$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json) Hash identifier: AdKxc9ycAr+HTWCmdNU5+mrzyduvREUIz87QMgXBPDQ= Subject key identifier: B2:C5:61:30:5E:F9:5D:13:29:55:FC:E6:D3:B7:25:1D:84:95:E2:FB Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Certificate serial: 06F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft Manifest number: 06E7 Signing time: Fri 22 Aug 2025 22:10:20 +0000 Manifest this update: Fri 22 Aug 2025 22:10:19 +0000 Manifest next update: Fri 29 Aug 2025 22:10:19 +0000 Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: i0ORsQ9RhpbkXQhCmXwIZR+tqwJQXtK63zwHcSJlZXY=) 2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vMhYeDmA4rQgDzWKujwjU7tw9Dx++6v75EIl46gAbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Validity Not Before: Aug 22 22:10:19 2025 GMT Not After : Aug 29 22:10:19 2025 GMT Subject: CN=68a8eacb-2ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ed:90:9a:fe:5f:0d:8a:7e:1a:9d:9a:46:f1: 0b:2d:fd:7e:18:3b:39:42:64:29:87:4f:42:a6:e4: bb:76:81:92:e8:66:17:55:9f:03:45:47:0e:15:b2: 92:bc:a0:e2:39:ff:82:38:f6:5c:b2:b9:ae:3b:1f: 22:e9:46:1e:30:c3:b3:20:b0:34:0d:b8:bd:42:5b: bd:de:f6:ba:6c:4d:9a:40:03:30:ee:63:3d:b0:f7: c7:32:8b:0a:12:42:3b:55:f3:c6:cd:7c:cd:b7:93: 71:44:0e:9c:26:55:36:dd:82:65:c0:44:13:51:92: 73:77:99:be:0d:a6:2f:09:b1:07:73:8a:6e:3b:c5: 1f:71:ae:a5:65:bd:72:72:d2:9b:96:04:46:46:34: 24:18:00:8c:1f:5b:c5:c4:7f:d1:f3:4f:1e:43:20: 47:92:f6:cc:2d:d2:7a:a4:11:00:6e:7a:4b:1b:18: d0:0e:fc:b0:8f:5c:9e:ea:1d:e5:e5:de:98:79:98: 45:4f:16:f3:b5:2d:67:71:d2:14:be:9b:a6:d5:1a: a9:75:7e:26:ca:b1:4d:09:cd:21:40:b3:c2:88:21: 38:42:35:d0:33:25:c6:b1:dc:0d:12:96:b9:94:59: 8d:9d:5a:dc:33:1b:b9:7b:97:c1:07:35:45:78:ce: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C5:61:30:5E:F9:5D:13:29:55:FC:E6:D3:B7:25:1D:84:95:E2:FB X509v3 Authority Key Identifier: keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4e:ce:90:33:59:2e:97:74:77:16:08:c0:c2:fa:60:76:8b: 33:61:c4:70:e9:05:bc:e5:5b:8c:75:da:54:5d:c1:9c:69:13: 89:c2:65:e5:6d:3c:53:d7:e1:3a:c2:d7:bd:f2:2c:0b:7f:10: 54:12:d6:5c:7e:65:72:f7:c2:1d:eb:64:79:a9:e3:74:45:cd: f0:4a:f1:e8:1a:86:6a:ca:8c:f1:4a:0a:79:d6:15:2c:aa:86: b3:56:33:57:29:a3:47:36:64:27:41:bd:b9:99:c7:e2:a8:26: 3d:fc:50:40:ad:63:aa:f6:2c:bd:7d:e9:43:38:c1:d3:15:a5: ae:55:d3:10:7b:d9:1a:ce:6a:a9:e9:dc:e4:54:d4:1f:1a:9f: 8a:79:1d:ad:0d:aa:01:69:e5:58:ae:a2:f1:4b:64:48:1b:dd: 51:9c:bf:a9:f0:e4:e5:08:82:45:12:4d:63:53:0b:c9:e3:c7: fa:66:63:96:21:ba:1f:6e:0f:87:86:85:06:ca:33:81:c1:88: b9:a8:1b:22:a8:a0:c7:97:08:cc:59:91:03:93:66:d3:31:ad: 96:c3:2e:cb:fc:29:a6:cc:e9:6e:60:78:30:5d:f7:77:fc:9b: c6:a0:cd:3d:9e:89:35:95:0f:d1:ee:f6:f5:6e:55:bb:cb:e6: d2:af:27:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1RkIxMTAvBgNVBAUTKDkxN0E5RjdBQTIyODFCMTlGOTQ3NDIzRTk4NjEyQjFG NjNEMTdFMEUwHhcNMjUwODIyMjIxMDE5WhcNMjUwODI5MjIxMDE5WjAYMRYwFAYD VQQDEw02OGE4ZWFjYi0yZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5u2Qmv5fDYp+Gp2aRvELLf1+GDs5QmQph09CpuS7doGS6GYXVZ8DRUcOFbKS vKDiOf+COPZcsrmuOx8i6UYeMMOzILA0Dbi9Qlu93va6bE2aQAMw7mM9sPfHMosK EkI7VfPGzXzNt5NxRA6cJlU23YJlwEQTUZJzd5m+DaYvCbEHc4puO8Ufca6lZb1y ctKblgRGRjQkGACMH1vFxH/R808eQyBHkvbMLdJ6pBEAbnpLGxjQDvywj1ye6h3l 5d6YeZhFTxbztS1ncdIUvpum1RqpdX4myrFNCc0hQLPCiCE4QjXQMyXGsdwNEpa5 lFmNnVrcMxu5e5fBBzVFeM46zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLFYTBe +V0TKVX85tO3JR2EleL7MB8GA1UdIwQYMBaAFJF6n3qiKBsZ+UdCPphhKx9j0X4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzVGQi82QzI5NkQzQTYx NDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4bjVSMEktbUdFckgyUFJm ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tYcWZlcUlvR3huNVIwSS1tR0VySDJQUmZnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzVGQi82QzI5NkQzQTYxNDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4 bjVSMEktbUdFckgyUFJmZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHTs6QM1kul3R3FgjAwvpgdoszYcRw6QW85VuMddpUXcGcaROJwmXl bTxT1+E6wte98iwLfxBUEtZcfmVy98Id62R5qeN0Rc3wSvHoGoZqyozxSgp51hUs qoazVjNXKaNHNmQnQb25mcfiqCY9/FBArWOq9iy9felDOMHTFaWuVdMQe9kazmqp 6dzkVNQfGp+KeR2tDaoBaeVYrqLxS2RIG91RnL+p8OTlCIJFEk1jUwvJ48f6ZmOW Ibofbg+HhoUGyjOBwYi5qBsiqKDHlwjMWZEDk2bTMa2Wwy7L/CmmzOluYHgwXfd3 /JvGoM09nok1lQ/R7vb1blW7y+bSryfA -----END CERTIFICATE-----Generated at Sat Aug 23 16:34:56 2025 by rpki-client