$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: wam9oj9nmSGbYInnp2SUtk+HpLixbR/yCjdsjMELAMs= Subject key identifier: 7E:D1:3A:BA:FD:DB:86:97:FF:BA:C6:25:B9:58:71:DE:68:41:13:B9 Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 0855 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 137C Signing time: Fri 08 Aug 2025 19:34:58 +0000 Manifest this update: Fri 08 Aug 2025 19:34:57 +0000 Manifest next update: Fri 15 Aug 2025 19:34:57 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: Z562VBWbTgvZOfre9e30dpdjcQqU5AgQQEaroMd1jn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2133 (0x855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: Aug 8 19:34:57 2025 GMT Not After : Aug 15 19:34:57 2025 GMT Subject: CN=68965162-8bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:ab:b6:70:23:22:a6:7d:0d:9a:26:03:d2: 33:01:b4:48:2a:d5:01:cf:07:41:72:2b:4e:3f:15: 09:c2:6f:1e:26:49:c8:13:ef:c4:9c:94:33:57:8f: f1:91:02:7e:73:89:9e:fd:e4:9b:45:f8:8f:b9:61: e3:10:96:b1:7b:b4:f9:ce:9c:b0:47:93:be:bf:a5: 07:a8:4c:6e:a7:9b:17:94:d6:dc:5e:7e:39:0e:4c: a4:00:ce:0f:fc:5d:fb:89:8a:87:9b:53:2f:8f:a7: a2:6f:a9:c6:e6:99:32:f7:1a:16:72:6c:d1:28:b0: fb:f5:4a:61:a8:1b:19:2d:f4:be:e7:42:9b:3b:13: 90:a4:a8:45:a1:6a:6d:ea:79:73:a5:7c:e3:7d:57: 94:ed:71:c6:69:4f:58:4f:e2:38:0a:2c:56:fc:7d: 1e:ff:ce:27:ca:4e:6a:98:8d:02:18:da:0f:f5:f5: 32:20:26:55:b2:ff:c3:0f:4e:51:cb:b5:c1:ca:b2: be:d5:2e:10:00:26:e8:07:37:a1:da:73:b1:de:f9: 0b:dc:87:d3:a3:2f:72:96:25:0c:de:23:10:d5:3f: 45:04:93:df:11:c6:fc:f5:15:0a:ed:8b:01:b1:32: 2a:43:79:99:16:b2:b4:80:89:eb:34:11:4e:79:3e: 09:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D1:3A:BA:FD:DB:86:97:FF:BA:C6:25:B9:58:71:DE:68:41:13:B9 X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:72:c9:90:e8:91:a6:69:d1:50:ac:17:89:05:05:20:a4:95: 15:d9:24:d0:43:3a:9b:aa:0e:27:36:d5:34:f8:e8:b9:8e:e4: 3e:05:fc:96:83:96:ce:d1:09:60:73:d7:82:ec:30:fd:fe:24: 71:16:3d:a5:0f:40:cd:5d:08:13:55:0d:8f:4f:4b:64:d3:65: a7:65:01:22:9d:95:24:bf:c0:ec:40:15:04:50:57:a1:5c:38: a3:3d:a5:ee:c9:20:c6:4f:a0:aa:55:3a:2b:05:64:65:bb:1a: 31:81:0f:91:1d:1b:32:5b:f3:20:c0:52:70:4d:81:bc:cd:0c: 60:53:54:3e:1f:18:6b:ea:f7:2a:51:90:92:a3:2b:5e:b9:f1: d7:ed:98:75:42:81:48:4d:1d:78:17:ec:0e:8a:5b:58:6e:3b: 4e:b9:7b:55:a8:ef:68:0e:ca:19:10:3b:38:e0:a1:7a:48:e4: 53:16:c4:87:da:41:8f:1e:a9:0a:09:a9:83:2c:67:95:8e:e6: 7b:08:06:11:b6:fc:1d:be:a8:7b:e0:58:b5:e1:53:cb:1f:05: 77:5b:30:dd:42:c3:fb:f3:9c:1a:ff:6a:2f:09:f9:d3:1e:d4: 71:69:d4:d6:33:6c:9a:e6:03:58:f8:00:17:82:18:ac:44:c7: 08:64:d2:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjUwODA4MTkzNDU3WhcNMjUwODE1MTkzNDU3WjAYMRYwFAYD VQQDEw02ODk2NTE2Mi04YmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4qrtnAjIqZ9DZomA9IzAbRIKtUBzwdBcitOPxUJwm8eJknIE+/EnJQzV4/x kQJ+c4me/eSbRfiPuWHjEJaxe7T5zpywR5O+v6UHqExup5sXlNbcXn45DkykAM4P /F37iYqHm1Mvj6eib6nG5pky9xoWcmzRKLD79UphqBsZLfS+50KbOxOQpKhFoWpt 6nlzpXzjfVeU7XHGaU9YT+I4CixW/H0e/84nyk5qmI0CGNoP9fUyICZVsv/DD05R y7XByrK+1S4QACboBzeh2nOx3vkL3IfToy9yliUM3iMQ1T9FBJPfEcb89RUK7YsB sTIqQ3mZFrK0gInrNBFOeT4J7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7ROrr9 24aX/7rGJblYcd5oQRO5MB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvcsmQ6JGmadFQrBeJBQUgpJUV2STQQzqbqg4nNtU0+Oi5juQ+BfyW g5bO0Qlgc9eC7DD9/iRxFj2lD0DNXQgTVQ2PT0tk02WnZQEinZUkv8DsQBUEUFeh XDijPaXuySDGT6CqVTorBWRluxoxgQ+RHRsyW/MgwFJwTYG8zQxgU1Q+Hxhr6vcq UZCSoyteufHX7Zh1QoFITR14F+wOiltYbjtOuXtVqO9oDsoZEDs44KF6SORTFsSH 2kGPHqkKCamDLGeVjuZ7CAYRtvwdvqh74Fi14VPLHwV3WzDdQsP785wa/2ovCfnT HtRxadTWM2ya5gNY+AAXghisRMcIZNKG -----END CERTIFICATE-----Generated at Sat Aug 9 14:32:09 2025 by rpki-client