$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json) Hash identifier: 4pnv7B+81hYhZjUW+qR0uKX6YfumiicAL1OhODKKiKE= Subject key identifier: 0E:34:A3:F8:48:DB:58:09:26:26:54:B3:7F:86:F4:D5:89:B4:76:FD Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Certificate serial: 0AD4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft Manifest number: 0ACC Signing time: Fri 22 Aug 2025 19:38:13 +0000 Manifest this update: Fri 22 Aug 2025 19:38:13 +0000 Manifest next update: Fri 29 Aug 2025 19:38:13 +0000 Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: mjHMRFWZwh5Rbugl/r+W+86iVu5p1whqTTHxdZ2bmF8=) 2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: 3V95dG8EwbjGC7EMndTVlVAHQWvt90W2HKQwUZ++P/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2772 (0xad4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Validity Not Before: Aug 22 19:38:13 2025 GMT Not After : Aug 29 19:38:13 2025 GMT Subject: CN=68a8c725-a065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9f:23:21:89:28:e3:03:1a:1b:df:48:9c:79: 52:b1:eb:c7:64:25:7f:e1:e5:af:2e:9b:cb:30:23: 61:00:86:da:65:98:8e:85:21:21:a7:c1:4a:c1:b4: 99:7c:5c:48:0f:60:32:14:4a:6b:0d:72:b4:6d:6d: 6b:6f:8c:1f:55:d8:2d:a0:11:71:ac:ff:68:b2:9e: 3c:af:b6:95:25:8d:b1:9a:2a:ce:80:a2:aa:db:fe: 45:fd:15:57:13:fd:e5:af:f7:7c:bd:61:0f:9c:28: d7:c0:ca:ad:ed:8e:54:de:71:f6:2c:95:9a:7e:e9: 83:cf:f6:15:df:b7:72:01:6e:ea:c4:67:d1:fc:ac: a4:fd:58:ed:17:ee:2b:88:4c:1f:41:d9:c5:28:49: c2:07:0d:10:48:85:97:07:f6:d4:a3:b4:b0:0e:78: c1:e4:82:8d:9a:0c:f6:df:8a:fa:1f:90:2f:c9:d6: 81:d5:62:36:ac:15:2a:08:63:3c:07:48:18:0e:49: c2:77:67:37:0b:3a:f8:44:60:5f:bc:a1:e7:33:5e: 63:5a:e0:80:25:e5:5f:67:db:0b:52:00:e1:78:20: e2:be:75:04:32:af:fa:d4:19:36:0c:9a:17:e7:6b: 9b:dc:df:9c:cc:4b:fc:0d:d2:18:d0:1d:59:fc:a9: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:34:A3:F8:48:DB:58:09:26:26:54:B3:7F:86:F4:D5:89:B4:76:FD X509v3 Authority Key Identifier: keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:8a:87:52:d5:58:97:f0:4e:03:3b:10:78:62:93:68:40:9a: b9:cc:5f:00:88:4d:a0:60:28:5d:8f:16:a3:7c:68:7e:0a:8d: 70:fa:8c:c4:f1:5a:6c:d5:6c:98:89:d0:4d:e6:11:b1:a5:71: 80:4d:77:0c:40:f8:01:83:1a:9d:da:af:99:5c:e6:e5:bd:58: 43:f5:c7:19:02:81:69:3b:78:56:33:dd:af:e0:26:12:c1:00: 16:28:ab:ed:c4:6a:39:12:63:07:f2:3a:d2:ca:d7:c9:46:65: 76:2e:c1:ae:62:86:f8:82:6d:bb:b6:77:32:a5:3c:24:09:f2: ee:83:ef:37:87:04:e8:fb:a9:d6:20:cf:11:d0:5f:34:92:ec: 68:4d:a0:f2:33:e1:fb:7f:50:37:ea:b5:29:1d:86:fb:f4:6f: 09:1c:b3:58:c8:2d:79:f4:b0:f1:b5:49:e2:50:9f:cd:39:b6: 49:e5:10:17:70:ac:4f:1d:71:7b:da:66:20:95:a3:bb:a5:16: f9:30:52:41:be:27:00:33:bf:23:44:10:e9:96:e6:ce:34:93: be:40:c0:01:9a:9b:f9:af:9e:79:de:5a:5f:ca:b7:c6:c2:77: a3:32:36:ad:a5:02:d4:43:06:7a:fb:95:f3:bd:4c:67:d3:e8: f6:52:d5:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4 NjYzNEFBMDMwHhcNMjUwODIyMTkzODEzWhcNMjUwODI5MTkzODEzWjAYMRYwFAYD VQQDEw02OGE4YzcyNS1hMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5J8jIYko4wMaG99InHlSsevHZCV/4eWvLpvLMCNhAIbaZZiOhSEhp8FKwbSZ fFxID2AyFEprDXK0bW1rb4wfVdgtoBFxrP9osp48r7aVJY2xmirOgKKq2/5F/RVX E/3lr/d8vWEPnCjXwMqt7Y5U3nH2LJWafumDz/YV37dyAW7qxGfR/Kyk/VjtF+4r iEwfQdnFKEnCBw0QSIWXB/bUo7SwDnjB5IKNmgz234r6H5AvydaB1WI2rBUqCGM8 B0gYDknCd2c3Czr4RGBfvKHnM15jWuCAJeVfZ9sLUgDheCDivnUEMq/61Bk2DJoX 52ub3N+czEv8DdIY0B1Z/Klk7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA40o/hI 21gJJiZUs3+G9NWJtHb9MB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9BRUQzRDM1RTU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1q el9xeFVnakFycGlHWTBxZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqiodS1ViX8E4DOxB4YpNoQJq5zF8AiE2gYChdjxajfGh+Co1w+ozE 8Vps1WyYidBN5hGxpXGATXcMQPgBgxqd2q+ZXOblvVhD9ccZAoFpO3hWM92v4CYS wQAWKKvtxGo5EmMH8jrSytfJRmV2LsGuYob4gm27tncypTwkCfLug+83hwTo+6nW IM8R0F80kuxoTaDyM+H7f1A36rUpHYb79G8JHLNYyC159LDxtUniUJ/NObZJ5RAX cKxPHXF72mYglaO7pRb5MFJBvicAM78jRBDplubONJO+QMABmpv5r5553lpfyrfG wnejMjatpQLUQwZ6+5XzvUxn0+j2UtVM -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:50 2025 by rpki-client