$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft File: kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json) Hash identifier: Eqg4WFKbKLqT4DElgpyzXol9yDmoxWOfakTW/ewsqtg= Subject key identifier: 1E:27:38:A5:29:22:C0:83:D0:9D:FF:5C:49:85:F3:9D:BB:40:F1:8F Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 Certificate issuer: /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Certificate serial: 0479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft Manifest number: 0479 Signing time: Sat 23 Aug 2025 00:17:56 +0000 Manifest this update: Sat 23 Aug 2025 00:17:56 +0000 Manifest next update: Sat 30 Aug 2025 00:17:56 +0000 Files and hashes: 1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: 58qVU+T2Hm6WH7G2lPgCfooLI007bw0pdqQVVn1caXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Validity Not Before: Aug 23 00:17:56 2025 GMT Not After : Aug 30 00:17:56 2025 GMT Subject: CN=68a908b4-63c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:29:ba:1f:ae:b7:c6:32:bd:9f:3f:0d:5c: e9:f7:e2:c9:08:87:5d:2c:31:fd:fa:22:31:d2:ef: 15:27:a4:08:32:0a:1b:83:57:68:ec:9a:e1:a2:af: 8f:08:ae:03:40:d2:1e:f1:5c:8d:1d:5e:7e:ae:02: 84:18:a6:28:51:4e:ba:2c:87:7a:8a:6c:29:61:c3: 72:52:55:4d:3c:7b:d1:f1:70:3d:68:38:47:6c:56: a2:6d:f3:f3:ab:80:e8:50:f9:6b:9f:04:93:fc:b8: 8a:c5:9d:5e:8e:01:e4:00:e4:62:5e:73:ed:97:a4: 29:48:a0:23:11:19:a7:d9:ce:80:f5:16:36:49:9b: 7f:f2:3f:2c:de:3e:85:cc:a9:aa:bc:53:56:d6:dc: 6e:6b:db:0d:08:d9:6f:ae:38:46:cd:d0:26:af:0f: ec:f5:3b:25:7a:45:f5:94:3a:96:c1:ad:16:bc:94: d7:32:aa:a8:c5:ee:be:b7:41:36:5d:13:9e:69:cd: 97:a0:84:4e:75:55:c5:1b:65:65:11:75:6c:30:57: 4c:ef:49:af:1c:15:0d:e3:9e:6f:2d:2e:06:7d:af: 5d:65:46:4b:ec:80:41:7b:13:00:14:bf:ed:8a:51: e4:e9:47:04:de:8c:e1:7e:d9:8f:fa:93:b1:c1:62: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:27:38:A5:29:22:C0:83:D0:9D:FF:5C:49:85:F3:9D:BB:40:F1:8F X509v3 Authority Key Identifier: keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ad:3f:0a:76:ae:80:e3:0e:2f:e1:6d:bd:90:7d:e4:3a:38: b7:72:e0:2d:c1:b9:1e:b4:da:79:29:7a:57:9d:42:2d:3a:2f: 5a:56:a7:94:55:d0:59:b1:12:3a:66:35:66:e2:7b:69:d6:63: b4:6c:e2:22:26:8b:91:40:56:8c:c9:9a:b5:66:8d:26:63:a8: ed:8e:20:f1:bb:6f:f3:ab:b2:a1:b5:27:3a:d4:01:3e:e7:65: b3:25:cc:3f:ab:9e:50:06:ef:53:fa:c3:50:88:99:aa:4d:6e: 50:11:22:d0:05:3b:51:fa:c0:35:82:81:23:86:e9:78:7a:96: 00:5d:22:96:13:79:f7:a7:9c:5a:d4:90:ae:7a:d7:74:7c:e2: 9f:ed:e6:79:ca:23:20:d6:ee:80:db:d9:60:07:f1:2e:5b:8f: 86:37:43:06:b2:66:ba:e1:3d:84:8d:a8:52:68:54:41:5e:1d: 7d:95:e8:bc:95:e2:d2:95:5f:7f:15:b5:0b:0a:41:e4:43:3e: 07:f9:72:d0:2e:de:44:b9:dd:6a:fa:ad:16:75:4a:e3:3f:2a: 15:5c:17:5b:45:6d:df:5e:5d:34:01:18:ae:db:75:92:66:1e: a9:5e:e2:1c:0c:8b:c2:c3:bf:48:97:c4:fc:95:fd:fd:7c:17: fa:bb:b4:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxMDYxMTAvBgNVBAUTKDkwOTQzRUI4RUFENDRDMzZFREM5OTEwMzFCRkY4OEI4 QUI2NTVBMjkwHhcNMjUwODIzMDAxNzU2WhcNMjUwODMwMDAxNzU2WjAYMRYwFAYD VQQDEw02OGE5MDhiNC02M2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKEpuh+ut8YyvZ8/DVzp9+LJCIddLDH9+iIx0u8VJ6QIMgobg1do7Jrhoq+P CK4DQNIe8VyNHV5+rgKEGKYoUU66LId6imwpYcNyUlVNPHvR8XA9aDhHbFaibfPz q4DoUPlrnwST/LiKxZ1ejgHkAORiXnPtl6QpSKAjERmn2c6A9RY2SZt/8j8s3j6F zKmqvFNW1txua9sNCNlvrjhGzdAmrw/s9TslekX1lDqWwa0WvJTXMqqoxe6+t0E2 XROeac2XoIROdVXFG2VlEXVsMFdM70mvHBUN455vLS4Gfa9dZUZL7IBBexMAFL/t ilHk6UcE3ozhftmP+pOxwWJ5mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4nOKUp IsCD0J3/XEmF8527QPGPMB8GA1UdIwQYMBaAFJCUPrjq1Ew27cmRAxv/iLirZVop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTEwNi85NjE3QzA2RTUz NjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVREYnR5WkVER18tSXVLdGxX aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tKUS11T3JVVERidHlaRURHXy1JdUt0bFdpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTEwNi85NjE3QzA2RTUzNjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVRE YnR5WkVER18tSXVLdGxXaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXrT8Kdq6A4w4v4W29kH3kOji3cuAtwbketNp5KXpXnUItOi9aVqeU VdBZsRI6ZjVm4ntp1mO0bOIiJouRQFaMyZq1Zo0mY6jtjiDxu2/zq7KhtSc61AE+ 52WzJcw/q55QBu9T+sNQiJmqTW5QESLQBTtR+sA1goEjhul4epYAXSKWE3n3p5xa 1JCuetd0fOKf7eZ5yiMg1u6A29lgB/EuW4+GN0MGsma64T2EjahSaFRBXh19lei8 leLSlV9/FbULCkHkQz4H+XLQLt5Eud1q+q0WdUrjPyoVXBdbRW3fXl00ARiu23WS Zh6pXuIcDIvCw79Il8T8lf39fBf6u7SF -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:21 2025 by rpki-client