$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: 933X4OZa1pfpkDDBAaO7d+fV9RqpMhskkD0j7KHkH70= Subject key identifier: 3A:3A:71:55:21:72:C2:DA:08:AF:71:0D:95:5E:63:8D:2A:DA:D0:4E Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 011B Signing time: Thu 07 Aug 2025 05:20:51 +0000 Manifest this update: Thu 07 Aug 2025 05:20:51 +0000 Manifest next update: Thu 14 Aug 2025 05:20:51 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: 7yzQF0/XaWSX+TadXRhNtXIicJ1RzbuTWnV3Hx8nB9M=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Aug 7 05:20:51 2025 GMT Not After : Aug 14 05:20:51 2025 GMT Subject: CN=689437b3-de86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:73:f7:77:b3:1e:26:8c:a2:de:23:0b:0a:36: 17:03:24:c9:3d:12:b7:b3:2e:a6:02:1c:3b:7a:59: 82:01:26:3c:6d:b2:c7:82:f1:25:c3:64:2f:79:5c: 65:08:5c:00:29:fb:19:96:b8:fd:0b:74:14:b5:57: 79:69:03:b9:46:b2:1c:e2:40:4c:b0:45:f1:39:f0: 5d:92:f8:dd:e9:d2:7c:53:01:22:f7:91:e6:06:4c: c1:43:02:24:dc:b9:95:2e:7b:43:fc:d6:65:e8:10: 78:e1:18:17:ef:e7:11:04:8a:a4:20:89:79:b1:f9: 55:d7:38:42:69:cb:d5:06:18:0f:b3:7e:71:27:e0: 2d:0b:21:0f:9a:fe:f4:30:25:94:6a:53:10:6a:79: 46:41:67:12:76:14:a2:21:9a:29:6f:35:49:b9:49: f0:f3:89:42:de:39:96:92:68:d6:59:63:95:40:74: 00:b6:d1:6a:0e:16:bd:d7:22:c7:4e:87:40:6a:b5: 0a:a1:0d:b0:0f:a0:20:9e:cb:e2:f6:71:1d:1c:62: b7:6b:10:66:f9:7b:c1:91:06:a7:7e:24:4f:5f:ea: 81:a1:fe:84:c6:ac:15:c8:51:dd:ba:67:c2:5e:a8: 1b:59:34:61:c6:56:41:6c:af:a3:55:f0:97:54:df: e0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3A:71:55:21:72:C2:DA:08:AF:71:0D:95:5E:63:8D:2A:DA:D0:4E X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:36:75:ce:eb:3f:e4:3e:86:89:d4:14:b0:78:50:f2:a3:3d: bb:fa:2d:43:4c:cb:66:22:ae:81:bb:96:a6:a5:17:11:76:6a: c5:d5:79:11:a2:2f:c2:69:76:52:9a:0e:83:cc:07:4b:db:00: b8:10:cf:c9:ef:01:88:bd:8e:d7:01:a5:96:f6:5a:70:6a:d9: 84:f2:49:fb:cc:f1:ed:ef:10:dd:30:28:64:4b:02:9f:3c:85: fd:41:de:45:a9:93:fd:07:9b:60:29:77:2e:8a:94:b5:c5:1d: 64:ac:37:db:5b:ac:b1:27:f4:84:23:2a:71:d3:8c:66:16:09: 8b:c1:0e:21:db:eb:7f:a6:a8:01:ff:fc:fe:83:40:42:39:c5: 56:64:45:f8:8e:df:c3:a0:45:52:25:6b:5e:cd:58:aa:f3:2e: 18:54:29:1b:80:80:99:df:3f:76:08:24:98:1c:d6:bd:59:3d: ba:cc:0a:11:93:c6:4f:8f:7b:af:29:67:48:33:01:9e:2d:0a: ae:71:3b:3b:d4:19:4b:1a:79:b9:55:79:43:8b:c3:18:f5:2a: 35:91:e4:16:e4:c3:60:57:ef:9d:bb:ec:55:99:14:1b:49:d9: 02:32:3b:1a:ec:26:e7:59:c5:7a:07:e7:c0:98:e9:35:b3:6c: fd:d9:c6:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjUwODA3MDUyMDUxWhcNMjUwODE0MDUyMDUxWjAYMRYwFAYD VQQDEw02ODk0MzdiMy1kZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XP3d7MeJoyi3iMLCjYXAyTJPRK3sy6mAhw7elmCASY8bbLHgvElw2QveVxl CFwAKfsZlrj9C3QUtVd5aQO5RrIc4kBMsEXxOfBdkvjd6dJ8UwEi95HmBkzBQwIk 3LmVLntD/NZl6BB44RgX7+cRBIqkIIl5sflV1zhCacvVBhgPs35xJ+AtCyEPmv70 MCWUalMQanlGQWcSdhSiIZopbzVJuUnw84lC3jmWkmjWWWOVQHQAttFqDha91yLH TodAarUKoQ2wD6Agnsvi9nEdHGK3axBm+XvBkQanfiRPX+qBof6ExqwVyFHdumfC XqgbWTRhxlZBbK+jVfCXVN/gEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo6cVUh csLaCK9xDZVeY40q2tBOMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsNnXO6z/kPoaJ1BSweFDyoz27+i1DTMtmIq6Bu5ampRcRdmrF1XkR oi/CaXZSmg6DzAdL2wC4EM/J7wGIvY7XAaWW9lpwatmE8kn7zPHt7xDdMChkSwKf PIX9Qd5FqZP9B5tgKXcuipS1xR1krDfbW6yxJ/SEIypx04xmFgmLwQ4h2+t/pqgB //z+g0BCOcVWZEX4jt/DoEVSJWtezViq8y4YVCkbgICZ3z92CCSYHNa9WT26zAoR k8ZPj3uvKWdIMwGeLQqucTs71BlLGnm5VXlDi8MY9So1keQW5MNgV++du+xVmRQb SdkCMjsa7CbnWcV6B+fAmOk1s2z92caG -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:47 2025 by rpki-client