$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json) Hash identifier: abMbDIf0rrzq3kQgS4R476P9ZKaOTMLrU0zWC/LdnRk= Subject key identifier: 4C:93:38:DE:50:74:04:AD:84:62:92:D9:91:06:24:2D:2E:F4:54:91 Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft Manifest number: 0671 Signing time: Fri 22 Aug 2025 22:37:57 +0000 Manifest this update: Fri 22 Aug 2025 22:37:56 +0000 Manifest next update: Fri 29 Aug 2025 22:37:56 +0000 Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: VjgMZTYWx7o4kSnTSWv5EKO6YM10y76CK8NTHye34Ss=) 2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: QIcvi4uK4+sV4KonLrCq7np3/p5FTh38+jPZf45l5Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: Aug 22 22:37:56 2025 GMT Not After : Aug 29 22:37:56 2025 GMT Subject: CN=68a8f144-edd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:61:eb:6a:d1:9d:7f:73:b5:a2:47:cc:71: 2e:c5:a1:2f:dc:cd:73:c5:43:ec:b9:80:3b:3c:db: d0:ed:d4:b4:bf:93:a3:77:f6:b3:62:ba:74:5a:29: 99:be:6b:5a:4d:1d:22:b0:3a:9d:d4:62:7f:39:cb: 77:86:f5:82:5d:0d:e7:5e:ec:a6:4f:a2:1d:57:12: 52:36:3c:f4:25:4d:e8:51:53:15:bf:2a:b9:6b:a3: 7d:80:70:51:29:c5:f5:d5:eb:ac:71:1f:bb:bd:d1: 62:16:b0:17:bc:de:71:37:28:9d:5f:18:53:63:84: f2:91:3e:06:4b:09:98:e7:c7:70:11:0f:aa:26:64: c3:96:9a:3f:6d:f4:0f:26:c3:a2:c6:26:8b:2c:ec: f7:5f:a3:32:d5:5f:a8:49:de:5f:6c:90:84:0d:36: 79:a0:b3:60:f2:ee:61:eb:3f:98:59:91:7f:70:b1: c3:4d:19:89:e1:a6:67:87:67:34:24:ba:fb:9a:9e: c6:ec:90:61:86:2b:c3:a8:86:8e:41:2b:ee:ce:74: 65:62:73:23:08:74:e3:34:fb:3b:6b:56:8b:c5:5f: a8:9c:a6:10:c4:4a:99:54:b5:aa:ac:08:54:ff:4e: 71:b7:24:8a:9b:78:fb:e9:d4:d9:c8:01:ad:91:99: 86:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:93:38:DE:50:74:04:AD:84:62:92:D9:91:06:24:2D:2E:F4:54:91 X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:36:91:6d:6d:a2:e6:61:32:35:41:58:bb:b2:9d:a7:19:b5: 61:34:64:8a:2a:b9:de:35:21:fa:fa:78:90:6a:27:ba:33:dd: 68:14:d2:c8:a4:c8:b0:15:2d:a0:3a:73:ff:47:0b:82:04:61: 31:3c:5e:21:a7:71:36:bc:f9:58:5f:d4:fd:4b:b2:97:ef:ff: dc:2e:cd:dc:14:12:90:53:c4:cf:24:41:e5:89:4c:08:b4:5c: 14:3c:e9:db:ff:bf:02:df:07:fa:31:4b:c9:c7:15:20:17:32: 45:46:16:6c:97:85:3e:9a:db:0a:b0:56:da:fa:47:37:20:6b: 13:05:05:fc:b4:77:62:a6:b0:86:e6:28:d2:68:c9:2c:d5:1a: a1:d0:81:e1:00:3e:53:32:87:16:9b:45:0b:fb:86:f5:f0:69: 4b:f8:cd:65:81:08:64:87:93:47:5d:0b:75:96:b6:d6:f4:cf: d9:85:d0:13:93:1c:0e:cb:40:c5:86:e7:89:71:cd:b3:20:87: d3:61:f6:07:ac:12:bb:0d:89:b4:fe:40:13:b6:e4:25:37:19: 6f:bb:ad:e1:32:93:a7:ed:c8:81:34:98:20:08:1f:79:35:1a: 31:53:9b:3e:5f:4d:62:5d:e2:c9:c6:2c:00:5c:91:bd:90:9e: 84:b7:da:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjUwODIyMjIzNzU2WhcNMjUwODI5MjIzNzU2WjAYMRYwFAYD VQQDEw02OGE4ZjE0NC1lZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA405h62rRnX9ztaJHzHEuxaEv3M1zxUPsuYA7PNvQ7dS0v5Ojd/azYrp0WimZ vmtaTR0isDqd1GJ/Oct3hvWCXQ3nXuymT6IdVxJSNjz0JU3oUVMVvyq5a6N9gHBR KcX11euscR+7vdFiFrAXvN5xNyidXxhTY4TykT4GSwmY58dwEQ+qJmTDlpo/bfQP JsOixiaLLOz3X6My1V+oSd5fbJCEDTZ5oLNg8u5h6z+YWZF/cLHDTRmJ4aZnh2c0 JLr7mp7G7JBhhivDqIaOQSvuznRlYnMjCHTjNPs7a1aLxV+onKYQxEqZVLWqrAhU /05xtySKm3j76dTZyAGtkZmGuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyTON5Q dASthGKS2ZEGJC0u9FSRMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjY5RC9CRjZFMjBBNjhEQUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlK UUUwWkR5bU1NczFnbjgtbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwNpFtbaLmYTI1QVi7sp2nGbVhNGSKKrneNSH6+niQaie6M91oFNLI pMiwFS2gOnP/RwuCBGExPF4hp3E2vPlYX9T9S7KX7//cLs3cFBKQU8TPJEHliUwI tFwUPOnb/78C3wf6MUvJxxUgFzJFRhZsl4U+mtsKsFba+kc3IGsTBQX8tHdiprCG 5ijSaMks1Rqh0IHhAD5TMocWm0UL+4b18GlL+M1lgQhkh5NHXQt1lrbW9M/ZhdAT kxwOy0DFhueJcc2zIIfTYfYHrBK7DYm0/kATtuQlNxlvu63hMpOn7ciBNJggCB95 NRoxU5s+X01iXeLJxiwAXJG9kJ6Et9q8 -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:07 2025 by rpki-client