$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft File: kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft (raw, json) Hash identifier: uvijIyMsQxKDxVU68YPMvIncl55yWW0RJ5iiYA1VUM0= Subject key identifier: E6:7D:B4:C8:F0:B2:4E:4C:9E:9F:91:0C:25:2D:41:D7:07:20:7E:30 Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Certificate serial: 0C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft Manifest number: 0C12 Signing time: Mon 04 Aug 2025 18:58:06 +0000 Manifest this update: Mon 04 Aug 2025 18:58:05 +0000 Manifest next update: Mon 11 Aug 2025 18:58:05 +0000 Files and hashes: 1: kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl (hash: FQWRibGr3UbkpXTdOEGMkRgbuQYxUN0K/8YWVz0eGG0=) 2: EA531ACE61C211EF89F25E2CC4F9AE02.roa (hash: wvS2IKCsAphgy9VmVy8jmzdrhXrxZNTENgiqGBEyqqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6462, serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Validity Not Before: Aug 4 18:58:05 2025 GMT Not After : Aug 11 18:58:05 2025 GMT Subject: CN=689102bd-bb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:40:c9:73:f8:62:14:8b:71:98:fa:5e:bf: 45:07:97:39:bf:3f:e0:ec:5d:e7:e0:5d:ce:95:f1: b5:a4:09:90:81:1f:3f:e4:9d:ca:87:6a:93:26:be: bd:f1:87:fc:e2:95:78:c1:9c:7f:6b:51:50:cb:ab: c7:15:4f:da:ab:5a:8b:83:ed:34:d4:e3:7f:3f:63: be:e1:cd:de:e7:1f:ff:29:cc:db:ad:eb:76:e5:fe: 3d:da:09:ac:05:d8:7a:a7:64:60:e8:68:b8:37:ae: 8b:30:2a:8c:9d:d4:ca:4b:a7:7c:f3:af:f7:b5:85: 4b:23:b9:e2:7f:9c:ee:ca:97:4e:36:8d:0a:35:8e: aa:55:ac:30:6e:6e:2d:d4:8c:07:8a:6c:dd:7f:bf: 90:3f:2c:47:de:04:13:e4:29:0c:12:50:e0:9e:32: 3f:5e:54:6d:b3:cb:aa:32:13:d8:03:80:4a:23:14: 06:77:91:ac:a7:d6:7d:be:29:4c:26:3b:32:26:a6: d4:c7:5a:8c:a9:81:09:1d:dd:ad:03:c1:57:f0:8d: c9:94:c6:07:1e:9f:43:27:22:5d:5f:16:7e:ae:81: 20:45:b6:5c:b2:2b:2d:3e:53:f0:b1:60:02:9c:ff: 87:d4:b4:8d:ab:4d:24:c5:1a:03:3b:28:7e:b6:72: f3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7D:B4:C8:F0:B2:4E:4C:9E:9F:91:0C:25:2D:41:D7:07:20:7E:30 X509v3 Authority Key Identifier: keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f5:d8:3c:63:0c:18:78:f0:ef:f9:d0:9c:5c:d8:a6:1f:18: 15:13:ec:c0:17:f6:d5:31:4f:e6:af:93:9e:31:b1:e2:5c:94: b2:c7:54:7e:45:7a:05:a3:0e:bf:2e:1f:04:fd:e4:bd:d2:99: 5b:f8:29:ec:98:a5:52:b5:90:94:09:35:0f:fd:4e:76:00:30: 52:71:71:b3:24:28:10:4f:20:b6:3b:a5:4d:c4:f1:ea:d9:fb: bd:ce:1d:78:19:d9:f8:e6:0d:1a:05:16:6e:94:5a:ed:21:06: 0f:96:e4:7d:57:51:1e:d1:0b:a7:71:be:9a:ca:48:cf:1c:5d: 28:38:27:27:40:ef:29:25:6a:9d:42:06:00:98:45:ad:49:99: 10:5b:cb:b1:ae:cf:4d:52:a5:72:74:da:37:4b:5c:27:c4:70: 94:4a:a5:51:66:ab:eb:1b:41:23:de:7f:5b:a2:35:80:ab:f4: 17:83:c1:63:47:8f:ca:b6:fd:d6:b1:b1:37:27:82:6d:bc:96: 19:24:cf:be:30:f9:50:f7:66:02:39:d2:ad:94:5f:ac:d9:a8: 12:d2:3a:7c:c7:c6:c0:ab:22:53:82:ce:53:ec:62:52:73:02: b1:6b:51:78:9a:f9:ea:d6:45:82:a1:82:b5:b5:2f:56:f7:21: 40:dc:23:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE MjBDMzgwMzkwHhcNMjUwODA0MTg1ODA1WhcNMjUwODExMTg1ODA1WjAYMRYwFAYD VQQDEw02ODkxMDJiZC1iYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyhAyXP4YhSLcZj6Xr9FB5c5vz/g7F3n4F3OlfG1pAmQgR8/5J3Kh2qTJr69 8Yf84pV4wZx/a1FQy6vHFU/aq1qLg+001ON/P2O+4c3e5x//Kczbret25f492gms Bdh6p2Rg6Gi4N66LMCqMndTKS6d886/3tYVLI7nif5zuypdONo0KNY6qVawwbm4t 1IwHimzdf7+QPyxH3gQT5CkMElDgnjI/XlRts8uqMhPYA4BKIxQGd5Gsp9Z9vilM JjsyJqbUx1qMqYEJHd2tA8FX8I3JlMYHHp9DJyJdXxZ+roEgRbZcsistPlPwsWAC nP+H1LSNq00kxRoDOyh+tnLz/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZ9tMjw sk5Mnp+RDCUtQdcHIH4wMB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4 NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjQ2Mi9EQUY0MzVFMDE4NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZj UXhudS1mMmpLSHJTRERnRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg9dg8YwwYePDv+dCcXNimHxgVE+zAF/bVMU/mr5OeMbHiXJSyx1R+ RXoFow6/Lh8E/eS90plb+CnsmKVStZCUCTUP/U52ADBScXGzJCgQTyC2O6VNxPHq 2fu9zh14Gdn45g0aBRZulFrtIQYPluR9V1Ee0Quncb6aykjPHF0oOCcnQO8pJWqd QgYAmEWtSZkQW8uxrs9NUqVydNo3S1wnxHCUSqVRZqvrG0Ej3n9bojWAq/QXg8Fj R4/Ktv3WsbE3J4JtvJYZJM++MPlQ92YCOdKtlF+s2agS0jp8x8bAqyJTgs5T7GJS cwKxa1F4mvnq1kWCoYK1tS9W9yFA3CMT -----END CERTIFICATE-----Generated at Wed Aug 6 10:56:52 2025 by rpki-client