$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json) Hash identifier: bKPRTXpNFOooRWPDCrx8AcoRGy4D/+2o/U2cYFOFlEk= Subject key identifier: 4D:5E:75:EF:64:0A:1E:C5:6D:7E:34:42:FD:03:AC:96:3F:67:95:29 Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft Manifest number: 06E0 Signing time: Fri 08 Aug 2025 22:25:58 +0000 Manifest this update: Fri 08 Aug 2025 22:25:58 +0000 Manifest next update: Fri 15 Aug 2025 22:25:58 +0000 Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: YkxS69geMDShCqcL5vKiwrqIhzVkQIOFXzOyy8BEr/w=) 2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vMhYeDmA4rQgDzWKujwjU7tw9Dx++6v75EIl46gAbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Validity Not Before: Aug 8 22:25:58 2025 GMT Not After : Aug 15 22:25:58 2025 GMT Subject: CN=68967976-2104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:75:4f:55:9c:bc:f3:fd:5f:0b:e2:d4:a4: b9:48:74:e7:7f:3f:0b:73:4e:20:a8:83:51:29:63: 7b:91:b4:f0:11:f4:2c:92:dd:31:9b:f3:28:29:ee: 5a:30:b9:9e:72:86:17:73:20:5d:00:0b:2f:0b:be: ac:7f:34:db:b3:41:70:89:6e:96:cc:52:27:fb:97: 65:68:a9:ef:ad:d5:40:50:36:e6:85:c8:35:d8:93: ee:33:7d:ec:ad:3d:5f:10:3a:5e:6d:cc:78:00:23: 02:11:67:25:31:80:e1:4f:3b:ce:96:38:6e:2b:c5: e0:8e:03:f8:d2:53:a3:e9:32:93:f8:cc:68:73:b9: fc:4e:45:db:54:8d:02:24:e6:05:f7:dc:7d:c9:6d: 9f:3a:ea:ac:34:a3:7e:c8:70:93:79:45:af:67:7a: ab:03:80:3f:c3:ae:1b:83:21:2a:89:b7:79:f9:e5: fd:ec:55:44:94:60:de:ba:12:2b:b5:96:4a:2d:3a: 0b:42:38:38:ec:2e:34:00:33:53:3e:d7:a0:5d:ac: 29:2f:e7:4f:d7:7d:f0:56:2a:da:4d:eb:ad:e7:00: cc:bd:fa:1c:7c:26:5f:0c:32:b0:4d:aa:32:f0:c1: a3:5a:94:9a:aa:73:72:68:e9:22:83:90:91:ae:dc: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5E:75:EF:64:0A:1E:C5:6D:7E:34:42:FD:03:AC:96:3F:67:95:29 X509v3 Authority Key Identifier: keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:59:57:6a:5b:bc:65:e6:f4:f1:83:bc:ef:35:39:cd:c5:7b: e9:7f:23:43:8d:a2:32:99:84:6a:bc:bb:be:e0:42:a3:3f:2b: e5:c3:cc:34:32:55:b0:3f:f8:50:22:48:7e:c3:34:17:ed:dd: 9b:41:0b:fa:3f:eb:28:c2:d8:56:bb:7a:48:ff:7d:04:28:97: bb:de:d2:d4:7e:5a:03:3b:29:63:04:0f:28:8b:5f:48:c5:69: b0:2f:7f:6b:26:e8:29:25:51:25:89:02:0d:9a:ee:67:2f:54: e6:cd:19:de:ef:de:0d:ee:c7:58:bc:ba:23:f1:79:d9:0b:50: 59:df:97:11:99:70:9c:fb:dc:05:a2:87:60:11:d3:b4:19:21: 4a:7b:0a:31:2b:7d:57:9b:ea:bb:fc:f1:9b:bb:a4:02:8d:24: 6d:12:d3:c2:7c:b7:c7:38:4d:18:c5:46:e0:3e:98:52:d6:8f: df:6f:f9:b9:d8:ac:4a:78:96:07:3a:0b:d4:9c:31:34:17:06: be:a2:df:23:d4:cb:a5:f7:9a:e6:10:3e:40:cd:d4:75:a6:cb: a1:e7:84:dc:1d:cb:d2:37:2a:2a:ce:80:d8:94:32:ba:53:d5: 16:e4:5a:45:6c:ab:b8:17:ae:55:03:b2:6b:c9:44:1c:fb:2c: 4d:c6:51:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1RkIxMTAvBgNVBAUTKDkxN0E5RjdBQTIyODFCMTlGOTQ3NDIzRTk4NjEyQjFG NjNEMTdFMEUwHhcNMjUwODA4MjIyNTU4WhcNMjUwODE1MjIyNTU4WjAYMRYwFAYD VQQDEw02ODk2Nzk3Ni0yMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJd1T1WcvPP9Xwvi1KS5SHTnfz8Lc04gqINRKWN7kbTwEfQskt0xm/MoKe5a MLmecoYXcyBdAAsvC76sfzTbs0FwiW6WzFIn+5dlaKnvrdVAUDbmhcg12JPuM33s rT1fEDpebcx4ACMCEWclMYDhTzvOljhuK8XgjgP40lOj6TKT+Mxoc7n8TkXbVI0C JOYF99x9yW2fOuqsNKN+yHCTeUWvZ3qrA4A/w64bgyEqibd5+eX97FVElGDeuhIr tZZKLToLQjg47C40ADNTPtegXawpL+dP133wViraTeut5wDMvfocfCZfDDKwTaoy 8MGjWpSaqnNyaOkig5CRrtypGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1ede9k Ch7FbX40Qv0DrJY/Z5UpMB8GA1UdIwQYMBaAFJF6n3qiKBsZ+UdCPphhKx9j0X4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzVGQi82QzI5NkQzQTYx NDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4bjVSMEktbUdFckgyUFJm ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tYcWZlcUlvR3huNVIwSS1tR0VySDJQUmZnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzVGQi82QzI5NkQzQTYxNDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4 bjVSMEktbUdFckgyUFJmZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaWVdqW7xl5vTxg7zvNTnNxXvpfyNDjaIymYRqvLu+4EKjPyvlw8w0 MlWwP/hQIkh+wzQX7d2bQQv6P+sowthWu3pI/30EKJe73tLUfloDOyljBA8oi19I xWmwL39rJugpJVEliQINmu5nL1TmzRne794N7sdYvLoj8XnZC1BZ35cRmXCc+9wF oodgEdO0GSFKewoxK31Xm+q7/PGbu6QCjSRtEtPCfLfHOE0YxUbgPphS1o/fb/m5 2KxKeJYHOgvUnDE0Fwa+ot8j1Mul95rmED5AzdR1psuh54TcHcvSNyoqzoDYlDK6 U9UW5FpFbKu4F65VA7JryUQc+yxNxlH9 -----END CERTIFICATE-----Generated at Sun Aug 10 05:36:10 2025 by rpki-client