$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: sm3WDlxWnfkiQofB/vQRtYw5oRZiSa10MXAGaJtfXho= Subject key identifier: 1C:56:40:E7:BB:FB:A4:B7:83:80:D0:26:4B:77:E3:5A:A6:D5:CE:2E Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: F9 Signing time: Sat 23 Aug 2025 05:23:20 +0000 Manifest this update: Sat 23 Aug 2025 05:23:20 +0000 Manifest next update: Sat 30 Aug 2025 05:23:20 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: wNnYO+CG7l6N40k0Z96vhqgf3tD5FAk/higwsutGSNE=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: We+bh/dPouK8NlGju2k+lFoIHBb/HkpPfF89DMkSLSg=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: OvtEst3O8Yb7GSI88hSTYs6uncMGZjm+NzSGzxQ2axk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: Aug 23 05:23:20 2025 GMT Not After : Aug 30 05:23:20 2025 GMT Subject: CN=68a95048-9409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:cb:14:21:68:88:09:ed:8c:25:8e:24:27: 52:2f:c1:c8:94:de:5f:c6:c2:e0:b8:c4:c4:d2:ea: 6f:11:77:fc:0a:63:12:7c:b8:dd:7e:02:ab:74:be: 09:10:21:7d:ad:17:e8:28:a4:72:af:3f:c8:23:e8: 85:d1:85:71:21:7c:f9:cc:b2:f3:6c:3a:e9:6b:18: 59:70:d3:22:5b:46:dd:b2:30:b1:ba:05:39:a5:96: 4c:7c:86:22:0d:f6:13:14:c2:a3:ce:a3:f8:b9:25: fb:c5:27:de:44:4d:62:08:55:b8:a8:30:8a:5c:6c: 80:a4:ce:84:fc:0f:d3:bf:3e:5e:72:a1:79:0d:df: 99:1c:1d:34:49:43:e5:56:7b:f4:2c:77:ae:30:6e: eb:5d:b1:f2:b2:aa:a9:75:06:00:63:99:cc:8e:da: 6a:3d:6b:4d:8e:51:a9:fe:17:75:bb:df:fc:e1:ca: 73:77:5a:71:ae:ee:af:ef:0d:a9:25:da:b0:bd:48: 1f:bc:6c:ed:55:ab:5e:b8:48:f2:cd:56:dd:55:dc: 43:a0:42:3e:da:e4:67:6f:bc:75:33:1a:13:7b:e3: 01:4c:6c:94:dd:fe:eb:64:84:28:49:a4:da:32:5a: 0c:c6:eb:55:2d:c7:c1:b3:b0:22:6c:05:b8:d3:74: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:56:40:E7:BB:FB:A4:B7:83:80:D0:26:4B:77:E3:5A:A6:D5:CE:2E X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:99:c2:b5:2a:28:52:29:61:b9:11:d2:02:cc:c9:13:77:53: e9:62:2c:fe:db:ad:6b:1c:74:29:28:bc:56:1a:5c:de:c7:c6: fe:07:cd:ca:2d:04:86:33:43:ea:1d:c7:a7:d7:91:9c:00:74: 8e:32:b7:63:8e:95:a1:14:dd:c2:d1:71:2f:e8:0f:36:ac:88: ff:ca:54:ad:05:16:dd:cc:f5:df:2f:23:c8:8e:0d:c7:28:a4: 9d:95:33:14:3d:a1:16:07:6f:0c:fd:6e:78:ba:72:71:30:9e: f9:f2:b5:d9:b6:3a:f0:aa:cc:73:ac:30:5c:d6:0b:de:c9:da: eb:f3:31:14:29:10:1e:ca:04:9b:3d:73:17:6c:e7:0f:87:09: 4e:45:16:63:81:f0:e5:11:08:0b:a6:8c:28:8b:f3:dd:0c:99: 38:78:b1:de:7e:68:3b:07:24:09:43:e5:c9:8b:7e:e2:98:d7: b9:ca:5c:97:b2:52:d5:49:93:f1:24:a0:15:ce:de:1f:c8:5c: 7b:a7:8d:ff:9d:5c:29:70:e1:6f:d1:64:db:e5:39:fe:15:98: 5e:5f:16:21:21:1f:d5:8b:ba:b7:2d:e7:1b:4d:43:00:f0:75: 24:af:61:ae:b7:9d:56:e5:e9:ba:c9:4a:b4:06:a2:5e:3b:ed: 2e:7a:f9:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy M0UwQzIyODMwHhcNMjUwODIzMDUyMzIwWhcNMjUwODMwMDUyMzIwWjAYMRYwFAYD VQQDEw02OGE5NTA0OC05NDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5/LFCFoiAntjCWOJCdSL8HIlN5fxsLguMTE0upvEXf8CmMSfLjdfgKrdL4J ECF9rRfoKKRyrz/II+iF0YVxIXz5zLLzbDrpaxhZcNMiW0bdsjCxugU5pZZMfIYi DfYTFMKjzqP4uSX7xSfeRE1iCFW4qDCKXGyApM6E/A/Tvz5ecqF5Dd+ZHB00SUPl Vnv0LHeuMG7rXbHysqqpdQYAY5nMjtpqPWtNjlGp/hd1u9/84cpzd1pxru6v7w2p JdqwvUgfvGztVateuEjyzVbdVdxDoEI+2uRnb7x1MxoTe+MBTGyU3f7rZIQoSaTa MloMxutVLcfBs7AibAW403QjzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxWQOe7 +6S3g4DQJkt341qm1c4uMB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdmcK1KihSKWG5EdICzMkTd1PpYiz+261rHHQpKLxWGlzex8b+B83K LQSGM0PqHcen15GcAHSOMrdjjpWhFN3C0XEv6A82rIj/ylStBRbdzPXfLyPIjg3H KKSdlTMUPaEWB28M/W54unJxMJ758rXZtjrwqsxzrDBc1gveydrr8zEUKRAeygSb PXMXbOcPhwlORRZjgfDlEQgLpowoi/PdDJk4eLHefmg7ByQJQ+XJi37imNe5ylyX slLVSZPxJKAVzt4fyFx7p43/nVwpcOFv0WTb5Tn+FZheXxYhIR/Vi7q3LecbTUMA 8HUkr2Gut51W5em6yUq0BqJeO+0uevkN -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:42 2025 by rpki-client