$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: Ts+O3of0VsTFoVv2X45ShOdawcVyJEyoUD35ko8GgFk= Subject key identifier: F7:23:72:7E:54:FB:18:16:33:0C:A2:A5:7E:DD:94:A9:F4:27:F6:57 Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 3911 Signing time: Fri 22 Aug 2025 14:36:37 +0000 Manifest this update: Fri 22 Aug 2025 14:36:36 +0000 Manifest next update: Fri 29 Aug 2025 14:36:36 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: DiG76YYLJVpdZu8Jq8kUG9KnurUmyCpkQMP8gkute5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Aug 22 14:36:36 2025 GMT Not After : Aug 29 14:36:36 2025 GMT Subject: CN=68a88074-04d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:45:6c:64:b9:19:05:50:ce:86:93:3b:7c: 1e:fc:bb:be:de:33:55:a6:e7:48:0d:81:07:be:37: b6:42:bd:c7:b0:22:27:bc:6d:d1:36:ba:47:73:8a: 11:a8:4f:68:a4:fc:bd:b5:7a:63:de:30:41:91:03: e0:39:18:bb:27:2a:90:91:55:49:6e:25:28:90:7d: 33:c0:ef:af:06:39:77:b1:30:68:d3:0e:84:8d:04: 97:ba:b0:88:a7:49:02:43:3d:78:af:d8:04:75:a3: ca:77:56:b7:fd:c0:27:25:64:dc:6c:81:24:31:5b: c2:dd:c8:62:7e:df:ad:73:45:f9:05:02:82:1a:4a: 8d:97:cd:a1:c8:90:c1:30:df:db:38:dc:f5:57:46: 62:ae:29:8f:62:13:82:4e:58:92:8f:dc:85:b4:f8: 2f:b6:65:d7:f8:e2:3b:d8:a7:12:67:d3:97:bb:a1: 1f:24:1e:22:8a:fc:8c:1e:ef:0f:a2:f3:4b:0d:c9: 43:83:c1:25:f4:68:ba:a5:ee:5a:78:8f:91:3e:47: d5:26:85:f3:3b:1f:4a:29:d9:29:60:4f:cb:67:d9: 3d:af:48:12:e5:35:06:5e:1c:01:49:78:d4:b3:63: 5f:4a:3b:9d:1a:d2:d6:4f:90:83:9e:80:70:92:df: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:23:72:7E:54:FB:18:16:33:0C:A2:A5:7E:DD:94:A9:F4:27:F6:57 X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:15:3d:99:9c:25:25:a2:6d:f1:a5:cb:14:8a:f5:2a:a3:96: 48:a6:ea:78:41:4a:e3:ff:3f:ae:03:60:c8:85:44:aa:de:25: b0:70:ad:05:f7:cf:cb:06:df:9f:d0:f8:81:a7:8a:3e:9b:07: f4:d0:c0:07:83:90:10:7b:41:f1:b0:19:7c:c9:d9:54:cd:38: 3d:42:25:bb:0c:d8:f3:82:d1:20:7c:e9:b8:01:35:6a:60:c4: 37:33:d1:ab:22:25:6a:9b:7f:78:4f:64:5d:d2:f8:43:b1:65: f4:87:67:ad:13:f3:aa:c3:f3:92:5e:5b:b5:7f:dd:e5:04:d5: 23:d8:03:2f:93:87:35:fa:6f:a9:2d:55:d3:bf:80:89:60:e3: 66:ed:9a:fa:cb:6f:f9:9c:a6:8e:40:2b:2c:9b:f2:a7:06:12: da:a1:eb:f0:22:0d:2d:61:3b:88:4c:0a:c6:66:52:3c:a1:ca: bf:35:fe:8f:05:1b:50:59:84:42:06:bd:24:62:50:a2:74:c6: 51:3b:a1:45:76:d1:06:40:19:ef:c3:3e:1e:ab:71:ca:1c:61: 56:fb:79:48:eb:ff:c4:1d:00:5e:54:f4:64:95:81:b2:3d:32: 8e:74:de:14:69:f5:a8:20:3c:a9:26:89:f6:d0:be:e7:62:b8: db:85:41:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUwODIyMTQzNjM2WhcNMjUwODI5MTQzNjM2WjAYMRYwFAYD VQQDEw02OGE4ODA3NC0wNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvptFbGS5GQVQzoaTO3we/Lu+3jNVpudIDYEHvje2Qr3HsCInvG3RNrpHc4oR qE9opPy9tXpj3jBBkQPgORi7JyqQkVVJbiUokH0zwO+vBjl3sTBo0w6EjQSXurCI p0kCQz14r9gEdaPKd1a3/cAnJWTcbIEkMVvC3chift+tc0X5BQKCGkqNl82hyJDB MN/bONz1V0ZirimPYhOCTliSj9yFtPgvtmXX+OI72KcSZ9OXu6EfJB4iivyMHu8P ovNLDclDg8El9Gi6pe5aeI+RPkfVJoXzOx9KKdkpYE/LZ9k9r0gS5TUGXhwBSXjU s2NfSjudGtLWT5CDnoBwkt8RhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcjcn5U +xgWMwyipX7dlKn0J/ZXMB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHFT2ZnCUlom3xpcsUivUqo5ZIpup4QUrj/z+uA2DIhUSq3iWwcK0F 98/LBt+f0PiBp4o+mwf00MAHg5AQe0HxsBl8ydlUzTg9QiW7DNjzgtEgfOm4ATVq YMQ3M9GrIiVqm394T2Rd0vhDsWX0h2etE/Oqw/OSXlu1f93lBNUj2AMvk4c1+m+p LVXTv4CJYONm7Zr6y2/5nKaOQCssm/KnBhLaoevwIg0tYTuITArGZlI8ocq/Nf6P BRtQWYRCBr0kYlCidMZRO6FFdtEGQBnvwz4eq3HKHGFW+3lI6//EHQBeVPRklYGy PTKOdN4UafWoIDypJon20L7nYrjbhUGV -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:01 2025 by rpki-client