$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: Zvl8RGn9WjG9e4Uj6qBXjpKgvCetqNfhILB3CKzpvdA= Subject key identifier: EA:24:B3:42:C1:2C:1B:C2:83:73:2A:D2:C6:97:11:0A:54:BA:48:58 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0CE7 Signing time: Fri 08 Aug 2025 18:18:31 +0000 Manifest this update: Fri 08 Aug 2025 18:18:31 +0000 Manifest next update: Fri 15 Aug 2025 18:18:31 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: FyKxAfmFJbMqs2ssOyYup1ZzMQf+tYYblONwk8MKKgo=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Aug 8 18:18:31 2025 GMT Not After : Aug 15 18:18:31 2025 GMT Subject: CN=68963f77-6dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:37:91:91:32:99:12:b1:30:0b:52:6f:b8: 00:9c:77:24:21:2c:6e:3b:5f:32:fd:4c:cf:c7:8f: 43:eb:70:a1:6a:f3:33:7c:cf:e0:5c:fc:ef:bb:9e: d9:45:6d:1d:bd:32:3c:f4:53:6d:d9:8b:20:7f:0b: f0:16:22:1b:ec:90:85:ce:0a:14:cb:71:99:d6:c6: d1:c1:02:ea:5c:24:6e:d3:31:dd:df:93:cd:44:0b: 7f:59:b9:4f:bf:22:9e:0a:b2:f4:8d:9e:54:11:ad: 17:81:4e:c2:da:6f:39:8a:03:91:11:6a:47:2e:0b: 68:7d:5d:64:bb:ba:b1:c5:73:8c:43:41:16:77:30: f6:1a:ae:a2:88:20:d7:52:e0:7f:df:da:96:9e:70: fc:24:61:ea:c4:29:7e:99:ee:26:cf:d9:28:96:20: 3c:0a:45:24:8f:27:b3:8c:a3:ef:6a:c1:2a:53:02: 88:1e:dd:33:fa:80:2b:c8:7c:25:55:dc:55:1f:f9: d2:c1:8b:a1:67:57:45:08:57:98:0f:2d:52:20:ea: 78:74:f2:29:42:d9:06:f4:bf:c0:32:b5:65:5c:54: 73:16:f2:0e:51:5d:73:b3:c6:c4:c9:bc:ba:8d:a3: 36:ca:7c:41:74:4a:2e:c7:fc:16:52:6b:1b:4a:4a: 3b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:24:B3:42:C1:2C:1B:C2:83:73:2A:D2:C6:97:11:0A:54:BA:48:58 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:72:af:d1:b1:3f:6c:4b:26:b2:09:b3:ec:89:6e:3e:51:a7: 6c:12:ab:4a:83:74:a7:27:61:99:77:c5:a9:08:72:97:db:2b: 91:e2:e1:22:a1:87:4e:b0:cf:ae:c1:01:e2:b5:ed:83:0f:5e: 65:21:56:aa:70:0e:57:37:e0:72:c2:39:73:82:bd:0e:92:d1: 90:25:3b:82:be:1d:74:26:2e:e9:23:92:a8:b5:65:e4:b1:dc: fa:02:ac:18:28:6d:1c:6d:2d:2c:7d:45:dc:ca:aa:5a:c6:27: 1b:f2:8f:3e:98:24:d8:2c:0e:89:18:b0:de:30:b9:b2:cd:42: f5:97:0c:29:8d:ee:38:5f:44:fe:d7:7d:19:c4:8c:ac:88:19: 7e:fb:67:46:30:8f:01:eb:72:13:92:73:8b:aa:b5:5c:d8:60: 86:b6:33:5d:49:5a:a4:cf:9e:fe:27:a5:b4:7f:7d:b7:66:4c: 43:f6:ce:f4:d3:23:0e:b4:22:1e:b1:b4:39:ca:21:3c:85:be: ea:1d:41:b5:d8:d8:4d:a7:8b:d0:13:bf:98:88:cc:72:1b:7d: 66:c3:05:cd:04:e5:4f:e1:5f:ca:bc:76:b7:b2:9b:f1:37:e2: 68:3b:d4:ba:8a:f6:bf:7f:d2:c3:da:6a:46:ca:46:30:ec:74: bf:3a:5a:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUwODA4MTgxODMxWhcNMjUwODE1MTgxODMxWjAYMRYwFAYD VQQDEw02ODk2M2Y3Ny02ZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/w3kZEymRKxMAtSb7gAnHckISxuO18y/UzPx49D63ChavMzfM/gXPzvu57Z RW0dvTI89FNt2YsgfwvwFiIb7JCFzgoUy3GZ1sbRwQLqXCRu0zHd35PNRAt/WblP vyKeCrL0jZ5UEa0XgU7C2m85igOREWpHLgtofV1ku7qxxXOMQ0EWdzD2Gq6iiCDX UuB/39qWnnD8JGHqxCl+me4mz9koliA8CkUkjyezjKPvasEqUwKIHt0z+oAryHwl VdxVH/nSwYuhZ1dFCFeYDy1SIOp4dPIpQtkG9L/AMrVlXFRzFvIOUV1zs8bEyby6 jaM2ynxBdEoux/wWUmsbSko7qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoks0LB LBvCg3Mq0saXEQpUukhYMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApcq/RsT9sSyayCbPsiW4+UadsEqtKg3SnJ2GZd8WpCHKX2yuR4uEi oYdOsM+uwQHite2DD15lIVaqcA5XN+Bywjlzgr0OktGQJTuCvh10Ji7pI5KotWXk sdz6AqwYKG0cbS0sfUXcyqpaxicb8o8+mCTYLA6JGLDeMLmyzUL1lwwpje44X0T+ 130ZxIysiBl++2dGMI8B63ITknOLqrVc2GCGtjNdSVqkz57+J6W0f323ZkxD9s70 0yMOtCIesbQ5yiE8hb7qHUG12NhNp4vQE7+YiMxyG31mwwXNBOVP4V/KvHa3spvx N+JoO9S6iva/f9LD2mpGykYw7HS/OlpO -----END CERTIFICATE-----Generated at Fri Aug 8 20:41:31 2025 by rpki-client