$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json) Hash identifier: GjY+I2+8/GlCV+XA8AZXmVH3+JTSPOQ7VQSTOcPl1m0= Subject key identifier: 0B:B7:0C:7F:8B:88:B3:C4:52:CA:84:01:B5:98:62:96:5B:CD:3B:4F Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft Manifest number: 010D Signing time: Tue 05 Aug 2025 05:41:49 +0000 Manifest this update: Tue 05 Aug 2025 05:41:49 +0000 Manifest next update: Tue 12 Aug 2025 05:41:49 +0000 Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: LnD7t9aQrHVtWwL9/yD87VBF5kfUzRBWls2E2Pluiwk=) 2: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: 5QVyPmB1PRFpCtk6BRZ20HLOXQ8hVyEmcdVKPIlpB7E=) 3: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: RlIbmp0Lo/M48Q8XdgnjXEwJZ7614fl+AY4B8ug41tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Validity Not Before: Aug 5 05:41:49 2025 GMT Not After : Aug 12 05:41:49 2025 GMT Subject: CN=6891999d-ec8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:9c:83:d0:8b:66:13:8f:c3:22:9f:71:c6: e3:fe:ac:73:61:8e:ff:7a:72:cd:2a:3d:ff:e3:a0: 2a:5e:22:b9:fb:ac:e8:8f:4b:57:44:29:03:20:c1: 8a:59:94:77:df:2d:fe:6c:6e:86:55:eb:e9:11:16: 9a:84:5a:65:02:ed:3f:70:10:48:14:b7:da:08:de: a2:98:a4:e0:6e:05:17:2d:d0:aa:65:41:bc:98:46: 42:82:7b:65:cc:f0:6b:eb:37:8e:e0:be:15:a6:ba: 4d:01:3f:0c:0f:23:a5:d8:1d:2d:c2:01:3e:2e:bc: f8:85:75:49:ae:84:a3:f6:96:2b:c0:16:0a:0d:4d: a0:47:1a:2c:78:e5:5e:44:c9:97:32:44:58:cd:39: 79:1c:4d:8f:43:e8:b4:f2:0e:b4:31:1b:64:bf:9b: b5:8f:d5:f8:29:3d:83:39:c7:b3:c2:90:0d:c4:a2: df:c4:48:7d:8c:58:13:c3:3a:4f:13:9b:e3:1c:bf: 0f:97:bc:9c:87:46:ed:dd:28:29:e7:45:66:54:2a: 95:5a:7f:9d:88:7c:06:85:f5:af:8b:1f:48:81:fc: 06:6b:fe:24:9d:31:69:5f:5f:26:82:2e:bb:5d:6d: 12:4c:4f:6c:21:38:61:2f:8d:ae:03:49:73:99:27: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B7:0C:7F:8B:88:B3:C4:52:CA:84:01:B5:98:62:96:5B:CD:3B:4F X509v3 Authority Key Identifier: keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7d:65:e1:86:07:87:59:8d:bd:aa:38:27:94:c4:80:17:29: bc:53:76:78:e0:5e:53:b9:70:50:a0:fc:a5:0a:4e:87:d4:a9: bc:2c:96:21:00:c5:9e:62:f6:e8:62:59:e0:eb:2d:a8:c4:a7: a8:b1:6f:eb:7d:74:33:af:c3:ad:b0:df:20:0e:a3:99:7f:20: 59:3b:af:10:51:b6:f0:12:c8:a6:d2:df:20:50:e5:2c:f6:34: 73:55:f2:45:aa:a9:78:af:5f:34:d3:b5:7b:a2:d7:57:f5:92: e6:0a:28:75:bd:b9:e7:bd:f7:bf:8c:5b:17:31:53:75:ed:66: 5f:5f:e1:59:c1:c2:f3:8e:0a:06:6a:4f:40:db:d1:77:d6:b5: 1c:95:ca:33:b6:8e:82:99:45:0d:3d:4a:e0:fe:f1:5d:09:88: 5f:33:7c:15:88:76:ee:d0:fb:2d:26:e1:b4:d0:5c:35:b0:dc: 37:4e:26:e9:03:95:a2:86:4b:81:32:08:ed:d1:d8:db:98:e9: 11:ba:c1:a6:81:87:e5:42:d0:52:69:ad:5e:04:3b:89:d3:55: d4:71:8f:b4:bb:56:6e:dc:b7:bd:59:f1:28:17:c1:46:ab:9f: 8e:bd:f8:6b:f7:90:c7:04:0a:1b:22:03:36:32:9f:05:00:8c: 37:47:55:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy MTFEQkUwODMwHhcNMjUwODA1MDU0MTQ5WhcNMjUwODEyMDU0MTQ5WjAYMRYwFAYD VQQDEw02ODkxOTk5ZC1lYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfKcg9CLZhOPwyKfccbj/qxzYY7/enLNKj3/46AqXiK5+6zoj0tXRCkDIMGK WZR33y3+bG6GVevpERaahFplAu0/cBBIFLfaCN6imKTgbgUXLdCqZUG8mEZCgntl zPBr6zeO4L4VprpNAT8MDyOl2B0twgE+Lrz4hXVJroSj9pYrwBYKDU2gRxoseOVe RMmXMkRYzTl5HE2PQ+i08g60MRtkv5u1j9X4KT2DOcezwpANxKLfxEh9jFgTwzpP E5vjHL8Pl7ych0bt3Sgp50VmVCqVWn+diHwGhfWvix9IgfwGa/4knTFpX18mgi67 XW0STE9sIThhL42uA0lzmSee+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu3DH+L iLPEUsqEAbWYYpZbzTtPMB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5 QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0 SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODM0Ny9DM0U3MjE5MEY5QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BL TTVMbDgzMmR4MnNoSGI0SU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjfWXhhgeHWY29qjgnlMSAFym8U3Z44F5TuXBQoPylCk6H1Km8LJYh AMWeYvboYlng6y2oxKeosW/rfXQzr8OtsN8gDqOZfyBZO68QUbbwEsim0t8gUOUs 9jRzVfJFqql4r18007V7otdX9ZLmCih1vbnnvfe/jFsXMVN17WZfX+FZwcLzjgoG ak9A29F31rUclcozto6CmUUNPUrg/vFdCYhfM3wViHbu0PstJuG00Fw1sNw3Tibp A5WihkuBMgjt0djbmOkRusGmgYflQtBSaa1eBDuJ01XUcY+0u1Zu3Le9WfEoF8FG q5+Ovfhr95DHBAobIgM2Mp8FAIw3R1X0 -----END CERTIFICATE-----Generated at Wed Aug 6 00:57:03 2025 by rpki-client