$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json) Hash identifier: knLkUx86XrU9zjPPiFVyxeiEoPsNy6B0ziFsmCGP4WQ= Subject key identifier: 45:8D:4E:7D:2C:94:C2:4F:75:98:EF:18:79:E4:82:7B:8A:67:E8:AD Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Certificate serial: 072A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft Manifest number: 1180 Signing time: Fri 22 Aug 2025 19:46:28 +0000 Manifest this update: Fri 22 Aug 2025 19:46:27 +0000 Manifest next update: Fri 29 Aug 2025 19:46:27 +0000 Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: NMNOMxOurLTMMenqKaTdoFBw90Ii0+RsyAkSuPgPe8s=) 2: 6243075E653411EB98060C17C4F9AE02.roa (hash: NDLfyb46b0G5U2WbOhSmMW5qTZe1rxLw2rEopJT9V6w=) 3: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: lo283iVsMsLHbJbz5lAswnspLjcjQrX9MFqmCe7E2UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Validity Not Before: Aug 22 19:46:27 2025 GMT Not After : Aug 29 19:46:27 2025 GMT Subject: CN=68a8c914-d37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:b5:40:13:e0:b3:53:2d:32:06:d1:0b:19: 62:32:58:3c:f3:32:b1:a3:f7:b3:30:be:c3:8d:24: 6e:8b:e2:db:b8:5c:84:16:a8:07:13:c5:14:fe:74: 0c:0b:9f:ad:68:8e:e2:6f:6e:d4:f1:c8:24:3a:33: 8c:d6:0c:cb:39:ec:a3:ba:e7:e7:bc:b3:67:28:e1: a5:ce:6d:25:7c:ee:88:9f:24:ef:a7:e5:fd:bd:69: be:83:f7:3c:c7:cb:0a:8a:02:06:72:f3:1e:bd:af: df:33:2e:b8:92:b3:69:df:8d:80:82:70:13:e7:6a: 93:1a:42:38:4e:cf:f5:1f:81:4c:4c:81:df:cb:82: 01:c0:4a:87:4d:c9:95:8b:31:93:97:dc:9b:7f:0e: fb:db:81:da:f7:bb:e2:0a:af:01:ee:49:d1:47:96: eb:1b:29:19:9b:ba:75:17:c2:bf:05:dd:20:fe:e8: 68:00:90:66:2f:e0:05:60:de:61:65:60:00:00:ad: b0:ce:5f:fd:ef:f9:24:e8:6f:d4:eb:a4:e3:99:ea: 64:b0:4b:8c:6b:0e:e5:55:b2:73:92:33:a8:f3:4b: ee:65:b1:30:05:50:bb:33:56:2d:c4:3c:d3:10:8c: ce:b1:39:64:2a:d4:6d:0e:bf:8f:72:aa:44:0f:a8: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8D:4E:7D:2C:94:C2:4F:75:98:EF:18:79:E4:82:7B:8A:67:E8:AD X509v3 Authority Key Identifier: keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:1e:97:1c:e7:74:d5:f3:d3:70:3d:7a:86:d3:c0:c1:8a:2b: c7:be:2d:43:74:02:7a:99:e7:0e:83:bd:16:94:a9:07:6b:3e: 4f:3b:5b:0a:d6:ae:ad:02:23:e3:f1:06:60:9d:c7:ab:32:92: ac:69:5e:f7:b4:6e:db:a3:87:9f:bf:64:a2:18:04:9b:a4:dc: 06:8c:f3:27:4f:3a:f2:e1:f0:7a:c4:14:04:ef:10:a9:84:ea: a9:42:b3:b0:b7:3d:10:e7:7b:c7:cc:d8:62:9e:d4:ad:10:21: eb:5e:97:6e:32:3a:20:b5:2b:b7:4f:48:22:d7:94:8b:59:5b: 2e:50:f0:f1:7e:a0:a6:1c:30:8b:4e:e2:02:51:da:f8:47:a2: e5:91:5e:93:cd:ab:47:b5:1a:f2:d4:05:b5:be:d4:02:f7:6b: 28:41:47:60:cc:77:17:51:83:d4:2c:5f:d5:f8:bd:ff:84:16: 9f:fc:84:29:da:5e:f7:19:fc:be:97:5f:19:96:eb:8b:1a:e4: db:61:07:ba:76:2a:69:20:00:9d:0a:4c:24:c1:ea:0c:15:09: 1f:3e:82:67:0b:a1:0d:e1:f5:a8:e4:85:a6:19:a9:a3:5e:c2: b3:c2:19:47:09:6b:9c:25:6c:71:76:fe:40:af:72:fc:78:93: ac:c9:77:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDJBQzBBQjRCNUYzQkI1QjBFRjc5QkQyMUE2NDlDQUZG RTdGOUMyMEEwHhcNMjUwODIyMTk0NjI3WhcNMjUwODI5MTk0NjI3WjAYMRYwFAYD VQQDEw02OGE4YzkxNC1kMzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqO1QBPgs1MtMgbRCxliMlg88zKxo/ezML7DjSRui+LbuFyEFqgHE8UU/nQM C5+taI7ib27U8cgkOjOM1gzLOeyjuufnvLNnKOGlzm0lfO6InyTvp+X9vWm+g/c8 x8sKigIGcvMeva/fMy64krNp342AgnAT52qTGkI4Ts/1H4FMTIHfy4IBwEqHTcmV izGTl9ybfw7724Ha97viCq8B7knRR5brGykZm7p1F8K/Bd0g/uhoAJBmL+AFYN5h ZWAAAK2wzl/97/kk6G/U66TjmepksEuMaw7lVbJzkjOo80vuZbEwBVC7M1YtxDzT EIzOsTlkKtRtDr+PcqpED6jF8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWNTn0s lMJPdZjvGHnkgnuKZ+itMB8GA1UdIwQYMBaAFCrAq0tfO7Ww73m9IaZJyv/n+cIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3RiRHZlYjBocGtuS18tZjV3 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzQ3JTMTg3dGJEdmViMGhwa25LXy1mNXdnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3Ri RHZlYjBocGtuS18tZjV3Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoHpcc53TV89NwPXqG08DBiivHvi1DdAJ6mecOg70WlKkHaz5PO1sK 1q6tAiPj8QZgncerMpKsaV73tG7bo4efv2SiGASbpNwGjPMnTzry4fB6xBQE7xCp hOqpQrOwtz0Q53vHzNhintStECHrXpduMjogtSu3T0gi15SLWVsuUPDxfqCmHDCL TuICUdr4R6LlkV6TzatHtRry1AW1vtQC92soQUdgzHcXUYPULF/V+L3/hBaf/IQp 2l73Gfy+l18ZluuLGuTbYQe6dippIACdCkwkweoMFQkfPoJnC6EN4fWo5IWmGamj XsKzwhlHCWucJWxxdv5Ar3L8eJOsyXeA -----END CERTIFICATE-----Generated at Sun Aug 24 05:14:30 2025 by rpki-client