$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft File: Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json) Hash identifier: vZJOOXj5AbKk5fCUlU9eh2YJGErF4CTwqtQhnOm/nKo= Subject key identifier: 36:1A:2D:34:AA:5E:5A:5D:7C:C5:20:1A:03:8D:54:AF:96:50:ED:20 Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 Certificate issuer: /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft Manifest number: AA Signing time: Sat 23 Aug 2025 06:25:17 +0000 Manifest this update: Sat 23 Aug 2025 06:25:16 +0000 Manifest next update: Sat 30 Aug 2025 06:25:16 +0000 Files and hashes: 1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: tIUAegNHN3XTqzqx1tmaejowrCblBHnfBnNBvl6Emik=) 2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: VYuqdxkeY8VDCaP9z9fc7NoqICt3B9Gb1p23SFkZpM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Validity Not Before: Aug 23 06:25:16 2025 GMT Not After : Aug 30 06:25:16 2025 GMT Subject: CN=68a95ecc-ab59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:35:12:02:52:6e:40:a3:90:32:f0:cb:01:c0: 6c:19:e9:86:e8:06:fe:d1:eb:42:c2:fc:2a:36:81: e3:49:d6:e1:34:68:e9:02:86:7c:a1:44:54:e2:b6: 6b:ab:0d:de:9a:a9:d1:94:88:85:fe:6b:35:07:65: 40:db:5e:27:51:1a:b8:48:f7:5c:ae:13:39:98:bc: 1c:2d:a5:c5:87:c6:56:9d:39:43:1d:42:4a:60:d2: 2b:87:da:01:57:28:29:29:26:2d:a8:3b:27:67:43: 20:1c:7c:46:24:ee:45:41:d3:5a:3f:46:46:90:f6: 22:88:78:5c:79:02:c1:46:ec:54:44:ae:ff:e7:c1: 27:cb:7a:df:6a:8b:75:26:90:e5:26:86:9a:73:e0: e4:01:81:3c:5d:2a:4a:ed:87:8c:c2:29:ce:1f:64: 64:c2:e6:af:56:5e:7a:ff:bc:ef:50:5c:19:9e:f0: 5d:d5:a8:95:95:51:c1:c3:62:ac:07:6b:b5:14:f1: 63:ec:2c:83:19:85:26:d7:a5:60:24:a9:06:75:37: 95:55:0a:e6:dc:aa:32:3b:e4:9b:87:51:97:6f:48: d1:36:9a:f4:33:bb:f9:5b:72:9c:28:98:59:ae:b4: 54:eb:ba:4f:82:01:3c:fa:65:31:4c:91:83:2c:41: c1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1A:2D:34:AA:5E:5A:5D:7C:C5:20:1A:03:8D:54:AF:96:50:ED:20 X509v3 Authority Key Identifier: keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:bc:1c:4d:8a:b2:9c:a9:3e:ae:d6:56:92:d2:7f:47:dc:5b: b2:f7:5e:b1:ed:01:4d:c2:13:9d:c3:9d:98:16:11:e0:6b:65: 90:f4:56:fd:32:a1:04:9c:fd:c3:3e:22:e4:0a:5b:b0:2f:0e: 6e:97:74:5b:49:2c:93:c8:f4:70:8e:fd:be:53:5d:be:de:19: 53:63:11:e4:55:2f:be:5b:ed:59:84:7a:46:b1:e7:54:b1:55: 69:b3:23:ef:43:f3:19:b9:92:11:bc:1a:32:c0:5b:62:2a:e0: 19:b3:84:32:6f:23:71:c7:72:9f:1f:fe:67:db:bf:dd:48:63: db:76:59:a0:f7:71:54:81:5d:d7:ab:b9:31:8f:a0:a1:9b:53: 7d:7a:4a:d6:76:e1:21:eb:6f:9f:32:10:be:27:65:85:e5:3d: 4a:d8:f4:fa:89:ce:71:b7:25:b2:a5:e6:ae:7d:d4:77:5e:b4: d9:0f:47:2c:b7:99:df:0f:9c:a4:37:36:50:f9:ca:e5:08:75: e2:39:61:2d:fa:52:84:bb:cc:93:6a:a5:21:fc:66:6b:37:b6: 22:08:65:f6:f3:5f:b4:86:b5:31:5a:ee:04:20:49:79:3c:ce: f9:f5:58:3b:20:5a:db:7f:f0:98:78:8c:6d:7a:62:dc:0d:d1: 2f:8c:a9:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1MjUxMTAvBgNVBAUTKDJCM0RCODVFRjk1MjIzOEQxOTJEQ0YxNzBFRTZCRUIx QzhEQjAzQTkwHhcNMjUwODIzMDYyNTE2WhcNMjUwODMwMDYyNTE2WjAYMRYwFAYD VQQDEw02OGE5NWVjYy1hYjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jUSAlJuQKOQMvDLAcBsGemG6Ab+0etCwvwqNoHjSdbhNGjpAoZ8oURU4rZr qw3emqnRlIiF/ms1B2VA214nURq4SPdcrhM5mLwcLaXFh8ZWnTlDHUJKYNIrh9oB VygpKSYtqDsnZ0MgHHxGJO5FQdNaP0ZGkPYiiHhceQLBRuxURK7/58Eny3rfaot1 JpDlJoaac+DkAYE8XSpK7YeMwinOH2RkwuavVl56/7zvUFwZnvBd1aiVlVHBw2Ks B2u1FPFj7CyDGYUm16VgJKkGdTeVVQrm3KoyO+Sbh1GXb0jRNpr0M7v5W3KcKJhZ rrRU67pPggE8+mUxTJGDLEHBlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYaLTSq XlpdfMUgGgONVK+WUO0gMB8GA1UdIwQYMBaAFCs9uF75UiONGS3PFw7mvrHI2wOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FMTg3MTc3Njg0 RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0MFpMYzhYRHVhLXNjamJB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t6MjRYdmxTSTQwWkxjOFhEdWEtc2NqYkE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUyNS9FMTg3MTc3Njg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0 MFpMYzhYRHVhLXNjamJBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRvBxNirKcqT6u1laS0n9H3Fuy916x7QFNwhOdw52YFhHga2WQ9Fb9 MqEEnP3DPiLkCluwLw5ul3RbSSyTyPRwjv2+U12+3hlTYxHkVS++W+1ZhHpGsedU sVVpsyPvQ/MZuZIRvBoywFtiKuAZs4QybyNxx3KfH/5n27/dSGPbdlmg93FUgV3X q7kxj6Chm1N9ekrWduEh62+fMhC+J2WF5T1K2PT6ic5xtyWypeaufdR3XrTZD0cs t5nfD5ykNzZQ+crlCHXiOWEt+lKEu8yTaqUh/GZrN7YiCGX281+0hrUxWu4EIEl5 PM759Vg7IFrbf/CYeIxtemLcDdEvjKnD -----END CERTIFICATE-----Generated at Sat Aug 23 10:38:29 2025 by rpki-client