$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json) Hash identifier: cIx5LHLuvcTokdcoSw1040dUJ2nu+96+0B3rZ9XXBT0= Subject key identifier: CC:7E:2E:65:E2:3E:B5:0D:F0:97:30:08:0E:77:55:A6:B0:98:68:B4 Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft Manifest number: 75 Signing time: Sat 23 Aug 2025 07:06:23 +0000 Manifest this update: Sat 23 Aug 2025 07:06:23 +0000 Manifest next update: Sat 30 Aug 2025 07:06:23 +0000 Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: kMKLaN39HXaV7AuFmOFVK1uxFc7EaoBkFo62hOFhZpE=) 2: 5042D03ED2EF11EFBA610425C4F9AE02.roa (hash: Td45KF7s5KJjDmYTPbjMG6cwXZMtoTfhOtwsLcRRVB4=) 3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gzNobaLbEvK3FJ3mC0CiPYdWO820L9Sv8IKQdUKftFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Aug 23 07:06:23 2025 GMT Not After : Aug 30 07:06:23 2025 GMT Subject: CN=68a9686f-8941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:5f:d1:72:05:ca:8d:79:fe:13:ca:c2:73: 58:54:98:16:06:7c:0b:e8:d3:89:dc:1f:83:c3:20: bd:ef:53:d3:b2:27:10:ba:29:fb:99:0e:9d:bf:25: e1:12:c3:5a:bc:1c:53:db:32:42:6b:d3:a9:1b:90: 1c:e3:2e:ef:99:e4:d7:6f:5f:0b:1d:f2:1d:2b:a5: af:33:59:4d:ec:3c:c5:7b:e8:be:60:01:8d:f8:96: 81:c0:a1:80:00:71:bf:26:f1:47:fc:76:c1:6c:30: 19:cd:32:46:1e:4e:2f:48:33:80:66:99:df:f8:b4: 3c:e7:8a:30:f4:55:16:f5:c1:ac:88:e0:da:a3:b4: 9b:da:54:89:17:57:fb:39:28:e6:73:5a:f6:79:da: 6c:15:c4:5a:6d:f9:2d:12:bc:33:f2:1c:eb:b6:e2: 86:f4:2f:91:76:7f:02:8e:f4:86:a7:af:02:f1:6a: 89:f8:a3:20:96:10:ee:cc:e3:c5:35:39:c7:dd:5a: f5:11:9e:03:90:95:ea:f7:d1:60:6f:ca:51:f6:36: 21:f9:f0:3c:29:0e:1e:28:a8:36:e7:ba:bf:0a:df: 22:1f:6f:a1:d8:2c:e8:f6:48:81:77:10:e4:e1:41: fa:a0:a1:c1:c7:eb:de:44:38:fa:c8:88:09:53:77: 85:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7E:2E:65:E2:3E:B5:0D:F0:97:30:08:0E:77:55:A6:B0:98:68:B4 X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:98:f4:c9:3b:53:7a:7f:53:39:11:a6:d9:18:48:7a:4b:75: d6:16:90:41:9f:b3:bb:8c:6a:26:cc:5a:f6:ac:8f:2d:67:ca: 37:87:6d:ed:7d:52:09:0c:31:cf:13:20:ac:69:f6:26:c4:19: 8b:5d:cc:66:6c:7f:1f:95:d1:76:a3:eb:52:57:d4:7f:dd:bc: 96:7e:f1:b6:1c:d0:91:16:e5:5c:41:fc:01:2e:d0:7d:cf:69: 3d:27:75:72:81:aa:e3:91:73:25:25:aa:04:cc:b9:9a:76:60: 18:8e:14:bd:f3:cb:2f:68:35:98:0e:b9:ee:c1:db:a2:2e:44: 90:91:e1:b9:b0:c5:80:9c:58:ca:a5:0e:c6:62:9b:6f:95:0f: 68:1c:49:9b:cb:74:36:bd:00:4c:f8:7e:31:67:d0:ea:48:76: e5:0e:c4:07:66:cd:b9:db:6c:7c:60:09:df:72:0b:e6:96:61: 4c:b6:b1:25:2f:55:8c:6a:3f:da:c5:23:d2:f5:32:cc:c3:3f: 3e:6a:3e:34:ae:44:19:dd:8f:fc:d0:ee:54:67:cd:04:5d:76: e9:61:75:ff:43:61:57:b2:3c:2d:44:27:e2:c9:c6:d3:3e:e5: 0b:74:d6:6f:7c:4d:c3:9c:4c:f3:28:5e:90:8a:7c:27:8b:23: f5:42:89:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODU1MzExMC8GA1UEBRMoOTMwRERGNDEwMTA2OTAzQkVCOTkxOUM5OUJERTAxNjM4 NzA2NTVBRTAeFw0yNTA4MjMwNzA2MjNaFw0yNTA4MzAwNzA2MjNaMBgxFjAUBgNV BAMTDTY4YTk2ODZmLTg5NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWHF/RcgXKjXn+E8rCc1hUmBYGfAvo04ncH4PDIL3vU9OyJxC6KfuZDp2/JeES w1q8HFPbMkJr06kbkBzjLu+Z5NdvXwsd8h0rpa8zWU3sPMV76L5gAY34loHAoYAA cb8m8Uf8dsFsMBnNMkYeTi9IM4Bmmd/4tDznijD0VRb1wayI4NqjtJvaVIkXV/s5 KOZzWvZ52mwVxFpt+S0SvDPyHOu24ob0L5F2fwKO9IanrwLxaon4oyCWEO7M48U1 OcfdWvURngOQler30WBvylH2NiH58DwpDh4oqDbnur8K3yIfb6HYLOj2SIF3EOTh QfqgocHH695EOPrIiAlTd4XlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzH4uZeI+ tQ3wlzAIDndVprCYaLQwHwYDVR0jBBgwFoAUkw3fQQEGkDvrmRnJm94BY4cGVa4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTUzL0E1OUJGRkU0RDJF RDExRUY4REVFNTEyMEM0RjlBRTAyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1Zh NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva3czZlFRRUdrRHZybVJuSm05NEJZNGNHVmE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NTUzL0E1OUJGRkU0RDJFRDExRUY4REVFNTEyMEM0RjlBRTAyL2t3M2ZRUUVHa0R2 cm1SbkptOTRCWTRjR1ZhNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEeY9Mk7U3p/UzkRptkYSHpLddYWkEGfs7uMaibMWvasjy1nyjeHbe19 UgkMMc8TIKxp9ibEGYtdzGZsfx+V0Xaj61JX1H/dvJZ+8bYc0JEW5VxB/AEu0H3P aT0ndXKBquORcyUlqgTMuZp2YBiOFL3zyy9oNZgOue7B26IuRJCR4bmwxYCcWMql DsZim2+VD2gcSZvLdDa9AEz4fjFn0OpIduUOxAdmzbnbbHxgCd9yC+aWYUy2sSUv VYxqP9rFI9L1MszDPz5qPjSuRBndj/zQ7lRnzQRddulhdf9DYVeyPC1EJ+LJxtM+ 5Qt01m98TcOcTPMoXpCKfCeLI/VCiTY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:25:07 2025 by rpki-client