$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json) Hash identifier: wJooByZ8tLyeb5LLRseprN/sofwu+4QBcmbBcy5QzNY= Subject key identifier: 77:85:F5:33:90:08:A5:DB:26:86:47:5A:0B:DE:02:DC:4D:74:22:DA Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Certificate serial: 1014 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft Manifest number: 1014 Signing time: Fri 22 Aug 2025 17:33:27 +0000 Manifest this update: Fri 22 Aug 2025 17:33:27 +0000 Manifest next update: Fri 29 Aug 2025 17:33:27 +0000 Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: 18EQvvJwv01XIe9umSO/RjJHl3yWQSSoUkG4jPWRk4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4116 (0x1014) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Validity Not Before: Aug 22 17:33:27 2025 GMT Not After : Aug 29 17:33:27 2025 GMT Subject: CN=68a8a9e7-2863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a4:23:8d:3c:eb:c3:c0:98:a6:4c:2d:52:68: 46:2a:a3:c9:b6:49:b6:ba:67:4e:99:17:ff:74:62: 26:00:e7:de:28:72:66:d3:42:8b:e6:af:b2:4a:a3: f8:e6:28:df:94:8c:85:b7:8f:89:bf:da:88:2a:f1: b1:b8:c5:d8:20:04:d9:30:2f:7d:b0:32:02:1b:b2: e8:eb:85:e7:e4:c2:3c:01:0b:52:2c:cf:e9:78:cc: 0d:0a:6c:2c:18:f8:ef:f7:47:f7:da:ab:97:cc:fc: ac:fd:ed:fd:4b:96:2e:97:d3:80:1e:df:4b:a6:a3: b2:13:05:c7:b2:95:9f:24:f5:3d:1c:94:cd:a1:4d: 5e:56:55:a9:f4:e4:16:ee:db:3d:66:23:8e:27:63: 5c:f9:c9:9b:fb:05:d7:e1:a7:8f:3b:3e:d3:9c:a7: ff:86:d6:7a:fc:50:35:1b:2b:1b:5f:9e:74:1e:49: 20:d9:53:02:57:fc:bc:05:59:c7:f1:0f:46:74:0b: a2:dc:da:60:4d:0c:ea:31:34:37:af:e3:1c:f7:24: 76:03:4f:ba:67:f6:42:30:d2:d2:d3:7a:05:2a:b9: ef:fd:1a:86:09:79:68:c3:25:6f:90:2a:fe:2a:ff: d7:7f:4c:2b:67:60:64:19:94:fd:30:89:01:91:48: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:85:F5:33:90:08:A5:DB:26:86:47:5A:0B:DE:02:DC:4D:74:22:DA X509v3 Authority Key Identifier: keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0c:12:ac:56:bb:40:51:c8:1f:56:b0:e5:e8:18:f5:d3:25: 21:34:50:01:93:77:5a:0f:ce:c4:f2:5d:3c:e3:f2:4f:bd:ab: f5:4e:46:b2:99:06:95:bc:da:50:ca:91:67:0d:fc:26:35:a1: cd:2b:33:85:b3:6e:f2:b8:ba:b6:13:b5:52:a8:de:d4:93:73: d3:f8:ec:10:58:a9:c0:f1:f4:fe:ee:b6:0a:ee:aa:e3:e6:a0: 23:78:55:1e:a1:e1:b0:d5:52:f4:2a:9f:39:47:ad:b7:f6:8c: ae:fc:e5:7d:7e:81:f3:e1:2a:75:da:dc:19:1a:03:52:a0:df: 1b:ac:88:2a:bf:4a:98:9a:7f:9b:b5:c7:e3:d4:40:f0:aa:ec: c8:0d:24:e2:4c:ff:23:2c:82:c2:c4:b1:5b:b9:99:8f:42:4d: be:9a:89:fc:68:2a:04:98:39:d6:eb:46:4f:af:cd:d2:92:63: 0d:23:de:ad:39:2c:59:a9:e3:e8:63:ef:9e:81:32:e0:ba:c7: f7:3c:a2:c2:08:8a:af:a9:4c:a8:d5:54:35:7c:d6:40:7f:6a: 84:5b:84:f0:65:a6:e2:1f:79:77:bd:33:68:01:31:86:06:1b: c3:7e:7a:49:13:43:8e:bd:3f:4d:1b:99:8f:16:ea:95:52:b1: 25:65:da:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUExNjExMTAvBgNVBAUTKDkwMkIzRUIzQ0Q0OEQwOUFBMEExMEM5QjJDQjI4MEQw QTBDRDJEQkEwHhcNMjUwODIyMTczMzI3WhcNMjUwODI5MTczMzI3WjAYMRYwFAYD VQQDEw02OGE4YTllNy0yODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qQjjTzrw8CYpkwtUmhGKqPJtkm2umdOmRf/dGImAOfeKHJm00KL5q+ySqP4 5ijflIyFt4+Jv9qIKvGxuMXYIATZMC99sDICG7Lo64Xn5MI8AQtSLM/peMwNCmws GPjv90f32quXzPys/e39S5Yul9OAHt9LpqOyEwXHspWfJPU9HJTNoU1eVlWp9OQW 7ts9ZiOOJ2Nc+cmb+wXX4aePOz7TnKf/htZ6/FA1GysbX550Hkkg2VMCV/y8BVnH 8Q9GdAui3NpgTQzqMTQ3r+Mc9yR2A0+6Z/ZCMNLS03oFKrnv/RqGCXlowyVvkCr+ Kv/Xf0wrZ2BkGZT9MIkBkUi8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeF9TOQ CKXbJoZHWgveAtxNdCLaMB8GA1UdIwQYMBaAFJArPrPNSNCaoKEMmyyygNCgzS26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE2MS9CMDdCMkFCODRC MTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBKcWdvUXliTExLQTBLRE5M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDcy1zODFJMEpxZ29ReWJMTEtBMEtETkxiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTE2MS9CMDdCMkFCODRCMTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBK cWdvUXliTExLQTBLRE5MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbDBKsVrtAUcgfVrDl6Bj10yUhNFABk3daD87E8l084/JPvav1Tkay mQaVvNpQypFnDfwmNaHNKzOFs27yuLq2E7VSqN7Uk3PT+OwQWKnA8fT+7rYK7qrj 5qAjeFUeoeGw1VL0Kp85R6239oyu/OV9foHz4Sp12twZGgNSoN8brIgqv0qYmn+b tcfj1EDwquzIDSTiTP8jLILCxLFbuZmPQk2+mon8aCoEmDnW60ZPr83SkmMNI96t OSxZqePoY++egTLgusf3PKLCCIqvqUyo1VQ1fNZAf2qEW4TwZabiH3l3vTNoATGG BhvDfnpJE0OOvT9NG5mPFuqVUrElZdqu -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:52 2025 by rpki-client