$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: BGqVlTgwlt5TV5RzRPgU7ikv8CufHbZoMoiU2Kx2dhU= Subject key identifier: 26:A3:54:D0:7E:E5:11:D1:62:DA:06:30:B5:4B:75:FE:AC:7A:60:03 Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 08E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 08E2 Signing time: Tue 12 Aug 2025 20:41:02 +0000 Manifest this update: Tue 12 Aug 2025 20:41:01 +0000 Manifest next update: Tue 19 Aug 2025 20:41:01 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: TtPEUN4Vl42cx3QWfg7cjMY0GVF96oi+mkcs5n4IUzw=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: ttXfxcVj6+WhtbE63+vyOYQl4F7FNyy4bCidNx2zj30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Aug 12 20:41:01 2025 GMT Not After : Aug 19 20:41:01 2025 GMT Subject: CN=689ba6de-5c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:10:16:a1:7c:dc:fb:48:d6:93:30:9b:d3: d7:6c:49:d8:15:cd:7b:32:b6:99:9d:2c:c9:12:f5: d7:d6:58:4b:29:7b:cc:e7:f0:43:a3:a2:d6:60:2f: 00:ab:a9:9d:ab:7d:78:f8:2e:62:2c:33:70:bc:ee: 6f:70:de:b9:13:34:2f:f4:79:ae:a7:74:6a:9a:18: ef:e4:22:22:54:d0:d5:40:d0:8e:c8:bf:d6:88:b6: 09:68:32:3f:ad:a2:a0:6d:65:38:56:b9:7e:cb:ef: 7d:93:89:ec:5c:08:24:de:4b:5f:c5:b9:e1:39:12: 6e:85:14:a6:4e:f9:0d:47:56:77:a1:a8:6b:73:8d: 5e:27:fe:b3:64:81:e7:5a:2d:0c:4c:04:3f:e5:b3: f8:b3:b9:0a:69:8f:c5:43:b9:45:57:e7:96:ba:e5: d4:dc:1e:32:c4:31:96:2f:ff:af:bb:de:09:3d:3d: 76:6b:da:ac:5d:5b:7d:9a:93:1a:37:f4:26:b6:21: 4b:56:02:a7:98:61:f6:e2:fe:32:21:c9:c2:dc:83: fa:c3:b8:df:42:c8:98:50:65:bc:ff:23:55:e9:48: 05:cc:56:71:d9:64:d7:68:14:27:cf:13:17:fd:71: 03:2d:c0:f2:e3:93:5f:b7:8c:24:9d:26:eb:d0:3c: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A3:54:D0:7E:E5:11:D1:62:DA:06:30:B5:4B:75:FE:AC:7A:60:03 X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0d:a8:32:50:37:b1:87:92:b6:89:44:7b:f7:99:46:62:b9: fc:6f:f8:84:67:68:51:19:2d:9d:47:3c:04:d1:22:ac:fc:5c: 59:a8:73:f6:ca:9e:e2:c5:90:05:f5:85:d8:90:50:53:29:63: c1:6e:ac:e8:a2:05:ca:92:4f:d5:21:87:8c:57:2c:50:72:05: c4:b6:3e:62:63:7b:a8:81:61:67:98:fc:72:d1:b2:7c:35:57: 21:4d:d8:3e:28:37:2c:bd:42:9b:22:ea:0f:c8:a7:c0:b2:90: 87:8e:26:c1:c7:86:c6:3a:c8:9d:d5:e1:2d:be:77:df:ae:df: ef:ba:98:66:1d:23:42:d6:93:77:21:c1:32:70:be:69:41:08: d0:e3:bc:6c:19:35:41:fe:bb:9a:a6:90:b0:69:18:c0:4b:8f: 69:ca:dd:8f:b6:f4:06:92:74:e5:df:08:4b:6c:8c:d9:d1:1d: 26:bd:14:69:15:f4:4c:30:9c:13:10:8e:95:af:fe:99:c6:3c: bd:b5:94:a9:18:3b:94:70:89:ba:04:30:8e:b9:28:c4:f9:7f: 73:f0:e7:3c:17:56:7b:9b:07:2b:50:94:1a:a4:f2:a7:3f:e0: 34:d8:43:b2:01:88:ba:8c:17:3f:07:49:91:be:7e:b6:1e:c8: c2:b5:3c:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjUwODEyMjA0MTAxWhcNMjUwODE5MjA0MTAxWjAYMRYwFAYD VQQDEw02ODliYTZkZS01YzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF0QFqF83PtI1pMwm9PXbEnYFc17MraZnSzJEvXX1lhLKXvM5/BDo6LWYC8A q6mdq314+C5iLDNwvO5vcN65EzQv9Hmup3Rqmhjv5CIiVNDVQNCOyL/WiLYJaDI/ raKgbWU4Vrl+y+99k4nsXAgk3ktfxbnhORJuhRSmTvkNR1Z3oahrc41eJ/6zZIHn Wi0MTAQ/5bP4s7kKaY/FQ7lFV+eWuuXU3B4yxDGWL/+vu94JPT12a9qsXVt9mpMa N/QmtiFLVgKnmGH24v4yIcnC3IP6w7jfQsiYUGW8/yNV6UgFzFZx2WTXaBQnzxMX /XEDLcDy45Nft4wknSbr0DxPfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCajVNB+ 5RHRYtoGMLVLdf6semADMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdDagyUDexh5K2iUR795lGYrn8b/iEZ2hRGS2dRzwE0SKs/FxZqHP2 yp7ixZAF9YXYkFBTKWPBbqzoogXKkk/VIYeMVyxQcgXEtj5iY3uogWFnmPxy0bJ8 NVchTdg+KDcsvUKbIuoPyKfAspCHjibBx4bGOsid1eEtvnffrt/vuphmHSNC1pN3 IcEycL5pQQjQ47xsGTVB/ruappCwaRjAS49pyt2PtvQGknTl3whLbIzZ0R0mvRRp FfRMMJwTEI6Vr/6Zxjy9tZSpGDuUcIm6BDCOuSjE+X9z8Oc8F1Z7mwcrUJQapPKn P+A02EOyAYi6jBc/B0mRvn62HsjCtTx9 -----END CERTIFICATE-----Generated at Wed Aug 13 09:49:33 2025 by rpki-client