$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json) Hash identifier: Q85WhlUXLEUXkgcqARikn1DeYZJlbyeYf4pVkqXKohY= Subject key identifier: 0E:6D:BE:36:63:0A:30:E1:6F:9A:92:84:96:06:B0:B9:66:01:53:2A Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft Manifest number: B4 Signing time: Mon 11 Aug 2025 06:15:25 +0000 Manifest this update: Mon 11 Aug 2025 06:15:24 +0000 Manifest next update: Mon 18 Aug 2025 06:15:24 +0000 Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: Uv96xlST8Xl155IDAAimiF3jXsyVB5CkfRO7gWugluc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: Aug 11 06:15:24 2025 GMT Not After : Aug 18 06:15:24 2025 GMT Subject: CN=68998a7d-7097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:80:3f:f9:43:9a:b1:3d:9b:e8:f9:fd:16: 3e:a3:69:de:01:c8:d2:de:2e:7c:5b:a3:8c:d2:e5: 49:58:7f:c5:29:e4:d3:8c:cb:7e:93:25:75:06:44: b8:98:d1:fe:dc:71:ef:11:13:f1:0b:e2:11:da:e6: b6:9a:86:ad:09:bc:eb:a3:30:a0:25:16:28:db:be: e6:50:6f:e9:bb:3b:37:71:f8:35:e1:c1:42:da:d3: f7:4c:ca:eb:5e:7f:ea:ed:ad:96:51:3d:29:9a:f1: 9e:11:40:e6:b4:4c:b1:1a:e9:ef:eb:25:32:29:00: 2d:30:bf:e3:93:78:d1:7c:f5:93:30:b6:68:ea:71: db:3c:56:13:a4:39:8b:12:8e:fc:d8:b3:b0:ea:84: 96:e4:7e:6b:a5:65:7a:cb:78:59:97:f6:e1:5d:52: a6:e5:4b:5a:2e:99:f4:0c:1c:d7:99:b8:9d:16:2e: 61:12:e4:60:93:11:22:b2:6c:7b:15:b7:a4:4e:37: 82:1d:ed:db:0b:69:eb:5c:34:fe:ea:93:dd:31:e1: b1:05:8d:2c:aa:29:b1:66:41:98:74:68:47:9f:3e: aa:08:ba:10:04:fe:6c:eb:69:60:33:51:0a:c7:0a: 53:f8:f4:3d:d4:34:d8:dc:76:45:13:02:34:a6:22: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6D:BE:36:63:0A:30:E1:6F:9A:92:84:96:06:B0:B9:66:01:53:2A X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:13:a6:25:ac:11:8f:b1:b8:3c:e2:02:6a:97:fa:36:8e:17: 58:12:a8:26:02:5c:c1:95:64:f6:eb:f8:ca:df:34:9f:e8:ee: 92:7c:b9:39:eb:7f:27:f1:51:14:35:2b:83:22:6c:c7:68:95: fe:37:2f:5b:2e:43:62:20:29:d3:dd:e9:ba:44:31:55:32:26: ec:42:21:27:fa:e7:31:36:7c:fa:11:cf:c3:d5:31:c2:5a:59: be:eb:73:f5:f0:aa:ba:b1:33:fa:d8:68:72:d9:0a:47:c5:99: be:13:ff:6b:a8:be:bb:bc:18:51:9f:a5:15:a4:79:e1:37:6b: 6c:fa:13:ae:d9:d5:26:81:8a:0d:ba:67:94:35:7d:1d:51:8e: d2:aa:f2:fd:12:cf:88:f2:50:0c:00:27:49:b9:6e:c7:b8:48: 4e:14:ce:4a:07:15:97:4f:df:70:bf:79:95:6f:fb:08:d0:b6: b5:45:9c:87:9e:62:57:89:ea:a8:10:e3:62:27:27:86:2f:55: 78:a5:6b:72:dd:b2:0c:7f:f8:89:d8:f6:8f:5b:e9:a0:5b:d9: 91:91:54:b7:f5:76:a7:97:3d:93:d7:48:ea:4a:49:69:a6:69: ff:34:1f:7f:c0:c3:e0:91:c8:ab:3b:0d:63:7b:41:8c:91:76: 1c:bf:1e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjUwODExMDYxNTI0WhcNMjUwODE4MDYxNTI0WjAYMRYwFAYD VQQDEw02ODk5OGE3ZC03MDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2a2AP/lDmrE9m+j5/RY+o2neAcjS3i58W6OM0uVJWH/FKeTTjMt+kyV1BkS4 mNH+3HHvERPxC+IR2ua2moatCbzrozCgJRYo277mUG/puzs3cfg14cFC2tP3TMrr Xn/q7a2WUT0pmvGeEUDmtEyxGunv6yUyKQAtML/jk3jRfPWTMLZo6nHbPFYTpDmL Eo782LOw6oSW5H5rpWV6y3hZl/bhXVKm5UtaLpn0DBzXmbidFi5hEuRgkxEismx7 FbekTjeCHe3bC2nrXDT+6pPdMeGxBY0sqimxZkGYdGhHnz6qCLoQBP5s62lgM1EK xwpT+PQ91DTY3HZFEwI0piL64QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5tvjZj CjDhb5qShJYGsLlmAVMqMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW eGZIck9CS0l6dHctYjRZblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7E6YlrBGPsbg84gJql/o2jhdYEqgmAlzBlWT26/jK3zSf6O6SfLk5 638n8VEUNSuDImzHaJX+Ny9bLkNiICnT3em6RDFVMibsQiEn+ucxNnz6Ec/D1THC Wlm+63P18Kq6sTP62Ghy2QpHxZm+E/9rqL67vBhRn6UVpHnhN2ts+hOu2dUmgYoN umeUNX0dUY7SqvL9Es+I8lAMACdJuW7HuEhOFM5KBxWXT99wv3mVb/sI0La1RZyH nmJXieqoEONiJyeGL1V4pWty3bIMf/iJ2PaPW+mgW9mRkVS39Xanlz2T10jqSklp pmn/NB9/wMPgkcirOw1je0GMkXYcvx7S -----END CERTIFICATE-----Generated at Wed Aug 13 07:43:35 2025 by rpki-client