$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: ILheFi7Eu+7DsI98rpUuWOUhAtO6J1e+eW7KJfGDTV8= Subject key identifier: 3C:FB:ED:EA:C9:1D:70:E9:58:B9:E8:2C:0F:78:2A:3F:13:BB:E9:91 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 0A0B Signing time: Fri 22 Aug 2025 16:11:57 +0000 Manifest this update: Fri 22 Aug 2025 16:11:57 +0000 Manifest next update: Fri 29 Aug 2025 16:11:57 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: ZDkjqcqcvXzaNYikbSuEr+DXSxd4M4frVG1ZYrEyxZA=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Aug 22 16:11:57 2025 GMT Not After : Aug 29 16:11:57 2025 GMT Subject: CN=68a896cd-82c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:b4:29:8d:2c:f0:da:c2:81:98:49:1b:84: 03:a4:39:6a:9b:a9:43:1f:ed:dd:3a:00:80:11:0b: a3:97:fb:77:e2:2c:6b:68:1b:e9:31:d8:ed:41:f4: ea:87:f3:93:67:47:b5:2a:30:59:db:85:69:5e:5e: f3:8e:a8:8b:8a:54:6a:92:16:f3:8b:08:07:ea:1e: 57:45:6e:5d:2f:a8:99:00:22:0e:b2:b9:94:18:b9: d4:3b:8b:32:2b:24:07:89:dd:ed:0c:cb:1a:27:b8: 29:80:3a:b0:15:e8:a6:2f:5a:86:4b:d9:4d:be:5f: 81:68:72:40:8f:0a:2c:e2:24:7d:78:10:52:23:a2: cc:84:5e:21:62:df:df:3b:f4:48:21:a4:76:32:27: 47:6e:d2:74:42:e9:22:33:95:98:67:e8:fc:de:e4: 0e:3b:b9:49:0b:5a:4d:7d:ed:c3:40:3b:91:ad:0f: 61:c5:51:7b:81:68:2f:31:3a:7c:ff:12:f2:12:26: 55:e8:1d:89:9c:37:dc:a3:c1:27:e9:7b:2e:61:31: 80:cb:46:2a:6d:60:08:ce:4f:1c:24:f4:dd:c4:15: 2b:9f:fb:0e:72:fb:0d:53:7f:30:89:8b:b1:cd:e2: 39:fd:5f:49:17:46:ef:b9:4f:9f:c0:87:fd:ce:04: fa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FB:ED:EA:C9:1D:70:E9:58:B9:E8:2C:0F:78:2A:3F:13:BB:E9:91 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ed:a2:89:43:ea:1b:b7:c7:d0:46:4b:3e:03:5a:5f:24:18: 77:d0:9d:8e:d9:d0:47:72:2b:fa:60:54:63:e2:cd:5a:f1:88: 10:44:11:fc:2f:4e:8d:94:31:71:d0:5c:85:6d:bd:00:70:e2: 1b:13:ac:5d:59:ab:c2:11:41:ea:5d:b7:1a:68:48:dd:dd:a8: 64:e2:2b:ac:a5:da:35:42:2d:a8:45:94:f5:f1:02:48:8f:da: a2:00:05:39:59:66:f2:00:08:27:1d:8c:57:6d:b3:86:e3:b6: 09:b4:d3:3f:00:eb:82:37:83:d9:d0:bb:ee:16:aa:03:be:14: ba:59:35:73:31:00:a0:69:a7:d1:66:e1:99:e8:2a:90:d8:6f: db:73:c6:59:ce:d2:db:04:b7:9a:68:ea:9a:dc:90:d5:1d:66: 08:29:15:b2:42:ef:38:7f:b7:43:3f:d0:56:d9:5e:c0:16:25: ec:57:ff:2e:ce:ec:66:fa:f4:99:9e:f5:ba:78:7e:92:c9:d5: b8:cc:3c:6c:fc:1f:c9:b3:8e:2a:d8:f7:fb:6a:02:f5:61:af: fb:df:97:ed:7f:e0:f4:30:b2:e4:0f:6f:d3:86:51:ae:95:70: 4e:d3:1e:4b:bb:97:0b:ff:59:ae:b0:f7:9a:9d:8d:95:e8:a2: 93:06:31:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwODIyMTYxMTU3WhcNMjUwODI5MTYxMTU3WjAYMRYwFAYD VQQDEw02OGE4OTZjZC04MmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Da0KY0s8NrCgZhJG4QDpDlqm6lDH+3dOgCAEQujl/t34ixraBvpMdjtQfTq h/OTZ0e1KjBZ24VpXl7zjqiLilRqkhbziwgH6h5XRW5dL6iZACIOsrmUGLnUO4sy KyQHid3tDMsaJ7gpgDqwFeimL1qGS9lNvl+BaHJAjwos4iR9eBBSI6LMhF4hYt/f O/RIIaR2MidHbtJ0QukiM5WYZ+j83uQOO7lJC1pNfe3DQDuRrQ9hxVF7gWgvMTp8 /xLyEiZV6B2JnDfco8En6XsuYTGAy0YqbWAIzk8cJPTdxBUrn/sOcvsNU38wiYux zeI5/V9JF0bvuU+fwIf9zgT6JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDz77erJ HXDpWLnoLA94Kj8Tu+mRMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj7aKJQ+obt8fQRks+A1pfJBh30J2O2dBHciv6YFRj4s1a8YgQRBH8 L06NlDFx0FyFbb0AcOIbE6xdWavCEUHqXbcaaEjd3ahk4iuspdo1Qi2oRZT18QJI j9qiAAU5WWbyAAgnHYxXbbOG47YJtNM/AOuCN4PZ0LvuFqoDvhS6WTVzMQCgaafR ZuGZ6CqQ2G/bc8ZZztLbBLeaaOqa3JDVHWYIKRWyQu84f7dDP9BW2V7AFiXsV/8u zuxm+vSZnvW6eH6SydW4zDxs/B/Js44q2Pf7agL1Ya/735ftf+D0MLLkD2/ThlGu lXBO0x5Lu5cL/1musPeanY2V6KKTBjFd -----END CERTIFICATE-----Generated at Sat Aug 23 21:04:13 2025 by rpki-client