$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: xzQbH2YNQcrjA3Hry5XqRj1i6MKicTinrPBi+UnnGJ8= Subject key identifier: F9:EA:3A:E0:32:E3:38:CB:7F:83:3A:BD:D2:C8:27:C2:DF:6F:A4:0C Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 0137 Signing time: Sat 09 Aug 2025 04:54:38 +0000 Manifest this update: Sat 09 Aug 2025 04:54:37 +0000 Manifest next update: Sat 16 Aug 2025 04:54:37 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: Yg3azH+zwML6AEJHban8O8bx+W55HZDr8Y9We5TS7Go=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: Aug 9 04:54:37 2025 GMT Not After : Aug 16 04:54:37 2025 GMT Subject: CN=6896d48d-e917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:db:f2:cd:e7:ff:66:42:8c:14:89:56:61: f0:d8:3e:ef:fa:df:e3:07:eb:c1:c0:60:c5:38:85: 61:ec:ce:50:b8:ee:14:f7:8e:b7:70:8d:60:9a:e5: 5a:35:da:97:cf:05:9e:3d:29:06:b7:1d:ac:3b:2c: f2:de:27:36:bb:e1:a5:02:b1:b7:ab:ac:51:1e:11: 7c:4b:eb:b8:1f:0a:b1:f3:d8:c5:d4:8f:7b:64:79: 93:4f:63:ab:c2:52:3f:87:ad:bf:0e:7c:99:26:08: 54:41:24:23:9c:6a:42:3f:b3:34:5c:f1:d8:bd:c3: d7:8d:fc:33:a9:98:17:85:ff:e6:02:86:03:c6:36: e4:db:43:24:50:62:b2:1b:74:e7:4a:19:22:19:4b: c7:7b:85:23:ee:3e:0c:f7:b0:29:be:67:7d:6f:f5: b7:bf:fd:6e:87:3a:c0:d0:b2:42:03:d2:9c:95:31: 45:f6:92:6f:ae:cb:9d:71:24:5e:d5:cb:98:fa:a1: 07:88:de:cc:ba:9f:0e:5d:96:ed:b0:a7:8c:4b:51: cf:8d:ad:d7:fb:65:67:fe:c9:8a:9b:82:bf:28:c3: e0:5e:20:dd:de:77:9d:77:ac:b2:1f:09:b7:5d:07: 98:14:a4:0e:0c:a0:91:b3:8f:28:49:7b:7a:ef:6e: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EA:3A:E0:32:E3:38:CB:7F:83:3A:BD:D2:C8:27:C2:DF:6F:A4:0C X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:dd:1a:31:33:2d:4b:1b:d1:93:86:39:9b:47:2b:1b:cf:2d: 77:f1:62:d8:de:6c:4e:47:60:f8:98:e3:2e:e3:52:2a:6d:7b: 36:26:64:56:f6:da:10:52:38:09:ec:00:3b:8b:43:04:61:e3: 64:87:b0:09:88:ef:5e:d3:93:87:ac:d4:70:4d:39:9b:9b:c2: 14:0f:d7:32:1a:4b:30:4c:b1:44:c6:e2:db:ac:59:05:c7:e2: c9:0e:15:c5:87:61:b7:50:47:0c:f7:2a:d9:09:c5:83:ec:c5: e2:ab:c8:ea:26:9f:2d:19:2a:07:9c:ad:10:e4:d7:e5:21:1d: 8f:65:a7:b6:7c:de:0e:ec:96:ca:e9:99:15:6e:1f:85:76:ef: bb:08:11:a1:f3:c7:b3:9b:47:0a:f1:45:98:43:58:26:9d:53: 5c:82:1a:b2:05:84:eb:15:88:0a:f9:f1:25:ab:5d:ad:00:54: f0:69:2e:d2:4e:d7:93:60:2b:8c:cb:f8:46:de:60:d5:38:00: 6e:d8:f5:e2:de:03:24:2e:ce:a7:15:5e:dc:13:77:04:04:7d: f3:25:b7:a0:f2:3a:66:51:1c:60:fc:14:9e:57:b0:fb:c1:c8: 43:d6:8e:6f:65:06:18:90:bd:fa:d8:fb:af:e9:a0:14:58:65: 4d:57:5e:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE OEZBRkJDQTgwHhcNMjUwODA5MDQ1NDM3WhcNMjUwODE2MDQ1NDM3WjAYMRYwFAYD VQQDEw02ODk2ZDQ4ZC1lOTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt87b8s3n/2ZCjBSJVmHw2D7v+t/jB+vBwGDFOIVh7M5QuO4U9463cI1gmuVa NdqXzwWePSkGtx2sOyzy3ic2u+GlArG3q6xRHhF8S+u4Hwqx89jF1I97ZHmTT2Or wlI/h62/DnyZJghUQSQjnGpCP7M0XPHYvcPXjfwzqZgXhf/mAoYDxjbk20MkUGKy G3TnShkiGUvHe4Uj7j4M97Apvmd9b/W3v/1uhzrA0LJCA9KclTFF9pJvrsudcSRe 1cuY+qEHiN7Mup8OXZbtsKeMS1HPja3X+2Vn/smKm4K/KMPgXiDd3nedd6yyHwm3 XQeYFKQODKCRs48oSXt6726wqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnqOuAy 4zjLf4M6vdLIJ8Lfb6QMMB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf3RoxMy1LG9GThjmbRysbzy138WLY3mxOR2D4mOMu41IqbXs2JmRW 9toQUjgJ7AA7i0MEYeNkh7AJiO9e05OHrNRwTTmbm8IUD9cyGkswTLFExuLbrFkF x+LJDhXFh2G3UEcM9yrZCcWD7MXiq8jqJp8tGSoHnK0Q5NflIR2PZae2fN4O7JbK 6ZkVbh+Fdu+7CBGh88ezm0cK8UWYQ1gmnVNcghqyBYTrFYgK+fElq12tAFTwaS7S TteTYCuMy/hG3mDVOABu2PXi3gMkLs6nFV7cE3cEBH3zJbeg8jpmURxg/BSeV7D7 wchD1o5vZQYYkL362Puv6aAUWGVNV15K -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:00 2025 by rpki-client