$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: HNCDOBRnjNtrn26OYPKLKkz2iF3Hh+pF5Ywl95FGa2s= Subject key identifier: E5:CC:D5:95:09:16:BE:D6:4B:D4:62:C0:AC:D6:ED:88:01:00:6F:66 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 08B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 0893 Signing time: Fri 22 Aug 2025 20:43:15 +0000 Manifest this update: Fri 22 Aug 2025 20:43:14 +0000 Manifest next update: Fri 29 Aug 2025 20:43:14 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: sSUqIFMDg75YDeUJlBX6lCv7yBmnum//3bu3pivZe78=) 2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: 1z83FO4GtKRx6NJ1zk8GB6hRpxtXT/R6CtAHYUkaqdA=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: USCITVxdvr2vZIKZ9pZeTbR2vvO/c7r8PRbW/v091j8=) 4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: sjVV92TWr17Q5E7deLvp5LrkNkR25Y2nq+eGhf+3ca4=) 5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: 9Lu/m9ZIOQ62O9GVdOQbSiFzGg5F/YviY3o3WadSNV4=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: MuEbqKnGdeTwOpzWtZfybGE0sUEXNrb1FXuWP6xXyqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Aug 22 20:43:14 2025 GMT Not After : Aug 29 20:43:14 2025 GMT Subject: CN=68a8d662-c97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:5d:d2:60:e9:5a:c3:eb:e7:2d:5c:0f:70: 6b:85:5d:df:82:39:e5:b4:9c:b9:71:f3:c0:5f:3a: 67:ae:87:20:70:23:71:d1:f5:05:2b:3c:5a:4d:d7: 74:a5:40:57:c5:78:98:6d:d0:3d:42:b0:d9:fd:ab: b3:f8:4d:f3:b3:c7:72:ee:52:81:85:80:1f:62:81: 66:c4:c2:3b:ca:5c:73:d4:d0:a1:1c:12:2a:9a:25: 14:2f:ac:57:ef:49:4d:2f:f8:3a:9a:0f:7b:df:bf: 0d:59:f9:53:46:e8:5c:9a:df:35:79:e0:34:f6:c7: eb:42:d9:51:fe:9f:82:7c:27:e2:e7:5a:b0:99:9c: db:81:91:64:09:40:4c:fc:de:14:8f:b6:4b:23:57: e1:da:08:d6:2f:17:1e:c4:94:01:de:36:c5:c6:61: 3b:c1:3d:e9:18:05:44:3c:22:9d:ef:77:c5:49:d2: d3:6e:e3:70:a7:0a:c6:5e:b6:75:70:25:bc:a4:4a: 93:d3:e0:c7:59:f0:e6:06:c6:b5:4b:51:76:cb:ec: 63:7b:05:c2:67:cc:27:ce:f8:f3:b7:0a:bd:3b:09: 24:5b:56:8b:73:76:d9:07:2c:66:4b:e5:ef:5b:24: 2f:fa:b0:bd:17:a9:2f:a9:57:52:58:fa:d8:e5:e3: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CC:D5:95:09:16:BE:D6:4B:D4:62:C0:AC:D6:ED:88:01:00:6F:66 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:47:a0:1d:d7:bc:fc:46:dd:56:47:34:44:c6:ec:04:25:f9: f5:09:e2:12:d7:a6:a0:5a:4d:83:32:09:b6:0a:97:a8:e1:7b: aa:7d:92:b2:e4:80:02:da:e0:db:04:0b:9f:73:db:3f:1f:c8: 31:d3:c7:be:f2:13:5e:74:58:c9:8c:0b:68:e9:3b:5a:d5:76: 84:2d:be:7e:c5:30:ce:52:da:c3:9b:5a:c6:e0:48:cd:63:d5: ff:34:39:74:e6:a2:7a:e5:05:1a:37:68:77:41:0e:53:f6:ef: ef:11:5f:2c:02:40:be:68:4a:6d:28:94:89:d1:6e:05:48:f1: 5d:21:89:d1:84:db:de:9f:71:eb:1d:c7:03:41:b3:10:89:af: 6c:98:3d:2c:22:d8:c3:80:f8:70:24:63:01:74:10:b8:aa:ea: bd:60:f8:86:c8:42:88:c6:9a:98:ad:cb:b2:cb:f1:08:0c:e2: 42:f7:ae:9b:48:3b:b8:6b:6a:c3:f5:ae:dc:60:a0:84:9a:f7: ee:7f:08:ad:50:6a:eb:97:64:5e:88:0b:92:16:01:17:e8:6c: 1e:04:69:aa:8f:55:c5:17:34:b8:ba:44:e1:f6:4f:d3:35:ab: 2e:9f:58:d0:4f:76:4a:3a:88:ab:cf:40:8e:5c:5b:38:9f:44: 78:d4:40:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUwODIyMjA0MzE0WhcNMjUwODI5MjA0MzE0WjAYMRYwFAYD VQQDEw02OGE4ZDY2Mi1jOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Dpd0mDpWsPr5y1cD3BrhV3fgjnltJy5cfPAXzpnrocgcCNx0fUFKzxaTdd0 pUBXxXiYbdA9QrDZ/auz+E3zs8dy7lKBhYAfYoFmxMI7ylxz1NChHBIqmiUUL6xX 70lNL/g6mg97378NWflTRuhcmt81eeA09sfrQtlR/p+CfCfi51qwmZzbgZFkCUBM /N4Uj7ZLI1fh2gjWLxcexJQB3jbFxmE7wT3pGAVEPCKd73fFSdLTbuNwpwrGXrZ1 cCW8pEqT0+DHWfDmBsa1S1F2y+xjewXCZ8wnzvjztwq9OwkkW1aLc3bZByxmS+Xv WyQv+rC9F6kvqVdSWPrY5ePCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXM1ZUJ Fr7WS9RiwKzW7YgBAG9mMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4R6Ad17z8Rt1WRzRExuwEJfn1CeIS16agWk2DMgm2Cpeo4XuqfZKy 5IAC2uDbBAufc9s/H8gx08e+8hNedFjJjAto6Tta1XaELb5+xTDOUtrDm1rG4EjN Y9X/NDl05qJ65QUaN2h3QQ5T9u/vEV8sAkC+aEptKJSJ0W4FSPFdIYnRhNven3Hr HccDQbMQia9smD0sItjDgPhwJGMBdBC4quq9YPiGyEKIxpqYrcuyy/EIDOJC966b SDu4a2rD9a7cYKCEmvfufwitUGrrl2ReiAuSFgEX6GweBGmqj1XFFzS4ukTh9k/T Nasun1jQT3ZKOoirz0COXFs4n0R41EBm -----END CERTIFICATE-----Generated at Sat Aug 23 11:02:42 2025 by rpki-client