$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json) Hash identifier: WrS70nPmrkdWWYX/9V0FqdTNTkJg0k4ni+V/N97GGxg= Subject key identifier: 87:93:7A:1B:77:2C:6C:31:5F:47:A0:02:72:59:2B:61:0E:D6:0E:5B Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft Manifest number: 34 Signing time: Sat 09 Aug 2025 08:07:00 +0000 Manifest this update: Sat 09 Aug 2025 08:07:00 +0000 Manifest next update: Sat 16 Aug 2025 08:06:59 +0000 Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: +Ad1g7ZaMrC8bs4VwlV+nTgOB0H5um1diWhoAht6wEU=) 2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: SpbPHZ/krAG/WpD65rr9pmBtHMuwVfhmB9bAKCP8oRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Validity Not Before: Aug 9 08:07:00 2025 GMT Not After : Aug 16 08:06:59 2025 GMT Subject: CN=689701a4-e703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:52:ef:e3:84:78:51:1e:dc:bd:81:a2:95:69: 13:71:7a:24:4d:83:2a:ee:2d:a9:27:56:dc:4e:76: 5b:96:09:30:db:7c:18:36:9e:7e:38:b2:8a:57:93: 9e:a1:17:7d:e5:a6:9c:16:bd:ed:a0:72:a0:35:d9: c2:bf:cc:3e:a2:64:37:cc:3a:a0:eb:1a:72:6a:91: 61:05:98:dd:9e:e9:51:d3:32:0a:fa:ed:da:70:d7: 19:34:50:6e:07:bd:33:76:2b:63:8b:75:63:1a:1b: 11:7e:01:92:ae:3a:ff:8f:6d:2e:93:31:24:b0:50: 55:c6:b3:c6:cd:4f:a7:d7:eb:05:ed:a4:66:41:f7: d4:f5:bf:41:02:2a:5f:e2:11:e6:c1:ab:b3:99:60: 67:d9:cb:bb:c6:73:7f:c0:61:c8:0c:2b:b6:7f:82: 51:24:da:43:57:17:03:24:f2:53:39:9e:9a:96:e0: 39:4b:d0:b8:d5:c1:3a:b7:28:c5:83:ca:84:ef:55: 97:9a:05:e7:2e:9f:16:d2:cb:c0:c7:ab:99:af:23: e8:f5:fc:81:c9:78:37:2e:6e:f5:6c:43:cd:29:e3: 3c:3a:15:da:ab:a3:e5:26:ef:76:dd:68:e2:51:d6: a8:cc:30:00:70:28:25:d8:cc:db:77:e3:cb:35:2b: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:93:7A:1B:77:2C:6C:31:5F:47:A0:02:72:59:2B:61:0E:D6:0E:5B X509v3 Authority Key Identifier: keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:fd:9a:62:13:6e:b2:90:7b:96:70:12:8b:2d:e3:20:54:5c: 4b:b3:f1:60:74:02:c6:66:df:ee:c5:19:fe:27:42:3e:69:a6: 5a:ab:ba:b5:ce:10:40:54:5e:fe:b7:8e:aa:2d:c3:4e:5d:f9: ca:1c:98:da:f5:7a:c9:f5:c6:ae:f7:03:da:9c:59:39:c2:c5: 15:aa:e0:a4:e3:35:b0:84:09:19:6a:3c:fb:43:f8:ef:79:ab: af:5b:7b:19:95:9a:8b:8c:97:0e:16:96:ce:32:5b:93:c9:74: 36:c9:7c:e5:16:b5:2e:8a:ad:07:db:c9:49:4d:f9:6b:ff:54: f7:14:c9:3c:6a:54:e9:1e:55:28:a0:51:4b:53:b5:64:80:21: 92:7a:e7:31:fa:61:7a:d0:88:d5:75:f0:6b:ec:59:4c:f9:72: 79:a1:79:c5:ed:b3:6c:87:65:a3:23:a0:1d:ae:03:1e:39:89: 6b:ac:7d:7f:cd:28:f9:21:5c:da:11:2d:57:dd:0e:1c:45:ac: c5:fc:a7:a4:32:b2:ce:3e:c2:ff:ed:5a:00:ac:ac:a1:c8:29: 3a:7d:67:ba:ac:22:79:f9:0d:16:87:fd:e0:a9:06:ff:aa:29: 8b:eb:f8:7d:5a:15:18:0c:6a:c9:89:49:ee:64:71:f0:56:bd: 86:10:66:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoMkEwMEZENUQ1RUFFRjgxRjMyQjAwQjJFNUM4MkM1RUNE QUMxMjY5MzAeFw0yNTA4MDkwODA3MDBaFw0yNTA4MTYwODA2NTlaMBgxFjAUBgNV BAMTDTY4OTcwMWE0LWU3MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUUu/jhHhRHty9gaKVaRNxeiRNgyruLaknVtxOdluWCTDbfBg2nn44sopXk56h F33lppwWve2gcqA12cK/zD6iZDfMOqDrGnJqkWEFmN2e6VHTMgr67dpw1xk0UG4H vTN2K2OLdWMaGxF+AZKuOv+PbS6TMSSwUFXGs8bNT6fX6wXtpGZB99T1v0ECKl/i EebBq7OZYGfZy7vGc3/AYcgMK7Z/glEk2kNXFwMk8lM5npqW4DlL0LjVwTq3KMWD yoTvVZeaBecunxbSy8DHq5mvI+j1/IHJeDcubvVsQ80p4zw6Fdqro+Um73bdaOJR 1qjMMABwKCXYzNt348s1KzM1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh5N6G3cs bDFfR6ACclkrYQ7WDlswHwYDVR0jBBgwFoAUKgD9XV6u+B8ysAsuXILF7NrBJpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0JCNDJDMURFMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2dEOVhWNnUtQjh5c0FzdVhJTEY3TnJCSnBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0JCNDJDMURFMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4 eXNBc3VYSUxGN05yQkpwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANH9mmITbrKQe5ZwEost4yBUXEuz8WB0AsZm3+7FGf4nQj5pplqrurXO EEBUXv63jqotw05d+cocmNr1esn1xq73A9qcWTnCxRWq4KTjNbCECRlqPPtD+O95 q69bexmVmouMlw4Wls4yW5PJdDbJfOUWtS6KrQfbyUlN+Wv/VPcUyTxqVOkeVSig UUtTtWSAIZJ65zH6YXrQiNV18GvsWUz5cnmhecXts2yHZaMjoB2uAx45iWusfX/N KPkhXNoRLVfdDhxFrMX8p6Qyss4+wv/tWgCsrKHIKTp9Z7qsInn5DRaH/eCpBv+q KYvr+H1aFRgMasmJSe5kcfBWvYYQZlQ= -----END CERTIFICATE-----Generated at Mon Aug 11 04:19:27 2025 by rpki-client