$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json) Hash identifier: r+ZtxDjbQDGujnJK1eJ8HUv/Wr2JLI1deOVWQ/dz8OI= Subject key identifier: 9B:33:C3:95:08:A4:20:A2:68:28:23:13:C2:D7:DE:C7:B3:C8:4B:90 Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31 Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31 Certificate serial: 06E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft Manifest number: 06DE Signing time: Fri 22 Aug 2025 22:10:42 +0000 Manifest this update: Fri 22 Aug 2025 22:10:42 +0000 Manifest next update: Fri 29 Aug 2025 22:10:42 +0000 Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: lAzyLSywKTagJiRbMIRlw6kmW3E89IVE7h2eJY75kHQ=) 2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: cWc+J1TIBwheicFkr/uWy0LuYQxsGfxktq1Xam8BBXI=) 3: 9398F508619611EBA485B448C4F9AE02.roa (hash: Nd8Cn8Kc0/NAG96VlpahXIFBzBlttK0FrKVnW80S2cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31 Validity Not Before: Aug 22 22:10:42 2025 GMT Not After : Aug 29 22:10:42 2025 GMT Subject: CN=68a8eae2-2326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:dc:e6:03:5b:56:a1:4d:a9:9a:31:76:56: 54:e2:ec:6d:aa:35:58:46:b3:93:57:82:8a:b5:9c: 0d:76:66:b7:92:84:13:d4:f9:bf:e8:c0:9a:bc:38: 03:dd:2c:db:c1:62:72:c1:f0:c9:8e:57:a9:85:43: 3f:97:c9:ce:b4:68:9e:3d:18:84:08:c1:2a:99:d8: 35:c0:b3:a7:00:07:43:2c:88:4a:36:14:da:5b:5e: 29:49:f5:c8:cd:fc:df:63:53:d6:20:26:cf:e0:a4: c4:22:6b:17:cb:aa:13:38:f0:ec:31:46:e6:19:f8: a6:f8:89:d2:92:21:70:20:8f:fa:e6:fd:f3:37:c3: 37:d2:8d:8c:4f:b6:ef:05:ad:62:3f:a9:98:f1:33: bb:23:a0:db:2d:66:d0:39:3d:0a:89:ac:31:55:5e: 09:8f:82:9d:c6:9d:96:66:af:e4:e7:26:09:90:4f: 34:a5:cb:13:42:b5:f2:d6:79:17:e9:8b:2c:6f:1d: 7f:d4:9a:ac:fd:32:a2:40:4b:e5:a8:82:97:e1:a8: b1:e2:97:82:d9:c8:42:c7:f4:44:0f:20:32:ad:8b: 32:bb:93:94:85:86:91:8e:45:00:65:93:d3:da:79: 94:04:5c:0d:d9:92:73:2c:ab:73:b4:48:24:e7:a6: d1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:33:C3:95:08:A4:20:A2:68:28:23:13:C2:D7:DE:C7:B3:C8:4B:90 X509v3 Authority Key Identifier: keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:02:52:17:54:a5:44:6b:7d:d9:8a:6c:9f:95:e8:2e:c0:03: b1:aa:10:98:90:0f:2c:09:e5:79:3b:d8:cc:b6:4d:4a:21:fc: 86:48:f1:82:c5:fc:71:80:77:b4:b9:05:6f:79:d0:54:7e:b7: 9c:50:82:72:ee:4b:07:4b:f1:4a:9d:b6:83:ff:7b:a7:11:b5: 33:f6:9f:c7:d0:fc:d8:56:12:51:b6:b8:6b:a8:0e:91:cc:96: c1:78:26:1b:80:00:f4:72:9e:13:bc:20:ce:27:a8:48:6f:b0: 8c:af:4f:4f:b3:8e:cc:dd:35:d6:08:60:79:00:ce:f2:22:04: 66:72:d4:ea:d0:b6:a6:3c:22:05:80:c9:af:ff:98:a5:0e:a0: db:30:c9:79:c3:91:bd:e6:cf:df:8f:2b:4b:ab:9c:c3:97:28: c5:43:27:0d:ee:77:48:43:d4:53:af:0f:53:d8:cb:82:3b:38: eb:90:70:06:ae:4c:8c:10:d8:63:a1:ef:2a:b7:c1:2c:17:04: 9a:b8:be:97:6d:7c:6e:91:5c:95:b5:7f:3b:ab:52:4a:9d:56: ed:ff:b9:ef:5f:1f:02:db:f6:96:c3:a2:99:9a:5a:cd:59:c0: 6d:6b:41:58:cf:08:1b:af:81:1f:db:24:8e:6a:9d:01:a3:ff: 65:5d:37:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5NjAxMTAvBgNVBAUTKDJBOTAwNzM0QzVFM0I5M0FDQTk0NzBFM0Y1QUREQURD MkYyMTVCMzEwHhcNMjUwODIyMjIxMDQyWhcNMjUwODI5MjIxMDQyWjAYMRYwFAYD VQQDEw02OGE4ZWFlMi0yMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu/c5gNbVqFNqZoxdlZU4uxtqjVYRrOTV4KKtZwNdma3koQT1Pm/6MCavDgD 3SzbwWJywfDJjlephUM/l8nOtGiePRiECMEqmdg1wLOnAAdDLIhKNhTaW14pSfXI zfzfY1PWICbP4KTEImsXy6oTOPDsMUbmGfim+InSkiFwII/65v3zN8M30o2MT7bv Ba1iP6mY8TO7I6DbLWbQOT0KiawxVV4Jj4Kdxp2WZq/k5yYJkE80pcsTQrXy1nkX 6Yssbx1/1Jqs/TKiQEvlqIKX4aix4peC2chCx/REDyAyrYsyu5OUhYaRjkUAZZPT 2nmUBFwN2ZJzLKtztEgk56bRyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJszw5UI pCCiaCgjE8LX3sezyEuQMB8GA1UdIwQYMBaAFCqQBzTF47k6ypRw4/Wt2twvIVsx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk2MC85QzZGN0JFQTYx OTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVUcktsSERqOWEzYTNDOGhX ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twQUhOTVhqdVRyS2xIRGo5YTNhM0M4aFd6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk2MC85QzZGN0JFQTYxOTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVU cktsSERqOWEzYTNDOGhXekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLAlIXVKVEa33ZimyfleguwAOxqhCYkA8sCeV5O9jMtk1KIfyGSPGC xfxxgHe0uQVvedBUfrecUIJy7ksHS/FKnbaD/3unEbUz9p/H0PzYVhJRtrhrqA6R zJbBeCYbgAD0cp4TvCDOJ6hIb7CMr09Ps47M3TXWCGB5AM7yIgRmctTq0LamPCIF gMmv/5ilDqDbMMl5w5G95s/fjytLq5zDlyjFQycN7ndIQ9RTrw9T2MuCOzjrkHAG rkyMENhjoe8qt8EsFwSauL6XbXxukVyVtX87q1JKnVbt/7nvXx8C2/aWw6KZmlrN WcBta0FYzwgbr4Ef2ySOap0Bo/9lXTcl -----END CERTIFICATE-----Generated at Sat Aug 23 20:14:20 2025 by rpki-client