$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: YzDDxqcWqQS2C5RtrJ6z3giRAWW01BBA3JgmUxUhu4w= Subject key identifier: FB:43:D5:5D:8C:96:79:E9:47:EE:2E:7C:F0:11:AF:AF:64:5A:2A:44 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 05D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 05CE Signing time: Fri 22 Aug 2025 23:14:49 +0000 Manifest this update: Fri 22 Aug 2025 23:14:49 +0000 Manifest next update: Fri 29 Aug 2025 23:14:49 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: iwj+wJ5omu5PJvTSszrAMtzk3cVizJID1PTcgOz5sgs=) 2: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1495 (0x5d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Aug 22 23:14:49 2025 GMT Not After : Aug 29 23:14:49 2025 GMT Subject: CN=68a8f9e9-f0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:6b:a7:5e:b5:d7:f8:08:8e:df:30:45:e8: 44:31:f3:ba:98:8d:c5:49:0a:df:c6:06:2a:1a:7a: 98:f3:03:93:ca:0c:ee:69:36:48:65:fd:40:f4:e6: 13:18:dc:2b:d4:41:20:ec:cf:4a:6c:9e:c3:56:7e: 81:3d:6a:a9:bf:ab:8b:c0:d6:c1:47:b1:53:90:28: bc:29:fb:27:e5:83:49:f5:69:30:cb:de:f3:a8:ba: f4:e7:dc:0d:4f:58:83:30:c9:31:2d:87:cc:7b:fa: 87:f6:4b:30:cd:16:99:2b:c1:70:01:32:3c:e3:df: c6:cf:be:dd:9f:b5:ff:89:9b:2f:6e:b0:32:7b:11: a6:e4:f4:61:e8:fd:f6:9c:46:bb:1c:37:d6:4b:cf: 52:49:53:e7:a8:05:25:4e:69:a8:0d:fb:5c:70:f9: 4c:68:03:1b:d3:c7:f0:52:14:4d:ab:90:b2:0f:2e: fb:e3:79:29:bc:42:e4:4f:ea:45:2f:4c:54:a2:3c: 99:cd:0e:a7:7b:3b:f4:ec:b7:4c:93:88:b0:8e:d5: c3:44:51:f4:81:06:11:42:17:72:d4:d0:00:4b:16: 9a:37:1d:8c:e7:4e:d3:0e:b9:15:41:d4:87:16:8c: b7:4e:87:a6:97:f7:59:09:71:75:a6:25:09:fa:c4: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:43:D5:5D:8C:96:79:E9:47:EE:2E:7C:F0:11:AF:AF:64:5A:2A:44 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:11:f9:84:27:f3:b7:71:b7:ca:80:9b:3d:f7:cb:97:d2:2a: 83:31:9f:e3:72:84:f2:f6:6e:1b:da:bd:79:ac:f5:d1:0d:fc: c5:13:70:70:04:1c:28:d2:24:73:b3:4a:8a:9f:92:17:ef:2d: 1d:56:9b:5a:b1:2f:75:aa:50:ff:7d:42:97:28:b3:60:db:dd: db:41:04:28:c3:80:6f:81:1e:2f:2a:54:b8:79:db:e6:b3:5b: b7:b2:96:74:f3:0d:69:e6:5f:61:96:7b:d9:99:12:10:b0:72: f1:10:e9:14:f7:73:6e:33:6d:42:8b:c3:99:56:b5:91:9e:bd: d7:d6:d6:e6:7e:14:27:89:18:fd:d5:b6:de:15:de:b0:f1:84: 9d:85:10:e5:fd:71:fd:3f:eb:e2:0c:ff:b6:fb:d6:b5:fe:ad: 2e:bc:8a:d1:e0:fd:dc:15:6e:34:59:99:82:e1:dc:1d:4f:3e: d4:06:49:6f:5d:62:0e:77:44:65:7a:60:7a:31:4c:3f:0a:a6: 8b:03:1c:61:fc:a6:ca:79:99:ad:f5:51:6c:10:a2:b4:72:eb: a7:bb:bc:1c:3e:be:23:e2:46:8e:ed:11:90:c0:ea:f1:df:63: 9f:ce:ee:b1:0f:44:d8:d1:cd:88:fc:42:8b:83:bd:f5:50:4f: 9e:9c:f4:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUwODIyMjMxNDQ5WhcNMjUwODI5MjMxNDQ5WjAYMRYwFAYD VQQDEw02OGE4ZjllOS1mMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt59rp1611/gIjt8wRehEMfO6mI3FSQrfxgYqGnqY8wOTygzuaTZIZf1A9OYT GNwr1EEg7M9KbJ7DVn6BPWqpv6uLwNbBR7FTkCi8Kfsn5YNJ9Wkwy97zqLr059wN T1iDMMkxLYfMe/qH9kswzRaZK8FwATI849/Gz77dn7X/iZsvbrAyexGm5PRh6P32 nEa7HDfWS89SSVPnqAUlTmmoDftccPlMaAMb08fwUhRNq5CyDy7743kpvELkT+pF L0xUojyZzQ6nezv07LdMk4iwjtXDRFH0gQYRQhdy1NAASxaaNx2M507TDrkVQdSH Foy3Toeml/dZCXF1piUJ+sQrdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtD1V2M lnnpR+4ufPARr69kWipEMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALEfmEJ/O3cbfKgJs998uX0iqDMZ/jcoTy9m4b2r15rPXRDfzFE3Bw BBwo0iRzs0qKn5IX7y0dVptasS91qlD/fUKXKLNg293bQQQow4BvgR4vKlS4edvm s1u3spZ08w1p5l9hlnvZmRIQsHLxEOkU93NuM21Ci8OZVrWRnr3X1tbmfhQniRj9 1bbeFd6w8YSdhRDl/XH9P+viDP+2+9a1/q0uvIrR4P3cFW40WZmC4dwdTz7UBklv XWIOd0RlemB6MUw/CqaLAxxh/KbKeZmt9VFsEKK0cuunu7wcPr4j4kaO7RGQwOrx 32Ofzu6xD0TY0c2I/EKLg731UE+enPTx -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:02 2025 by rpki-client