$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: K/XHHmpAMoYqdRk1lsYfjpuvVZHqJwztszdwzel0jdw= Subject key identifier: 33:60:46:E9:C7:2D:2F:9C:26:75:C3:BD:F2:A1:B2:AF:70:64:2D:8C Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: 87 Signing time: Sat 23 Aug 2025 06:54:11 +0000 Manifest this update: Sat 23 Aug 2025 06:54:11 +0000 Manifest next update: Sat 30 Aug 2025 06:54:11 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: ERKnOi1JvhbrBwYIft8NqnuyAWcfFQ9JDg6Hq3lnd6A=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: HSb6XjCDD/PrExNgC4kkLXSRksHnMNuj8kokihkx5ZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Aug 23 06:54:11 2025 GMT Not After : Aug 30 06:54:11 2025 GMT Subject: CN=68a96593-6ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:fc:27:55:43:6a:fb:b2:84:af:7c:5c:86: 0d:6e:9c:d2:e0:6c:48:03:4a:d9:13:14:e5:a5:32: 18:5d:9e:d3:8d:f7:64:5e:de:38:4d:c7:f5:c8:67: db:33:a3:06:1a:26:8f:5c:d7:64:36:4c:9f:55:39: d9:16:f0:26:6b:da:d8:2d:f5:0a:63:34:3d:3b:90: 13:d8:1b:45:7b:47:b4:12:a2:07:34:15:01:8b:e2: be:f0:13:f1:2a:76:7a:a7:b0:40:6d:e2:61:18:c3: 3c:7e:93:35:66:91:f7:ca:a0:eb:5e:85:a3:32:8f: 46:b7:08:0e:69:20:dd:83:ac:1c:11:ed:9e:3b:84: 75:1a:7b:e0:60:39:e2:28:87:e9:12:bf:16:52:09: 1a:34:40:55:cc:96:ed:24:80:74:7e:bc:48:42:b7: dd:b3:0f:d5:9f:8a:80:18:46:15:9c:2d:81:e4:79: 17:42:43:38:54:ca:f0:6c:e6:1a:5c:24:6b:bd:5c: 9d:8e:00:bf:1a:78:e2:0b:3c:20:e4:92:b0:8a:0a: 69:ff:c7:74:4d:86:5d:ee:a2:a0:74:0e:1c:15:79: cd:21:4a:9d:01:a0:3c:f8:1f:49:e3:58:18:cf:25: 24:0e:81:6c:32:c7:2f:c6:08:da:49:13:17:6f:dd: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:60:46:E9:C7:2D:2F:9C:26:75:C3:BD:F2:A1:B2:AF:70:64:2D:8C X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e4:fc:f6:ce:81:44:34:b1:8d:f4:55:9b:4b:ed:51:32:93: 0c:9f:7f:2a:e9:71:a6:2e:5b:2c:e2:60:d0:3d:ac:4c:06:b7: d4:b2:4c:df:a8:63:1f:b3:d6:5c:42:76:dd:7a:44:24:47:76: 14:0b:1d:99:3c:8b:ee:31:66:bf:e3:19:20:77:dd:75:18:ed: bd:bf:b1:61:f3:7e:7a:42:d2:61:84:74:f8:f4:7c:be:d2:14: ab:ee:54:96:ff:68:71:5d:c3:64:5f:6a:d1:29:7f:d9:9e:5c: d8:9c:46:d6:ef:11:aa:df:c7:1a:ce:84:06:6a:ef:02:94:73: e5:67:51:8b:cd:44:1a:0b:9c:e3:3a:89:65:4f:87:a6:86:12: 8f:e4:f9:c4:c7:14:f3:27:08:73:26:96:ad:1f:fe:97:9a:26: e2:54:c8:50:e8:a8:1e:c8:d5:23:50:0e:1a:2b:ad:51:7a:18: 07:27:9a:76:7c:cb:5c:dc:76:f1:09:41:8e:c8:0c:e9:23:81: b7:2b:09:ea:59:64:85:f9:83:a1:17:32:e9:6c:f3:26:77:ef: f6:b3:9e:71:49:fb:10:4f:93:aa:1a:1f:79:9b:86:d2:e2:28: 0c:ac:f2:b4:dd:e3:84:a3:ea:6f:7c:9f:a5:71:07:3b:00:35: 00:bc:ec:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjUwODIzMDY1NDExWhcNMjUwODMwMDY1NDExWjAYMRYwFAYD VQQDEw02OGE5NjU5My02ZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweT8J1VDavuyhK98XIYNbpzS4GxIA0rZExTlpTIYXZ7TjfdkXt44Tcf1yGfb M6MGGiaPXNdkNkyfVTnZFvAma9rYLfUKYzQ9O5AT2BtFe0e0EqIHNBUBi+K+8BPx KnZ6p7BAbeJhGMM8fpM1ZpH3yqDrXoWjMo9GtwgOaSDdg6wcEe2eO4R1GnvgYDni KIfpEr8WUgkaNEBVzJbtJIB0frxIQrfdsw/Vn4qAGEYVnC2B5HkXQkM4VMrwbOYa XCRrvVydjgC/GnjiCzwg5JKwigpp/8d0TYZd7qKgdA4cFXnNIUqdAaA8+B9J41gY zyUkDoFsMscvxgjaSRMXb91jQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNgRunH LS+cJnXDvfKhsq9wZC2MMB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDA4Ri8xNkNEOTg1OEI3NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5 cnRmQ0hjUnkzRnhZeEZpRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH5Pz2zoFENLGN9FWbS+1RMpMMn38q6XGmLlss4mDQPaxMBrfUskzf qGMfs9ZcQnbdekQkR3YUCx2ZPIvuMWa/4xkgd911GO29v7Fh8356QtJhhHT49Hy+ 0hSr7lSW/2hxXcNkX2rRKX/ZnlzYnEbW7xGq38cazoQGau8ClHPlZ1GLzUQaC5zj OollT4emhhKP5PnExxTzJwhzJpatH/6XmibiVMhQ6KgeyNUjUA4aK61RehgHJ5p2 fMtc3HbxCUGOyAzpI4G3KwnqWWSF+YOhFzLpbPMmd+/2s55xSfsQT5OqGh95m4bS 4igMrPK03eOEo+pvfJ+lcQc7ADUAvOzK -----END CERTIFICATE-----Generated at Sun Aug 24 00:47:24 2025 by rpki-client