$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json) Hash identifier: ZhWfMeG0+pJ53oUWfEiQhA17pBUQDAt3hhusvl68m0o= Subject key identifier: FD:6D:C1:B7:03:1E:D0:3E:B3:8F:B9:C9:4A:C2:AD:2C:59:53:AE:91 Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft Manifest number: 82 Signing time: Sat 23 Aug 2025 06:56:11 +0000 Manifest this update: Sat 23 Aug 2025 06:56:10 +0000 Manifest next update: Sat 30 Aug 2025 06:56:10 +0000 Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: zblUqBjHOPptce2gXPwnYYI+qdXofBkqYHx0rLmp+oM=) 2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: jqm9AvgV4FxQG5X3y3xKe8muOycM02nLSK2i0VaGmmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Validity Not Before: Aug 23 06:56:10 2025 GMT Not After : Aug 30 06:56:10 2025 GMT Subject: CN=68a9660b-f86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ba:ce:d5:05:56:02:98:a9:fb:b0:a3:5b:e9: 06:54:69:d6:8a:3a:e7:1b:a4:f8:c9:b5:6d:41:1e: 9f:70:78:bd:4f:06:5e:c1:93:a6:67:01:41:29:f3: 5f:46:d2:80:6c:8e:17:f3:95:d5:14:0e:56:4d:ee: d8:61:5e:44:72:eb:78:be:38:30:e7:c3:96:fa:c4: 22:68:66:df:9e:17:b6:70:03:07:2e:c4:55:d0:54: 6a:f3:9a:e3:7f:58:54:44:6d:5d:f8:ee:f7:44:52: e7:b2:9a:a5:29:a0:a5:6a:a1:41:05:18:ce:c1:00: d5:bc:fd:27:d1:d5:ae:0c:ef:04:79:24:94:b3:2c: 22:45:1d:36:23:01:f6:3c:4e:ed:a8:53:d1:53:52: 59:d1:71:e7:77:06:ca:70:18:76:8f:ac:35:fe:de: 4a:b0:f3:91:92:1a:23:86:66:d6:54:65:f8:f0:05: c8:e2:3a:32:0f:73:20:40:0b:e1:78:79:95:3c:17: d7:96:79:d3:ca:0e:63:f5:7f:0d:ad:64:86:b7:26: 76:e2:1f:91:c3:d3:b1:51:5d:f7:ae:10:ae:89:c1: d3:86:ac:37:72:af:08:6b:b8:b4:98:86:5a:3e:6e: ec:72:7a:b0:2c:e1:dd:4d:6d:a2:5c:7f:c0:1c:29: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6D:C1:B7:03:1E:D0:3E:B3:8F:B9:C9:4A:C2:AD:2C:59:53:AE:91 X509v3 Authority Key Identifier: keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:31:9c:27:e1:18:2b:65:bd:a5:96:2b:36:ee:be:b0:11:ae: a5:62:e6:91:19:d9:cf:db:85:4a:27:41:d1:b2:6f:10:6b:95: 96:8d:1b:15:b1:ae:de:4a:21:f4:48:72:43:7a:98:1f:ec:8d: 8a:68:46:a9:3c:ba:c0:31:f1:d7:d3:dc:11:f8:cd:33:94:28: 76:6d:21:90:e2:9d:25:4b:a0:1b:f1:da:de:1f:a2:cf:ec:36: 41:ad:1c:e2:0c:e9:4f:b5:ba:06:89:fd:b8:e0:77:7b:01:b6: 2e:ad:54:6b:23:a6:92:88:c1:39:71:93:30:ca:4f:98:fb:c2: bc:37:da:8b:ed:88:13:2b:a7:c7:7e:25:66:5c:f6:91:36:2b: 02:4c:75:59:7c:3d:d6:f2:a8:83:30:cb:3f:8a:71:48:09:f0: e0:5f:10:2f:91:63:1d:89:df:e2:e1:e3:05:19:e7:04:0e:e5: ea:4b:4c:10:eb:85:5c:db:c7:d5:37:3c:0f:0a:51:bd:ff:5b: 3f:e1:e9:79:62:96:8b:9c:b9:0d:8d:29:16:37:a4:5d:39:45: 48:88:7a:68:5b:6d:17:74:d1:8d:ee:96:7e:76:f7:e4:9f:77: 1e:8b:3e:fb:e6:d2:b8:e7:73:8b:eb:95:6b:50:48:2d:91:45: 4d:63:f8:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCOTQxMTAvBgNVBAUTKDJBNTczOTZEQ0U3MEVCNTZDMDczREUxQTc2MEI2MkE3 MjJCMDQ3OEUwHhcNMjUwODIzMDY1NjEwWhcNMjUwODMwMDY1NjEwWjAYMRYwFAYD VQQDEw02OGE5NjYwYi1mODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rrO1QVWApip+7CjW+kGVGnWijrnG6T4ybVtQR6fcHi9TwZewZOmZwFBKfNf RtKAbI4X85XVFA5WTe7YYV5Ecut4vjgw58OW+sQiaGbfnhe2cAMHLsRV0FRq85rj f1hURG1d+O73RFLnspqlKaClaqFBBRjOwQDVvP0n0dWuDO8EeSSUsywiRR02IwH2 PE7tqFPRU1JZ0XHndwbKcBh2j6w1/t5KsPORkhojhmbWVGX48AXI4joyD3MgQAvh eHmVPBfXlnnTyg5j9X8NrWSGtyZ24h+Rw9OxUV33rhCuicHThqw3cq8Ia7i0mIZa Pm7scnqwLOHdTW2iXH/AHCntswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1twbcD HtA+s4+5yUrCrSxZU66RMB8GA1UdIwQYMBaAFCpXOW3OcOtWwHPeGnYLYqcisEeO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0I5NC9BRjQxQkQxMEJD RDkxMUVGOTJBQjMzMTNDNEY5QUUwMi9LbGM1YmM1dzYxYkFjOTRhZGd0aXB5S3dS NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tsYzViYzV3NjFiQWM5NGFkZ3RpcHlLd1I0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0I5NC9BRjQxQkQxMEJDRDkxMUVGOTJBQjMzMTNDNEY5QUUwMi9LbGM1YmM1dzYx YkFjOTRhZGd0aXB5S3dSNDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrMZwn4RgrZb2llis27r6wEa6lYuaRGdnP24VKJ0HRsm8Qa5WWjRsV sa7eSiH0SHJDepgf7I2KaEapPLrAMfHX09wR+M0zlCh2bSGQ4p0lS6Ab8dreH6LP 7DZBrRziDOlPtboGif244Hd7AbYurVRrI6aSiME5cZMwyk+Y+8K8N9qL7YgTK6fH fiVmXPaRNisCTHVZfD3W8qiDMMs/inFICfDgXxAvkWMdid/i4eMFGecEDuXqS0wQ 64Vc28fVNzwPClG9/1s/4el5YpaLnLkNjSkWN6RdOUVIiHpoW20XdNGN7pZ+dvfk n3ceiz775tK453OL65VrUEgtkUVNY/gH -----END CERTIFICATE-----Generated at Sat Aug 23 16:59:51 2025 by rpki-client