$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: UCnXWqeoA20cKfBxKrCYSygBTpVHpRlj64Uq/jUIaU8= Subject key identifier: FB:6C:88:2B:B4:0C:7B:AD:AC:45:A8:BE:6F:AE:1C:85:FD:38:08:F1 Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 34C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 34B9 Signing time: Sun 10 Aug 2025 14:55:48 +0000 Manifest this update: Sun 10 Aug 2025 14:55:47 +0000 Manifest next update: Sun 17 Aug 2025 14:55:47 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: CR0yFiF1MjYkzyvBl13UpWld/DxH5NRvf/gvi3pOUUs=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 8wn1BShCqNm3QYIhzMCvnBkRSH1pV/AljqzDWjCUBxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13508 (0x34c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: Aug 10 14:55:47 2025 GMT Not After : Aug 17 14:55:47 2025 GMT Subject: CN=6898b2f3-db44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:da:60:15:73:43:18:c4:18:cd:f6:b6:f1: 70:82:8f:41:1c:1a:44:93:7a:6b:de:cd:4e:fb:1d: 51:5c:94:fd:f4:b6:30:2c:56:d7:05:0e:e0:e5:29: 0a:4f:43:4d:85:d1:00:dc:6a:b6:51:98:93:b9:a1: e5:3e:74:e1:9c:41:cd:32:e4:cf:d0:46:b4:c8:ba: 36:d2:00:94:91:18:59:71:57:54:02:9f:85:06:53: 59:90:51:c7:a9:f4:12:49:31:f9:da:6a:3c:d7:d2: cc:c5:b6:48:70:16:c6:e8:4c:09:8b:64:2f:14:35: 00:0f:ea:34:0c:2d:3b:d7:d4:c5:4a:0e:af:46:28: b2:e3:0b:3b:d7:98:7e:b4:1b:d5:92:d5:7a:31:c7: 22:0c:af:f7:a2:ab:20:34:65:7d:50:a5:00:e1:a6: 28:91:ff:8b:7c:66:df:6b:a1:e9:05:32:61:d8:d1: 38:5a:5a:90:37:29:cf:da:80:84:71:7e:31:a1:77: 43:0c:b5:b1:0b:3b:b3:ab:23:1e:e5:20:83:36:db: 2c:33:00:ca:ba:31:cc:52:3d:85:36:66:92:a1:c8: 7c:eb:99:3f:3c:0b:b5:f2:0a:8d:ff:6d:25:63:5d: 7d:b0:56:82:d4:82:64:a9:63:74:39:2e:eb:da:af: 17:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6C:88:2B:B4:0C:7B:AD:AC:45:A8:BE:6F:AE:1C:85:FD:38:08:F1 X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:79:e8:7b:ea:bf:31:7b:60:e7:97:6d:4e:a3:cc:1d:56:07: 81:d0:3d:34:ef:29:12:3d:62:a4:03:04:4d:62:94:5e:e5:dd: c7:4e:49:3f:ad:a1:30:13:73:5b:ae:50:e7:8f:7d:aa:18:57: de:16:e8:b0:94:16:b9:43:af:92:ff:36:ea:ff:19:e6:c5:b8: 10:74:68:4e:be:ee:f8:00:2f:c6:ea:b8:13:6a:69:1c:a4:84: c5:9e:74:3d:6f:5d:2a:81:05:e2:d6:ce:58:65:23:c2:60:4f: 74:58:eb:2b:03:55:76:7b:59:cb:f1:31:34:6c:54:8b:6a:ba: 83:fb:75:f0:a5:0e:42:51:d4:39:0c:46:be:f3:a5:19:65:dd: 5f:42:09:41:da:ed:f1:45:02:49:fd:99:96:0b:7c:ce:fe:aa: a7:0b:b5:e3:37:83:16:19:70:d3:db:c8:1f:bc:02:45:76:ce: 5f:54:1f:a9:59:2f:c7:b4:57:1e:b3:48:9f:63:75:b8:fb:e2: 89:61:64:f6:f4:83:02:91:33:6c:7a:66:0e:2f:b5:ac:66:a8: 3a:2a:cc:7d:b9:12:e4:17:8b:fa:22:10:99:b2:7f:45:ee:d7: 37:04:04:dd:cf:1f:cc:51:f0:34:48:25:9e:1f:05:98:5b:f8: e6:f5:1c:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUwODEwMTQ1NTQ3WhcNMjUwODE3MTQ1NTQ3WjAYMRYwFAYD VQQDEw02ODk4YjJmMy1kYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNzaYBVzQxjEGM32tvFwgo9BHBpEk3pr3s1O+x1RXJT99LYwLFbXBQ7g5SkK T0NNhdEA3Gq2UZiTuaHlPnThnEHNMuTP0Ea0yLo20gCUkRhZcVdUAp+FBlNZkFHH qfQSSTH52mo819LMxbZIcBbG6EwJi2QvFDUAD+o0DC0719TFSg6vRiiy4ws715h+ tBvVktV6McciDK/3oqsgNGV9UKUA4aYokf+LfGbfa6HpBTJh2NE4WlqQNynP2oCE cX4xoXdDDLWxCzuzqyMe5SCDNtssMwDKujHMUj2FNmaSoch865k/PAu18gqN/20l Y119sFaC1IJkqWN0OS7r2q8XfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtsiCu0 DHutrEWovm+uHIX9OAjxMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaeeh76r8xe2Dnl21Oo8wdVgeB0D007ykSPWKkAwRNYpRe5d3HTkk/ raEwE3NbrlDnj32qGFfeFuiwlBa5Q6+S/zbq/xnmxbgQdGhOvu74AC/G6rgTamkc pITFnnQ9b10qgQXi1s5YZSPCYE90WOsrA1V2e1nL8TE0bFSLarqD+3XwpQ5CUdQ5 DEa+86UZZd1fQglB2u3xRQJJ/ZmWC3zO/qqnC7XjN4MWGXDT28gfvAJFds5fVB+p WS/HtFces0ifY3W4++KJYWT29IMCkTNsemYOL7WsZqg6Ksx9uRLkF4v6IhCZsn9F 7tc3BATdzx/MUfA0SCWeHwWYW/jm9RxP -----END CERTIFICATE-----Generated at Sun Aug 10 18:55:15 2025 by rpki-client