$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: DKFxLnuLaTZLr0od8Wbek2feQhEK4mBxVFX85l+BVx4= Subject key identifier: 7E:C7:83:7B:4B:E5:4B:19:0B:C9:13:22:B7:CD:78:8D:1A:48:E0:A4 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 064A Signing time: Fri 22 Aug 2025 22:51:34 +0000 Manifest this update: Fri 22 Aug 2025 22:51:33 +0000 Manifest next update: Fri 29 Aug 2025 22:51:33 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: XAty/QHMphXQoR/anuN+j0mnNFgYsm5IDah1UI4OMFE=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: IsFTUXxsw7oP6sOsJZN0fFgsJ2mQPRr349bOV7EbeEQ=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: d0b5vUBWzMm2pz0E2OMmgEy+tuggoWEtsruTL8xevaE=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Aug 22 22:51:33 2025 GMT Not After : Aug 29 22:51:33 2025 GMT Subject: CN=68a8f475-1e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:80:ae:9a:d5:40:0a:09:b3:ff:4e:d9:aa: 32:31:f6:03:ca:fb:e1:2f:d5:55:c4:ae:f7:5f:ac: 32:33:68:9c:12:50:9e:dc:09:a8:5f:90:52:a0:3a: e3:ec:7d:b5:0c:bf:fb:68:d8:ba:ac:4a:51:b6:06: 07:d9:a5:99:51:a9:66:d6:6d:97:14:00:62:d2:1d: d8:73:ed:ca:a3:f7:d1:0e:b8:53:0b:80:66:77:67: e1:e9:d3:66:75:5f:f5:ad:96:10:76:cd:75:8a:1c: 39:96:6b:16:23:28:53:76:ec:02:6f:00:2c:c1:36: 22:f9:a8:39:0a:3e:ee:4d:d1:42:db:3f:fc:46:5d: 8e:92:07:6e:88:ef:f0:66:72:e0:ab:3c:38:d5:24: a6:1b:5a:8b:53:d1:ef:4b:69:dc:5a:f7:8e:2e:4d: cf:fc:19:2c:c4:f9:a1:5d:b8:7d:f5:f3:13:4f:e4: 52:1d:1a:a7:50:f6:fd:a9:c9:84:c1:df:b5:20:14: b4:92:16:5c:2f:77:32:66:52:7a:e5:a9:3a:36:8a: 96:aa:9d:01:05:d2:db:60:ec:75:84:ee:85:06:32: db:d6:66:05:0b:87:7d:b4:0e:d2:48:ff:47:56:ec: 7e:73:65:bc:8f:86:2f:71:e1:72:b5:8d:57:d1:52: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C7:83:7B:4B:E5:4B:19:0B:C9:13:22:B7:CD:78:8D:1A:48:E0:A4 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:a2:b6:90:e7:d8:51:fe:af:6f:ce:db:6d:25:a5:29:49:cf: 99:79:d4:bc:c9:64:97:6d:67:5d:39:01:98:18:d3:84:71:49: 14:94:19:44:85:63:5f:52:15:78:05:08:97:5d:27:78:68:28: 90:77:37:2d:05:44:69:ba:21:f2:dd:e8:c8:17:a8:fc:59:fe: 5a:7f:06:f3:22:e3:02:2c:61:7b:9b:fb:3a:da:d7:08:1c:44: c1:e9:e8:03:19:05:70:5a:82:ee:c8:97:e3:6a:38:15:5c:93: f4:08:c5:50:cc:bd:db:9f:3b:de:9f:c6:13:21:11:17:5a:db: ff:a8:b7:6a:36:6e:5b:84:d1:d3:7d:9f:34:81:d3:27:20:ba: 77:6b:b4:f1:47:a3:a2:90:b6:03:51:87:de:e6:59:b2:bb:c4: 82:f1:6b:bf:39:73:f3:48:09:92:b2:5b:ad:96:bc:3e:c5:27: 67:ca:83:50:d2:9b:03:fb:42:cc:33:d1:8f:30:09:97:53:52: 04:f9:00:99:43:e3:1a:1b:c0:7f:48:7c:99:cc:27:d7:f4:f0: ed:60:f7:0c:f1:89:f9:af:d8:ec:15:07:2f:74:3c:ed:b1:42: da:89:f3:e1:31:05:fc:61:c0:d8:1c:e4:18:0f:5f:bd:bf:21: 1f:94:bb:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUwODIyMjI1MTMzWhcNMjUwODI5MjI1MTMzWjAYMRYwFAYD VQQDEw02OGE4ZjQ3NS0xZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pSArprVQAoJs/9O2aoyMfYDyvvhL9VVxK73X6wyM2icElCe3AmoX5BSoDrj 7H21DL/7aNi6rEpRtgYH2aWZUalm1m2XFABi0h3Yc+3Ko/fRDrhTC4Bmd2fh6dNm dV/1rZYQds11ihw5lmsWIyhTduwCbwAswTYi+ag5Cj7uTdFC2z/8Rl2OkgduiO/w ZnLgqzw41SSmG1qLU9HvS2ncWveOLk3P/BksxPmhXbh99fMTT+RSHRqnUPb9qcmE wd+1IBS0khZcL3cyZlJ65ak6NoqWqp0BBdLbYOx1hO6FBjLb1mYFC4d9tA7SSP9H Vux+c2W8j4YvceFytY1X0VLjRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7Hg3tL 5UsZC8kTIrfNeI0aSOCkMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSoraQ59hR/q9vztttJaUpSc+ZedS8yWSXbWddOQGYGNOEcUkUlBlE hWNfUhV4BQiXXSd4aCiQdzctBURpuiHy3ejIF6j8Wf5afwbzIuMCLGF7m/s62tcI HETB6egDGQVwWoLuyJfjajgVXJP0CMVQzL3bnzven8YTIREXWtv/qLdqNm5bhNHT fZ80gdMnILp3a7TxR6OikLYDUYfe5lmyu8SC8Wu/OXPzSAmSslutlrw+xSdnyoNQ 0psD+0LMM9GPMAmXU1IE+QCZQ+MaG8B/SHyZzCfX9PDtYPcM8Yn5r9jsFQcvdDzt sULaifPhMQX8YcDYHOQYD1+9vyEflLsX -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:44 2025 by rpki-client