$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: nzU13UPee8htyDmHAtKCn8wjccE4vW91BQ+9jBLIa+s= Subject key identifier: 98:10:03:CE:27:96:82:28:B2:B8:D7:D3:49:F6:0C:8E:F6:B4:37:28 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: 22 Signing time: Sat 23 Aug 2025 08:05:19 +0000 Manifest this update: Sat 23 Aug 2025 08:05:19 +0000 Manifest next update: Sat 30 Aug 2025 08:05:19 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: Jbj6n+CMzdi0fRKSbS5A6im9POJdlTJBZk5BZILZRPg=) 2: 10676C34517211F0AB672330C4F9AE02.roa (hash: iNwtEE4vpbgtamGh9Rt3zwBDGCds5c6NdLwqNO9h0fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Aug 23 08:05:19 2025 GMT Not After : Aug 30 08:05:19 2025 GMT Subject: CN=68a9763f-c7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:02:f4:fb:79:11:ed:67:20:a5:dd:cf:4e: 41:69:f6:02:ba:eb:f4:32:7e:4a:dc:3a:5a:dc:c8: 3c:87:e0:9a:c0:78:91:39:b9:35:bf:74:11:d7:1b: 17:ed:f9:52:88:34:c8:42:84:b3:16:90:e6:9b:69: f2:80:69:53:20:76:e3:f1:62:e5:8e:4f:82:8b:8a: 60:71:9b:12:cc:26:18:f4:a6:54:41:c2:8e:0a:d7: d5:26:ea:8e:47:2e:8e:c2:b2:9d:7c:c8:a8:11:50: 5b:8d:74:98:2d:ea:3d:67:1d:f5:29:b9:f1:6f:16: 79:d2:63:5a:74:66:ca:38:b0:e4:62:89:54:5c:69: 9f:a8:2c:c5:57:fb:49:a3:b9:50:aa:02:e1:3a:13: bd:1d:6d:f6:c8:28:f7:5b:c7:25:b7:31:96:5c:7c: 7c:c9:4a:5d:be:8b:bb:dd:f0:1d:5c:c4:46:44:d1: 5a:be:25:12:97:d2:5f:45:19:02:57:9e:36:f7:a1: ef:9f:df:41:bc:4c:30:db:db:ee:f1:9d:8d:61:b5: a7:90:46:3b:ba:ae:f2:e5:b2:40:25:11:c1:72:6e: 22:e4:62:ef:8f:50:9f:7e:aa:16:cd:cb:b5:49:53: 8b:49:c9:69:28:d8:a9:a7:4b:fd:5c:96:6f:f6:e5: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:10:03:CE:27:96:82:28:B2:B8:D7:D3:49:F6:0C:8E:F6:B4:37:28 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d8:c5:3c:42:3e:b5:60:38:52:f9:9a:08:b1:54:47:8a:bc: 6f:a6:4d:bc:91:49:00:d6:6f:ab:24:7e:5d:bc:05:e4:4f:b3: 57:f2:80:96:56:6e:90:b2:45:b4:61:57:c7:78:f7:a6:db:22: bc:a0:04:29:c6:50:da:2b:3b:f8:ea:6d:dc:20:b4:e6:e9:f0: ea:52:a3:c6:1f:5b:3f:ef:c9:b7:2d:3a:72:0f:55:ec:99:08: 28:13:cc:bd:88:1a:f2:59:5c:3c:03:18:9c:bc:b3:06:67:49: d1:73:55:5d:0c:ce:2d:c1:9b:88:3a:49:1f:86:50:6d:9f:ba: cb:7c:7d:d9:ed:0a:a7:4a:f5:a9:c7:32:cb:65:fc:df:cf:f9: f9:f5:3f:90:18:a7:55:32:1f:07:da:26:ce:78:a5:b7:31:9c: aa:3b:5a:f5:38:26:c7:55:ac:7f:aa:6d:29:23:53:cc:b6:8f: 8c:7e:56:c3:9e:9c:c8:c7:51:39:5e:30:c8:d5:cb:c4:9d:45: 49:3e:12:5c:92:59:2b:55:31:b2:1b:bd:10:9c:90:6e:05:a3: 5d:60:79:b2:46:9f:49:22:e3:fa:86:9b:fc:9c:5b:3f:7d:3a: 9c:fb:27:d1:e2:59:e7:57:e0:22:14:bf:ef:cc:56:4e:ea:b1: 07:ad:76:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkU5RjExMC8GA1UEBRMoMjhEQUQ4RDRDQzZGNzQwRkEwMDBENDM2ODY5QUUwRjE3 NkVBRTkzMzAeFw0yNTA4MjMwODA1MTlaFw0yNTA4MzAwODA1MTlaMBgxFjAUBgNV BAMTDTY4YTk3NjNmLWM3YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNXgL0+3kR7Wcgpd3PTkFp9gK66/QyfkrcOlrcyDyH4JrAeJE5uTW/dBHXGxft +VKINMhChLMWkOabafKAaVMgduPxYuWOT4KLimBxmxLMJhj0plRBwo4K19Um6o5H Lo7Csp18yKgRUFuNdJgt6j1nHfUpufFvFnnSY1p0Zso4sORiiVRcaZ+oLMVX+0mj uVCqAuE6E70dbfbIKPdbxyW3MZZcfHzJSl2+i7vd8B1cxEZE0Vq+JRKX0l9FGQJX njb3oe+f30G8TDDb2+7xnY1htaeQRju6rvLlskAlEcFybiLkYu+PUJ9+qhbNy7VJ U4tJyWko2KmnS/1clm/25fXBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmBADzieW giiyuNfTSfYMjva0NygwHwYDVR0jBBgwFoAUKNrY1MxvdA+gANQ2hprg8Xbq6TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRTlGLzIzMDI3MTI0NTE3 MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS05yWTFNeHZkQS1nQU5RMmhwcmc4WGJxNlRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RTlGLzIzMDI3MTI0NTE3MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEt Z0FOUTJocHJnOFhicTZUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHDYxTxCPrVgOFL5mgixVEeKvG+mTbyRSQDWb6skfl28BeRPs1fygJZW bpCyRbRhV8d496bbIrygBCnGUNorO/jqbdwgtObp8OpSo8YfWz/vybctOnIPVeyZ CCgTzL2IGvJZXDwDGJy8swZnSdFzVV0Mzi3Bm4g6SR+GUG2fust8fdntCqdK9anH Mstl/N/P+fn1P5AYp1UyHwfaJs54pbcxnKo7WvU4JsdVrH+qbSkjU8y2j4x+VsOe nMjHUTleMMjVy8SdRUk+ElySWStVMbIbvRCckG4Fo11gebJGn0ki4/qGm/ycWz99 Opz7J9HiWedX4CIUv+/MVk7qsQetdok= -----END CERTIFICATE-----Generated at Sun Aug 24 02:34:09 2025 by rpki-client