$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: bPvSB4U+CiDG0MHO3oC00gZkhIPo9JeXqk9l2zdc86o= Subject key identifier: 02:DE:E0:6D:99:96:11:FC:7A:F4:E8:9B:A7:05:31:B8:3C:A0:59:69 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 01AC Signing time: Sat 23 Aug 2025 03:29:23 +0000 Manifest this update: Sat 23 Aug 2025 03:29:22 +0000 Manifest next update: Sat 30 Aug 2025 03:29:22 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: cA+uh6KK7BxNnRJI4J+zl39IpuEAupt5UA/WBME40pA=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: 3V/ibErrTNJ9w1YW/LwCYcNNPjpkRJOqZOAkX5zvOXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Aug 23 03:29:22 2025 GMT Not After : Aug 30 03:29:22 2025 GMT Subject: CN=68a93593-d0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:16:ac:d3:6f:56:f9:c6:ed:10:00:0e:7a: 22:af:78:6a:2a:15:b8:d5:32:e6:b8:8c:8f:b3:0a: f7:50:9e:b9:ed:29:ce:b3:3d:1f:17:7a:09:15:80: 69:d1:72:f3:e7:e6:21:4d:92:b8:da:d6:b1:1f:90: 85:50:b1:a6:98:a7:a9:fa:72:40:c5:53:8b:71:d0: 7c:38:fa:ae:41:e1:bf:74:88:51:0b:b6:5f:cb:40: c4:f8:d4:ab:87:9c:c7:1c:0a:0f:1b:e5:18:07:7f: 6c:f6:49:93:15:c9:0e:45:ef:2c:83:a7:32:e5:a6: 02:5c:38:b1:a2:46:fd:f3:4a:35:ba:25:c7:9d:13: 3d:b3:53:39:a7:25:af:d9:4d:90:ab:49:d8:81:a5: a2:b3:77:6e:34:7b:97:96:23:75:37:18:28:ca:30: d0:73:b4:e9:6a:0e:5c:c1:91:94:eb:93:d8:57:aa: 9f:b5:63:8a:71:b7:40:82:4e:a6:8b:19:a1:47:4f: fa:aa:fc:0e:d7:93:81:26:76:71:eb:e7:36:d0:89: 5b:46:4f:b6:49:30:2e:89:64:2c:99:2f:f0:2a:d3: 2d:9f:6d:b6:e6:23:6b:7f:9c:1e:c3:69:98:43:63: 03:03:da:85:5d:d7:e3:b0:13:a5:f9:c4:49:ef:a4: b1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DE:E0:6D:99:96:11:FC:7A:F4:E8:9B:A7:05:31:B8:3C:A0:59:69 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4d:48:bf:2c:ad:dc:b8:ca:9a:fa:a6:8b:2c:06:01:0d:51: 11:61:29:b6:bc:12:2f:80:ea:f4:34:54:62:03:c3:06:eb:5d: 73:b4:80:f6:3d:eb:71:0d:fa:da:4f:7a:25:a3:81:54:13:94: f7:23:97:d2:10:44:54:8a:01:6e:78:c6:20:dd:e8:9b:76:31: c5:bf:61:68:60:cc:e3:12:4e:e7:42:1b:80:1d:dc:bd:ff:29: 59:77:b9:a5:c4:a9:68:23:47:67:11:f7:1a:19:99:f6:82:e8: db:cf:5c:b2:da:3f:ac:fb:80:23:b5:56:52:a2:ca:4a:12:bd: 06:79:b8:e6:55:39:f4:07:71:af:58:15:4a:bd:a6:5e:34:79: 2f:e0:94:fb:e6:13:57:c9:34:af:3a:29:5c:c8:04:f1:e6:80: 3f:e2:00:6b:a0:af:0d:a4:b3:ea:24:b6:a0:3a:14:b4:89:8e: 68:d5:95:b6:ba:74:1e:01:db:17:76:25:0b:ee:a7:14:f3:85: d0:a1:fc:47:d8:54:92:ff:9d:06:11:3e:96:8a:e0:82:65:f1: 8c:62:3d:d4:3f:78:9f:b0:08:cc:be:f2:b8:d5:f1:72:f6:88: 98:dd:57:ff:bc:d8:00:0c:22:5e:14:77:e0:44:ab:f2:b7:bc: a3:aa:1d:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjUwODIzMDMyOTIyWhcNMjUwODMwMDMyOTIyWjAYMRYwFAYD VQQDEw02OGE5MzU5My1kMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMEWrNNvVvnG7RAADnoir3hqKhW41TLmuIyPswr3UJ657SnOsz0fF3oJFYBp 0XLz5+YhTZK42taxH5CFULGmmKep+nJAxVOLcdB8OPquQeG/dIhRC7Zfy0DE+NSr h5zHHAoPG+UYB39s9kmTFckORe8sg6cy5aYCXDixokb980o1uiXHnRM9s1M5pyWv 2U2Qq0nYgaWis3duNHuXliN1NxgoyjDQc7Tpag5cwZGU65PYV6qftWOKcbdAgk6m ixmhR0/6qvwO15OBJnZx6+c20IlbRk+2STAuiWQsmS/wKtMtn2225iNrf5wew2mY Q2MDA9qFXdfjsBOl+cRJ76Sx8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALe4G2Z lhH8evTom6cFMbg8oFlpMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByTUi/LK3cuMqa+qaLLAYBDVERYSm2vBIvgOr0NFRiA8MG611ztID2 PetxDfraT3olo4FUE5T3I5fSEERUigFueMYg3eibdjHFv2FoYMzjEk7nQhuAHdy9 /ylZd7mlxKloI0dnEfcaGZn2gujbz1yy2j+s+4AjtVZSospKEr0GebjmVTn0B3Gv WBVKvaZeNHkv4JT75hNXyTSvOilcyATx5oA/4gBroK8NpLPqJLagOhS0iY5o1ZW2 unQeAdsXdiUL7qcU84XQofxH2FSS/50GET6WiuCCZfGMYj3UP3ifsAjMvvK41fFy 9oiY3Vf/vNgADCJeFHfgRKvyt7yjqh1m -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:32 2025 by rpki-client