$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json) Hash identifier: xaEtkvMQ6+MBFVijewVnqE9vFKPQz3b2gc/kgS3vwCE= Subject key identifier: 5F:43:7A:71:08:40:1E:2D:10:0E:E7:15:96:4E:DA:21:9A:AE:14:7A Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Certificate serial: 0419 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft Manifest number: 040D Signing time: Mon 11 Aug 2025 00:36:38 +0000 Manifest this update: Mon 11 Aug 2025 00:36:38 +0000 Manifest next update: Mon 18 Aug 2025 00:36:38 +0000 Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: hxVbxyTHLYZH5cxtJchK3A4MYgodgrv9ItDkICqV0uE=) 2: 8AB7936E5FF111F092635949C4F9AE02.roa (hash: ZKGRhr8pcRlZGuDYruEwy7xDWFkv+Zae+rNW87nRb4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1049 (0x419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCFE, serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Validity Not Before: Aug 11 00:36:38 2025 GMT Not After : Aug 18 00:36:38 2025 GMT Subject: CN=68993b16-4fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:12:f8:9d:e6:38:ce:6e:a4:a5:11:b1:b2: 82:f0:5f:94:26:19:00:bd:94:65:d7:39:37:2b:7d: d5:ca:ad:d8:d6:9d:74:0e:50:fc:29:2e:75:3f:fb: e7:55:0a:4c:a0:48:ed:39:22:c4:36:14:ad:22:0d: 28:1c:62:69:ed:1f:5c:e2:11:ca:97:0e:90:87:76: 88:70:0b:bc:d3:d9:ea:7d:63:44:f0:c9:cc:ad:4c: b9:03:07:49:d0:1a:81:cf:eb:1a:62:3b:d0:8a:26: 89:8b:5d:ee:5a:e5:43:1f:49:20:ad:0f:a0:0b:c9: e0:2a:a7:7a:dc:a4:24:89:1c:05:8c:c3:9c:bf:4a: 4b:a4:59:7d:29:0b:28:5f:e4:1a:d2:fc:19:7a:7a: 3a:82:84:d7:56:78:78:5f:cd:b2:70:46:c0:04:18: 52:c2:5d:92:75:b5:33:25:fd:28:a9:57:55:16:d2: 81:aa:25:6e:b3:9c:55:09:46:77:d1:72:c3:b4:27: a4:2c:24:b5:1b:4b:f1:77:23:ff:e4:a6:0b:fd:af: 2b:08:22:1d:a8:fb:cf:b0:dc:11:d7:fb:ba:16:22: d6:58:72:b1:0b:0f:71:e3:83:a6:74:ca:9a:56:33: bf:70:93:e0:56:bc:76:2d:5f:4a:7e:31:f8:b0:74: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:43:7A:71:08:40:1E:2D:10:0E:E7:15:96:4E:DA:21:9A:AE:14:7A X509v3 Authority Key Identifier: keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:9a:c7:57:a3:7f:cb:4c:7d:48:8e:de:b7:81:90:8b:a9:e3: ad:66:57:d1:a1:72:d0:3c:13:5a:ed:04:36:ad:7d:ec:4e:0d: 60:cd:08:cf:62:5a:07:9f:49:5b:c5:bd:be:b8:88:0a:3a:22: 64:3e:63:97:fa:37:62:05:d1:0a:d8:e1:cd:0a:9c:34:a6:a6: f9:ba:60:d6:b4:25:36:b3:a5:da:f6:e3:78:59:7a:f1:f9:40: a8:16:27:db:1a:06:06:89:15:64:f2:64:5e:e3:d3:03:41:c2: 33:66:0c:fc:d4:95:82:59:3b:92:11:d2:39:d9:da:8e:43:77: e3:a1:a1:46:6e:69:bb:3f:19:ea:3d:49:4b:96:82:0b:a0:5e: 33:ab:a1:6b:8b:12:6a:a7:42:f4:65:18:09:94:68:71:62:6b: cf:1f:42:36:57:6d:97:c5:c7:81:ab:99:70:42:6e:65:52:55: 4d:b1:b3:f5:d8:e6:81:22:5f:cd:6f:f6:51:c3:19:03:d5:fc: c4:a3:66:9f:48:c2:e2:41:dc:17:7d:a0:43:85:bd:44:2e:36: b1:fe:da:f5:93:d4:09:89:c0:a0:25:d1:2a:37:80:e7:35:fb: 55:63:92:2d:06:09:5a:0b:db:51:78:3c:b9:e8:34:ff:c3:88: 0e:81:f8:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG OTNBNTIzMzQwHhcNMjUwODExMDAzNjM4WhcNMjUwODE4MDAzNjM4WjAYMRYwFAYD VQQDEw02ODk5M2IxNi00ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6YS+J3mOM5upKURsbKC8F+UJhkAvZRl1zk3K33Vyq3Y1p10DlD8KS51P/vn VQpMoEjtOSLENhStIg0oHGJp7R9c4hHKlw6Qh3aIcAu809nqfWNE8MnMrUy5AwdJ 0BqBz+saYjvQiiaJi13uWuVDH0kgrQ+gC8ngKqd63KQkiRwFjMOcv0pLpFl9KQso X+Qa0vwZeno6goTXVnh4X82ycEbABBhSwl2SdbUzJf0oqVdVFtKBqiVus5xVCUZ3 0XLDtCekLCS1G0vxdyP/5KYL/a8rCCIdqPvPsNwR1/u6FiLWWHKxCw9x44OmdMqa VjO/cJPgVrx2LV9KfjH4sHRY5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9DenEI QB4tEA7nFZZO2iGarhR6MB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGRS85NjUwNUIyNDgwRTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3Fk LUo4TWd4akR6VVg1T2xJelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7msdXo3/LTH1Ijt63gZCLqeOtZlfRoXLQPBNa7QQ2rX3sTg1gzQjP YloHn0lbxb2+uIgKOiJkPmOX+jdiBdEK2OHNCpw0pqb5umDWtCU2s6Xa9uN4WXrx +UCoFifbGgYGiRVk8mRe49MDQcIzZgz81JWCWTuSEdI52dqOQ3fjoaFGbmm7Pxnq PUlLloILoF4zq6FrixJqp0L0ZRgJlGhxYmvPH0I2V22XxceBq5lwQm5lUlVNsbP1 2OaBIl/Nb/ZRwxkD1fzEo2afSMLiQdwXfaBDhb1ELjax/tr1k9QJicCgJdEqN4Dn NftVY5ItBglaC9tReDy56DT/w4gOgfjP -----END CERTIFICATE-----Generated at Wed Aug 13 02:12:15 2025 by rpki-client