6f:c5:c7:4f:b9:4f:dd:3a:6a:78:d1:be:4d:6a:47: e0:ab:6e:d5:48:7b:69:b5:b1:dc:1b:0b:2c:94:3d:1d:45:ec: 2e:23:11:7f:b2:29:ca:57:92:47:f7:74:d8:d5:74:be:0f:5c: c3:2a:f4:56:0a:94:53:13:bf:d6:05:f1:14:42:53:46:89:79: 89:ac:74:67:5d:d0:dd:8d:e4:26:6b:70:f9:3b:e5:7b:cc:cc: 13:2e:4e:fd:e4:e6:05:f0:c9:6b:d8:db:ca:91:4e:8e:4c:45: eb:6a:f1:28:0d:30:15:a8:2d:e3:cd:c7:3b:6a:4f:9c:9c:2d: b9:f4:67:6f:27:01:27:78:62:37:89:bc:6e:2a:63:80:52:98: 89:d3:0e:cf:c4:59:0a:1f:4c:f2:0f:94:73:e3:15:35:df:c5: b4:35:30:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw MTIzNkIyN0MwHhcNMjUwODIyMjI1MTQ3WhcNMjUwODI5MjI1MTQ3WjAYMRYwFAYD VQQDEw02OGE4ZjQ4NC01NGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpnD68y9HIpRpm/24QcNvKVeN3QYiNr6vqYTxBNuJSxE3/pgYvMkDQ5aaaFu XER1e1iizSa4tENYUtVKbvtcwNFq+I1+HEJfR4JW1bokrZQpRxBlAp0FjQXWnIER 8HfU/851iPTYzYmsdGyzWvr6pX47K7GhzPrmygxGx13OLuf5lv8ZJzVNnT6oRGph +LENSGiuuA7nSC/w8Sn7nqUzovTMZqcijIdxdUIqQmZmRUyN7AdhpNAU14ozEGvI HimJ794wumXfseLUZ+8xgS+qm5rVXBGyrG+0bKR3LgdIkwADN2+bZTHMSYrFbWTl H2xpOEFdDMckIMyH5CotP32A4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDpC8yS CV8FiUM0jOu/mqmEC2JDMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs aE9Rck5ETk04WElCSTJzbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCBuQHkLn/lnSHLXkBVEn+eLiJ69A6EqjegHxqO/t+DDhowWLaGrR8 3R9WRIlyyR6dAVZQ1Au03S1yJj/zcelbZzrCvaPE6CDEierIj3FU3rW6pe9M6GpX NFYCH+lvxcdPuU/dOmp40b5Nakfgq27VSHtptbHcGwsslD0dRewuIxF/sinKV5JH 93TY1XS+D1zDKvRWCpRTE7/WBfEUQlNGiXmJrHRnXdDdjeQma3D5O+V7zMwTLk79 5OYF8Mlr2NvKkU6OTEXravEoDTAVqC3jzcc7ak+cnC259GdvJwEneGI3ibxuKmOA UpiJ0w7PxFkKH0zyD5Rz4xU138W0NTBd -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:18 2025 by rpki-client