$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft File: kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json) Hash identifier: san8OE1OdN6er8ykWDIWgHzdPNpsQCxBb/LRNVY3/Z0= Subject key identifier: 18:38:A7:3E:08:69:7F:DA:51:58:24:5A:B2:74:F8:87:24:24:53:73 Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 Certificate issuer: /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft Manifest number: 32 Signing time: Mon 11 Aug 2025 07:57:15 +0000 Manifest this update: Mon 11 Aug 2025 07:57:15 +0000 Manifest next update: Mon 18 Aug 2025 07:57:15 +0000 Files and hashes: 1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: R21LTKKFfJqO4KsKu0qy5/1qM5mil/yEgkkR+uRxgvI=) 2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: AMD2GEEFiF8rkGOwYs1r+qxOyHQFwJJUEW+dwUt3a3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Validity Not Before: Aug 11 07:57:15 2025 GMT Not After : Aug 18 07:57:15 2025 GMT Subject: CN=6899a25b-2b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:2a:2d:42:09:b3:86:cd:22:8f:03:2f:18: 29:8d:a7:12:e1:6a:88:61:8d:0f:f6:7b:eb:cc:b3: ef:49:8d:aa:ab:23:c1:4b:3d:4c:b9:c1:0b:63:d3: 3a:a9:74:98:b4:66:7a:7e:a6:79:f7:b7:7e:fb:7b: 25:39:58:21:8a:b3:5a:be:50:5b:7d:6c:3d:88:2a: cd:2f:4a:da:a3:d7:9a:1a:9c:cf:b9:cd:77:7e:53: 82:97:db:65:b0:22:c7:2e:e3:4e:2b:05:aa:6b:38: 25:96:6a:46:d8:29:ce:65:58:16:3e:de:63:40:93: bf:3a:29:d4:d9:3b:d8:c8:40:ad:06:39:88:01:32: eb:4f:60:97:98:b6:46:3f:2d:01:1b:c2:98:4c:ea: 14:ef:14:c3:ba:35:c0:14:cb:62:cf:15:6c:c0:69: 98:4c:6a:50:be:e9:10:7e:8a:c4:76:18:21:21:ee: b6:fe:18:19:a2:b6:74:4f:f1:2c:d9:25:64:41:c3: aa:c9:6d:c7:15:73:01:03:c2:ec:e0:92:43:82:0b: eb:ac:15:0a:4f:a7:ff:f9:0d:77:4b:f2:f3:8d:3b: c4:29:dc:fd:4b:87:e2:87:e9:77:f5:84:9c:ed:1e: 28:72:aa:51:ed:36:d9:4d:c9:7b:1a:47:dd:d9:ee: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:38:A7:3E:08:69:7F:DA:51:58:24:5A:B2:74:F8:87:24:24:53:73 X509v3 Authority Key Identifier: keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b4:9d:21:d5:03:6b:5d:37:15:2a:18:4b:00:55:cd:e9:60: 5c:d5:61:7d:ba:da:57:fe:a6:84:7d:a4:31:64:ba:1d:0a:8a: 02:18:b6:64:9d:c0:15:06:dd:fc:d2:68:bf:b7:3d:01:45:81: e0:fd:2d:2e:e5:90:8e:1d:74:97:37:c6:79:4a:c8:c9:c8:59: c0:a9:66:23:5e:0c:ba:3d:0f:10:d9:07:55:a0:61:1d:b8:34: 3a:45:1d:4d:d0:56:ca:d5:e6:63:ce:22:32:79:27:0b:e7:40: 38:c9:98:8e:08:d2:52:e0:e5:d6:0b:09:ec:b8:bb:f1:49:09: 5f:93:b7:9c:da:1d:6d:3f:b2:69:51:e3:38:e0:aa:0f:fe:2d: 1f:82:21:a3:ad:80:8b:7e:66:2d:77:ce:6b:2d:a6:22:65:1d: 69:4c:0b:a6:40:c5:ca:b3:d7:00:ec:d6:83:d0:53:00:7b:c7: 21:fa:13:d5:1a:e2:a6:65:a2:6b:cf:ec:d9:2b:9e:3d:98:5d: 96:cf:25:4d:9e:19:60:2a:91:68:62:1c:88:94:f4:15:eb:15: f4:94:70:bf:59:0b:56:9b:aa:38:2e:3e:44:4c:b2:3a:2c:9c: 9f:9a:e2:fc:70:e9:20:74:58:4b:68:af:b8:25:a6:0a:3e:5a: 94:6c:da:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNDQzExMC8GA1UEBRMoOTMwNzZFMkNCNUUwOTk1NDJBQjIxMEZFQjQ4NjAxOTBD NTQ1QzQzNjAeFw0yNTA4MTEwNzU3MTVaFw0yNTA4MTgwNzU3MTVaMBgxFjAUBgNV BAMTDTY4OTlhMjViLTJiNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEoiotQgmzhs0ijwMvGCmNpxLhaohhjQ/2e+vMs+9JjaqrI8FLPUy5wQtj0zqp dJi0Znp+pnn3t377eyU5WCGKs1q+UFt9bD2IKs0vStqj15oanM+5zXd+U4KX22Ww Iscu404rBaprOCWWakbYKc5lWBY+3mNAk786KdTZO9jIQK0GOYgBMutPYJeYtkY/ LQEbwphM6hTvFMO6NcAUy2LPFWzAaZhMalC+6RB+isR2GCEh7rb+GBmitnRP8SzZ JWRBw6rJbccVcwEDwuzgkkOCC+usFQpPp//5DXdL8vONO8Qp3P1Lh+KH6Xf1hJzt HihyqlHtNtlNyXsaR93Z7tSBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGDinPghp f9pRWCRasnT4hyQkU3MwHwYDVR0jBBgwFoAUkwduLLXgmVQqshD+tIYBkMVFxDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0NDLzc1OEM4MEEyMkZE NzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZRcXNoRC10SVlCa01WRnhE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3dkdUxMWGdtVlFxc2hELXRJWUJrTVZGeERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0NDLzc1OEM4MEEyMkZENzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZR cXNoRC10SVlCa01WRnhEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACy0nSHVA2tdNxUqGEsAVc3pYFzVYX262lf+poR9pDFkuh0KigIYtmSd wBUG3fzSaL+3PQFFgeD9LS7lkI4ddJc3xnlKyMnIWcCpZiNeDLo9DxDZB1WgYR24 NDpFHU3QVsrV5mPOIjJ5JwvnQDjJmI4I0lLg5dYLCey4u/FJCV+Tt5zaHW0/smlR 4zjgqg/+LR+CIaOtgIt+Zi13zmstpiJlHWlMC6ZAxcqz1wDs1oPQUwB7xyH6E9Ua 4qZlomvP7Nkrnj2YXZbPJU2eGWAqkWhiHIiU9BXrFfSUcL9ZC1abqjguPkRMsjos nJ+a4vxw6SB0WEtor7glpgo+WpRs2q0= -----END CERTIFICATE-----Generated at Wed Aug 13 04:25:58 2025 by rpki-client