$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: rdxfS0NXzPPfK9PHBJfQzG+phfk9Bl760UAiVSpP9zw= Subject key identifier: 22:39:9B:EB:9C:F7:B5:5C:15:B0:33:E2:17:90:AD:B4:8F:8D:C0:77 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 0151 Signing time: Sat 09 Aug 2025 04:33:15 +0000 Manifest this update: Sat 09 Aug 2025 04:33:14 +0000 Manifest next update: Sat 16 Aug 2025 04:33:14 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: bEzGMY0HG5H6gR9Vw8oqIfN06+Wg4gsSOFwWD9fhOmc=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: fKu+QnI9JJSs0/0qC7wtQtv1o9IdD9KvcLGhg+7rRMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Aug 9 04:33:14 2025 GMT Not After : Aug 16 04:33:14 2025 GMT Subject: CN=6896cf8b-adba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9d:9e:e7:06:83:6f:28:91:e9:54:80:58:c4: 12:ee:26:8e:58:78:09:9f:0c:db:06:d0:28:d8:15: d4:e3:cb:c8:d1:eb:88:2f:d6:26:cd:e4:f4:c1:ef: b3:76:d6:53:3c:12:d5:7c:5a:69:db:7b:98:b0:d2: 17:6c:52:57:b7:9d:64:0d:b4:20:16:ff:12:a4:82: e1:a6:7b:be:bf:04:18:72:ac:29:3e:e9:43:b0:d2: f7:11:05:2c:46:04:1d:d4:1e:d5:03:34:4c:a9:43: d9:d6:5e:64:2b:bc:bb:38:ee:b8:8b:e3:4c:95:6c: f7:5a:02:ec:82:5f:59:f2:0a:b8:86:91:75:65:25: 49:24:d9:b0:04:df:01:fa:02:f7:69:56:45:d2:ce: ec:48:0a:e0:22:12:86:2d:6c:55:46:c2:72:08:8a: 8c:21:c8:c8:79:6d:7a:28:02:f0:b5:5f:96:2f:3d: bc:63:f3:80:ba:eb:5a:a7:aa:03:25:86:2a:c4:3b: f5:ca:83:c8:c1:bf:f2:b4:82:7c:cf:67:2c:86:d4: 77:6b:aa:7d:ee:5e:d7:3b:65:91:5b:fc:b6:bc:16: 1f:f3:50:db:ef:f3:d2:cd:b2:d2:c6:a3:8d:af:31: 43:1b:30:1b:b1:30:d1:8e:19:f5:c8:3d:ae:a1:a8: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:39:9B:EB:9C:F7:B5:5C:15:B0:33:E2:17:90:AD:B4:8F:8D:C0:77 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:22:f5:9f:b1:48:b8:03:b7:b5:b5:46:11:d0:65:28:c9:a2: 1b:eb:00:fe:4a:53:ab:93:6d:19:fd:bd:c0:59:49:ee:57:47: ef:f1:ab:c0:34:c8:25:0d:62:d1:23:b6:67:fc:4f:53:28:30: df:d3:12:12:72:33:b6:5a:2c:69:94:68:e9:61:5e:d9:7f:9f: 75:5f:a7:76:c4:7a:04:a5:7e:1f:68:a7:9b:80:26:af:9b:6a: 73:1a:b9:70:1b:bb:94:f5:0d:6d:54:c8:7b:56:3d:7c:e0:33: 38:43:3c:a9:9a:f7:85:b7:32:25:b0:fa:3a:f6:44:bf:bd:cf: b7:d9:9d:f3:bb:f7:e4:8a:15:13:e9:21:62:dc:e3:63:b5:7b: 02:8d:1a:c3:13:ad:79:5a:aa:22:7b:85:01:d8:44:e1:13:26: 4a:d1:8e:29:39:8f:01:22:80:77:6a:6a:e2:45:16:ae:b5:3f: d6:0a:2c:89:a3:1c:78:a4:da:c7:81:96:63:5f:0f:f6:c6:1a: 1f:5d:19:d5:d6:02:5f:0f:da:ef:3e:78:b2:e1:a5:8f:b6:e0: 3c:d5:f1:b3:fa:b7:92:05:07:ac:65:3f:76:e6:c5:a9:cc:53: 03:f5:f6:e9:b1:de:f1:02:53:41:cd:b0:58:f1:c1:96:ee:0b: 37:d2:af:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjUwODA5MDQzMzE0WhcNMjUwODE2MDQzMzE0WjAYMRYwFAYD VQQDEw02ODk2Y2Y4Yi1hZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1p2e5waDbyiR6VSAWMQS7iaOWHgJnwzbBtAo2BXU48vI0euIL9YmzeT0we+z dtZTPBLVfFpp23uYsNIXbFJXt51kDbQgFv8SpILhpnu+vwQYcqwpPulDsNL3EQUs RgQd1B7VAzRMqUPZ1l5kK7y7OO64i+NMlWz3WgLsgl9Z8gq4hpF1ZSVJJNmwBN8B +gL3aVZF0s7sSArgIhKGLWxVRsJyCIqMIcjIeW16KALwtV+WLz28Y/OAuutap6oD JYYqxDv1yoPIwb/ytIJ8z2cshtR3a6p97l7XO2WRW/y2vBYf81Db7/PSzbLSxqON rzFDGzAbsTDRjhn1yD2uoahncQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI5m+uc 97VcFbAz4heQrbSPjcB3MB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOIvWfsUi4A7e1tUYR0GUoyaIb6wD+SlOrk20Z/b3AWUnuV0fv8avA NMglDWLRI7Zn/E9TKDDf0xIScjO2WixplGjpYV7Zf591X6d2xHoEpX4faKebgCav m2pzGrlwG7uU9Q1tVMh7Vj184DM4QzypmveFtzIlsPo69kS/vc+32Z3zu/fkihUT 6SFi3ONjtXsCjRrDE615Wqoie4UB2EThEyZK0Y4pOY8BIoB3amriRRautT/WCiyJ oxx4pNrHgZZjXw/2xhofXRnV1gJfD9rvPniy4aWPtuA81fGz+reSBQesZT925sWp zFMD9fbpsd7xAlNBzbBY8cGW7gs30q/K -----END CERTIFICATE-----Generated at Sat Aug 9 15:08:40 2025 by rpki-client