$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft File: kIoYD5SUlgetwBExSb6IKuqo6I8.mft (raw, json) Hash identifier: E02jpwfTJ1yHbgEAcMBjN4UloEuwei2KLF0xshN+mZs= Subject key identifier: 74:9C:84:AA:16:65:DB:6C:C0:7E:45:54:72:58:7A:1A:7C:FF:19:10 Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft Manifest number: 01C5 Signing time: Sat 23 Aug 2025 03:09:45 +0000 Manifest this update: Sat 23 Aug 2025 03:09:44 +0000 Manifest next update: Sat 30 Aug 2025 03:09:44 +0000 Files and hashes: 1: kIoYD5SUlgetwBExSb6IKuqo6I8.crl (hash: 25kn8hg4V3CBqQRpLxJt9zDGnc3uxXcI5O0XhG/elFk=) 2: E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa (hash: q+zKhGyTkhD9t3RA2sk/l2Z7I4u1fYSlG/t4K9NE2MA=) 3: CC0BA4E0E17F11EFA4CE224CC4F9AE02.roa (hash: 2muYFP9e+zpeHJKxcDs7l8Ftqcg1X7boruyyCY1igvQ=) 4: 9BE6554CB72411EF98F7D577C4F9AE02.roa (hash: fA1bLFIYT/o1YfhIaSWGb0FrTvcVU+WRusOC3nOK6Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Validity Not Before: Aug 23 03:09:44 2025 GMT Not After : Aug 30 03:09:44 2025 GMT Subject: CN=68a930f9-70a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:96:0b:d5:05:e5:bc:f4:38:b4:81:a1:04: 39:32:07:0a:18:58:bd:84:b5:d0:7a:2f:d3:f0:6d: 73:e6:9d:a4:f6:97:32:b6:f3:1d:de:54:40:19:08: 77:e3:33:37:07:d0:53:e1:2c:3d:49:c3:30:a9:f6: b7:87:97:9e:9a:76:37:a9:7a:4a:9d:ac:23:e4:54: 77:c9:d0:f3:87:1e:15:70:a1:90:34:8e:8e:06:13: 5a:ed:14:d2:3a:9e:26:15:4d:fd:af:49:90:dc:51: 24:27:28:ad:60:22:22:d1:50:79:13:a4:d2:5e:f7: bc:92:1c:3d:53:45:01:ce:c0:9f:bc:c6:e9:31:88: 84:c9:30:71:31:32:da:78:17:a6:86:aa:57:8d:01: 2c:4f:73:a2:6b:66:93:95:b7:30:f4:db:c5:b3:c1: 78:e2:7a:a0:df:b6:f9:a0:63:b3:71:5d:8a:bf:95: 8a:4b:98:f0:87:bc:5e:98:84:dd:d7:d5:b3:74:8a: ae:b6:ba:0a:35:94:15:34:3a:c1:0b:3b:a3:79:94: 1f:f3:24:7d:b1:4d:87:6d:43:3b:4c:3d:54:f7:77: 1c:a2:c2:85:61:75:91:75:0e:8a:90:4e:fc:b4:e8: 24:0b:14:0b:74:3f:c8:03:c0:a7:01:c7:b5:c3:2e: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9C:84:AA:16:65:DB:6C:C0:7E:45:54:72:58:7A:1A:7C:FF:19:10 X509v3 Authority Key Identifier: keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:6d:6f:f2:a6:fc:a7:fb:c2:8c:31:52:69:47:96:1e:f1:7f: f1:3c:93:0f:97:60:59:17:f9:af:42:0d:10:d3:59:69:de:72: 7a:ca:9c:b1:a1:d3:b2:d9:a0:41:19:07:16:43:80:e3:64:89: 68:f2:20:f6:29:5a:5e:48:27:b4:57:36:0e:2e:93:8b:2d:77: dc:c8:ea:a1:7d:a3:23:22:6d:3e:c3:c1:a8:20:ea:7c:56:6d: 8c:34:77:72:ab:68:00:3d:a2:91:f0:32:29:ef:b5:e8:88:09: 78:2a:31:66:22:90:1b:e0:5a:63:79:bf:fb:06:47:39:f5:36: 93:be:5f:ac:57:1d:78:8e:56:2a:e9:31:72:b5:11:a3:8d:b8: 69:0a:76:8d:4a:61:2c:dd:1a:e1:01:14:d8:85:cf:d5:e5:6b: e8:92:14:d0:ca:23:8c:14:34:a0:d1:20:39:29:40:28:b8:a1: da:5d:92:05:f6:20:2f:a3:b7:c1:a4:18:30:c9:f1:8a:45:64: f9:a1:39:6a:55:50:cf:37:4a:38:f4:4a:0d:81:5a:11:20:a3: 03:84:5c:de:8a:39:43:e9:2e:50:b8:ea:6f:04:c1:a2:4e:56: fe:9c:e5:9c:63:15:0b:4d:00:9b:ff:56:ef:17:94:b0:fc:05: ae:f8:8e:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDNjMxMTAvBgNVBAUTKDkwOEExODBGOTQ5NDk2MDdBREMwMTEzMTQ5QkU4ODJB RUFBOEU4OEYwHhcNMjUwODIzMDMwOTQ0WhcNMjUwODMwMDMwOTQ0WjAYMRYwFAYD VQQDEw02OGE5MzBmOS03MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC+WC9UF5bz0OLSBoQQ5MgcKGFi9hLXQei/T8G1z5p2k9pcytvMd3lRAGQh3 4zM3B9BT4Sw9ScMwqfa3h5eemnY3qXpKnawj5FR3ydDzhx4VcKGQNI6OBhNa7RTS Op4mFU39r0mQ3FEkJyitYCIi0VB5E6TSXve8khw9U0UBzsCfvMbpMYiEyTBxMTLa eBemhqpXjQEsT3Oia2aTlbcw9NvFs8F44nqg37b5oGOzcV2Kv5WKS5jwh7xemITd 19WzdIqutroKNZQVNDrBCzujeZQf8yR9sU2HbUM7TD1U93ccosKFYXWRdQ6KkE78 tOgkCxQLdD/IA8CnAce1wy4/kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSchKoW ZdtswH5FVHJYehp8/xkQMB8GA1UdIwQYMBaAFJCKGA+UlJYHrcARMUm+iCrqqOiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M2My80RDExMzE5Q0Q4 NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxnZXR3QkV4U2I2SUt1cW82 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJb1lENVNVbGdldHdCRXhTYjZJS3VxbzZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M2My80RDExMzE5Q0Q4NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxn ZXR3QkV4U2I2SUt1cW82STgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACbW/ypvyn+8KMMVJpR5Ye8X/xPJMPl2BZF/mvQg0Q01lp3nJ6ypyx odOy2aBBGQcWQ4DjZIlo8iD2KVpeSCe0VzYOLpOLLXfcyOqhfaMjIm0+w8GoIOp8 Vm2MNHdyq2gAPaKR8DIp77XoiAl4KjFmIpAb4Fpjeb/7Bkc59TaTvl+sVx14jlYq 6TFytRGjjbhpCnaNSmEs3RrhARTYhc/V5WvokhTQyiOMFDSg0SA5KUAouKHaXZIF 9iAvo7fBpBgwyfGKRWT5oTlqVVDPN0o49EoNgVoRIKMDhFzeijlD6S5QuOpvBMGi Tlb+nOWcYxULTQCb/1bvF5Sw/AWu+I7E -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:18 2025 by rpki-client