$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft File: k1ndLhIU62ulYiqzyAtqkhZoDMw.mft (raw, json) Hash identifier: RF9acKhWVw60RG1vgTA28VZLZfCvgq6Bd+3MpswoiHI= Subject key identifier: 39:CD:B9:64:A4:57:95:1B:23:36:AE:E6:60:5E:91:B2:34:7F:46:1D Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC Certificate issuer: /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft Manifest number: 0626 Signing time: Fri 22 Aug 2025 22:57:16 +0000 Manifest this update: Fri 22 Aug 2025 22:57:16 +0000 Manifest next update: Fri 29 Aug 2025 22:57:16 +0000 Files and hashes: 1: k1ndLhIU62ulYiqzyAtqkhZoDMw.crl (hash: Ud4G8GxNrVkZ1sQXoSNBnEiG4LRmjUxk8tU5tjsu+lU=) 2: B8B720BEF9EF11EDA3C9C234C4F9AE02.roa (hash: My0gxkPTiPIufgJL4YRuXb9RXfxXNWfL0lWpF2RiHBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BBE6, serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Validity Not Before: Aug 22 22:57:16 2025 GMT Not After : Aug 29 22:57:16 2025 GMT Subject: CN=68a8f5cc-9bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:64:df:01:a9:f2:9b:42:a5:66:29:ce:ef: b2:4e:78:41:50:5e:9d:af:84:fa:9a:14:33:91:78: a9:b5:a4:2a:07:cc:6c:10:17:55:14:9a:0c:d4:8d: a4:2c:d5:69:bf:50:f4:cd:74:85:2e:6b:38:4b:c1: 98:a1:6f:08:b7:39:b6:81:a4:4c:b2:8b:f4:62:98: df:bd:e1:22:44:a8:f5:86:12:46:08:12:b4:92:b1: 16:cf:4e:49:6d:61:66:5d:e4:89:4a:e3:1e:91:61: a3:62:aa:83:c1:f6:0d:2f:99:09:a2:5b:17:bc:18: 81:1f:3d:fe:6f:63:2a:19:19:e3:84:84:85:2a:43: c0:e8:92:2f:37:27:d8:97:a4:57:40:10:6e:17:0e: 49:1b:e1:57:71:92:ed:55:0b:c6:3d:8f:6b:b3:25: af:07:60:d1:6e:02:65:5e:ee:cd:9b:d5:a0:4b:4b: 68:2a:ff:b8:ce:fe:78:ee:ed:c2:31:f2:48:25:bc: 8d:3d:ee:11:70:e4:f9:b0:dd:61:89:17:e6:ba:3e: b5:e7:28:66:e9:50:70:8c:36:80:8a:e6:0b:60:61: 89:d1:b9:dd:7b:b3:50:17:a4:b9:12:06:1b:e3:6d: 91:69:e2:02:21:3d:a5:f6:43:f1:31:01:a8:65:c7: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:B9:64:A4:57:95:1B:23:36:AE:E6:60:5E:91:B2:34:7F:46:1D X509v3 Authority Key Identifier: keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:02:a1:ad:03:b1:4a:00:08:5f:85:e0:89:2b:0e:6f:ba:51: 85:9d:a2:78:83:0d:eb:1f:0b:98:d4:3b:aa:cc:1a:dd:16:dd: 0e:42:87:3f:d4:84:3c:aa:2b:9a:40:23:5b:8c:28:ac:2d:ef: 9d:91:ea:f5:1f:85:9d:ed:98:4a:7c:e4:45:38:9f:72:80:b9: b3:96:07:da:85:69:41:24:31:8a:9c:c2:df:0e:88:07:ef:67: dc:ae:b2:6b:f3:78:99:39:a0:64:42:0a:71:ed:ef:5b:24:50: 95:69:3b:d1:be:35:89:b0:f4:88:c9:06:ef:54:d8:ec:b9:c1: 4c:70:d7:58:b7:39:17:4c:d3:ea:d2:02:98:2e:e8:d9:85:34: 3e:6a:ea:ac:3a:59:66:3b:8c:0d:2f:cf:73:69:db:d0:3b:25: dc:fe:a7:b3:f8:b5:c1:dc:1c:86:e6:66:33:c1:a3:0d:af:57: 27:31:fa:0c:10:f4:8b:e9:36:9a:87:86:fd:f5:4a:69:2f:1c: 35:b3:ab:09:2a:1b:ae:47:16:aa:a1:48:11:cc:10:62:f6:61: 54:7b:98:48:2b:ba:08:df:5e:fc:96:78:f9:68:0e:93:2b:87: 6c:25:d9:d2:0b:52:de:77:75:f1:b8:5f:99:18:54:9f:83:b1: 57:ee:52:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCRTYxMTAvBgNVBAUTKDkzNTlERDJFMTIxNEVCNkJBNTYyMkFCM0M4MEI2QTky MTY2ODBDQ0MwHhcNMjUwODIyMjI1NzE2WhcNMjUwODI5MjI1NzE2WjAYMRYwFAYD VQQDEw02OGE4ZjVjYy05YmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofxk3wGp8ptCpWYpzu+yTnhBUF6dr4T6mhQzkXiptaQqB8xsEBdVFJoM1I2k LNVpv1D0zXSFLms4S8GYoW8Itzm2gaRMsov0YpjfveEiRKj1hhJGCBK0krEWz05J bWFmXeSJSuMekWGjYqqDwfYNL5kJolsXvBiBHz3+b2MqGRnjhISFKkPA6JIvNyfY l6RXQBBuFw5JG+FXcZLtVQvGPY9rsyWvB2DRbgJlXu7Nm9WgS0toKv+4zv547u3C MfJIJbyNPe4RcOT5sN1hiRfmuj615yhm6VBwjDaAiuYLYGGJ0bnde7NQF6S5EgYb 422RaeICIT2l9kPxMQGoZcdZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnNuWSk V5UbIzau5mBekbI0f0YdMB8GA1UdIwQYMBaAFJNZ3S4SFOtrpWIqs8gLapIWaAzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkJFNi9BMDk3RjBENEFE MzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYydWxZaXF6eUF0cWtoWm9E TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2sxbmRMaElVNjJ1bFlpcXp5QXRxa2hab0RNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkJFNi9BMDk3RjBENEFEMzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYy dWxZaXF6eUF0cWtoWm9ETXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdAqGtA7FKAAhfheCJKw5vulGFnaJ4gw3rHwuY1DuqzBrdFt0OQoc/ 1IQ8qiuaQCNbjCisLe+dker1H4Wd7ZhKfORFOJ9ygLmzlgfahWlBJDGKnMLfDogH 72fcrrJr83iZOaBkQgpx7e9bJFCVaTvRvjWJsPSIyQbvVNjsucFMcNdYtzkXTNPq 0gKYLujZhTQ+auqsOllmO4wNL89zadvQOyXc/qez+LXB3ByG5mYzwaMNr1cnMfoM EPSL6Taah4b99UppLxw1s6sJKhuuRxaqoUgRzBBi9mFUe5hIK7oI3178lnj5aA6T K4dsJdnSC1Led3XxuF+ZGFSfg7FX7lLe -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:55 2025 by rpki-client