$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: 6Btd9MMGq+GP8b6dzrdVpgRMzWx6hNEdg+1v8Ngceq0= Subject key identifier: D6:97:E9:AB:FB:6A:56:17:2D:AC:C2:9B:0C:82:03:4E:E7:9F:CD:EB Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 029E Signing time: Sat 23 Aug 2025 01:48:44 +0000 Manifest this update: Sat 23 Aug 2025 01:48:43 +0000 Manifest next update: Sat 30 Aug 2025 01:48:43 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: w6X8UQZaVxvjQbl22Joxej2K4OUcrZcAx54DVKYhyj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Aug 23 01:48:43 2025 GMT Not After : Aug 30 01:48:43 2025 GMT Subject: CN=68a91dfc-39dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:d5:b7:a2:fd:50:94:81:3a:9f:fe:6e:2b: 38:9d:9d:b3:45:b6:7e:09:78:91:73:10:4c:7c:de: 5e:27:61:fe:6e:12:70:fd:16:05:fb:1a:0b:a4:94: ad:9b:f2:3a:de:88:ce:38:71:77:2e:cf:87:2b:24: e4:45:5b:66:1d:88:82:42:50:1a:2a:f2:aa:15:94: 41:c4:92:97:93:2b:60:95:4a:50:83:76:cc:be:ec: 89:f4:d2:ba:d9:fe:3b:94:da:f0:0c:7a:79:aa:9e: 37:54:b4:28:63:88:45:56:c0:a4:70:25:89:7c:55: c7:ec:49:b3:d7:20:1d:b9:b7:9b:1f:3f:55:56:14: c1:fc:51:5f:e3:c6:68:dd:f9:20:ce:38:f7:ed:54: 36:bc:8b:58:25:3b:d8:fa:68:bc:c9:80:c6:31:bf: 45:5f:88:c6:f0:0d:03:3d:24:a5:f5:a4:05:60:23: 03:fb:b4:e8:db:0c:27:04:d4:f4:d6:85:8e:84:ef: ef:d8:f5:95:2d:e3:63:ac:46:3b:8c:20:be:d8:eb: 7b:ec:2f:12:6a:aa:cd:02:16:ca:86:70:66:e3:f0: 45:08:39:10:10:b3:19:e1:8f:09:7d:d3:3a:c8:c4: 6a:17:1f:82:dc:e9:a4:14:e3:21:fd:57:3f:0a:96: 07:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:E9:AB:FB:6A:56:17:2D:AC:C2:9B:0C:82:03:4E:E7:9F:CD:EB X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2e:41:2a:88:2f:f7:73:20:1d:f2:68:c5:67:d6:cb:50:4c: ae:0d:83:14:86:b4:c7:d8:a5:54:9d:75:26:fe:8f:fe:f6:5e: d9:40:6c:aa:f1:0e:92:8e:ef:dd:b4:cc:a9:0a:ac:f1:7b:a7: b8:60:26:bc:df:93:e0:b0:53:86:e6:9e:f6:01:b3:96:3f:66: 91:da:c7:91:1e:86:d8:35:f9:8c:db:49:b3:ce:22:1d:89:2a: 2e:83:0c:cb:bc:36:8b:58:eb:c6:af:4b:ed:17:1a:fd:f8:ce: cd:c3:12:5a:da:7f:79:5e:67:cd:ae:4d:1e:fc:75:36:11:90: dc:67:2b:f9:83:94:19:ba:35:c9:fc:2e:b9:2c:83:f4:50:47: 90:76:51:cf:27:4d:e5:88:ee:55:9c:31:59:a5:78:07:01:2d: d2:c9:ad:2c:63:37:6e:82:c5:53:20:a7:4d:5c:61:37:53:53: e6:4a:14:9e:92:9f:fa:ad:35:a1:4b:03:b3:0a:8a:29:61:f6: c1:f8:be:6e:5b:a3:54:93:d8:d4:ad:9e:70:02:66:22:05:6f: c2:86:a2:3a:24:28:23:c2:11:19:e9:c5:34:da:ed:b9:d9:6c: 16:58:4a:7b:14:0f:cf:54:dd:0e:5e:19:c4:a1:db:2a:e4:25: ec:ae:ea:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUwODIzMDE0ODQzWhcNMjUwODMwMDE0ODQzWjAYMRYwFAYD VQQDEw02OGE5MWRmYy0zOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsY7Vt6L9UJSBOp/+bis4nZ2zRbZ+CXiRcxBMfN5eJ2H+bhJw/RYF+xoLpJSt m/I63ojOOHF3Ls+HKyTkRVtmHYiCQlAaKvKqFZRBxJKXkytglUpQg3bMvuyJ9NK6 2f47lNrwDHp5qp43VLQoY4hFVsCkcCWJfFXH7Emz1yAdubebHz9VVhTB/FFf48Zo 3fkgzjj37VQ2vItYJTvY+mi8yYDGMb9FX4jG8A0DPSSl9aQFYCMD+7To2wwnBNT0 1oWOhO/v2PWVLeNjrEY7jCC+2Ot77C8SaqrNAhbKhnBm4/BFCDkQELMZ4Y8JfdM6 yMRqFx+C3OmkFOMh/Vc/CpYHFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaX6av7 alYXLazCmwyCA07nn83rMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsLkEqiC/3cyAd8mjFZ9bLUEyuDYMUhrTH2KVUnXUm/o/+9l7ZQGyq 8Q6Sju/dtMypCqzxe6e4YCa835PgsFOG5p72AbOWP2aR2seRHobYNfmM20mzziId iSougwzLvDaLWOvGr0vtFxr9+M7NwxJa2n95XmfNrk0e/HU2EZDcZyv5g5QZujXJ /C65LIP0UEeQdlHPJ03liO5VnDFZpXgHAS3Sya0sYzdugsVTIKdNXGE3U1PmShSe kp/6rTWhSwOzCoopYfbB+L5uW6NUk9jUrZ5wAmYiBW/ChqI6JCgjwhEZ6cU02u25 2WwWWEp7FA/PVN0OXhnEodsq5CXsrupL -----END CERTIFICATE-----Generated at Sun Aug 24 04:50:00 2025 by rpki-client