$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: HP7J8YubEtNySz4fySitA+kY+ItofeDoDDZKyfR//Gs= Subject key identifier: C3:67:C3:06:FB:12:EC:9E:1B:C7:2D:7F:C6:3B:EC:B3:91:4B:9A:9C Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 0459 Signing time: Mon 11 Aug 2025 00:23:21 +0000 Manifest this update: Mon 11 Aug 2025 00:23:20 +0000 Manifest next update: Mon 18 Aug 2025 00:23:20 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: xbTyUSER0xcl7nkSMyP/4f6RIs7pErfH+vq8qG96DQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Aug 11 00:23:20 2025 GMT Not After : Aug 18 00:23:20 2025 GMT Subject: CN=689937f8-b163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:c0:6b:12:a2:72:a5:ff:8f:63:a4:de:89: 08:ab:0a:96:47:11:5c:f9:2a:01:50:7a:76:1b:ba: c7:d7:9b:1b:68:9f:0f:70:96:fb:32:10:a1:06:56: 0f:95:42:06:cd:50:16:70:06:26:ce:e6:02:27:77: 74:07:87:1a:b6:ec:79:87:37:9f:48:22:e1:d8:8c: 8e:74:95:91:5d:3d:af:df:20:b4:e9:c2:34:df:11: d9:0b:c7:5f:35:a5:79:3c:f1:69:69:df:9d:0c:82: 25:7a:f4:fc:62:b8:0e:60:44:e9:e1:8f:a2:24:c3: 82:24:37:9b:36:7a:10:4a:37:49:ff:54:4b:50:58: 62:47:f7:d5:37:f5:c5:8f:b3:66:21:45:48:fc:b9: 99:cb:8a:4b:47:e3:63:9e:26:3d:b4:fb:b2:74:e6: f9:fa:5c:6b:47:c4:cf:8c:50:0b:91:49:8b:1b:c1: a2:bf:f9:46:c3:f7:3e:c4:c0:6e:5a:0d:f9:06:5f: eb:68:7f:02:d8:f2:34:d6:b5:04:2d:f6:18:df:f8: 28:63:ee:2c:01:30:1c:f8:8e:46:ea:29:87:c5:cd: 0d:29:a6:e2:aa:ae:7a:0b:da:9b:1f:30:0a:5e:c4: 1e:e6:ca:00:8c:63:3f:81:cd:ca:2f:8a:79:ef:36: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:67:C3:06:FB:12:EC:9E:1B:C7:2D:7F:C6:3B:EC:B3:91:4B:9A:9C X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:49:d0:b2:f5:e7:89:41:a1:2c:0b:19:2f:be:da:4e:d6:cf: 9c:e5:6c:ec:d1:c7:8d:43:be:50:f4:78:e9:8f:b8:03:71:7b: 76:ef:63:53:66:82:a3:15:3e:2c:6d:1e:3a:b6:1d:56:f2:7e: ac:43:6d:d1:bb:dd:60:0e:4c:d5:9a:6c:cd:56:95:7f:1f:71: ae:38:32:a8:e6:d1:6a:a8:f5:b6:41:78:0d:fe:d5:4d:ec:e7: a7:6d:ab:38:ad:0c:39:1c:73:b7:d4:45:a5:3f:a7:e4:a4:d0: e1:40:c9:32:4e:51:4b:21:81:cd:93:27:c4:7d:f4:b9:da:f1: cb:93:79:a9:34:0a:df:e4:b5:62:92:5d:c2:c3:08:48:69:b0: 07:73:cb:f2:4c:30:9a:9e:5b:82:5e:d5:72:b1:65:26:92:c4: 33:f2:c6:00:67:05:e6:e6:1d:b9:1d:4c:7b:f9:41:bf:23:8c: c1:4f:f3:af:70:8b:72:34:d2:94:45:45:97:94:8c:62:5e:68: 03:89:ba:20:05:b4:4b:25:0d:94:52:11:cf:05:31:90:24:48: 49:cc:95:40:cc:e6:d9:8d:b6:bd:fb:e3:4b:43:c7:05:a5:06: 7f:8e:4c:bd:4d:1f:62:05:f2:ce:1d:ba:06:2c:67:3d:8b:70: 10:7a:60:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUwODExMDAyMzIwWhcNMjUwODE4MDAyMzIwWjAYMRYwFAYD VQQDEw02ODk5MzdmOC1iMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBbAaxKicqX/j2Ok3okIqwqWRxFc+SoBUHp2G7rH15sbaJ8PcJb7MhChBlYP lUIGzVAWcAYmzuYCJ3d0B4catux5hzefSCLh2IyOdJWRXT2v3yC06cI03xHZC8df NaV5PPFpad+dDIIlevT8YrgOYETp4Y+iJMOCJDebNnoQSjdJ/1RLUFhiR/fVN/XF j7NmIUVI/LmZy4pLR+NjniY9tPuydOb5+lxrR8TPjFALkUmLG8Giv/lGw/c+xMBu Wg35Bl/raH8C2PI01rUELfYY3/goY+4sATAc+I5G6imHxc0NKabiqq56C9qbHzAK XsQe5soAjGM/gc3KL4p57zaYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNnwwb7 EuyeG8ctf8Y77LORS5qcMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5SdCy9eeJQaEsCxkvvtpO1s+c5Wzs0ceNQ75Q9Hjpj7gDcXt272NT ZoKjFT4sbR46th1W8n6sQ23Ru91gDkzVmmzNVpV/H3GuODKo5tFqqPW2QXgN/tVN 7Oenbas4rQw5HHO31EWlP6fkpNDhQMkyTlFLIYHNkyfEffS52vHLk3mpNArf5LVi kl3CwwhIabAHc8vyTDCanluCXtVysWUmksQz8sYAZwXm5h25HUx7+UG/I4zBT/Ov cItyNNKURUWXlIxiXmgDibogBbRLJQ2UUhHPBTGQJEhJzJVAzObZjba9++NLQ8cF pQZ/jky9TR9iBfLOHboGLGc9i3AQemD5 -----END CERTIFICATE-----Generated at Mon Aug 11 10:32:39 2025 by rpki-client