$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: 25YHvad4rrGsy2kBvEl3N+J4ggnfgaUoz63hOi3gyEM= Subject key identifier: 16:8B:9B:56:0E:EE:B3:68:26:01:75:B0:35:C8:F4:09:A4:64:55:98 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 0158 Signing time: Sat 23 Aug 2025 04:13:27 +0000 Manifest this update: Sat 23 Aug 2025 04:13:27 +0000 Manifest next update: Sat 30 Aug 2025 04:13:27 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: xf7GdwgnfObARemr+fPqvb6/uWTAiFweRUlZsfGMzPQ=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: fKu+QnI9JJSs0/0qC7wtQtv1o9IdD9KvcLGhg+7rRMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Aug 23 04:13:27 2025 GMT Not After : Aug 30 04:13:27 2025 GMT Subject: CN=68a93fe7-9169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:38:b8:c7:52:a7:26:5b:d4:3d:e0:99:9a: 5b:92:80:f4:f4:5a:2c:28:47:00:9f:5e:96:13:4d: 53:3f:b8:ac:09:d6:b7:6c:70:4c:f0:5a:d3:e6:b8: 61:78:b9:d9:5a:c4:ad:bb:f6:50:6d:bf:f0:42:85: 51:01:66:d2:50:51:47:cb:1f:ca:8a:f5:16:9d:eb: 81:05:09:af:73:83:9e:c5:e5:e1:c6:ce:08:cc:71: f3:3e:2b:8e:f2:7b:eb:3e:ff:10:56:55:6d:16:1f: 87:76:0b:5f:7b:3c:fe:b6:9d:05:20:fc:46:c8:f8: 69:06:dd:38:4c:0f:cd:a2:fa:8a:79:60:7f:a9:df: 9f:58:46:d2:f2:af:b3:4f:ca:65:b0:1b:39:f7:14: 29:61:8b:17:96:96:47:d8:13:90:5d:f9:2f:90:cf: 40:63:a7:f7:52:27:3b:7c:a9:0f:87:3b:5d:59:b6: 3e:99:e5:fa:29:f2:92:b1:65:3c:68:7e:da:be:ef: 30:89:71:17:81:b7:fd:0d:fb:77:7b:b3:70:94:c7: 34:89:95:98:c2:3a:72:35:be:0c:10:37:5a:ab:92: af:52:7b:05:a4:6b:aa:d7:91:72:e9:51:92:9f:8d: a1:6c:10:0b:56:d4:ff:26:8b:74:23:57:53:ce:7e: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8B:9B:56:0E:EE:B3:68:26:01:75:B0:35:C8:F4:09:A4:64:55:98 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:bc:ae:e6:15:cc:e7:dc:23:4c:f1:4b:b8:a2:4e:7c:73:98: ab:24:87:33:9c:b2:b1:17:0c:72:65:ff:9d:b5:99:ca:b7:3f: d8:62:1f:c6:04:a1:a5:6f:66:98:bb:85:07:66:14:63:18:2a: 29:2b:03:e8:3a:da:f0:87:05:a7:4b:f3:3f:71:43:a9:4b:fb: c6:ac:4a:86:ef:78:5a:47:16:9b:da:d2:e0:0b:a6:08:a4:0b: 50:44:68:62:fe:37:be:07:44:37:9a:46:a6:82:cc:95:43:a8: 11:77:7f:f4:36:c0:ff:86:01:42:c5:99:64:a9:ec:67:a3:1a: a2:cd:7b:30:64:2b:9e:9c:37:d2:7f:2d:6d:f4:51:8c:eb:d2: f3:03:96:51:f0:ff:a0:98:3f:b3:cb:6b:dc:0c:07:d2:36:7f: d4:d2:fc:80:4f:59:b8:b2:ec:5b:88:ea:3d:f1:3b:dd:49:cb: 91:86:a0:ef:c5:2c:54:dc:90:58:ff:5f:fe:9d:cd:82:13:92: dd:4c:d3:73:56:41:0a:1a:a1:53:0a:56:36:8e:9b:40:65:16: 74:0c:9a:dd:e6:87:a5:44:9f:bb:e0:e6:fa:a9:85:10:89:8f: 41:d8:32:35:8c:c0:1c:2c:b5:c9:0c:e4:eb:ea:e1:52:52:5f: e5:f7:02:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjUwODIzMDQxMzI3WhcNMjUwODMwMDQxMzI3WjAYMRYwFAYD VQQDEw02OGE5M2ZlNy05MTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuos4uMdSpyZb1D3gmZpbkoD09FosKEcAn16WE01TP7isCda3bHBM8FrT5rhh eLnZWsStu/ZQbb/wQoVRAWbSUFFHyx/KivUWneuBBQmvc4OexeXhxs4IzHHzPiuO 8nvrPv8QVlVtFh+Hdgtfezz+tp0FIPxGyPhpBt04TA/NovqKeWB/qd+fWEbS8q+z T8plsBs59xQpYYsXlpZH2BOQXfkvkM9AY6f3Uic7fKkPhztdWbY+meX6KfKSsWU8 aH7avu8wiXEXgbf9Dft3e7NwlMc0iZWYwjpyNb4MEDdaq5KvUnsFpGuq15Fy6VGS n42hbBALVtT/Jot0I1dTzn7OjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaLm1YO 7rNoJgF1sDXI9AmkZFWYMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjvK7mFczn3CNM8Uu4ok58c5irJIcznLKxFwxyZf+dtZnKtz/YYh/G BKGlb2aYu4UHZhRjGCopKwPoOtrwhwWnS/M/cUOpS/vGrEqG73haRxab2tLgC6YI pAtQRGhi/je+B0Q3mkamgsyVQ6gRd3/0NsD/hgFCxZlkqexnoxqizXswZCuenDfS fy1t9FGM69LzA5ZR8P+gmD+zy2vcDAfSNn/U0vyAT1m4suxbiOo98TvdScuRhqDv xSxU3JBY/1/+nc2CE5LdTNNzVkEKGqFTClY2jptAZRZ0DJrd5oelRJ+74Ob6qYUQ iY9B2DI1jMAcLLXJDOTr6uFSUl/l9wIe -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:20 2025 by rpki-client