$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: KRkX8spJyl04e1xbGCNM6JY9PTXrxGiSURaPJjPLnb8= Subject key identifier: C6:39:CB:FD:61:0B:B7:4A:9C:C3:F2:4F:EB:EE:14:2C:B0:5D:2C:DF Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: 0122 Signing time: Sat 23 Aug 2025 04:52:50 +0000 Manifest this update: Sat 23 Aug 2025 04:52:49 +0000 Manifest next update: Sat 30 Aug 2025 04:52:49 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: zDDcIkyZTgU4GR0UW7XiYK5zCmnij5lkiFtNM+XDiig=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: Aug 23 04:52:49 2025 GMT Not After : Aug 30 04:52:49 2025 GMT Subject: CN=68a94921-0c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:dd:f2:f7:97:32:4e:89:c9:61:f2:52:97: 12:ea:0e:e8:c0:b7:a6:8d:67:83:85:f0:a3:62:94: 48:7d:3d:de:53:cc:16:25:14:28:e7:2c:8d:51:8d: 15:27:7e:3c:d6:99:df:44:15:e7:1e:05:18:fc:ad: e6:57:f6:0a:7c:fe:2a:58:af:1b:fc:6c:cf:97:d9: 51:0b:e1:33:b1:fd:dd:17:db:fa:f4:c5:8e:e3:1d: 02:bc:92:7c:ef:a5:f9:eb:c7:92:11:3c:69:49:52: c9:7c:8d:b0:e8:65:f5:dc:86:65:76:03:79:53:23: 34:3d:8b:60:26:d7:76:fa:47:0f:b5:cd:c6:eb:ab: f1:93:9b:cd:20:16:32:31:25:a1:45:e5:3f:03:65: c1:26:5d:64:1d:c9:50:6a:15:01:00:7d:cc:c1:85: 44:24:fa:3b:73:98:70:39:6b:f5:1a:18:f6:53:0f: d0:e1:32:4e:6b:f5:69:b4:f5:c9:85:44:40:56:d2: 94:25:94:a5:33:97:5b:ba:b4:83:fc:04:f6:f3:6e: 56:f1:a0:d6:a0:1a:95:d6:8a:5e:b4:9b:c7:39:ae: e4:d1:22:c0:98:ad:86:2a:51:d1:c4:9d:46:3e:15: 00:cc:3f:50:55:6c:3a:45:a0:7b:35:b2:80:1e:f2: 88:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:39:CB:FD:61:0B:B7:4A:9C:C3:F2:4F:EB:EE:14:2C:B0:5D:2C:DF X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:29:45:96:a9:c0:7e:b0:b9:ac:3d:f0:c7:b0:38:b2:70:fe: ba:c5:89:5e:a1:09:e5:1f:3a:a8:36:66:a3:14:06:19:f9:cf: 2e:72:e8:04:3c:b4:ac:1b:00:e9:86:a9:61:b3:95:41:77:86: bd:22:d2:90:10:26:1b:be:9e:63:70:a3:aa:2c:1a:f1:59:19: 12:db:ae:bd:10:20:d2:52:7e:f1:3d:3d:b8:18:d3:90:97:6e: 3e:48:a3:84:76:79:87:dc:2f:f1:bb:d8:6f:83:a9:1d:a1:d6: 1c:5c:bb:e5:1f:e2:c8:9e:b9:f4:6e:96:72:bc:a5:79:f7:12: 88:47:e0:9b:f8:7e:76:89:de:5d:67:27:34:3d:69:b0:8b:3f: ef:4d:71:3e:cf:2b:ab:31:98:a3:16:6f:1a:3f:ee:ea:ee:65: d7:89:0a:84:69:81:09:8c:c9:4d:ab:ec:39:83:7c:8d:ee:5a: d1:ae:e2:43:2d:4d:1d:d8:5f:b5:20:18:63:89:95:f0:56:36: f6:56:4b:ab:7e:53:42:15:96:cb:58:0c:3e:d5:1b:5b:9c:65: 22:13:bb:64:99:bc:28:1b:03:45:89:ec:50:fe:66:c3:f9:13: 8f:5c:69:06:04:d6:82:0c:4c:75:08:b4:7f:9a:6e:76:ab:17: 77:81:4f:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUwODIzMDQ1MjQ5WhcNMjUwODMwMDQ1MjQ5WjAYMRYwFAYD VQQDEw02OGE5NDkyMS0wYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW3d8veXMk6JyWHyUpcS6g7owLemjWeDhfCjYpRIfT3eU8wWJRQo5yyNUY0V J3481pnfRBXnHgUY/K3mV/YKfP4qWK8b/GzPl9lRC+Ezsf3dF9v69MWO4x0CvJJ8 76X568eSETxpSVLJfI2w6GX13IZldgN5UyM0PYtgJtd2+kcPtc3G66vxk5vNIBYy MSWhReU/A2XBJl1kHclQahUBAH3MwYVEJPo7c5hwOWv1Ghj2Uw/Q4TJOa/VptPXJ hURAVtKUJZSlM5dburSD/AT2825W8aDWoBqV1opetJvHOa7k0SLAmK2GKlHRxJ1G PhUAzD9QVWw6RaB7NbKAHvKIDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY5y/1h C7dKnMPyT+vuFCywXSzfMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6 ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJKUWWqcB+sLmsPfDHsDiycP66xYleoQnlHzqoNmajFAYZ+c8ucugE PLSsGwDphqlhs5VBd4a9ItKQECYbvp5jcKOqLBrxWRkS2669ECDSUn7xPT24GNOQ l24+SKOEdnmH3C/xu9hvg6kdodYcXLvlH+LInrn0bpZyvKV59xKIR+Cb+H52id5d Zyc0PWmwiz/vTXE+zyurMZijFm8aP+7q7mXXiQqEaYEJjMlNq+w5g3yN7lrRruJD LU0d2F+1IBhjiZXwVjb2VkurflNCFZbLWAw+1RtbnGUiE7tkmbwoGwNFiexQ/mbD +ROPXGkGBNaCDEx1CLR/mm52qxd3gU+L -----END CERTIFICATE-----Generated at Sat Aug 23 19:16:10 2025 by rpki-client