$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json) Hash identifier: TPp5SdePHc1bALwhfHp97EexQG1ZTVmUe/AUiS0Rd+I= Subject key identifier: F2:79:3F:81:C3:FA:E3:76:98:F9:F8:3E:67:13:67:B2:DB:67:AC:35 Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft Manifest number: DA Signing time: Sat 23 Aug 2025 05:41:43 +0000 Manifest this update: Sat 23 Aug 2025 05:41:42 +0000 Manifest next update: Sat 30 Aug 2025 05:41:42 +0000 Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: Aw0gKoSmDHqCdPIXJojYuDf4cn8s2XeCG39fasEIg5g=) 2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 01Cn3pOh4671ZkIDU6odEQ9G33TuU+ryqBzUYewO8xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Validity Not Before: Aug 23 05:41:42 2025 GMT Not After : Aug 30 05:41:42 2025 GMT Subject: CN=68a95496-7f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:eb:b1:52:96:7a:03:c1:cf:57:a2:a5:6d: fc:5b:ed:15:31:9c:e2:af:9e:90:dc:c9:ed:41:02: 47:fa:71:1d:25:74:e2:44:5b:2d:2a:25:41:7b:d2: a5:de:74:fb:d8:9f:6b:be:a5:e8:a6:6a:ca:48:e9: b2:7c:d6:c4:bf:71:e5:2f:8c:7b:a7:c8:0f:e5:97: a8:42:eb:4c:62:c5:c3:8d:ca:7d:ca:29:13:95:f1: e9:97:3d:de:03:73:73:7a:2b:67:57:e6:4c:1f:37: 8f:72:79:ac:1d:c4:b1:74:91:e9:5b:e0:0d:90:9c: fb:9c:95:54:b8:0f:dc:c9:09:57:fe:62:f1:22:02: c0:1f:ea:25:97:47:11:8f:c7:4f:e6:0e:bd:ac:97: f0:e6:af:f1:1c:f4:20:37:90:81:09:db:63:c9:22: a4:2e:c0:60:5a:9a:c0:c6:b8:5b:30:d2:db:a1:9a: ad:5d:13:9f:90:e9:2f:37:12:d3:00:bb:2d:0f:b5: e6:2f:b7:25:02:df:b9:f8:8c:d4:69:97:e9:8e:7b: 47:35:23:18:ad:59:f7:ed:38:50:e0:6e:1d:63:86: e3:9f:20:03:69:6f:98:dc:bd:ad:dc:06:b1:ce:1f: 8b:a7:ef:f2:da:6d:4c:f8:88:4f:fd:4b:99:70:4a: e3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:79:3F:81:C3:FA:E3:76:98:F9:F8:3E:67:13:67:B2:DB:67:AC:35 X509v3 Authority Key Identifier: keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c6:fb:0c:ff:c9:a0:3d:9c:06:a4:b0:b1:38:4f:2a:3f:de: 6c:13:57:53:31:dc:03:f0:ec:93:03:ec:f7:fd:09:a6:cb:64: 10:6d:d3:19:a2:21:4f:26:4b:5c:43:80:6a:cd:84:62:d2:d4: 38:da:19:b8:d6:b3:66:f0:43:ef:4b:f5:20:e7:31:37:75:39: 3a:1e:4c:f1:fd:0d:67:80:2c:b3:c4:c2:d7:20:c3:35:4d:38: 82:73:cc:1d:c6:ba:fa:7f:76:c5:90:ba:fe:3b:83:46:21:3e: 33:ca:84:6e:4e:9a:bb:35:47:01:d4:d5:53:1d:d2:71:17:4c: b7:a3:b8:b3:11:32:f0:c7:e9:4e:9f:92:15:91:8d:33:20:7a: 58:4e:3d:66:99:de:c4:8f:d7:b7:2b:f3:48:3a:cc:05:9b:72: 8b:db:6d:a5:30:9d:f6:6d:13:7a:de:51:55:84:9f:33:6f:36: 44:22:c7:be:a2:ea:94:35:1e:b3:3f:db:38:8a:00:e0:7f:03: 40:75:37:94:eb:e8:04:45:26:cc:66:b0:0e:5c:5c:58:3e:ed: c6:31:1f:61:d4:4d:79:46:7e:16:c9:de:5b:ba:71:6f:71:2c: 06:5f:46:80:3b:4b:30:4c:5c:5e:46:6f:7a:44:2e:34:36:16: db:f4:a8:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDkyMjQxNjY1OTU1ODIxN0M5MzYyN0I5NkQ5QzlFQUZB QzFGQUEzRUUwHhcNMjUwODIzMDU0MTQyWhcNMjUwODMwMDU0MTQyWjAYMRYwFAYD VQQDEw02OGE5NTQ5Ni03ZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WLrsVKWegPBz1eipW38W+0VMZzir56Q3MntQQJH+nEdJXTiRFstKiVBe9Kl 3nT72J9rvqXopmrKSOmyfNbEv3HlL4x7p8gP5ZeoQutMYsXDjcp9yikTlfHplz3e A3NzeitnV+ZMHzePcnmsHcSxdJHpW+ANkJz7nJVUuA/cyQlX/mLxIgLAH+oll0cR j8dP5g69rJfw5q/xHPQgN5CBCdtjySKkLsBgWprAxrhbMNLboZqtXROfkOkvNxLT ALstD7XmL7clAt+5+IzUaZfpjntHNSMYrVn37ThQ4G4dY4bjnyADaW+Y3L2t3Aax zh+Lp+/y2m1M+IhP/UuZcErjVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJ5P4HD +uN2mPn4PmcTZ7LbZ6w1MB8GA1UdIwQYMBaAFJIkFmWVWCF8k2J7ltnJ6vrB+qPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi84MTY5NzJDNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlYeVRZbnVXMmNucS1zSDZv LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlY eVRZbnVXMmNucS1zSDZvLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIxvsM/8mgPZwGpLCxOE8qP95sE1dTMdwD8OyTA+z3/Qmmy2QQbdMZ oiFPJktcQ4BqzYRi0tQ42hm41rNm8EPvS/Ug5zE3dTk6Hkzx/Q1ngCyzxMLXIMM1 TTiCc8wdxrr6f3bFkLr+O4NGIT4zyoRuTpq7NUcB1NVTHdJxF0y3o7izETLwx+lO n5IVkY0zIHpYTj1mmd7Ej9e3K/NIOswFm3KL222lMJ32bRN63lFVhJ8zbzZEIse+ ouqUNR6zP9s4igDgfwNAdTeU6+gERSbMZrAOXFxYPu3GMR9h1E15Rn4Wyd5bunFv cSwGX0aAO0swTFxeRm96RC40Nhbb9Kj7 -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:22 2025 by rpki-client