$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json) Hash identifier: u7zkxoXnrheDjDzF65ahHSX8C/5ZrMUP62yar+0nrUg= Subject key identifier: 33:EA:FA:C4:FB:1D:44:53:79:22:28:35:C5:EA:7C:5C:38:F7:04:6E Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft Manifest number: 031D Signing time: Sat 09 Aug 2025 01:41:57 +0000 Manifest this update: Sat 09 Aug 2025 01:41:57 +0000 Manifest next update: Sat 16 Aug 2025 01:41:57 +0000 Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: ENZ67U0NY5wQI4Pv83X1PiHuVUjFpvWIreB8/Bigx7g=) 2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: Crj6EQEsFsVZ7Rl37tD7+KlB9qlhMrOAHvL0KyIGgkI=) 3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: 16TIMxSDuDuwbvd9GQ+m4o06d2DMg8lDV7WSYdSxPbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Validity Not Before: Aug 9 01:41:57 2025 GMT Not After : Aug 16 01:41:57 2025 GMT Subject: CN=6896a765-8335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:9a:db:6d:74:44:c9:e0:6c:15:18:b3:c7: a2:d7:d9:32:7c:66:e3:cd:96:3a:b7:26:71:dd:2d: 43:77:ed:17:11:83:9e:85:ec:1d:a5:b9:38:9c:65: 14:54:de:10:f6:fa:53:f7:36:f8:48:d9:fd:eb:a7: 3c:95:39:e4:01:6c:94:1c:c1:2e:32:b3:fb:dd:cc: 70:08:24:36:75:42:d4:c5:b1:90:be:9b:63:8e:6e: e9:e2:c1:db:81:e6:fa:d7:ef:17:b1:9e:6d:40:66: df:43:a9:7e:7a:80:fa:24:48:1e:d7:08:c2:80:95: f3:b0:a6:af:54:8a:c1:c9:6c:54:9f:8b:9b:7b:15: 9a:5f:05:7f:c2:43:09:a9:e9:17:b5:43:fb:5c:37: 52:bf:5b:fd:03:0b:0a:d8:03:f2:2e:ce:4e:6c:28: 42:3f:6b:95:80:94:d1:fe:7a:1c:ba:ba:5a:14:3b: bd:80:7e:9e:b5:28:a7:8c:fc:48:ae:79:41:b5:bd: 61:64:cf:ca:42:02:26:04:4a:11:62:a9:96:44:1b: 07:58:f6:ac:0e:1e:91:bb:34:41:d8:b8:18:91:59: df:b9:70:82:14:2d:fb:6e:f8:a8:04:2a:f2:07:7e: e8:ca:ea:0f:35:0a:6c:12:77:ab:d9:13:0a:3e:fb: b4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:FA:C4:FB:1D:44:53:79:22:28:35:C5:EA:7C:5C:38:F7:04:6E X509v3 Authority Key Identifier: keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:df:82:0d:54:93:18:71:24:ff:df:c5:48:1b:90:fe:22:95: ac:68:23:f3:ec:b2:f2:98:d8:41:1f:e9:10:c2:a7:f7:59:35: 13:36:f8:8b:7d:21:f5:b5:f1:d2:d0:06:10:df:b4:db:2c:ac: cd:84:70:42:8e:2c:ae:85:3e:c1:f0:d2:9f:f3:48:b6:93:31: 7d:14:a5:f2:78:e3:e9:a1:41:80:e5:fa:f1:7b:7f:a9:85:d5: d9:45:60:77:f9:9e:86:b0:bc:3f:34:ee:dc:cb:c9:15:42:d6: 81:7c:f5:8e:5f:9f:11:54:7a:e8:b2:85:06:c9:00:f0:af:1d: 31:33:09:25:e8:29:ab:04:7b:05:ef:e0:7d:00:bb:1e:4f:3c: 46:c7:27:1f:20:2a:f9:66:d0:84:4b:c2:77:f2:6b:c4:50:26: 2e:a3:da:9a:86:e2:bd:12:c1:88:30:36:42:ff:55:71:1f:51: b3:51:6b:b1:0d:f0:81:a4:29:fa:38:9f:dc:42:ac:c7:82:1f: 8c:73:0a:2e:9f:bd:30:ca:95:57:aa:84:70:2d:83:9f:6b:94: 57:2d:13:47:fb:42:bd:8c:1c:b8:c4:3e:25:d4:54:46:70:4e: 1c:41:83:d9:d0:ab:91:56:70:95:2e:f7:3a:3c:cd:bd:10:a2: 63:0b:06:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRDIxMTAvBgNVBAUTKDJCMUJCMjRBRENEQjE0RjZFMkM3QkJCMkQ4OEFCQURC MURERDg5OEQwHhcNMjUwODA5MDE0MTU3WhcNMjUwODE2MDE0MTU3WjAYMRYwFAYD VQQDEw02ODk2YTc2NS04MzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuH+a2210RMngbBUYs8ei19kyfGbjzZY6tyZx3S1Dd+0XEYOehewdpbk4nGUU VN4Q9vpT9zb4SNn966c8lTnkAWyUHMEuMrP73cxwCCQ2dULUxbGQvptjjm7p4sHb geb61+8XsZ5tQGbfQ6l+eoD6JEge1wjCgJXzsKavVIrByWxUn4ubexWaXwV/wkMJ qekXtUP7XDdSv1v9AwsK2APyLs5ObChCP2uVgJTR/nocurpaFDu9gH6etSinjPxI rnlBtb1hZM/KQgImBEoRYqmWRBsHWPasDh6RuzRB2LgYkVnfuXCCFC37bvioBCry B37oyuoPNQpsEner2RMKPvu0bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPq+sT7 HURTeSIoNcXqfFw49wRuMB8GA1UdIwQYMBaAFCsbskrc2xT24se7stiKutsd3YmN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBEMi9ENDI4RDBDNkRB REUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQYml4N3V5MklxNjJ4M2Rp WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4dXlTdHpiRlBiaXg3dXkySXE2MngzZGlZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBEMi9ENDI4RDBDNkRBREUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQ Yml4N3V5MklxNjJ4M2RpWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA34INVJMYcST/38VIG5D+IpWsaCPz7LLymNhBH+kQwqf3WTUTNviL fSH1tfHS0AYQ37TbLKzNhHBCjiyuhT7B8NKf80i2kzF9FKXyeOPpoUGA5frxe3+p hdXZRWB3+Z6GsLw/NO7cy8kVQtaBfPWOX58RVHrosoUGyQDwrx0xMwkl6CmrBHsF 7+B9ALseTzxGxycfICr5ZtCES8J38mvEUCYuo9qahuK9EsGIMDZC/1VxH1GzUWux DfCBpCn6OJ/cQqzHgh+Mcwoun70wypVXqoRwLYOfa5RXLRNH+0K9jBy4xD4l1FRG cE4cQYPZ0KuRVnCVLvc6PM29EKJjCwbE -----END CERTIFICATE-----Generated at Sun Aug 10 10:33:30 2025 by rpki-client