$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json) Hash identifier: Bj3Ld/TzByolFxci7+FWIg5us2OZVpXWgjs1wYTqwlU= Subject key identifier: EE:35:5B:53:B6:4E:97:50:FB:6B:7A:4B:63:15:D5:9B:2C:BC:13:CF Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft Manifest number: 03 Signing time: Sat 23 Aug 2025 08:25:30 +0000 Manifest this update: Sat 23 Aug 2025 08:25:29 +0000 Manifest next update: Sat 30 Aug 2025 08:25:29 +0000 Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: naw1SLQF1t7yXNXWe6+mBGU0P7KfLA+V+cbsC7OBUVk=) 2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: 8dKxmjrD276AcnRHkqC+TGlsqBHgEpXfogCpAno8Nm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E Validity Not Before: Aug 23 08:25:29 2025 GMT Not After : Aug 30 08:25:29 2025 GMT Subject: CN=68a97afa-40b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:20:38:8f:06:44:ad:83:ed:0a:ba:3c:eb: 64:43:e1:96:01:ea:da:ef:e2:e1:16:e1:ca:27:ee: 09:ab:6c:c9:6b:e4:bd:3f:02:e4:f0:a3:b1:0b:f6: 67:d7:8f:22:3d:7b:a8:21:9d:15:94:cb:b0:36:3b: 56:eb:0e:68:1b:48:9f:b6:f6:08:87:ae:07:ea:60: 1c:7c:51:16:07:0c:a5:40:bc:ce:54:30:92:11:29: a6:53:0f:d5:b4:ac:ef:07:57:1f:25:97:05:88:7d: f9:69:6c:61:cb:55:00:ad:b5:26:62:75:65:8b:15: cb:43:a4:c0:ef:be:36:01:6d:ca:56:65:f7:15:31: 3d:5b:98:a5:b8:21:09:90:07:cf:f6:0a:c8:53:f2: 69:c2:90:6a:53:5d:f9:e1:e5:fa:1b:26:31:99:97: 3e:fb:d8:7e:d0:18:80:2b:25:89:8b:79:f7:b0:6a: 89:44:11:fe:0c:88:1f:32:35:27:bd:71:0f:e7:cc: 29:e1:fb:e5:92:0b:f8:62:ce:a4:6a:de:4f:5e:b2: ce:3e:55:cb:c3:9b:ea:02:32:3c:60:15:f4:a2:d7: 32:33:89:3a:6a:66:7b:2a:3f:3b:25:7f:d9:0e:09: fa:88:f2:93:14:44:cd:d0:48:e8:72:c2:80:b7:c1: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:35:5B:53:B6:4E:97:50:FB:6B:7A:4B:63:15:D5:9B:2C:BC:13:CF X509v3 Authority Key Identifier: keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c0:3d:74:a9:bf:f5:c8:d0:3a:02:c6:62:53:dc:f9:43:3e: 5e:48:6d:bf:6d:ef:f4:8f:64:04:05:6a:88:69:e6:ad:51:9d: 1d:62:48:48:20:ca:33:7d:8b:c8:fd:46:75:a8:d7:a6:c9:98: dc:b7:06:5e:6b:8d:bb:29:d1:e5:09:d1:74:60:4e:dd:89:d9: 4c:38:e0:2a:5e:4c:fb:55:38:34:d1:e4:21:28:d7:87:b7:77: c4:40:ab:fd:50:54:45:07:74:c1:c4:b2:54:82:39:45:41:64: ea:68:44:81:24:22:33:24:ac:94:fa:fe:4d:07:1c:c9:6e:7f: 5e:51:0c:40:7a:8e:86:44:e9:a8:8a:5d:d5:28:27:c7:fe:c7: 66:fe:f4:e9:66:89:92:f7:da:5a:40:3f:84:09:25:ac:ba:0a: a4:b8:bf:ad:82:a1:1b:d7:f3:38:92:4a:ab:bc:62:f4:02:6a: 96:5b:b1:a0:3f:cd:0a:6c:ba:4a:5c:50:e3:f4:99:4d:c6:8b: e5:37:6f:4d:74:cb:3f:63:3a:95:6a:81:b0:da:e9:ed:d4:f2: ce:47:db:ea:17:3f:51:26:0d:ef:d6:e6:6f:c7:a1:e4:b4:d8: 76:44:4c:55:a2:d5:e1:e8:4e:9f:05:ec:f5:fc:ea:51:0e:b3: 89:d6:d2:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Nzc2MDExMC8GA1UEBRMoRkU0OUNGMzNGQkU0MjQ3QjJCQTFFRTlBNTQ4NEE3NDBB RDNCNkUwRTAeFw0yNTA4MjMwODI1MjlaFw0yNTA4MzAwODI1MjlaMBgxFjAUBgNV BAMTDTY4YTk3YWZhLTQwYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyIiA4jwZErYPtCro862RD4ZYB6trv4uEW4con7gmrbMlr5L0/AuTwo7EL9mfX jyI9e6ghnRWUy7A2O1brDmgbSJ+29giHrgfqYBx8URYHDKVAvM5UMJIRKaZTD9W0 rO8HVx8llwWIfflpbGHLVQCttSZidWWLFctDpMDvvjYBbcpWZfcVMT1bmKW4IQmQ B8/2CshT8mnCkGpTXfnh5fobJjGZlz772H7QGIArJYmLefewaolEEf4MiB8yNSe9 cQ/nzCnh++WSC/hizqRq3k9ess4+VcvDm+oCMjxgFfSi1zIziTpqZnsqPzslf9kO CfqI8pMURM3QSOhywoC3wYYDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7jVbU7ZO l1D7a3pLYxXVmyy8E88wHwYDVR0jBBgwFoAU/knPM/vkJHsroe6aVISnQK07bg4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzdENTMxNDIwN0Uz RjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhzcm9lNmFWSVNuUUswN2Jn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2tuUE1fdmtKSHNyb2U2YVZJU25RSzA3Ymc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NzYwLzdENTMxNDIwN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhz cm9lNmFWSVNuUUswN2JnNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACDAPXSpv/XI0DoCxmJT3PlDPl5Ibb9t7/SPZAQFaohp5q1RnR1iSEgg yjN9i8j9RnWo16bJmNy3Bl5rjbsp0eUJ0XRgTt2J2Uw44CpeTPtVODTR5CEo14e3 d8RAq/1QVEUHdMHEslSCOUVBZOpoRIEkIjMkrJT6/k0HHMluf15RDEB6joZE6aiK XdUoJ8f+x2b+9OlmiZL32lpAP4QJJay6CqS4v62CoRvX8ziSSqu8YvQCapZbsaA/ zQpsukpcUOP0mU3Gi+U3b010yz9jOpVqgbDa6e3U8s5H2+oXP1EmDe/W5m/HoeS0 2HZETFWi1eHoTp8F7PX86lEOs4nW0iU= -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:42 2025 by rpki-client