$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft File: K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json) Hash identifier: tTrA5I+sqA8IRzAX5TCsJNf6trE0ScsAlqpQFCyAYPo= Subject key identifier: FA:AC:B8:33:D5:5B:00:EA:C5:39:5E:47:5D:8B:61:1D:FD:97:92:19 Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 05:58:56 +0000 Manifest this update: Sat 23 Aug 2025 05:58:55 +0000 Manifest next update: Sat 30 Aug 2025 05:58:55 +0000 Files and hashes: 1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: SYw/GrwTwKsVeWv6ssBp5nmin67T/OKC6J5XH5Uy8bI=) 2: 7490D0DE5AE111EFAD7EB82CC4F9AE02.roa (hash: 2zLHgEDWGwo9zlyqNnj3rIHawpIWGW43p4pSnf/kapk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Validity Not Before: Aug 23 05:58:55 2025 GMT Not After : Aug 30 05:58:55 2025 GMT Subject: CN=68a9589f-3b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:6f:51:d1:f9:ba:b6:26:50:07:5b:76:72: 82:ea:54:1f:0c:fd:59:65:0f:09:d7:3b:c2:5b:41: 54:a1:b3:65:27:52:2c:22:7d:ac:a9:f0:2c:02:77: 1e:e3:ed:b4:8a:69:11:8c:6a:f8:01:2a:16:b9:6a: 78:bd:fe:d8:fa:a3:9b:4a:1c:c1:c9:cf:26:d4:fa: 30:b2:6e:a9:16:2d:59:ff:96:7d:cc:5d:56:8e:be: b6:95:bb:cd:02:5b:53:2b:e9:47:06:2c:43:0a:a8: 8f:21:d0:89:9f:fd:46:10:b8:c4:fc:34:2b:8e:8c: 71:d4:21:28:d1:38:a2:3a:cf:b1:c6:63:54:7b:cc: 41:65:b6:09:c9:92:e8:80:da:ce:14:db:5f:b1:83: 20:f8:28:88:bf:cb:36:af:04:8c:d9:4b:c7:c5:35: bc:bc:32:bb:18:bd:ec:6c:6f:49:1f:01:8a:9b:54: 05:3f:aa:93:65:01:18:6a:ef:04:fa:53:31:e2:63: ec:8b:91:80:8c:b8:58:ba:1c:b9:62:98:a8:57:0c: e9:4f:35:73:a3:96:83:14:f0:9d:4a:a9:63:68:93: c2:ba:57:08:ba:0e:17:a7:8b:05:fb:b5:91:68:58: d2:3a:03:d2:e1:bb:a4:57:7e:60:27:65:00:0b:7d: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AC:B8:33:D5:5B:00:EA:C5:39:5E:47:5D:8B:61:1D:FD:97:92:19 X509v3 Authority Key Identifier: keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:cb:e2:8b:68:04:48:1f:68:97:af:68:c1:e0:77:46:10:3f: 99:a6:1d:d3:ff:22:18:2d:f2:a3:66:7f:ba:20:26:fa:ce:d3: 36:a4:4e:b2:76:20:aa:44:66:a7:ae:46:e5:a2:94:4d:f0:1e: c1:75:91:36:7b:d4:55:2f:17:40:4a:3a:d2:68:18:37:82:4f: fd:4b:87:44:a3:7f:58:d5:a2:0a:de:0a:86:b6:90:a9:8a:e0: a8:b5:25:95:d4:5c:7e:65:e4:7a:fc:04:c2:c0:44:e2:8f:51: 5f:9b:c6:b4:58:e2:90:57:ef:d0:41:8d:f8:7a:93:86:e6:c7: de:bf:e6:32:d9:a5:b4:7e:4a:24:51:11:65:3a:55:d5:73:9b: 27:c4:84:c6:0c:bc:47:26:65:06:26:c9:73:36:b5:fb:0a:de: 19:72:28:bc:58:ff:4f:80:51:c2:6a:1e:79:31:7c:d6:12:57: 76:a2:a7:51:6c:b8:7d:8b:a1:59:84:23:02:00:22:f3:31:71: 8c:7d:22:10:b7:ac:f1:06:bc:21:9a:c2:bb:1f:fc:27:a9:89: 6e:b1:6d:d3:8a:da:2f:3d:d6:84:1e:c3:bf:e4:b3:05:a0:30: fc:50:03:de:be:2b:4a:e1:31:73:1c:ca:f9:6f:52:60:aa:ae: 17:cd:b8:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRERUExMTAvBgNVBAUTKDJCQ0FDRjYxNjVCNTg3NDA1OTBFNTk3MTg0MzNEODE4 M0ZGOTQ2NkQwHhcNMjUwODIzMDU1ODU1WhcNMjUwODMwMDU1ODU1WjAYMRYwFAYD VQQDEw02OGE5NTg5Zi0zYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB5vUdH5urYmUAdbdnKC6lQfDP1ZZQ8J1zvCW0FUobNlJ1IsIn2sqfAsAnce 4+20imkRjGr4ASoWuWp4vf7Y+qObShzByc8m1Powsm6pFi1Z/5Z9zF1Wjr62lbvN AltTK+lHBixDCqiPIdCJn/1GELjE/DQrjoxx1CEo0TiiOs+xxmNUe8xBZbYJyZLo gNrOFNtfsYMg+CiIv8s2rwSM2UvHxTW8vDK7GL3sbG9JHwGKm1QFP6qTZQEYau8E +lMx4mPsi5GAjLhYuhy5YpioVwzpTzVzo5aDFPCdSqljaJPCulcIug4Xp4sF+7WR aFjSOgPS4bukV35gJ2UAC32RAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqsuDPV WwDqxTleR12LYR39l5IZMB8GA1UdIwQYMBaAFCvKz2FltYdAWQ5ZcYQz2Bg/+UZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NERFQS8zQkY1RjJFMDVB RTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgwQlpEbGx4aERQWUdEXzVS bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4clBZV1cxaDBCWkRsbHhoRFBZR0RfNVJtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NERFQS8zQkY1RjJFMDVBRTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgw QlpEbGx4aERQWUdEXzVSbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiy+KLaARIH2iXr2jB4HdGED+Zph3T/yIYLfKjZn+6ICb6ztM2pE6y diCqRGanrkblopRN8B7BdZE2e9RVLxdASjrSaBg3gk/9S4dEo39Y1aIK3gqGtpCp iuCotSWV1Fx+ZeR6/ATCwETij1Ffm8a0WOKQV+/QQY34epOG5sfev+Yy2aW0fkok URFlOlXVc5snxITGDLxHJmUGJslzNrX7Ct4Zcii8WP9PgFHCah55MXzWEld2oqdR bLh9i6FZhCMCACLzMXGMfSIQt6zxBrwhmsK7H/wnqYlusW3TitovPdaEHsO/5LMF oDD8UAPevitK4TFzHMr5b1Jgqq4Xzbh4 -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:43 2025 by rpki-client