$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft File: kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json) Hash identifier: Gr3Cz0z0kIWKcnci/zsuSO5/aOv4GQkfA9JpCQ6sSms= Subject key identifier: 6D:AC:37:83:89:6B:9A:63:C7:2A:89:DE:48:0B:C6:F4:4A:92:25:E6 Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft Manifest number: 03C5 Signing time: Wed 13 Aug 2025 01:11:13 +0000 Manifest this update: Wed 13 Aug 2025 01:11:13 +0000 Manifest next update: Wed 20 Aug 2025 01:11:13 +0000 Files and hashes: 1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: FUqgxnHk/V4BJ+S32ZgsqmitUhNOHb02QGpmEMm3hks=) 2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: ys9QvzSFj3FhbpKZdlZ1B6mYP128OL/SXk3uErxC5zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 01:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Validity Not Before: Aug 13 01:11:13 2025 GMT Not After : Aug 20 01:11:13 2025 GMT Subject: CN=689be631-a979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:41:be:b6:1d:a6:a8:9f:10:b2:a8:7c:bd: 5f:02:5f:55:e0:49:a2:50:0e:71:0c:4d:7e:b3:34: 73:bc:ca:f6:f6:74:94:23:82:29:cd:06:af:99:43: 32:e7:c6:c6:b8:c0:65:0c:7a:a4:bb:90:d5:c1:ce: c9:c5:51:de:fe:2d:00:2f:cd:af:c5:04:8f:74:b2: ee:bc:89:0f:e5:7b:8a:bf:37:25:4d:00:2b:b7:a1: e2:6c:ec:4f:ca:13:b3:95:a1:ad:1c:17:9e:e4:d7: 3e:29:78:79:45:08:03:f5:af:84:ee:e4:2e:a8:b4: 26:01:dc:bd:c2:fc:f1:3e:0d:22:fe:a5:96:50:27: 02:25:1b:1c:e6:4e:8a:31:dc:a9:64:34:5b:79:20: 3d:96:4b:f9:fb:50:21:34:37:7a:ca:c7:31:07:77: 8f:61:cf:ee:93:28:ec:db:29:1d:2f:b2:ae:5b:e1: 50:95:30:59:aa:ad:1d:55:01:b1:47:c5:d8:ca:89: 20:1c:48:6b:0e:fc:85:fb:0c:03:eb:1c:cf:f2:21: 33:af:37:05:62:0c:57:7e:14:9d:e4:5e:f6:81:ae: e4:da:cb:d7:5c:70:78:32:b2:d9:1f:64:52:03:77: 9c:d3:48:84:3c:69:87:4c:a0:e2:c5:4a:8d:57:13: 39:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AC:37:83:89:6B:9A:63:C7:2A:89:DE:48:0B:C6:F4:4A:92:25:E6 X509v3 Authority Key Identifier: keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:bb:c6:79:a5:ef:96:33:31:cd:20:1a:17:ab:07:ab:11:31: 4c:f1:ff:8c:29:57:d3:56:a5:20:14:75:ee:ee:86:20:40:d6: e3:51:f8:be:c2:af:d3:f8:7f:1a:30:1f:33:58:3e:26:05:52: c6:50:e4:8b:00:e5:c6:49:a3:fb:1d:c8:64:52:80:92:4f:d3: 64:e8:c4:fa:b1:e1:38:5e:4a:3c:a0:ed:fd:b0:7e:4c:67:41: be:8a:db:fa:98:00:c6:f5:f6:0b:eb:95:1b:5d:ea:18:9b:53: 9b:a5:db:10:78:03:d7:6e:7d:81:c7:52:a8:d4:7c:8d:09:55: 12:0f:3e:e8:0f:af:b5:24:0e:37:cb:bd:e5:68:9d:71:5e:57: 62:6c:81:71:3a:e9:be:61:d8:82:8c:30:fb:f6:0c:d0:17:00: d5:da:ce:b9:28:33:91:d5:30:8a:5c:59:1f:90:3a:4c:df:be: a0:51:6d:46:68:b5:94:5b:36:48:5a:35:21:73:3d:d9:df:e0: b8:46:d6:dc:f1:4e:8d:09:51:45:2b:d7:5a:ea:c7:64:ce:de: 1b:cd:27:fe:5b:9c:06:7a:87:85:fd:3b:0d:61:c5:26:2a:d7: 23:e0:1e:e6:f8:cf:86:4b:57:f2:95:a9:41:cf:ad:76:ad:fb: 2a:84:85:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBNjQxMTAvBgNVBAUTKDkwN0JCMjYyQjU3MTYyM0UzNEIyRTIwQzYwQTcxOEMx NzM5Q0MzQkQwHhcNMjUwODEzMDExMTEzWhcNMjUwODIwMDExMTEzWjAYMRYwFAYD VQQDEw02ODliZTYzMS1hOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOVBvrYdpqifELKofL1fAl9V4EmiUA5xDE1+szRzvMr29nSUI4IpzQavmUMy 58bGuMBlDHqku5DVwc7JxVHe/i0AL82vxQSPdLLuvIkP5XuKvzclTQArt6HibOxP yhOzlaGtHBee5Nc+KXh5RQgD9a+E7uQuqLQmAdy9wvzxPg0i/qWWUCcCJRsc5k6K MdypZDRbeSA9lkv5+1AhNDd6yscxB3ePYc/ukyjs2ykdL7KuW+FQlTBZqq0dVQGx R8XYyokgHEhrDvyF+wwD6xzP8iEzrzcFYgxXfhSd5F72ga7k2svXXHB4MrLZH2RS A3ec00iEPGmHTKDixUqNVxM5RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2sN4OJ a5pjxyqJ3kgLxvRKkiXmMB8GA1UdIwQYMBaAFJB7smK1cWI+NLLiDGCnGMFznMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0E2NC8zNThDNjdCRTlB REExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlqNDBzdUlNWUtjWXdYT2N3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIdXlZclZ4WWo0MHN1SU1ZS2NZd1hPY3c3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0E2NC8zNThDNjdCRTlBREExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlq NDBzdUlNWUtjWXdYT2N3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUu8Z5pe+WMzHNIBoXqwerETFM8f+MKVfTVqUgFHXu7oYgQNbjUfi+ wq/T+H8aMB8zWD4mBVLGUOSLAOXGSaP7HchkUoCST9Nk6MT6seE4Xko8oO39sH5M Z0G+itv6mADG9fYL65UbXeoYm1ObpdsQeAPXbn2Bx1Ko1HyNCVUSDz7oD6+1JA43 y73laJ1xXldibIFxOum+YdiCjDD79gzQFwDV2s65KDOR1TCKXFkfkDpM376gUW1G aLWUWzZIWjUhcz3Z3+C4Rtbc8U6NCVFFK9da6sdkzt4bzSf+W5wGeoeF/TsNYcUm Ktcj4B7m+M+GS1fylalBz612rfsqhIX1 -----END CERTIFICATE-----Generated at Wed Aug 13 05:36:11 2025 by rpki-client