$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: VVLbpPllJoW1wrhp8kYYBf4VYTKTD66fn1CSTOv8m2Y= Subject key identifier: 29:63:F1:97:23:EB:76:2F:35:2E:49:54:1E:AB:6C:0B:CC:79:85:AC Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: 08 Signing time: Thu 03 Jul 2025 08:26:42 +0000 Manifest this update: Thu 03 Jul 2025 08:26:42 +0000 Manifest next update: Thu 10 Jul 2025 08:26:42 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: RhJbMa4OTbcSqlju/iDhFMmO7/+H9FmPOVpwuxh2fUQ=) 2: 10676C34517211F0AB672330C4F9AE02.roa (hash: iNwtEE4vpbgtamGh9Rt3zwBDGCds5c6NdLwqNO9h0fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Jul 3 08:26:42 2025 GMT Not After : Jul 10 08:26:42 2025 GMT Subject: CN=68663ec2-6011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:3f:b0:b7:1a:c8:fe:39:5b:fe:5a:b0:85: 1a:53:1c:4d:b1:d3:d7:6e:70:29:a9:e2:f9:20:6d: 75:d9:02:89:1f:1d:e6:dc:cb:90:56:6b:81:9f:e1: ed:9a:9a:11:bd:0a:60:67:dc:76:81:b1:d3:e0:3f: 38:33:3d:d0:ce:d3:94:b4:00:20:b5:39:dd:78:ee: d3:c0:eb:62:4a:c7:9f:63:00:aa:c4:80:e1:28:99: c4:19:d8:7d:ea:e8:3d:2b:a0:35:4b:01:95:04:9e: b8:c7:e4:ef:8c:d2:f2:96:55:65:6a:a4:c7:29:69: 50:a7:2f:f3:f1:80:d9:d2:4e:12:6e:0b:3b:12:f7: cf:2f:99:50:8f:4d:9d:f7:c0:a6:65:a0:a9:e8:22: fa:81:29:41:c8:f9:31:a6:de:5b:b1:a8:7b:28:2d: 7a:de:d7:e5:89:e0:bd:f6:21:21:78:ff:c3:86:b9: 9b:6c:9b:9c:ef:15:a1:35:74:fd:ad:95:7f:71:eb: 98:94:88:2d:96:f4:bc:c3:92:74:96:79:88:17:b3: e7:56:42:85:a1:47:6a:2c:1a:4a:fd:83:c5:15:ab: 2e:e1:ec:53:8c:22:e3:2a:ff:1e:f3:73:2a:1c:eb: 6b:b6:55:fe:7a:dc:c8:5f:d7:dc:70:78:ef:b6:a5: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:63:F1:97:23:EB:76:2F:35:2E:49:54:1E:AB:6C:0B:CC:79:85:AC X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:a7:13:9f:48:dc:14:cf:bf:e6:fe:0d:2b:1e:60:de:8b:29: 03:78:fc:a4:11:c2:51:fb:b1:af:92:c8:46:0d:3c:c4:f2:d6: b6:81:38:c6:48:14:70:a0:20:ec:01:15:38:db:17:9c:c9:5b: 79:21:92:93:20:c3:98:87:18:6c:31:2b:b8:8f:58:4f:6f:82: 98:47:49:82:af:fc:33:c0:2e:6a:36:92:89:e3:d1:55:23:25: 69:9e:a0:9a:2f:8a:58:fe:ef:22:4e:01:b0:56:d7:eb:67:a5: 8e:19:fa:c7:78:08:58:e1:72:82:f9:4b:42:f5:22:8c:5c:f1: 64:1b:7e:d5:7c:46:a9:0a:1c:a3:18:f5:46:35:8d:ab:83:0b: e8:62:32:1c:05:2b:57:a2:cf:a6:e0:4a:c9:e5:5b:60:1d:34: 3a:54:c8:08:fe:b6:d2:bb:9f:d1:8b:93:7f:dd:ce:8f:2d:c8: c5:21:5d:4f:cc:a5:97:18:c5:da:e7:95:cd:c1:c9:bf:57:fe: 57:87:84:ba:d0:f3:76:fc:e3:7c:76:c6:cc:af:8e:ec:99:fe: 8d:22:ff:3f:b3:36:bc:68:b2:06:25:3e:89:24:df:b8:94:f5: 0d:16:e5:ff:84:0b:18:b6:57:79:5f:ff:e6:aa:d6:f5:42:7c: c1:fe:11:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkU5RjExMC8GA1UEBRMoMjhEQUQ4RDRDQzZGNzQwRkEwMDBENDM2ODY5QUUwRjE3 NkVBRTkzMzAeFw0yNTA3MDMwODI2NDJaFw0yNTA3MTAwODI2NDJaMBgxFjAUBgNV BAMTDTY4NjYzZWMyLTYwMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdXT+wtxrI/jlb/lqwhRpTHE2x09ducCmp4vkgbXXZAokfHebcy5BWa4Gf4e2a mhG9CmBn3HaBsdPgPzgzPdDO05S0ACC1Od147tPA62JKx59jAKrEgOEomcQZ2H3q 6D0roDVLAZUEnrjH5O+M0vKWVWVqpMcpaVCnL/PxgNnSThJuCzsS988vmVCPTZ33 wKZloKnoIvqBKUHI+TGm3luxqHsoLXre1+WJ4L32ISF4/8OGuZtsm5zvFaE1dP2t lX9x65iUiC2W9LzDknSWeYgXs+dWQoWhR2osGkr9g8UVqy7h7FOMIuMq/x7zcyoc 62u2Vf563Mhf19xweO+2pVh3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKWPxlyPr di81LklUHqtsC8x5hawwHwYDVR0jBBgwFoAUKNrY1MxvdA+gANQ2hprg8Xbq6TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRTlGLzIzMDI3MTI0NTE3 MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS05yWTFNeHZkQS1nQU5RMmhwcmc4WGJxNlRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RTlGLzIzMDI3MTI0NTE3MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEt Z0FOUTJocHJnOFhicTZUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACCnE59I3BTPv+b+DSseYN6LKQN4/KQRwlH7sa+SyEYNPMTy1raBOMZI FHCgIOwBFTjbF5zJW3khkpMgw5iHGGwxK7iPWE9vgphHSYKv/DPALmo2konj0VUj JWmeoJovilj+7yJOAbBW1+tnpY4Z+sd4CFjhcoL5S0L1Ioxc8WQbftV8RqkKHKMY 9UY1jauDC+hiMhwFK1eiz6bgSsnlW2AdNDpUyAj+ttK7n9GLk3/dzo8tyMUhXU/M pZcYxdrnlc3Byb9X/leHhLrQ83b843x2xsyvjuyZ/o0i/z+zNrxosgYlPokk37iU 9Q0W5f+ECxi2V3lf/+aq1vVCfMH+Eeg= -----END CERTIFICATE-----Generated at Thu Jul 3 17:10:22 2025 by rpki-client