$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json) Hash identifier: neXsuD0Xu79wDEfajDNL+fQBAC2zcfJ14RGT5EH8xwA= Subject key identifier: 33:5E:40:FF:6E:A8:B4:9E:42:C7:72:7B:90:C5:8F:95:C3:73:18:1B Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Certificate serial: 060B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft Manifest number: 0604 Signing time: Fri 22 Aug 2025 23:03:08 +0000 Manifest this update: Fri 22 Aug 2025 23:03:07 +0000 Manifest next update: Fri 29 Aug 2025 23:03:07 +0000 Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: DBZlLt3VrEojVDNRmp1f0VOmJGlsjmkfpkO6ScOKB3w=) 2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: Zin5Bd4weOB/NhOZcniDknZ2HAO8m6tl6cWhzqt6SiQ=) 3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: 7ouwwfgk28NyLw1cYRcaWcwCb0VnFZR8rpTez7FwTos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1547 (0x60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Validity Not Before: Aug 22 23:03:07 2025 GMT Not After : Aug 29 23:03:07 2025 GMT Subject: CN=68a8f72b-1607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:64:41:b8:b0:c9:71:9c:40:4d:7c:1d:54: ce:e2:fe:20:62:85:d2:b3:e5:bc:ec:05:f3:1e:85: c5:53:2a:ce:5a:85:99:d2:dc:b9:1d:10:b4:48:5d: 01:4b:fb:6d:5b:f7:c2:5a:26:5c:ad:77:03:36:8c: b4:fd:31:0a:53:dc:af:df:4f:dc:a7:57:17:f2:90: ee:22:10:23:ec:db:38:87:ce:b0:95:e4:f6:14:9e: 25:1f:64:99:2a:2b:6e:2c:a0:b1:8b:25:fc:2f:8b: b4:f7:90:bd:a7:f7:5b:11:2d:52:d7:67:bb:40:c2: 39:f9:44:2e:0d:65:01:53:f7:54:14:db:26:7a:8a: 4d:05:69:76:15:06:48:ef:e3:65:ff:64:37:29:d6: 1f:18:4c:0b:d1:3d:ac:14:b6:0d:cd:d1:db:7e:ea: a1:fd:7c:ed:f2:b7:eb:6c:20:ca:33:1f:3f:5e:c7: 6a:59:3c:2d:2c:aa:74:eb:ad:42:26:de:24:86:be: 33:1e:a4:d9:16:10:5e:68:e3:19:4a:c9:0f:53:27: 16:6e:9e:d0:36:5e:8b:40:09:cc:6e:ce:07:11:c0: e1:6b:63:9f:c3:cb:37:b9:de:fd:a8:a0:3a:6a:ef: ba:b6:13:28:3c:cd:60:b4:6a:3a:80:a1:d1:8d:0f: de:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5E:40:FF:6E:A8:B4:9E:42:C7:72:7B:90:C5:8F:95:C3:73:18:1B X509v3 Authority Key Identifier: keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e9:a3:16:38:9b:42:0e:bb:8a:f6:49:eb:75:a2:6f:f7:00: dd:c2:49:a8:57:fd:69:4d:57:b8:4e:73:9c:81:d2:99:a0:d5: 12:ac:f8:e8:f4:fd:4c:31:02:fd:d1:69:da:d8:64:c2:61:8d: 76:86:0e:24:ab:39:98:24:e7:99:56:19:5b:d2:41:37:d6:96: e1:ec:a3:a5:53:21:db:54:93:a6:30:75:b1:92:65:92:67:d6: d4:c9:16:3f:83:5e:b6:4d:b8:d3:1c:12:56:0a:d9:ed:33:41: 73:6c:ec:5c:3d:9b:5e:a4:d0:24:12:ca:ae:76:e3:04:86:d6: 01:a6:14:86:01:c7:bc:b3:60:8d:d1:91:63:94:3d:d8:b8:58: c9:f6:8c:1d:36:af:2c:9f:cb:ed:6f:b8:18:62:b1:7b:12:a2: 84:4b:28:a5:cb:25:a5:c8:5d:30:6f:b0:bd:09:48:57:2b:bb: 44:77:6b:45:7f:9a:64:3b:d1:5f:32:23:9d:a7:24:17:25:50: ab:79:dc:54:98:be:17:fd:31:bc:e2:dd:a3:80:51:43:df:46: ff:3b:cc:c1:74:5f:6a:00:d5:ca:c2:f8:b4:88:15:ca:88:e9: b8:64:76:12:5d:98:e0:47:4a:4a:56:4a:52:d8:dd:bf:1f:f5: ed:53:f5:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF NzA5OTRGMDMwHhcNMjUwODIyMjMwMzA3WhcNMjUwODI5MjMwMzA3WjAYMRYwFAYD VQQDEw02OGE4ZjcyYi0xNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqJkQbiwyXGcQE18HVTO4v4gYoXSs+W87AXzHoXFUyrOWoWZ0ty5HRC0SF0B S/ttW/fCWiZcrXcDNoy0/TEKU9yv30/cp1cX8pDuIhAj7Ns4h86wleT2FJ4lH2SZ KituLKCxiyX8L4u095C9p/dbES1S12e7QMI5+UQuDWUBU/dUFNsmeopNBWl2FQZI 7+Nl/2Q3KdYfGEwL0T2sFLYNzdHbfuqh/Xzt8rfrbCDKMx8/XsdqWTwtLKp0661C Jt4khr4zHqTZFhBeaOMZSskPUycWbp7QNl6LQAnMbs4HEcDha2Ofw8s3ud79qKA6 au+6thMoPM1gtGo6gKHRjQ/eJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNeQP9u qLSeQsdye5DFj5XDcxgbMB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5 QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFNC8yNzUwNTg4MkI5QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZS MnpteU4wTmJGMDNuQ1pUd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD6aMWOJtCDruK9knrdaJv9wDdwkmoV/1pTVe4TnOcgdKZoNUSrPjo 9P1MMQL90Wna2GTCYY12hg4kqzmYJOeZVhlb0kE31pbh7KOlUyHbVJOmMHWxkmWS Z9bUyRY/g162TbjTHBJWCtntM0FzbOxcPZtepNAkEsquduMEhtYBphSGAce8s2CN 0ZFjlD3YuFjJ9owdNq8sn8vtb7gYYrF7EqKESyilyyWlyF0wb7C9CUhXK7tEd2tF f5pkO9FfMiOdpyQXJVCredxUmL4X/TG84t2jgFFD30b/O8zBdF9qANXKwvi0iBXK iOm4ZHYSXZjgR0pKVkpS2N2/H/XtU/Vf -----END CERTIFICATE-----Generated at Sat Aug 23 22:40:17 2025 by rpki-client