$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json) Hash identifier: 2akYwxXSpg3IM9N/7SUkMDEexaI94oepodoATUHaD/c= Subject key identifier: 3B:9C:F1:55:AD:C4:E8:21:E8:44:3B:AA:BC:2E:96:9B:1C:F7:45:9C Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft Manifest number: 0603 Signing time: Fri 22 Aug 2025 23:02:44 +0000 Manifest this update: Fri 22 Aug 2025 23:02:43 +0000 Manifest next update: Fri 29 Aug 2025 23:02:43 +0000 Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: FTSzOBZdwlS8jnVuhiAg52Ahl7pyu9Rt32Cj1NSm7dE=) 2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: IADvK+KgV5vnYxJ4wHU1Xtz8TSGee8Bm5ZckrfzrChM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: Aug 22 23:02:43 2025 GMT Not After : Aug 29 23:02:43 2025 GMT Subject: CN=68a8f713-4ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:9b:fb:11:ab:49:1e:c1:52:23:cc:f2:df: d8:a1:8c:6f:e1:a8:19:8d:2a:5f:9d:cf:76:91:8f: f8:73:a5:8c:95:7e:e6:6e:b7:53:41:a4:e6:e3:99: 48:b4:ba:e9:12:2a:58:7b:93:16:0a:98:28:53:dd: fb:eb:ef:fa:b5:ed:0b:17:04:48:e3:6b:90:b2:74: ad:87:9a:94:3c:34:d5:79:5e:e6:4b:8d:ee:9b:c7: 6c:66:1e:7a:75:0e:84:cc:a9:6b:94:28:40:94:a9: df:2c:75:74:01:4a:b1:7a:b9:57:c8:9d:dd:1d:2a: e4:7a:cf:5f:9e:1f:01:f1:6c:e0:b0:85:ad:ad:0d: 5f:e1:54:b3:01:cf:e4:8b:1d:85:ec:bc:a4:34:2e: 06:9a:e9:7c:0f:69:10:51:11:3e:0d:3e:cb:df:3d: 11:72:21:32:93:a6:47:e0:89:7f:e2:ea:e0:28:91: 31:9e:c7:ca:3d:0c:23:8a:be:f0:95:20:1a:1a:e1: 58:0c:93:22:e7:9f:ec:58:9c:b3:5c:fb:65:3d:31: 6e:16:77:0c:56:41:4b:73:ac:09:4c:f5:6e:81:29: d2:bc:7f:04:2a:b0:23:6b:7e:e9:50:c0:ee:83:2b: d0:f7:7c:a8:72:a1:3c:57:20:dd:aa:92:2a:cb:26: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9C:F1:55:AD:C4:E8:21:E8:44:3B:AA:BC:2E:96:9B:1C:F7:45:9C X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7f:38:f2:6c:78:b8:84:8c:1f:bb:c6:6b:b3:e4:7b:1d:96: 55:80:cb:8d:fb:cd:41:49:bc:f2:e8:77:3e:d1:9d:3e:5e:62: 7c:c1:9e:ad:2c:c7:c8:c2:76:23:9b:f3:35:0a:84:62:61:7b: 32:a4:de:a8:47:b3:24:47:7a:81:93:96:ae:0a:4d:09:ad:98: ab:e9:67:94:ed:75:91:f3:5a:92:40:04:1d:1f:f2:be:5b:1d: 1b:26:bf:06:25:30:de:c3:54:4b:99:40:1c:64:3c:22:77:41: d4:97:b8:38:76:20:b9:a3:54:43:1e:3f:d2:02:37:71:98:3a: ab:ad:36:07:16:8d:e8:14:f3:5f:65:8e:59:43:93:1f:9f:13: 9f:bd:3e:b8:9d:49:f7:7e:f8:7d:13:f0:30:82:b3:e8:df:41: 91:5c:1b:4d:c4:9c:d7:49:cc:f7:96:60:70:1f:11:e3:79:1f: 80:b6:38:42:57:4e:10:e7:68:e4:8b:a2:68:65:6a:ae:47:a9: eb:60:56:24:e0:cf:cc:8c:56:b8:43:30:ac:da:40:98:b8:7e: fe:7a:4d:85:ed:3d:72:0c:01:4b:f9:32:64:dc:1d:fe:a7:19: 89:d7:55:70:d0:46:8c:9e:1f:01:ae:4a:21:0e:48:a6:eb:24: 13:01:9b:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjUwODIyMjMwMjQzWhcNMjUwODI5MjMwMjQzWjAYMRYwFAYD VQQDEw02OGE4ZjcxMy00Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBeb+xGrSR7BUiPM8t/YoYxv4agZjSpfnc92kY/4c6WMlX7mbrdTQaTm45lI tLrpEipYe5MWCpgoU9376+/6te0LFwRI42uQsnSth5qUPDTVeV7mS43um8dsZh56 dQ6EzKlrlChAlKnfLHV0AUqxerlXyJ3dHSrkes9fnh8B8WzgsIWtrQ1f4VSzAc/k ix2F7LykNC4Gmul8D2kQURE+DT7L3z0RciEyk6ZH4Il/4urgKJExnsfKPQwjir7w lSAaGuFYDJMi55/sWJyzXPtlPTFuFncMVkFLc6wJTPVugSnSvH8EKrAja37pUMDu gyvQ93yocqE8VyDdqpIqyyYu2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuc8VWt xOgh6EQ7qrwulpsc90WcMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81 anRHemNqTkRGems0RW0zSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAifzjybHi4hIwfu8Zrs+R7HZZVgMuN+81BSbzy6Hc+0Z0+XmJ8wZ6t LMfIwnYjm/M1CoRiYXsypN6oR7MkR3qBk5auCk0JrZir6WeU7XWR81qSQAQdH/K+ Wx0bJr8GJTDew1RLmUAcZDwid0HUl7g4diC5o1RDHj/SAjdxmDqrrTYHFo3oFPNf ZY5ZQ5MfnxOfvT64nUn3fvh9E/AwgrPo30GRXBtNxJzXScz3lmBwHxHjeR+AtjhC V04Q52jki6JoZWquR6nrYFYk4M/MjFa4QzCs2kCYuH7+ek2F7T1yDAFL+TJk3B3+ pxmJ11Vw0EaMnh8BrkohDkim6yQTAZtD -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:25 2025 by rpki-client