$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json) Hash identifier: 195uMGh2mMof6qOaGieAdGrNUg54KM0o3NvLqQh0e3s= Subject key identifier: 8C:19:D5:47:58:27:4C:D7:AC:71:9C:73:04:C4:BC:0B:DF:08:BB:E0 Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft Manifest number: 0115 Signing time: Sat 23 Aug 2025 05:03:10 +0000 Manifest this update: Sat 23 Aug 2025 05:03:09 +0000 Manifest next update: Sat 30 Aug 2025 05:03:09 +0000 Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: zGzQF95haIkgou0RiFV+ooTn65BzJN7aR2g60ypTnQw=) 2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: d6abLKyd7fr1z0R2GJ3OwWkvRu3wB2ZUv3mxpyp6whI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Validity Not Before: Aug 23 05:03:09 2025 GMT Not After : Aug 30 05:03:09 2025 GMT Subject: CN=68a94b8d-9fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:e7:bd:43:fd:e8:db:a4:13:d4:4a:5b:dc: 77:1c:77:f0:6e:d2:0d:e9:63:ed:79:66:92:da:9b: 2a:8b:ac:e9:43:63:b4:a1:f4:1e:f1:4d:9d:a6:e4: fb:f5:b9:a6:ad:94:c9:90:ea:fa:ac:91:ee:d6:c3: ec:3d:4d:5c:98:e3:03:f9:15:a9:25:40:06:ed:34: e8:10:69:e1:d7:00:dc:da:57:47:13:e1:a4:9d:82: 20:a1:2b:71:0b:35:02:d0:8a:20:f7:a3:ac:aa:74: 78:6e:4d:90:8e:f6:11:13:76:68:c8:85:60:28:ec: 81:21:38:39:cb:f2:09:a7:f3:23:18:d3:95:64:8d: 80:6c:6d:47:b8:cd:76:93:47:0c:b3:26:18:d2:a0: 12:a7:20:d1:f8:e2:7a:e6:f6:2f:04:53:53:58:ba: 57:a5:32:87:6f:5c:93:0c:92:dc:58:9f:62:cd:a3: 3c:84:89:02:7b:25:7b:8c:ff:3d:cc:69:d6:5d:80: 48:98:c3:20:7e:2e:f1:31:47:24:8d:9a:20:0f:58: 58:fc:83:a4:10:38:21:0e:ea:fe:4f:05:f0:4b:02: e5:19:c7:e7:7e:10:0a:e5:a6:0b:e1:8f:ec:e8:f5: bb:5d:05:5d:f8:dc:9e:66:bb:54:2d:c6:6d:7e:b7: 40:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:19:D5:47:58:27:4C:D7:AC:71:9C:73:04:C4:BC:0B:DF:08:BB:E0 X509v3 Authority Key Identifier: keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e8:2b:99:0e:50:7a:01:04:67:a4:f4:97:47:37:49:cd:15: bc:d7:85:14:d1:6a:20:eb:07:3e:bf:ba:d5:96:3a:27:ee:3e: f1:a6:88:12:47:9d:ff:4f:e0:f9:df:c6:31:89:5c:71:e4:81: fa:97:37:6e:3c:14:79:aa:f2:ec:5e:11:15:0b:92:f9:c3:75: 66:88:60:72:dd:62:ef:1d:54:58:1f:3c:4a:94:80:40:aa:98: 70:00:ef:7e:34:b2:e8:d5:a2:e3:34:6c:fc:e4:7e:ed:15:74: 2b:08:51:92:83:da:9f:6b:3f:9e:5d:bd:61:7b:5f:3f:68:c9: 01:59:08:8a:d4:f0:97:db:c9:c0:8f:05:34:47:a9:09:44:18: 1d:4a:e1:c2:40:0d:ab:d5:3e:7d:ba:3d:e2:54:2d:db:b5:31: 96:c9:66:09:43:87:0b:7f:17:2f:3a:63:4c:d3:2f:c6:b7:13: f6:24:84:5a:d7:85:88:32:38:fa:56:31:ed:82:5c:bc:2e:2c: 0a:42:d9:fb:02:0d:ab:b5:f9:2e:24:eb:26:60:46:aa:45:59: b9:8f:81:f7:8d:cc:0a:bd:29:18:d0:04:76:c0:ff:cd:2c:04: 3f:c7:2f:c5:fd:45:57:14:51:3b:02:05:42:53:b7:14:f2:b6: 60:dc:50:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy NDlDQ0M4RjQwHhcNMjUwODIzMDUwMzA5WhcNMjUwODMwMDUwMzA5WjAYMRYwFAYD VQQDEw02OGE5NGI4ZC05ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMfnvUP96NukE9RKW9x3HHfwbtIN6WPteWaS2psqi6zpQ2O0ofQe8U2dpuT7 9bmmrZTJkOr6rJHu1sPsPU1cmOMD+RWpJUAG7TToEGnh1wDc2ldHE+GknYIgoStx CzUC0Iog96OsqnR4bk2QjvYRE3ZoyIVgKOyBITg5y/IJp/MjGNOVZI2AbG1HuM12 k0cMsyYY0qASpyDR+OJ65vYvBFNTWLpXpTKHb1yTDJLcWJ9izaM8hIkCeyV7jP89 zGnWXYBImMMgfi7xMUckjZogD1hY/IOkEDghDur+TwXwSwLlGcfnfhAK5aYL4Y/s 6PW7XQVd+NyeZrtULcZtfrdAeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwZ1UdY J0zXrHGccwTEvAvfCLvgMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54 ajl5QzB3QjZuVFFrbk15UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ6CuZDlB6AQRnpPSXRzdJzRW814UU0Wog6wc+v7rVljon7j7xpogS R53/T+D538YxiVxx5IH6lzduPBR5qvLsXhEVC5L5w3VmiGBy3WLvHVRYHzxKlIBA qphwAO9+NLLo1aLjNGz85H7tFXQrCFGSg9qfaz+eXb1he18/aMkBWQiK1PCX28nA jwU0R6kJRBgdSuHCQA2r1T59uj3iVC3btTGWyWYJQ4cLfxcvOmNM0y/GtxP2JIRa 14WIMjj6VjHtgly8LiwKQtn7Ag2rtfkuJOsmYEaqRVm5j4H3jcwKvSkY0AR2wP/N LAQ/xy/F/UVXFFE7AgVCU7cU8rZg3FCR -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:29 2025 by rpki-client