$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: yq/u/b+8lrBIVAzYsdteGRifOTG9Oxm1OmoJ2CUibB0= Subject key identifier: 56:1C:F9:A6:34:39:9E:AC:3B:52:08:48:13:36:D1:CB:89:5E:B1:FE Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: 86 Signing time: Sat 23 Aug 2025 06:52:29 +0000 Manifest this update: Sat 23 Aug 2025 06:52:28 +0000 Manifest next update: Sat 30 Aug 2025 06:52:28 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: fXs+PPUuhD5mxGn7jg9T1YFK3PuX66q7/bHPndYEX4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Aug 23 06:52:28 2025 GMT Not After : Aug 30 06:52:28 2025 GMT Subject: CN=68a9652c-d84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:1b:75:ea:14:72:f1:09:bb:02:89:83:b1: 28:7e:26:50:2a:24:54:93:e0:8b:01:d0:30:d6:d6: b1:56:cc:6a:70:d5:2f:60:19:dc:64:d0:15:6e:c7: 90:78:4a:8d:35:70:5a:c0:a4:60:dc:30:52:35:e0: 76:f0:2d:b1:30:62:1e:bd:65:d9:37:66:e0:05:c2: d1:df:b7:37:49:7c:e0:a4:54:15:45:6d:fb:b1:6a: a7:62:7d:7a:4f:0d:45:55:5f:95:91:b2:4a:3c:06: b3:d6:26:f0:8e:37:d8:b9:e7:37:24:34:6e:7e:ec: 1c:07:a3:2e:38:e7:8e:e5:bf:5d:f2:e7:ba:f7:95: dc:51:90:6e:dc:4b:6b:46:d1:48:b3:08:6f:ce:f7: 25:59:60:e2:fa:e5:1c:dd:6e:49:01:3c:d0:2d:9d: ba:e5:b0:97:2d:d3:92:e0:8a:15:f8:ea:df:4c:54: c5:5b:28:75:10:bd:99:22:17:64:e9:11:92:93:ae: 69:ab:60:10:40:dc:f4:80:08:c4:4e:4e:d5:97:6b: 95:b8:a8:22:64:31:26:ca:2b:81:32:2a:b0:99:8d: 81:51:f3:c2:98:68:cf:0d:ec:7d:1c:b1:33:05:1f: 89:40:b8:ad:75:51:05:fb:3b:79:4f:94:46:60:73: 57:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1C:F9:A6:34:39:9E:AC:3B:52:08:48:13:36:D1:CB:89:5E:B1:FE X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a9:f3:ae:82:19:77:01:f7:a2:79:12:01:4c:f6:65:15:04: 57:62:56:56:31:93:39:d0:56:37:0b:42:a5:04:17:10:2e:ab: 8c:81:70:5c:d0:fc:07:1b:81:03:9e:1d:45:ac:9a:93:89:d2: 62:c8:61:91:9f:a6:16:02:c5:e4:c7:10:8b:73:4b:dd:e9:4c: ce:d1:02:62:ae:2a:c2:1c:50:b9:3f:39:32:f0:33:fc:35:16: 50:5b:41:12:61:6d:89:56:51:28:1c:02:ba:16:b8:cc:a1:6a: 21:48:07:af:01:44:fb:87:25:5f:72:11:bf:42:7a:cd:f2:aa: c9:9e:4b:cd:13:d1:91:8f:4c:ce:cc:bc:b3:a1:f2:e7:21:e4: f6:7a:cd:7d:06:8b:70:e3:25:1c:92:38:b3:73:06:48:85:3c: 6e:cc:33:f6:e2:c6:ce:e7:2a:29:a5:f4:27:96:04:34:81:20: 7a:5b:b9:5c:49:e2:d8:73:b4:aa:fb:13:0c:25:5b:bb:9b:4e: 56:14:16:94:08:ac:82:b4:3a:34:84:ab:12:85:88:72:d6:62: db:6f:20:ed:ac:ac:2e:ff:1d:17:8e:9f:9f:7b:2b:85:86:a8: 89:1e:1e:4f:db:9e:0e:24:7c:ba:a8:d3:19:fb:1c:10:5f:d4: c9:ba:8a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY2RTMxMTAvBgNVBAUTKDJCRjBBRTY3OTBEMkYwMUREMURCNjczODMxMzJEQzQw M0I2NzQ1MjIwHhcNMjUwODIzMDY1MjI4WhcNMjUwODMwMDY1MjI4WjAYMRYwFAYD VQQDEw02OGE5NjUyYy1kODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeMbdeoUcvEJuwKJg7EofiZQKiRUk+CLAdAw1taxVsxqcNUvYBncZNAVbseQ eEqNNXBawKRg3DBSNeB28C2xMGIevWXZN2bgBcLR37c3SXzgpFQVRW37sWqnYn16 Tw1FVV+VkbJKPAaz1ibwjjfYuec3JDRufuwcB6MuOOeO5b9d8ue695XcUZBu3Etr RtFIswhvzvclWWDi+uUc3W5JATzQLZ265bCXLdOS4IoV+OrfTFTFWyh1EL2ZIhdk 6RGSk65pq2AQQNz0gAjETk7Vl2uVuKgiZDEmyiuBMiqwmY2BUfPCmGjPDex9HLEz BR+JQLitdVEF+zt5T5RGYHNXUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYc+aY0 OZ6sO1IISBM20cuJXrH+MB8GA1UdIwQYMBaAFCvwrmeQ0vAd0dtnODEy3EA7Z0Ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjZFMy9GMkZCODI1MEI1 REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhCM1IyMmM0TVRMY1FEdG5S U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjZFMy9GMkZCODI1MEI1REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhC M1IyMmM0TVRMY1FEdG5SU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJqfOughl3AfeieRIBTPZlFQRXYlZWMZM50FY3C0KlBBcQLquMgXBc 0PwHG4EDnh1FrJqTidJiyGGRn6YWAsXkxxCLc0vd6UzO0QJirirCHFC5Pzky8DP8 NRZQW0ESYW2JVlEoHAK6FrjMoWohSAevAUT7hyVfchG/QnrN8qrJnkvNE9GRj0zO zLyzofLnIeT2es19Botw4yUckjizcwZIhTxuzDP24sbO5yoppfQnlgQ0gSB6W7lc SeLYc7Sq+xMMJVu7m05WFBaUCKyCtDo0hKsShYhy1mLbbyDtrKwu/x0Xjp+feyuF hqiJHh5P254OJHy6qNMZ+xwQX9TJuoqu -----END CERTIFICATE-----Generated at Sun Aug 24 09:02:28 2025 by rpki-client