$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: dGuEjuHv6JIsrLLUY6JC6uuZ0Z9yoLnB6kV0+DTcrUY= Subject key identifier: DB:C2:4F:F0:E3:1F:CC:96:6A:E1:6C:0C:DB:F5:34:14:5D:BE:E5:78 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 0202 Signing time: Sat 23 Aug 2025 02:28:08 +0000 Manifest this update: Sat 23 Aug 2025 02:28:07 +0000 Manifest next update: Sat 30 Aug 2025 02:28:07 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: UP+5HnxmNiQz2d/bmMbWWFUZQuKryzBZVcCw+VWgmME=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Aug 23 02:28:07 2025 GMT Not After : Aug 30 02:28:07 2025 GMT Subject: CN=68a92738-f934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:e9:75:db:bd:70:da:26:41:8b:19:fe:98: 1e:d0:89:7a:d7:1f:d8:d4:f0:ca:3d:47:7a:64:47: da:8c:dd:f0:a8:6c:f6:c7:1c:75:93:a8:7f:ae:01: d1:c6:a4:cc:50:4d:cf:e7:5f:0e:1b:f1:40:df:ac: bd:3d:40:53:ae:71:5a:82:eb:17:b0:2c:8c:82:59: 14:b8:93:cf:37:bf:d8:4b:9d:c0:cf:db:c2:99:58: da:ec:ac:f3:22:0c:ad:6d:4c:37:02:30:07:8b:0d: 1d:7e:a8:28:86:73:99:c2:21:37:98:27:88:13:48: 78:fa:91:86:a2:75:69:0e:91:d1:ac:d9:21:8d:5e: 0a:4d:b7:82:38:75:22:15:80:65:85:d4:df:13:cd: f0:ab:9e:a3:5f:b4:1d:0d:ad:20:ab:e2:35:de:36: 3a:0e:26:a3:56:b2:93:0e:a3:9c:55:08:96:0c:29: 31:db:24:e9:8a:48:90:02:27:05:b2:ca:3d:44:6e: 5a:4e:45:71:3a:e6:1a:90:7b:e4:b4:60:37:08:58: c8:16:25:cd:1a:cf:bf:9b:ef:97:a9:5a:9d:5b:97: 67:07:97:33:2e:ea:38:5d:d6:07:93:70:ef:92:f8: c5:33:bc:cb:c5:20:da:50:f2:9f:5a:05:9a:89:06: 70:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C2:4F:F0:E3:1F:CC:96:6A:E1:6C:0C:DB:F5:34:14:5D:BE:E5:78 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:37:ee:0d:ee:67:8e:f5:52:df:a9:e9:97:8d:52:7e:c5:f7: 22:02:e8:26:d7:d4:b2:5a:6d:bd:bb:13:42:fe:6f:0b:b2:0c: 83:2c:a7:ea:0a:64:c8:2d:51:22:d6:58:12:6c:b7:31:7b:e7: 25:8c:a2:40:c3:68:5c:2b:c1:dd:6c:2c:47:c0:de:bf:a6:bc: d2:32:f6:60:47:62:25:e3:9e:e2:71:0d:ce:f1:8c:c0:1a:1f: 31:e6:91:b7:01:2b:7e:76:b9:ed:5c:0f:f0:f9:e4:43:ad:dc: 8f:a4:63:eb:78:df:a3:20:9b:ab:34:97:06:45:40:a9:b6:08: bd:b6:30:c6:14:36:8c:a1:04:a9:53:b9:65:f4:83:f4:2f:04: ca:45:3e:04:31:d4:42:88:12:73:65:2b:4d:27:86:7a:45:e6: 48:53:e1:50:b2:04:81:9d:83:6c:0f:65:a3:e7:16:ed:f6:cb: 97:3e:45:02:af:ee:6b:a0:f7:6d:d0:0d:1e:33:35:ae:f9:89: 36:59:0f:e0:62:78:84:ec:ef:74:a8:45:a2:97:a1:3a:fa:7c: d2:94:da:95:0d:26:60:9b:ad:f4:a0:1b:39:47:38:b2:62:85: 10:6f:4a:d2:17:d3:9e:36:12:0f:80:e7:57:60:12:76:3d:07: 56:c5:68:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwODIzMDIyODA3WhcNMjUwODMwMDIyODA3WjAYMRYwFAYD VQQDEw02OGE5MjczOC1mOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqInpddu9cNomQYsZ/pge0Il61x/Y1PDKPUd6ZEfajN3wqGz2xxx1k6h/rgHR xqTMUE3P518OG/FA36y9PUBTrnFagusXsCyMglkUuJPPN7/YS53Az9vCmVja7Kzz IgytbUw3AjAHiw0dfqgohnOZwiE3mCeIE0h4+pGGonVpDpHRrNkhjV4KTbeCOHUi FYBlhdTfE83wq56jX7QdDa0gq+I13jY6DiajVrKTDqOcVQiWDCkx2yTpikiQAicF sso9RG5aTkVxOuYakHvktGA3CFjIFiXNGs+/m++XqVqdW5dnB5czLuo4XdYHk3Dv kvjFM7zLxSDaUPKfWgWaiQZwzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvCT/Dj H8yWauFsDNv1NBRdvuV4MB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCN+4N7meO9VLfqemXjVJ+xfciAugm19SyWm29uxNC/m8LsgyDLKfq CmTILVEi1lgSbLcxe+cljKJAw2hcK8HdbCxHwN6/przSMvZgR2Il457icQ3O8YzA Gh8x5pG3ASt+drntXA/w+eRDrdyPpGPreN+jIJurNJcGRUCptgi9tjDGFDaMoQSp U7ll9IP0LwTKRT4EMdRCiBJzZStNJ4Z6ReZIU+FQsgSBnYNsD2Wj5xbt9suXPkUC r+5roPdt0A0eMzWu+Yk2WQ/gYniE7O90qEWil6E6+nzSlNqVDSZgm630oBs5Rziy YoUQb0rSF9OeNhIPgOdXYBJ2PQdWxWgb -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:42 2025 by rpki-client