$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft File: kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json) Hash identifier: FSM0R8xUOcdMN6vHxEv9Awdhk07/KjLtDnP7T199kR0= Subject key identifier: 84:52:4D:12:6F:F2:AB:75:E7:5E:F1:96:F1:14:7D:43:F0:55:E6:F1 Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B Certificate issuer: /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft Manifest number: 1F Signing time: Sat 23 Aug 2025 08:05:45 +0000 Manifest this update: Sat 23 Aug 2025 08:05:45 +0000 Manifest next update: Sat 30 Aug 2025 08:05:45 +0000 Files and hashes: 1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: ulZE5bnbCDFGXMw/fEa0mEQ7wXLnmWWCsbdcSFIMTeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Validity Not Before: Aug 23 08:05:45 2025 GMT Not After : Aug 30 08:05:45 2025 GMT Subject: CN=68a97659-7442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:61:5d:88:e8:cd:3a:f5:e4:5e:30:a8:65:12: bc:c1:4c:65:2e:5c:43:6b:10:bb:e3:a7:0b:71:13: 81:88:dc:4f:b9:92:50:df:66:26:67:28:36:ad:f5: 70:16:04:eb:c9:27:28:64:81:c8:f7:80:24:6b:4b: 16:4f:6a:f4:36:b0:4f:25:47:51:fd:eb:b8:8a:75: c5:c1:55:af:cb:ef:8c:69:6f:1d:81:f8:43:02:dd: 05:22:a9:3d:82:71:75:9b:22:c9:b8:9b:06:6a:7e: 3e:a9:55:bb:4c:5a:a2:0a:37:cd:91:7a:2e:0e:09: df:29:55:04:fa:19:10:e4:58:bd:5e:17:cf:aa:13: ea:7e:5b:b7:0b:26:26:38:61:3d:e4:e2:ca:4d:c2: 8c:7c:03:19:4a:22:70:a3:ed:bc:02:90:04:8e:2f: 03:95:9e:76:c3:f1:85:94:c5:eb:f6:16:d9:9d:be: 8b:e1:e0:36:2a:99:79:b3:e8:b2:79:13:4f:b1:ca: 29:83:29:6d:17:64:7c:45:7e:3e:9e:37:15:29:af: 0d:47:82:10:dd:f4:de:52:95:c1:65:ec:47:8c:56: 69:83:7a:42:22:48:62:db:94:71:08:2a:dd:45:b0: 09:ff:b6:0a:fc:34:ff:3d:64:b9:3b:82:f6:3c:e7: f8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:52:4D:12:6F:F2:AB:75:E7:5E:F1:96:F1:14:7D:43:F0:55:E6:F1 X509v3 Authority Key Identifier: keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9c:54:61:d5:0d:16:f0:6d:09:f0:70:f7:30:f1:b9:f8:a4: 06:6a:06:db:80:03:f8:ce:27:60:10:64:ac:5a:d5:f5:f0:43: 3d:e8:c9:81:2d:e2:04:2c:ec:8d:bb:51:3a:45:03:aa:0e:11: 68:7b:d9:e1:a3:2a:0d:be:2c:01:52:ef:16:68:49:dc:f8:98: 2e:13:1e:d3:a3:7e:1c:e9:43:b1:a0:21:93:62:de:c9:a3:15: 77:89:04:2b:6d:70:03:aa:95:36:f2:2f:f3:e6:a6:7a:a9:3f: bc:13:e2:f1:c6:37:f5:45:77:ae:1d:ed:bf:13:69:d3:3f:8d: 9a:5b:98:04:aa:de:55:39:09:c1:55:a1:bf:85:01:c6:5c:b1: 1e:d6:89:84:da:5f:11:a0:43:74:cf:93:76:60:54:06:c9:33: 3b:b8:d9:0a:86:97:88:1c:3e:18:36:01:2e:81:d0:ff:3c:2b: cf:3d:eb:c9:6b:dc:f1:4c:cb:52:57:dc:c3:c1:89:87:27:7f: 99:10:73:eb:62:fe:7d:a9:14:54:b4:89:5a:eb:e9:04:b8:62: 27:f3:7a:66:21:16:27:94:b5:f5:ff:b3:a6:8c:d8:b8:49:09: 99:90:b8:d7:bf:d4:21:fa:e5:6a:42:07:31:03:23:39:15:4f: 81:6e:e4:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkZCQzExMC8GA1UEBRMoOTExRDUwNTU4RDlGRjA5MkI5QzczOUVBMTBBNUI1MzNF MkU5RkUzQjAeFw0yNTA4MjMwODA1NDVaFw0yNTA4MzAwODA1NDVaMBgxFjAUBgNV BAMTDTY4YTk3NjU5LTc0NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXYV2I6M069eReMKhlErzBTGUuXENrELvjpwtxE4GI3E+5klDfZiZnKDat9XAW BOvJJyhkgcj3gCRrSxZPavQ2sE8lR1H967iKdcXBVa/L74xpbx2B+EMC3QUiqT2C cXWbIsm4mwZqfj6pVbtMWqIKN82Rei4OCd8pVQT6GRDkWL1eF8+qE+p+W7cLJiY4 YT3k4spNwox8AxlKInCj7bwCkASOLwOVnnbD8YWUxev2Ftmdvovh4DYqmXmz6LJ5 E0+xyimDKW0XZHxFfj6eNxUprw1HghDd9N5SlcFl7EeMVmmDekIiSGLblHEIKt1F sAn/tgr8NP89ZLk7gvY85/gvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhFJNEm/y q3XnXvGW8RR9Q/BV5vEwHwYDVR0jBBgwFoAUkR1QVY2f8JK5xznqEKW1M+Lp/jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRkJDL0E5RTEzMjU2NTJG NzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpLNXh6bnFFS1cxTS1McF9q cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1IxUVZZMmY4Sks1eHpucUVLVzFNLUxwX2pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RkJDL0E5RTEzMjU2NTJGNzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpL NXh6bnFFS1cxTS1McF9qcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHWcVGHVDRbwbQnwcPcw8bn4pAZqBtuAA/jOJ2AQZKxa1fXwQz3oyYEt 4gQs7I27UTpFA6oOEWh72eGjKg2+LAFS7xZoSdz4mC4THtOjfhzpQ7GgIZNi3smj FXeJBCttcAOqlTbyL/PmpnqpP7wT4vHGN/VFd64d7b8TadM/jZpbmASq3lU5CcFV ob+FAcZcsR7WiYTaXxGgQ3TPk3ZgVAbJMzu42QqGl4gcPhg2AS6B0P88K88968lr 3PFMy1JX3MPBiYcnf5kQc+ti/n2pFFS0iVrr6QS4YifzemYhFieUtfX/s6aM2LhJ CZmQuNe/1CH65WpCBzEDIzkVT4Fu5AI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:26 2025 by rpki-client