$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: R9Beq8oxo6u/MlbomeEdHAlCRf6CYbfaakGBLjJr29c= Subject key identifier: E9:E5:CC:9E:8F:AD:8E:56:62:C5:F2:AF:61:18:7A:52:33:E6:F3:31 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E3E Signing time: Fri 22 Aug 2025 17:53:39 +0000 Manifest this update: Fri 22 Aug 2025 17:53:39 +0000 Manifest next update: Fri 29 Aug 2025 17:53:39 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: PnxgVzXeSX9ytrI7QHxc4hzBin6xMHVoDolNTdtjuLI=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NeUqjo2VYHUQAlZoEGW65z9tYOjTgZvuRZo90c+p6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3655 (0xe47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Aug 22 17:53:39 2025 GMT Not After : Aug 29 17:53:39 2025 GMT Subject: CN=68a8aea3-f7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:ae:d3:2f:62:94:47:a8:23:7f:ef:a2:c3: 52:26:0d:46:f1:5c:85:92:8a:79:ec:1a:3a:26:98: a3:8c:52:c2:50:02:12:56:6b:30:8c:39:32:65:36: a1:ae:7f:81:e8:5c:b1:a2:0c:da:ac:52:44:47:fa: e0:ae:e0:6c:ac:2d:97:1b:ff:3d:0b:81:b7:18:71: 52:b3:72:77:37:e1:f8:d3:55:26:6f:8a:d7:ae:a6: c9:10:83:07:4e:29:32:27:8e:99:ab:ce:2e:c7:c3: 2d:5e:e4:21:6b:67:db:37:50:9f:2d:43:ad:21:58: f8:7d:78:32:59:56:5c:48:ac:f4:ce:19:7d:89:ae: e8:1b:71:83:3c:ad:17:c3:fe:28:2e:c3:db:00:86: e4:7c:8a:32:7d:90:fb:73:a5:32:dd:07:63:5e:b1: f8:ed:37:b3:a7:e8:37:0c:60:73:27:df:c0:f5:39: 8a:7f:27:23:7b:c6:b8:e0:24:1a:ff:90:32:8f:2d: 96:41:9e:a4:fa:18:f9:08:0f:69:d0:7e:d1:25:fd: 5e:4e:f7:f5:40:e1:71:c0:b9:2f:4b:51:65:8b:8e: 92:91:92:59:d4:b8:47:1a:fe:40:e2:98:cb:02:91: 29:f0:88:58:98:44:a1:9a:af:50:72:0b:61:96:18: ec:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E5:CC:9E:8F:AD:8E:56:62:C5:F2:AF:61:18:7A:52:33:E6:F3:31 X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:42:2b:c7:9a:93:90:25:32:0e:7c:ea:15:2c:ae:9c:56:71: cc:58:9e:23:d9:01:c3:ec:a0:f0:a9:80:67:8d:b2:3e:12:93: 39:97:c8:d8:a9:cf:3d:00:3e:d8:97:b8:0b:34:99:bd:d2:33: 52:57:ef:e3:41:9e:03:3d:da:7d:02:1c:4a:ef:12:f1:51:a6: 0e:a1:d1:31:09:54:85:79:57:81:c0:81:24:dc:45:ad:d3:80: 1b:7a:37:32:1f:41:be:5b:85:b5:9c:8c:25:31:26:62:54:a9: 38:3a:f6:b7:c6:6c:93:10:c2:02:be:6d:98:68:03:6c:96:7e: 26:8e:c8:70:e4:fc:d3:2a:63:b8:ea:59:d9:25:f7:ba:7d:5f: af:36:a2:d9:0a:9d:61:0d:b7:ba:a5:09:ec:38:52:ea:37:e9: 7c:ec:69:f4:3d:39:b3:b4:45:45:8f:66:fb:90:4b:fd:f8:a6: dc:d0:97:f4:0b:7e:4c:d2:f0:d3:88:c8:2f:1d:bb:db:46:04: c7:e2:d3:17:96:7c:cd:7e:f3:1a:f8:2d:34:94:4c:16:d2:46: 48:d7:4e:87:53:8b:64:12:42:e7:dc:90:e0:d7:7e:9b:64:6b: 86:fe:f4:32:75:5e:a0:98:a8:54:d6:4e:eb:8f:d7:32:30:3b: 34:fb:c8:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUwODIyMTc1MzM5WhcNMjUwODI5MTc1MzM5WjAYMRYwFAYD VQQDEw02OGE4YWVhMy1mN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pOu0y9ilEeoI3/vosNSJg1G8VyFkop57Bo6JpijjFLCUAISVmswjDkyZTah rn+B6FyxogzarFJER/rgruBsrC2XG/89C4G3GHFSs3J3N+H401Umb4rXrqbJEIMH TikyJ46Zq84ux8MtXuQha2fbN1CfLUOtIVj4fXgyWVZcSKz0zhl9ia7oG3GDPK0X w/4oLsPbAIbkfIoyfZD7c6Uy3QdjXrH47Tezp+g3DGBzJ9/A9TmKfycje8a44CQa /5Ayjy2WQZ6k+hj5CA9p0H7RJf1eTvf1QOFxwLkvS1Fli46SkZJZ1LhHGv5A4pjL ApEp8IhYmEShmq9QcgthlhjsGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnlzJ6P rY5WYsXyr2EYelIz5vMxMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDQivHmpOQJTIOfOoVLK6cVnHMWJ4j2QHD7KDwqYBnjbI+EpM5l8jY qc89AD7Yl7gLNJm90jNSV+/jQZ4DPdp9AhxK7xLxUaYOodExCVSFeVeBwIEk3EWt 04AbejcyH0G+W4W1nIwlMSZiVKk4Ova3xmyTEMICvm2YaANsln4mjshw5PzTKmO4 6lnZJfe6fV+vNqLZCp1hDbe6pQnsOFLqN+l87Gn0PTmztEVFj2b7kEv9+Kbc0Jf0 C35M0vDTiMgvHbvbRgTH4tMXlnzNfvMa+C00lEwW0kZI106HU4tkEkLn3JDg136b ZGuG/vQydV6gmKhU1k7rj9cyMDs0+8hy -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:52 2025 by rpki-client