$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: VzU4Fig++IhQwEl4u5dhCu/kBfUTIZLm7RfZKILnUYo= Subject key identifier: C4:FC:AD:AD:E7:1D:70:68:A3:9C:AB:9A:7E:1C:5F:7F:34:C9:DA:8D Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 0117 Signing time: Sat 23 Aug 2025 04:59:06 +0000 Manifest this update: Sat 23 Aug 2025 04:59:06 +0000 Manifest next update: Sat 30 Aug 2025 04:59:06 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: WPjTVsdhCTuZ/3Oi22fTR+dUczQ198cJeRv3yb7e1gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Aug 23 04:59:06 2025 GMT Not After : Aug 30 04:59:06 2025 GMT Subject: CN=68a94a9a-5f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:01:7b:bc:03:03:58:53:d5:d1:11:5e:7e: 83:d8:5e:eb:7d:d2:e9:c8:1d:fc:45:cd:a4:75:df: 61:c7:b3:be:61:95:6b:e2:03:78:69:5e:34:c0:0b: cd:45:af:83:ce:45:3f:2e:cd:67:35:db:57:33:20: 6f:57:e5:e0:5b:fc:b6:47:3a:32:9c:08:8e:14:f3: 8a:56:b9:a2:0c:13:e8:dc:3b:27:9f:91:7a:ff:22: ed:f9:ce:0c:3c:52:4a:19:8c:39:52:5e:2e:d5:3e: 73:6c:d5:77:9c:23:19:c0:d1:8c:01:0e:7c:24:8e: 5b:c4:6a:6f:6d:50:2e:13:45:68:ed:6e:73:a4:42: 2b:26:50:77:2e:dd:ee:05:42:44:03:c0:b0:de:45: 95:98:09:bd:d4:d6:55:c9:97:2f:e3:3a:88:49:83: 4b:d8:13:8c:7c:57:7a:71:3b:1d:74:56:e3:a7:93: b7:c9:e7:3d:b3:28:3f:9c:63:63:ed:c8:21:68:4c: 82:67:09:d4:f9:22:91:11:ec:4b:a6:65:04:a1:f7: da:76:b4:97:bc:34:ed:2f:44:25:d7:08:c3:49:7c: c3:9c:d7:dd:b3:f4:a4:5c:0d:53:78:ac:8a:de:02: f4:19:ed:b2:6e:d2:78:fb:b9:71:5f:2a:c2:6d:bf: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FC:AD:AD:E7:1D:70:68:A3:9C:AB:9A:7E:1C:5F:7F:34:C9:DA:8D X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:6d:12:be:9a:b8:65:97:b6:8d:e6:30:c6:49:3c:10:8b:3e: 5f:a7:57:56:b3:58:24:ec:69:4b:3e:e6:be:cd:5e:99:b8:c1: 7b:92:68:62:1f:7f:92:7e:3e:bd:10:65:30:d8:eb:1c:0b:ae: b3:93:fb:c7:ec:93:3e:cd:61:88:9e:af:84:0d:6e:73:b4:b5: 7f:05:78:9f:61:83:8f:95:28:b8:d0:30:db:b9:c0:27:e6:c6: c2:a1:85:fa:9d:8c:84:f1:08:68:1b:2a:0f:24:cf:0e:00:e3: 32:7e:a0:88:b6:a8:60:dd:93:9b:9e:df:27:4d:02:5c:da:c6: 5a:7f:99:3c:4a:33:3b:92:ae:04:92:08:7e:31:c3:c1:3c:74: 22:ae:14:c2:d4:8d:51:40:17:52:ed:c3:b7:35:71:02:d4:e4: cd:a5:ef:07:73:78:c1:8b:ed:0c:d9:48:f4:b5:39:eb:b2:ad: 6d:73:f0:b0:c3:f2:0a:47:12:c6:29:b9:c8:a4:cd:e2:b9:5d: f8:54:8c:cb:15:f8:6d:84:26:4a:20:43:72:02:99:58:8e:8d: 67:4f:e0:4c:b3:b3:e5:ea:1b:f8:93:9f:ce:ef:52:18:d7:ef: d0:3a:08:89:0f:fc:02:08:7b:aa:1a:43:64:bb:dd:61:e2:97: 22:3c:43:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUwODIzMDQ1OTA2WhcNMjUwODMwMDQ1OTA2WjAYMRYwFAYD VQQDEw02OGE5NGE5YS01ZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtMBe7wDA1hT1dERXn6D2F7rfdLpyB38Rc2kdd9hx7O+YZVr4gN4aV40wAvN Ra+DzkU/Ls1nNdtXMyBvV+XgW/y2RzoynAiOFPOKVrmiDBPo3Dsnn5F6/yLt+c4M PFJKGYw5Ul4u1T5zbNV3nCMZwNGMAQ58JI5bxGpvbVAuE0Vo7W5zpEIrJlB3Lt3u BUJEA8Cw3kWVmAm91NZVyZcv4zqISYNL2BOMfFd6cTsddFbjp5O3yec9syg/nGNj 7cghaEyCZwnU+SKREexLpmUEoffadrSXvDTtL0Ql1wjDSXzDnNfds/SkXA1TeKyK 3gL0Ge2ybtJ4+7lxXyrCbb+A4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMT8ra3n HXBoo5yrmn4cX380ydqNMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBybRK+mrhll7aN5jDGSTwQiz5fp1dWs1gk7GlLPua+zV6ZuMF7kmhi H3+Sfj69EGUw2OscC66zk/vH7JM+zWGInq+EDW5ztLV/BXifYYOPlSi40DDbucAn 5sbCoYX6nYyE8QhoGyoPJM8OAOMyfqCItqhg3ZObnt8nTQJc2sZaf5k8SjM7kq4E kgh+McPBPHQirhTC1I1RQBdS7cO3NXEC1OTNpe8Hc3jBi+0M2Uj0tTnrsq1tc/Cw w/IKRxLGKbnIpM3iuV34VIzLFfhthCZKIENyAplYjo1nT+BMs7Pl6hv4k5/O71IY 1+/QOgiJD/wCCHuqGkNku91h4pciPEMw -----END CERTIFICATE-----Generated at Sat Aug 23 19:00:19 2025 by rpki-client