$ rpki-client -vvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft File: KcmzN9Z7DxREgXmLTVsNc9eIrys.mft (raw, json) Hash identifier: KRhEj4Q9BTFsdINn7iYxLmvn7WGKOWF0sfau6hdqBd8= Subject key identifier: 67:62:4E:54:58:E3:FE:06:E8:5E:FC:56:81:25:24:C7:DB:78:B7:A3 Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B Certificate issuer: /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft Manifest number: 27 Signing time: Sat 23 Aug 2025 08:02:18 +0000 Manifest this update: Sat 23 Aug 2025 08:02:18 +0000 Manifest next update: Sat 30 Aug 2025 08:02:17 +0000 Files and hashes: 1: KcmzN9Z7DxREgXmLTVsNc9eIrys.crl (hash: nYRWFisyF6Yas57gxxLX9QLSrHWaTV77/I3XfG5txDs=) 2: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (hash: JRzGJdFSse2irDcL+W7kuHv+w+d8AeO+g8YTYnBtHyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B Validity Not Before: Aug 23 08:02:18 2025 GMT Not After : Aug 30 08:02:17 2025 GMT Subject: CN=68a9758a-0275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:37:ae:da:9d:9b:27:5d:48:88:2c:20:f4: 50:33:5b:bb:16:ee:95:3c:ae:6e:2c:29:c7:1d:de: c7:34:35:d3:d9:24:be:fc:b6:3b:e9:f4:49:90:fd: d5:9f:da:3b:f5:67:90:41:53:40:69:38:54:a6:b3: 85:66:e5:7b:e0:be:2d:68:dd:30:eb:4e:6b:37:07: ca:0e:f1:58:74:4a:e8:1e:00:69:26:06:0d:31:63: 02:c5:53:98:20:ee:8d:ba:a8:b3:0b:f1:cf:0c:6b: 6c:17:58:97:01:6e:e4:0b:c9:6b:c0:44:d5:6d:44: 22:05:ef:78:6a:ab:35:ca:30:da:3e:ad:49:46:ae: b6:cd:d7:2a:0a:50:c4:8a:77:a5:a6:9b:09:a5:0e: fa:9a:a7:46:fb:38:d1:fa:88:e3:54:e4:c6:73:9d: 44:a4:68:0e:f7:94:95:98:1c:18:92:e2:50:25:4e: c3:c4:ae:16:ea:53:2b:d8:7b:d1:b7:91:fb:63:d4: cd:8b:cc:92:c0:39:1e:5c:85:41:03:f2:e1:21:03: cd:ec:44:98:e9:9d:1c:45:bf:65:3e:6d:d6:cf:e6: 9d:b9:2f:fe:6a:2d:fc:71:88:e6:02:d7:d5:19:ad: 3e:1b:29:52:a6:7a:a8:98:dd:ea:59:01:25:b3:1e: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:62:4E:54:58:E3:FE:06:E8:5E:FC:56:81:25:24:C7:DB:78:B7:A3 X509v3 Authority Key Identifier: keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3e:a1:f4:8e:39:e1:66:2d:2a:2b:44:df:b4:3c:a5:17:01: a5:8e:ff:b8:83:99:d8:3b:99:ae:6d:8c:46:a2:37:3d:4d:1f: e7:80:c1:19:c0:93:30:b0:95:2c:37:c4:e0:3f:8c:61:ff:60: d1:22:af:ad:91:b7:18:41:46:5f:22:52:79:89:8a:70:38:36: 70:62:d3:91:83:b3:28:6e:37:f4:c5:1c:3b:98:fb:ff:1d:ea: 10:70:4a:2d:be:15:34:a4:5a:41:77:c2:0e:4b:ec:33:16:8a: 35:c9:29:0b:d6:40:3d:cd:d1:79:a2:fa:f1:76:6e:19:b4:6a: 7a:04:74:6e:27:8c:68:7c:3a:ef:91:44:10:8e:77:47:11:4d: 3f:8b:0a:10:42:d6:fd:8b:ed:67:23:2c:c1:22:5d:51:46:ff: 98:36:a9:95:d8:70:16:69:f9:95:0e:0e:87:4c:d5:ce:7e:bd: c9:e1:50:53:5f:2f:f9:7d:c5:0e:f0:39:27:e8:b3:94:d0:74: fb:c4:e4:3f:fa:fb:1c:7e:2c:8a:c6:89:0a:45:4f:06:f7:47: 01:66:5f:20:50:ba:c6:17:36:26:8d:2d:3c:e2:b8:97:9c:7f: 8a:d1:84:d9:bb:07:ad:df:81:00:98:de:25:18:16:85:bc:ac: 95:c0:3c:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDhCMjExMC8GA1UEBRMoMjlDOUIzMzdENjdCMEYxNDQ0ODE3OThCNEQ1QjBENzNE Nzg4QUYyQjAeFw0yNTA4MjMwODAyMThaFw0yNTA4MzAwODAyMTdaMBgxFjAUBgNV BAMTDTY4YTk3NThhLTAyNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIHjeu2p2bJ11IiCwg9FAzW7sW7pU8rm4sKccd3sc0NdPZJL78tjvp9EmQ/dWf 2jv1Z5BBU0BpOFSms4Vm5Xvgvi1o3TDrTms3B8oO8Vh0SugeAGkmBg0xYwLFU5gg 7o26qLML8c8Ma2wXWJcBbuQLyWvARNVtRCIF73hqqzXKMNo+rUlGrrbN1yoKUMSK d6WmmwmlDvqap0b7ONH6iONU5MZznUSkaA73lJWYHBiS4lAlTsPErhbqUyvYe9G3 kftj1M2LzJLAOR5chUED8uEhA83sRJjpnRxFv2U+bdbP5p25L/5qLfxxiOYC19UZ rT4bKVKmeqiY3epZASWzHlHrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ2JOVFjj /gboXvxWgSUkx9t4t6MwHwYDVR0jBBgwFoAUKcmzN9Z7DxREgXmLTVsNc9eIrysw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwOEIyL0M5NUE0OUFFNEE1 MjExRjA5ODlENzAwRkM0RjlBRTAyL0tjbXpOOVo3RHhSRWdYbUxUVnNOYzllSXJ5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS2Ntek45WjdEeFJFZ1htTFRWc05jOWVJcnlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw OEIyL0M5NUE0OUFFNEE1MjExRjA5ODlENzAwRkM0RjlBRTAyL0tjbXpOOVo3RHhS RWdYbUxUVnNOYzllSXJ5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI4+ofSOOeFmLSorRN+0PKUXAaWO/7iDmdg7ma5tjEaiNz1NH+eAwRnA kzCwlSw3xOA/jGH/YNEir62RtxhBRl8iUnmJinA4NnBi05GDsyhuN/TFHDuY+/8d 6hBwSi2+FTSkWkF3wg5L7DMWijXJKQvWQD3N0Xmi+vF2bhm0anoEdG4njGh8Ou+R RBCOd0cRTT+LChBC1v2L7WcjLMEiXVFG/5g2qZXYcBZp+ZUODodM1c5+vcnhUFNf L/l9xQ7wOSfos5TQdPvE5D/6+xx+LIrGiQpFTwb3RwFmXyBQusYXNiaNLTziuJec f4rRhNm7B63fgQCY3iUYFoW8rJXAPBs= -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:12 2025 by rpki-client