$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json) Hash identifier: FD5JsUyk3HFze3EhpoyFTq/d+8vCeU/18/06S0erZKI= Subject key identifier: 8B:E9:1B:17:51:F9:70:72:FB:54:FB:2B:D2:B3:89:1B:75:BF:F2:C7 Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Certificate serial: 21C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft Manifest number: 21C3 Signing time: Fri 22 Aug 2025 15:56:08 +0000 Manifest this update: Fri 22 Aug 2025 15:56:08 +0000 Manifest next update: Fri 29 Aug 2025 15:56:08 +0000 Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: AYoB2S78XQz+bFDS57VcAlfrpVcUWoNoYtEte1KY2rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8643 (0x21c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Validity Not Before: Aug 22 15:56:08 2025 GMT Not After : Aug 29 15:56:08 2025 GMT Subject: CN=68a89318-06a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c5:36:c3:8e:b8:32:1f:8b:ad:fd:af:43:1c: cb:42:08:77:e5:fc:51:c4:23:b6:6e:3e:8d:6e:33: 18:0e:ff:1b:a4:8a:8c:a1:11:dd:a9:e3:0c:c2:94: 53:4a:1f:b3:c5:14:d0:e1:5b:db:73:3a:68:e6:8c: 9b:66:8e:98:81:7d:3e:e8:a1:ca:e1:d3:c4:90:59: f6:b8:73:d1:99:dc:96:66:3b:bd:9c:bb:85:7c:3a: 89:b7:21:a9:77:ce:37:f4:b7:c9:0f:5b:e6:c8:73: c6:c0:27:05:4f:f7:58:7d:26:48:13:35:e0:b4:d9: 32:7b:fb:af:27:1c:b5:12:24:29:3a:46:fa:c5:52: 79:c2:3a:01:d4:18:d6:95:c1:9b:d4:7e:12:4d:3a: 61:a9:09:e4:24:62:97:f0:34:59:4b:02:78:9f:ef: 1b:8e:61:d7:10:ff:97:17:0e:a8:02:a9:44:54:4e: 19:ac:bc:a5:31:2f:51:7a:df:8d:d3:e9:02:f2:f9: a8:e7:43:b7:33:45:24:bc:95:ba:f9:1f:0b:64:f8: 0a:18:c3:73:f9:29:a6:f8:f6:d1:e9:9a:9d:a4:b2: dc:19:ce:95:90:b0:63:8f:14:a1:52:bc:9d:79:22: 23:4f:35:ec:c7:29:0d:0c:f1:e8:c4:48:2a:ec:4f: 39:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E9:1B:17:51:F9:70:72:FB:54:FB:2B:D2:B3:89:1B:75:BF:F2:C7 X509v3 Authority Key Identifier: keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:f8:db:4b:e2:ea:a0:4a:36:48:0e:09:3a:f2:d4:c2:6e:4e: 3b:83:d6:84:80:1b:f1:03:c8:ba:4a:76:a1:ea:39:f2:44:db: 48:9d:76:d9:4a:7a:ae:6c:b2:1f:34:4b:db:61:72:6d:3c:6b: c4:34:e7:46:56:5c:05:49:48:d6:04:3b:07:71:a4:e4:f4:ce: 77:5e:12:58:16:d0:84:87:cd:a3:b7:b8:b7:72:c5:60:2b:64: 76:a6:d8:d1:da:5e:16:d5:9f:5a:bc:f7:ae:1a:33:de:f9:4f: 61:7d:1c:ed:dd:55:3a:9c:52:e6:9a:68:88:8c:3b:61:5e:35: 9b:a2:8f:26:cc:a5:40:6e:26:42:29:21:1a:61:aa:81:b7:0f: 27:a2:72:cc:e9:dd:f6:d1:ec:a8:c8:e5:eb:13:cb:4d:0f:6f: 80:8e:2b:3b:ba:26:f3:af:13:6c:73:4f:71:55:67:a9:40:36: 8b:ad:2a:97:e2:9f:07:87:bd:57:40:38:d6:8d:b0:66:41:ed: 69:b1:66:f5:c1:a1:21:3b:65:15:ea:35:c4:cc:46:b5:c8:90: ac:d6:88:51:05:c3:72:fa:e3:a5:66:19:b5:19:e7:da:ef:39: 2a:78:d9:5a:9a:1f:53:0a:a0:99:ed:d3:9a:d4:c4:af:28:9f: b5:9c:f2:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE ODU4RTFDRDAwHhcNMjUwODIyMTU1NjA4WhcNMjUwODI5MTU1NjA4WjAYMRYwFAYD VQQDEw02OGE4OTMxOC0wNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48U2w464Mh+Lrf2vQxzLQgh35fxRxCO2bj6NbjMYDv8bpIqMoRHdqeMMwpRT Sh+zxRTQ4Vvbczpo5oybZo6YgX0+6KHK4dPEkFn2uHPRmdyWZju9nLuFfDqJtyGp d8439LfJD1vmyHPGwCcFT/dYfSZIEzXgtNkye/uvJxy1EiQpOkb6xVJ5wjoB1BjW lcGb1H4STTphqQnkJGKX8DRZSwJ4n+8bjmHXEP+XFw6oAqlEVE4ZrLylMS9Ret+N 0+kC8vmo50O3M0UkvJW6+R8LZPgKGMNz+Smm+PbR6ZqdpLLcGc6VkLBjjxShUryd eSIjTzXsxykNDPHoxEgq7E859QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvpGxdR +XBy+1T7K9KziRt1v/LHMB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS S3g1UW9ONHpEU3JZV09ITkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDm+NtL4uqgSjZIDgk68tTCbk47g9aEgBvxA8i6Snah6jnyRNtInXbZ SnqubLIfNEvbYXJtPGvENOdGVlwFSUjWBDsHcaTk9M53XhJYFtCEh82jt7i3csVg K2R2ptjR2l4W1Z9avPeuGjPe+U9hfRzt3VU6nFLmmmiIjDthXjWboo8mzKVAbiZC KSEaYaqBtw8nonLM6d320eyoyOXrE8tND2+Ajis7uibzrxNsc09xVWepQDaLrSqX 4p8Hh71XQDjWjbBmQe1psWb1waEhO2UV6jXEzEa1yJCs1ohRBcNy+uOlZhm1Gefa 7zkqeNlamh9TCqCZ7dOa1MSvKJ+1nPJV -----END CERTIFICATE-----Generated at Sat Aug 23 18:23:43 2025 by rpki-client