$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: UtS7vQnC8cnWpm06nSQBNClmAIc49G0s34K6KMlFNtg= Subject key identifier: CE:2C:4B:07:E2:8B:10:CD:FE:9C:54:4B:D8:64:4A:1B:48:3F:7B:9D Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 39 Signing time: Sat 09 Aug 2025 08:05:45 +0000 Manifest this update: Sat 09 Aug 2025 08:05:44 +0000 Manifest next update: Sat 16 Aug 2025 08:05:44 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: gEZPhn3ihTG5vao0wTPCzbcZKWZIdMFaliR8Hsk25wQ=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Aug 9 08:05:44 2025 GMT Not After : Aug 16 08:05:44 2025 GMT Subject: CN=68970159-4306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:95:c5:74:5c:89:ee:e5:04:35:9f:d3:d8: 59:22:26:ef:13:80:a8:7e:4a:7e:f9:28:29:ff:25: f8:98:a7:4d:0c:98:47:13:2e:11:f0:00:e3:55:ec: 53:97:40:2f:9f:52:80:2c:7b:a5:5c:80:5c:d5:2f: 08:c5:30:4f:b0:f5:be:2a:17:ae:c3:98:52:9f:82: ae:61:f9:89:a5:62:0f:ec:db:92:9b:79:68:8a:2a: ce:47:91:8f:58:28:9e:b0:49:a3:92:b1:4b:8f:63: 7d:be:31:c4:28:0d:a3:99:40:ec:f5:21:c7:91:11: 47:25:35:32:7c:ec:b9:98:cb:f3:96:ce:10:e7:ce: af:18:4b:3e:ab:72:c8:d7:87:53:1c:ab:97:3b:87: 82:02:36:5c:6c:c9:19:4c:7c:a4:bc:68:36:2b:e4: e6:b3:37:9a:aa:96:58:54:7e:a7:3c:d6:9c:9c:a6: b0:6f:79:91:7a:ed:91:9d:6f:4c:07:df:04:93:fb: a1:a9:67:04:76:57:20:b9:5b:a4:71:4f:c9:0f:c2: 37:56:09:4e:2f:3e:9a:3c:d2:6b:aa:55:e7:82:d3: d1:03:e9:05:95:9b:0b:fd:4e:6b:b0:5b:b3:cb:c5: cf:60:a9:6d:b2:e9:75:1b:72:38:d1:98:6b:05:38: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2C:4B:07:E2:8B:10:CD:FE:9C:54:4B:D8:64:4A:1B:48:3F:7B:9D X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a5:8d:10:e7:72:73:64:8f:c5:9e:fb:42:e3:9c:be:d1:c7: 31:76:6a:05:33:da:04:0e:a4:6d:b8:b8:81:c6:8e:b2:e4:22: 59:08:a5:3c:3b:db:19:a4:68:2c:15:87:c0:5a:ec:60:1f:82: 53:32:65:32:82:9a:5a:5f:7b:52:54:c4:02:55:14:52:81:7b: 1f:42:53:f3:f5:f7:ed:f3:21:38:ef:52:ba:d7:66:1a:31:ee: e2:8b:9b:66:34:ae:b8:4a:1d:73:d1:e0:ad:49:68:e3:ce:32: d1:88:0a:0d:dc:5e:7e:22:37:7f:38:15:fa:6c:83:84:66:78: 7f:1b:28:7f:0f:1a:13:7a:ac:c5:28:56:08:68:71:bd:f4:f3: 3d:ca:be:ee:fb:da:d8:d2:cc:87:3e:cd:7c:5d:45:42:4a:34: 22:09:18:b0:1c:80:ad:fa:df:9d:d8:78:cb:54:69:a3:01:ef: f4:15:9c:31:a6:2b:c6:1a:c5:00:61:c8:d6:cf:b0:4e:37:df: 49:2e:81:01:cd:ce:5d:04:2f:a8:a7:90:52:1c:a2:fd:da:db: fa:ec:31:56:47:92:60:da:d6:7c:69:38:02:e1:41:bc:e8:b6: b0:71:60:a5:2e:7a:28:ff:33:1b:3b:d1:4c:50:68:7e:43:2e: 85:3f:f2:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTA4MDkwODA1NDRaFw0yNTA4MTYwODA1NDRaMBgxFjAUBgNV BAMTDTY4OTcwMTU5LTQzMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq2ZXFdFyJ7uUENZ/T2FkiJu8TgKh+Sn75KCn/JfiYp00MmEcTLhHwAONV7FOX QC+fUoAse6VcgFzVLwjFME+w9b4qF67DmFKfgq5h+YmlYg/s25KbeWiKKs5HkY9Y KJ6wSaOSsUuPY32+McQoDaOZQOz1IceREUclNTJ87LmYy/OWzhDnzq8YSz6rcsjX h1Mcq5c7h4ICNlxsyRlMfKS8aDYr5OazN5qqllhUfqc81pycprBveZF67ZGdb0wH 3wST+6GpZwR2VyC5W6RxT8kPwjdWCU4vPpo80muqVeeC09ED6QWVmwv9TmuwW7PL xc9gqW2y6XUbcjjRmGsFOFifAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzixLB+KL EM3+nFRL2GRKG0g/e50wHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACeljRDncnNkj8We+0LjnL7RxzF2agUz2gQOpG24uIHGjrLkIlkIpTw7 2xmkaCwVh8Ba7GAfglMyZTKCmlpfe1JUxAJVFFKBex9CU/P19+3zITjvUrrXZhox 7uKLm2Y0rrhKHXPR4K1JaOPOMtGICg3cXn4iN384Ffpsg4RmeH8bKH8PGhN6rMUo Vghocb308z3Kvu772tjSzIc+zXxdRUJKNCIJGLAcgK36353YeMtUaaMB7/QVnDGm K8YaxQBhyNbPsE4330kugQHNzl0EL6inkFIcov3a2/rsMVZHkmDa1nxpOALhQbzo trBxYKUueij/Mxs70UxQaH5DLoU/8mo= -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:59 2025 by rpki-client