$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft File: KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json) Hash identifier: mKQI1KHNxwIOenLCqgw0kOo49u7uZ9FFW2uLPVstL/Y= Subject key identifier: C7:F3:80:71:16:26:7F:95:89:94:26:82:BD:AB:E5:DC:16:FB:C0:67 Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B Certificate issuer: /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft Manifest number: 04D0 Signing time: Sat 23 Aug 2025 00:43:14 +0000 Manifest this update: Sat 23 Aug 2025 00:43:14 +0000 Manifest next update: Sat 30 Aug 2025 00:43:14 +0000 Files and hashes: 1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: +AcxARxeyuEMCaLJ5FBon/lBWFKjEHqF8r0ZK5V8NBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A80, serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B Validity Not Before: Aug 23 00:43:14 2025 GMT Not After : Aug 30 00:43:14 2025 GMT Subject: CN=68a90ea2-7bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7d:f0:4f:9b:74:d9:0c:7f:25:24:ad:53:46: 32:a2:01:c8:65:3f:a7:15:4e:92:86:ca:4b:ef:0c: af:05:ba:e4:19:c6:e3:f8:64:59:28:90:33:da:74: f8:b0:87:c6:f2:8a:b5:3f:fc:66:d8:40:b1:42:17: b6:43:e5:d0:93:fb:39:55:4a:f1:6f:60:f0:bc:10: ed:f2:da:3f:cd:ad:25:06:0f:f0:38:2c:fd:d4:21: e5:36:78:87:c8:c2:2d:b6:00:51:3d:66:f4:5f:10: 4a:12:21:b0:f9:c9:7a:4c:a0:0e:cd:27:2d:4f:55: e1:20:6e:8c:c6:f5:27:62:b0:a1:d4:a2:aa:c9:15: c9:1f:46:d4:e3:93:4b:73:57:78:13:c4:30:6e:36: 4a:49:89:b8:69:9c:0b:7e:15:04:ad:6f:f4:6a:00: 25:7a:17:dd:87:3a:55:35:07:74:82:20:72:88:3f: 31:7a:64:a1:df:b4:e5:44:64:c7:aa:2b:b3:17:74: 5c:7d:33:4c:66:b3:41:16:ef:f0:85:ec:fd:32:5c: 0b:a6:06:0d:82:09:9f:45:b6:0c:a9:fa:c5:5e:d6: 9f:70:35:06:b7:d2:30:22:06:96:a8:39:87:78:b3: 96:c6:96:d0:43:43:2f:f8:c4:62:0e:76:77:0f:40: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F3:80:71:16:26:7F:95:89:94:26:82:BD:AB:E5:DC:16:FB:C0:67 X509v3 Authority Key Identifier: keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c0:ef:35:36:12:df:97:8e:ac:5c:f3:6f:33:27:0d:14:5a: 7e:31:77:a3:83:9d:af:c9:52:e8:e2:ff:72:3c:4c:24:32:5b: 78:4b:9a:98:cb:28:33:e9:2c:2b:05:38:70:33:70:c4:e9:0d: 09:5e:06:f5:56:8c:71:16:dd:a2:57:bd:28:f1:1f:88:4f:a5: c2:b8:4d:4f:63:2d:40:f1:c6:f1:5a:13:4d:e9:81:1d:e6:05: 35:9f:c9:06:0d:d5:cf:11:e1:94:c6:47:15:e8:2b:d2:cf:f0: 33:ea:79:cb:32:91:9e:4a:0b:7c:1e:04:30:e7:22:ba:f9:67: d2:50:47:c5:af:f8:70:e7:60:6c:81:f9:54:e5:2d:cf:c2:37: f1:9c:ea:e6:1e:d7:db:d7:0a:14:ee:37:b8:e3:4d:06:e6:bd: 5a:96:fc:88:42:1f:c6:3a:2e:f0:80:9f:8c:f7:31:da:f1:5e: 4b:f4:05:df:a3:62:29:2c:13:c2:f9:7d:53:b2:5b:82:06:ae: 06:78:9f:5d:fa:d4:cd:a6:05:fb:47:7d:cc:2d:d2:5c:fc:96: 9c:01:eb:92:f4:51:c5:a3:ca:68:5a:34:c2:fe:c7:df:39:87: f8:b0:ea:52:af:4a:48:bd:4a:87:cf:6f:6e:f8:cb:ca:82:ff: 0d:ee:73:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBODAxMTAvBgNVBAUTKDJCMDM3RTVFREJDMjg0QTM5Mzg4RDE5QkNENDVEMkQ5 NDc0QjMxOUIwHhcNMjUwODIzMDA0MzE0WhcNMjUwODMwMDA0MzE0WjAYMRYwFAYD VQQDEw02OGE5MGVhMi03YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0X3wT5t02Qx/JSStU0YyogHIZT+nFU6ShspL7wyvBbrkGcbj+GRZKJAz2nT4 sIfG8oq1P/xm2ECxQhe2Q+XQk/s5VUrxb2DwvBDt8to/za0lBg/wOCz91CHlNniH yMIttgBRPWb0XxBKEiGw+cl6TKAOzSctT1XhIG6MxvUnYrCh1KKqyRXJH0bU45NL c1d4E8QwbjZKSYm4aZwLfhUErW/0agAlehfdhzpVNQd0giByiD8xemSh37TlRGTH qiuzF3RcfTNMZrNBFu/whez9MlwLpgYNggmfRbYMqfrFXtafcDUGt9IwIgaWqDmH eLOWxpbQQ0Mv+MRiDnZ3D0CtdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfzgHEW Jn+ViZQmgr2r5dwW+8BnMB8GA1UdIwQYMBaAFCsDfl7bwoSjk4jRm81F0tlHSzGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4 MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hLT1RpTkdielVYUzJVZExN WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t3Ti1YdHZDaEtPVGlOR2J6VVhTMlVkTE1acy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hL T1RpTkdielVYUzJVZExNWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjwO81NhLfl46sXPNvMycNFFp+MXejg52vyVLo4v9yPEwkMlt4S5qY yygz6SwrBThwM3DE6Q0JXgb1VoxxFt2iV70o8R+IT6XCuE1PYy1A8cbxWhNN6YEd 5gU1n8kGDdXPEeGUxkcV6CvSz/Az6nnLMpGeSgt8HgQw5yK6+WfSUEfFr/hw52Bs gflU5S3PwjfxnOrmHtfb1woU7je4400G5r1alvyIQh/GOi7wgJ+M9zHa8V5L9AXf o2IpLBPC+X1TsluCBq4GeJ9d+tTNpgX7R33MLdJc/JacAeuS9FHFo8poWjTC/sff OYf4sOpSr0pIvUqHz29u+MvKgv8N7nNF -----END CERTIFICATE-----Generated at Sun Aug 24 04:49:03 2025 by rpki-client