$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json) Hash identifier: ldzmzI10iNJ9GJxrEL99zonKcDUvJeEU9y/UWX1kjG8= Subject key identifier: 3D:A9:A2:9C:DA:65:99:55:B2:B4:DD:D9:64:19:0C:21:DC:D5:BF:7C Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Certificate serial: 0AAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft Manifest number: 0A90 Signing time: Fri 22 Aug 2025 19:43:16 +0000 Manifest this update: Fri 22 Aug 2025 19:43:15 +0000 Manifest next update: Fri 29 Aug 2025 19:43:15 +0000 Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: WwwfZA0pEF6B1Y54zFhfuW1cowDqt2s98e3KbQaOfc0=) 2: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: 0+FYOd7cEHhPhl5/EXB24cdR/+U1VPktvi4vWKzamkI=) 3: DE137C362C7811EC97C8D979C4F9AE02.roa (hash: ORPxj2tqrIsIpHEdVkZPm4n/aNb1Vqu1v7KB5t0Gcw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2732 (0xaac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Validity Not Before: Aug 22 19:43:15 2025 GMT Not After : Aug 29 19:43:15 2025 GMT Subject: CN=68a8c853-245a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:80:df:62:70:2a:d4:39:d3:99:b9:80:4e: d8:fd:a6:69:17:67:cd:fd:8c:9e:6a:77:51:e3:a1: ca:87:2b:32:28:0e:8b:bc:fc:1b:af:7a:ce:a4:4a: d5:72:73:48:4e:4c:50:7b:74:f6:79:15:d0:46:13: c1:ab:db:fb:b9:b0:b3:17:4c:0f:bf:7c:ed:60:f2: 6f:66:9c:78:1d:b4:b3:c9:fa:cc:f4:8f:e4:6d:ff: fc:4d:6f:55:a9:ff:8a:48:0a:e0:48:f4:8c:00:8a: 43:6a:e6:02:2a:e3:ab:96:2f:ed:7a:bc:8b:6f:18: bf:c1:60:33:f1:85:1c:25:44:9c:53:ea:4e:27:da: 5b:d7:10:cb:d7:7a:66:23:39:88:bb:bc:c4:11:79: d1:74:b8:ae:ae:b6:b1:0f:a9:a5:dc:ca:78:b8:79: 94:22:97:c2:de:89:6e:ba:2f:ce:7b:f1:07:e7:9c: 4e:e0:9a:95:de:48:eb:10:14:66:ce:0c:b0:01:55: 5e:da:d2:55:78:0f:e3:68:eb:15:2d:92:f6:76:40: 4d:ae:a4:7d:78:7d:aa:4a:da:b2:bd:ed:0f:11:42: 4d:11:3f:20:f6:22:46:a3:ea:bf:98:6e:1f:86:49: 23:3e:fa:95:ba:94:2e:f2:b4:eb:64:f7:e7:8a:25: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A9:A2:9C:DA:65:99:55:B2:B4:DD:D9:64:19:0C:21:DC:D5:BF:7C X509v3 Authority Key Identifier: keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:74:ae:51:cf:5d:b3:5e:2a:bc:3d:bb:de:a0:16:f6:10:20: 8b:cb:b2:88:b2:90:af:3e:b7:f8:b4:6e:81:d0:0e:70:f0:c1: 5c:d7:f4:2e:5d:59:3e:7f:37:1c:9e:4a:2d:48:80:82:86:21: ea:26:32:0c:79:e8:74:e9:13:11:fa:1b:c5:66:8c:3b:81:2d: a7:45:34:48:3b:0c:12:0c:1f:fb:6e:0d:cb:50:c2:9d:aa:0d: cb:b0:12:c2:af:4a:50:83:5d:b0:89:64:35:23:55:a5:ab:2e: 62:56:ce:47:d8:77:38:9e:85:c5:1c:28:fc:32:06:b8:67:b8: 18:00:2f:4a:34:8e:6a:33:d1:19:78:3c:2a:38:93:5d:fa:c5: 9a:20:19:20:a3:49:16:04:38:02:46:48:67:38:29:57:42:f7: 60:57:a7:a8:a7:95:84:34:fe:4d:63:76:1e:37:96:12:19:8c: 5e:7f:01:bd:cf:76:86:fa:f7:d6:51:fb:3d:b3:1d:57:0e:4a: bd:05:c0:e2:8d:5b:61:07:79:76:b0:4a:28:7c:df:af:45:1c: ca:bd:c9:0d:dc:31:c1:05:f4:37:5c:ce:7a:86:7f:85:3d:bf: 40:1f:73:ed:9d:a0:e7:53:73:41:53:24:0e:be:ac:5f:f4:17: f5:da:64:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC QzM1RjU2RDgwHhcNMjUwODIyMTk0MzE1WhcNMjUwODI5MTk0MzE1WjAYMRYwFAYD VQQDEw02OGE4Yzg1My0yNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMuA32JwKtQ505m5gE7Y/aZpF2fN/YyeandR46HKhysyKA6LvPwbr3rOpErV cnNITkxQe3T2eRXQRhPBq9v7ubCzF0wPv3ztYPJvZpx4HbSzyfrM9I/kbf/8TW9V qf+KSArgSPSMAIpDauYCKuOrli/teryLbxi/wWAz8YUcJUScU+pOJ9pb1xDL13pm IzmIu7zEEXnRdLiurraxD6ml3Mp4uHmUIpfC3oluui/Oe/EH55xO4JqV3kjrEBRm zgywAVVe2tJVeA/jaOsVLZL2dkBNrqR9eH2qStqyve0PEUJNET8g9iJGo+q/mG4f hkkjPvqVupQu8rTrZPfniiV+gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2popza ZZlVsrTd2WQZDCHc1b98MB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0 QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ4Qy9BNzREQTc3MjY0QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQw MDlPUTlhQ3RFTFc4TmZWdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvdK5Rz12zXiq8PbveoBb2ECCLy7KIspCvPrf4tG6B0A5w8MFc1/Qu XVk+fzccnkotSICChiHqJjIMeeh06RMR+hvFZow7gS2nRTRIOwwSDB/7bg3LUMKd qg3LsBLCr0pQg12wiWQ1I1Wlqy5iVs5H2Hc4noXFHCj8Mga4Z7gYAC9KNI5qM9EZ eDwqOJNd+sWaIBkgo0kWBDgCRkhnOClXQvdgV6eop5WENP5NY3YeN5YSGYxefwG9 z3aG+vfWUfs9sx1XDkq9BcDijVthB3l2sEoofN+vRRzKvckN3DHBBfQ3XM56hn+F Pb9AH3PtnaDnU3NBUyQOvqxf9Bf12mRC -----END CERTIFICATE-----Generated at Sat Aug 23 20:18:49 2025 by rpki-client