$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft File: KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json) Hash identifier: aEO/WWQD2eQatvwWCIs+UIGBOAWEdgV9mlR9bKmh8pc= Subject key identifier: D2:7D:68:10:D6:3B:66:AD:2A:22:89:23:F8:BA:7E:7F:90:60:A4:E8 Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Certificate serial: 030A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft Manifest number: 02FA Signing time: Sat 23 Aug 2025 01:29:30 +0000 Manifest this update: Sat 23 Aug 2025 01:29:30 +0000 Manifest next update: Sat 30 Aug 2025 01:29:30 +0000 Files and hashes: 1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: 7AftmwiOEc5shKbJPjMtLTcZelOtd1uZ5ioRT6WgxTQ=) 2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: 3t64o2UXNsxTNPIx1fcvAHHTrkMYu5vuFZ50YkMkLZI=) 3: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: HZusuoH1up8FDoOQyhT/1qoC+ff/aBBAonRcZ28YjMI=) 4: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Eku/YHWxKxpsRX6ogTNh3LDNRp5rXVLPBXYqCNfR56g=) 5: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: 3ncZT46pze+jMf4M4LYzFO82k2evN1uShAP1OkhdIKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Validity Not Before: Aug 23 01:29:30 2025 GMT Not After : Aug 30 01:29:30 2025 GMT Subject: CN=68a9197a-af2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:41:66:7b:32:29:f2:68:4d:d4:f4:0d:51: 91:06:c2:70:7f:c9:b0:1e:b3:bd:da:1a:d8:42:3d: 91:da:e8:ac:10:84:5a:0c:e2:01:46:51:a0:30:ee: d9:ca:a5:bb:bb:2f:79:16:e8:90:07:92:36:bc:76: a5:d8:9c:ae:d8:c0:46:6b:23:7d:34:63:35:7a:ff: 24:d7:c2:4b:22:49:54:bb:64:df:7e:b7:88:12:b1: 72:a4:a7:0d:01:e6:41:9c:36:ea:1b:1e:82:8e:21: 1b:6e:bd:9c:02:9e:ee:a7:78:e4:f5:e2:65:6b:ed: 86:c9:ea:d5:ac:36:00:05:ec:ee:84:4e:ab:17:3c: 09:f8:6d:6b:d0:24:ba:1e:aa:d8:cd:de:9a:73:0c: 59:f3:dc:5f:9e:eb:67:df:04:2c:7b:e1:31:8a:75: eb:99:fb:c5:f7:3a:88:24:26:10:29:b8:e2:53:70: bf:cf:0b:58:51:a7:bd:6f:3a:42:a1:1b:56:21:ef: 43:a6:58:db:0b:4c:a1:99:6b:dc:fc:90:ca:5e:eb: 7d:05:7b:7e:c0:ad:dd:51:0e:27:c1:0d:5d:b8:c5: 6e:61:f9:1c:db:f1:84:19:b7:4c:db:44:18:05:f8: 52:fc:6b:59:9e:82:24:3f:d0:f1:99:c6:1b:f6:59: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7D:68:10:D6:3B:66:AD:2A:22:89:23:F8:BA:7E:7F:90:60:A4:E8 X509v3 Authority Key Identifier: keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:26:be:6b:be:a1:ab:23:57:24:ee:dc:ef:f9:07:45:5b:68: d2:4b:30:3e:62:44:3c:76:6c:83:a1:01:02:b2:8b:e1:d0:5e: bb:ec:65:6f:c2:82:b3:cb:af:8f:7e:a1:b5:dd:01:56:3d:e9: 34:a5:2f:50:43:5c:18:87:23:99:54:a8:a4:4a:c2:c3:84:e6: b2:13:3f:35:60:24:fd:d4:56:c1:54:14:85:ac:b6:7e:62:bb: 34:58:29:b0:a2:2a:b1:cf:98:ce:45:25:f1:32:65:d2:4f:a5: e7:6a:4e:60:6b:c5:62:38:ca:8b:cb:8a:9f:04:fd:e3:a1:33: aa:90:f7:b4:7f:5b:9d:70:c6:ab:8c:41:9b:b0:8a:d6:65:79: 5c:58:ba:64:c7:2a:27:f4:29:11:f1:cc:64:77:31:2c:83:af: a8:3d:c8:f3:3e:68:58:13:60:ce:3c:d7:73:50:df:f4:d2:50: 4d:bd:3c:d9:96:a5:9b:2f:8b:ba:e9:a0:d1:35:cb:7d:8e:8d: 6d:6f:fa:81:29:b3:af:7f:5f:ab:8f:45:12:28:df:9c:90:b8: 97:68:4a:88:eb:a4:a3:61:90:04:ea:88:47:cb:13:40:3e:76: a2:eb:9d:16:4a:8c:03:be:65:62:0a:db:4b:7f:02:0e:0a:62: b7:69:ab:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDODQxMTAvBgNVBAUTKDI5NjYyRjUxM0EyNTRGMERCNUYwN0RCNTgxOUZCRUFF NDBGN0JGMTUwHhcNMjUwODIzMDEyOTMwWhcNMjUwODMwMDEyOTMwWjAYMRYwFAYD VQQDEw02OGE5MTk3YS1hZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCJBZnsyKfJoTdT0DVGRBsJwf8mwHrO92hrYQj2R2uisEIRaDOIBRlGgMO7Z yqW7uy95FuiQB5I2vHal2Jyu2MBGayN9NGM1ev8k18JLIklUu2TffreIErFypKcN AeZBnDbqGx6CjiEbbr2cAp7up3jk9eJla+2GyerVrDYABezuhE6rFzwJ+G1r0CS6 HqrYzd6acwxZ89xfnutn3wQse+ExinXrmfvF9zqIJCYQKbjiU3C/zwtYUae9bzpC oRtWIe9DpljbC0yhmWvc/JDKXut9BXt+wK3dUQ4nwQ1duMVuYfkc2/GEGbdM20QY BfhS/GtZnoIkP9DxmcYb9ll5zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ9aBDW O2atKiKJI/i6fn+QYKToMB8GA1UdIwQYMBaAFClmL1E6JU8NtfB9tYGfvq5A978V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkM4NC8yQTlCQjAyNkVC QjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3MjE4SDIxZ1otLXJrRDN2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXWXZVVG9sVHcyMThIMjFnWi0tcmtEM3Z4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkM4NC8yQTlCQjAyNkVCQjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3 MjE4SDIxZ1otLXJrRDN2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZJr5rvqGrI1ck7tzv+QdFW2jSSzA+YkQ8dmyDoQECsovh0F677GVv woKzy6+PfqG13QFWPek0pS9QQ1wYhyOZVKikSsLDhOayEz81YCT91FbBVBSFrLZ+ Yrs0WCmwoiqxz5jORSXxMmXST6Xnak5ga8ViOMqLy4qfBP3joTOqkPe0f1udcMar jEGbsIrWZXlcWLpkxyon9CkR8cxkdzEsg6+oPcjzPmhYE2DOPNdzUN/00lBNvTzZ lqWbL4u66aDRNct9jo1tb/qBKbOvf1+rj0USKN+ckLiXaEqI66SjYZAE6ohHyxNA Pnai650WSowDvmViCttLfwIOCmK3aat/ -----END CERTIFICATE-----Generated at Sun Aug 24 07:04:42 2025 by rpki-client