$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft File: KaAJAT90Md42nADKtUcWypNFJtM.mft (raw, json) Hash identifier: ZvhIebfyFgFUUYaxe27x+3jdFjGWKZvtB5J9zBnHZCg= Subject key identifier: 01:13:4B:58:B5:62:3A:79:9E:C6:4C:1C:5A:7D:A9:56:31:74:ED:25 Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft Manifest number: 9D Signing time: Sat 09 Aug 2025 06:44:41 +0000 Manifest this update: Sat 09 Aug 2025 06:44:41 +0000 Manifest next update: Sat 16 Aug 2025 06:44:41 +0000 Files and hashes: 1: KaAJAT90Md42nADKtUcWypNFJtM.crl (hash: LfHHJVHMEjv8d/qcuzBpc6n/ljrOeO2ZwofNJ+cAdNc=) 2: C731AFD03B9A11F0B7924C1FC4F9AE02.roa (hash: 9OijFxAeR1Xs5oJ+COotVbhAxkaxtoAB6g/k9YHqdAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91651CF, serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Validity Not Before: Aug 9 06:44:41 2025 GMT Not After : Aug 16 06:44:41 2025 GMT Subject: CN=6896ee59-bb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:87:b6:b0:2e:3a:83:7d:a5:53:3e:3a:ec: 7d:58:4a:3c:d2:40:fe:6f:40:8f:fa:74:ee:7a:85: a5:23:c1:d9:f1:27:52:37:be:e4:6a:39:0a:fe:96: cc:30:28:79:40:c5:5f:f3:a8:6f:1e:1f:07:86:12: ea:1f:1d:55:ef:ef:f1:ff:5f:53:3f:0e:aa:aa:fc: 77:91:bd:fb:2c:ec:1f:db:f0:1b:26:0c:09:db:89: 6a:f7:5c:60:28:ae:3b:07:41:e1:ab:2a:c4:ce:a2: 6f:01:37:d5:66:40:aa:85:58:f8:28:b5:a4:10:85: 93:22:ef:26:48:31:ae:03:d0:90:00:ac:d2:80:ad: c7:18:da:f7:ea:f3:cd:ec:a8:98:e0:b7:0e:a2:25: f0:a4:c3:62:b1:64:f2:06:6c:cc:db:27:7a:47:11: 58:77:8b:e4:2d:b5:70:68:76:7f:37:b6:9d:dc:86: f9:f3:40:e5:87:08:06:7a:55:10:bd:ec:de:3a:af: 84:63:b7:9f:d5:e7:25:88:83:33:d3:0d:af:73:3c: 69:14:05:5e:bd:d7:ff:18:42:df:cd:cd:43:4f:76: 0a:4c:ef:52:82:c0:4d:19:8f:07:b3:e0:6e:6e:1f: 4c:47:33:91:31:3a:5c:fa:5e:6b:1f:ab:19:29:1e: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:13:4B:58:B5:62:3A:79:9E:C6:4C:1C:5A:7D:A9:56:31:74:ED:25 X509v3 Authority Key Identifier: keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:97:a4:36:b8:28:bc:18:17:88:83:a6:17:c6:5c:77:45:10: 27:be:25:0d:7a:d9:b9:5e:33:17:47:f6:de:c6:bd:ee:8f:2a: a5:51:bc:79:e2:92:33:87:cc:f8:c2:8f:0d:b3:e1:69:ab:e1: 99:0d:f6:c5:f3:77:f0:51:94:c4:02:b6:f0:66:09:79:9f:b5: 59:c6:8d:1f:88:01:ce:a1:29:cb:25:d6:de:30:85:77:3c:8a: fd:57:b3:99:ae:fb:3d:0a:99:13:1c:75:a6:c2:00:48:14:da: 32:aa:28:65:b3:4a:bc:c9:a7:05:48:b4:dc:0e:d5:5a:1f:7b: 4c:3b:f3:20:1d:b5:db:6d:e4:6a:26:0b:db:a8:b2:32:bc:c0: c3:f9:ec:16:0f:08:4b:55:43:64:7f:c2:1f:9a:ce:41:17:86: 1d:2a:c3:c9:13:da:bf:5c:15:d7:76:e4:cd:fe:a1:c1:9c:ec: 7e:92:86:c7:27:24:ed:9e:2d:a4:76:b6:25:98:6c:3c:35:0f: 6d:68:33:fa:d9:2c:cb:e5:88:10:1c:c8:1e:07:0e:5a:16:24: d1:18:19:34:bc:bb:df:e6:66:87:2b:b3:be:13:90:cc:50:1f: 8d:e8:de:57:c8:e1:28:9f:c2:94:57:5e:4b:e7:8a:fa:d8:4f: 50:d2:5c:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUxQ0YxMTAvBgNVBAUTKDI5QTAwOTAxM0Y3NDMxREUzNjlDMDBDQUI1NDcxNkNB OTM0NTI2RDMwHhcNMjUwODA5MDY0NDQxWhcNMjUwODE2MDY0NDQxWjAYMRYwFAYD VQQDEw02ODk2ZWU1OS1iYjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxymHtrAuOoN9pVM+Oux9WEo80kD+b0CP+nTueoWlI8HZ8SdSN77kajkK/pbM MCh5QMVf86hvHh8HhhLqHx1V7+/x/19TPw6qqvx3kb37LOwf2/AbJgwJ24lq91xg KK47B0HhqyrEzqJvATfVZkCqhVj4KLWkEIWTIu8mSDGuA9CQAKzSgK3HGNr36vPN 7KiY4LcOoiXwpMNisWTyBmzM2yd6RxFYd4vkLbVwaHZ/N7ad3Ib580DlhwgGelUQ vezeOq+EY7ef1ecliIMz0w2vczxpFAVevdf/GELfzc1DT3YKTO9SgsBNGY8Hs+Bu bh9MRzORMTpc+l5rH6sZKR5g+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAETS1i1 Yjp5nsZMHFp9qVYxdO0lMB8GA1UdIwQYMBaAFCmgCQE/dDHeNpwAyrVHFsqTRSbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTFDRi8zMDQzNjM1Qzg2 RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9LYUFKQVQ5ME1kNDJuQURLdFVjV3lwTkZK dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0thQUpBVDkwTWQ0Mm5BREt0VWNXeXBORkp0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTFDRi8zMDQzNjM1Qzg2RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9LYUFKQVQ5ME1k NDJuQURLdFVjV3lwTkZKdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnl6Q2uCi8GBeIg6YXxlx3RRAnviUNetm5XjMXR/bexr3ujyqlUbx5 4pIzh8z4wo8Ns+Fpq+GZDfbF83fwUZTEArbwZgl5n7VZxo0fiAHOoSnLJdbeMIV3 PIr9V7OZrvs9CpkTHHWmwgBIFNoyqihls0q8yacFSLTcDtVaH3tMO/MgHbXbbeRq JgvbqLIyvMDD+ewWDwhLVUNkf8Ifms5BF4YdKsPJE9q/XBXXduTN/qHBnOx+kobH JyTtni2kdrYlmGw8NQ9taDP62SzL5YgQHMgeBw5aFiTRGBk0vLvf5maHK7O+E5DM UB+N6N5XyOEon8KUV15L54r62E9Q0lwr -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:33 2025 by rpki-client