$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: 3W4tAdxrrtx7MNP81CzHxMNuV0PcRMa1TGoCXJATHhg= Subject key identifier: 51:A4:08:3A:5D:6F:B7:F6:38:7A:82:57:D9:F3:24:F8:1B:EB:AE:85 Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 03C3 Signing time: Sat 23 Aug 2025 00:56:19 +0000 Manifest this update: Sat 23 Aug 2025 00:56:19 +0000 Manifest next update: Sat 30 Aug 2025 00:56:19 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: Th1vbkBl1M3UKEFo+K2B9uoyf2DkjqoK+qz7nYZF0AY=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: CoOJrAcKTrWo0nejzXhp58RWFVEIO9a7vZX9DurBX3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: Aug 23 00:56:19 2025 GMT Not After : Aug 30 00:56:19 2025 GMT Subject: CN=68a911b3-9888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a0:95:06:45:38:bd:3f:62:4e:4c:4c:35:f9: a2:ff:8a:90:84:fa:a7:31:b6:80:c5:83:f5:35:ee: d9:6a:b4:1d:b0:87:0a:01:41:75:3b:c6:70:9b:51: 41:bf:0b:91:8d:70:cb:0a:ba:d4:6d:e7:ed:62:bd: 8b:5b:a4:bc:4e:18:0d:c9:de:e6:72:80:3f:f0:ec: 73:b7:f5:fc:96:49:27:a9:97:6b:b4:0f:de:c8:92: 67:f4:70:c1:9d:bb:e2:54:7d:da:af:b5:91:41:1b: 22:71:3c:80:b7:86:63:f0:54:21:39:ec:c4:2b:a0: fb:25:ec:a9:eb:f5:1e:96:39:b5:24:28:fe:f6:6d: 51:a6:10:90:11:51:2a:00:7a:74:71:54:00:33:16: a0:52:e2:56:cc:50:17:d2:44:da:ba:ec:15:f6:8e: 28:7d:da:52:02:c3:95:63:ec:6e:e7:53:4e:45:e1: 6b:20:ca:53:a2:c7:63:09:b3:fe:e5:75:58:79:b2: 8e:7f:4b:5a:39:15:09:44:73:54:df:3b:f6:fa:c4: b6:0b:27:d8:a4:54:de:e9:17:66:3f:e5:9f:b5:46: e5:8e:9e:6b:b7:c1:3f:5c:d9:db:cb:a7:80:11:e4: ce:05:bf:78:04:30:ae:32:70:7e:eb:ee:7c:8c:11: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A4:08:3A:5D:6F:B7:F6:38:7A:82:57:D9:F3:24:F8:1B:EB:AE:85 X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:af:9f:ea:ae:b3:70:2d:94:59:3e:be:39:e6:2e:92:36:fa: 56:e5:a1:90:75:14:ea:19:fe:68:10:99:09:f6:13:e6:fc:65: 95:67:5a:85:5c:18:dd:23:ec:79:85:2b:60:1a:c1:f0:3e:2c: f1:cf:6c:fb:a0:61:68:2f:d1:c4:3f:11:7f:a4:b7:69:d4:32: 75:3b:b3:cb:4a:c0:e3:5e:46:00:94:a7:fc:26:9d:65:e5:90: 9c:a4:0e:a6:ac:ed:7d:30:0b:10:51:57:b7:36:7e:e2:3e:a0: 5f:34:a2:97:90:d0:85:99:82:ee:07:11:59:f0:8c:eb:e0:a9: 77:91:78:78:0d:2c:90:cb:27:cc:35:2e:a2:15:53:6b:e4:46: f5:07:a5:08:f0:c8:31:9d:41:48:39:05:48:08:1d:09:a1:16: 23:c4:97:64:5b:3c:38:1c:f6:ad:f9:ad:35:ec:ec:1e:61:b6: d1:9c:75:0f:9a:4e:4f:ef:d9:f1:d3:00:b2:48:54:f0:15:f1: 7b:88:75:90:e5:7c:34:76:48:fd:b8:93:39:e7:92:c7:66:70: a2:f7:e2:28:cc:62:4e:fc:72:c2:7f:ea:85:94:dc:8d:c3:e9: ec:94:fe:47:97:5b:46:5c:25:bd:25:f2:6a:14:dd:c8:2d:98: 90:60:0b:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjUwODIzMDA1NjE5WhcNMjUwODMwMDA1NjE5WjAYMRYwFAYD VQQDEw02OGE5MTFiMy05ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qCVBkU4vT9iTkxMNfmi/4qQhPqnMbaAxYP1Ne7ZarQdsIcKAUF1O8Zwm1FB vwuRjXDLCrrUbeftYr2LW6S8ThgNyd7mcoA/8Oxzt/X8lkknqZdrtA/eyJJn9HDB nbviVH3ar7WRQRsicTyAt4Zj8FQhOezEK6D7Jeyp6/Ueljm1JCj+9m1RphCQEVEq AHp0cVQAMxagUuJWzFAX0kTauuwV9o4ofdpSAsOVY+xu51NOReFrIMpTosdjCbP+ 5XVYebKOf0taORUJRHNU3zv2+sS2CyfYpFTe6RdmP+WftUbljp5rt8E/XNnby6eA EeTOBb94BDCuMnB+6+58jBFNcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGkCDpd b7f2OHqCV9nzJPgb666FMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbr5/qrrNwLZRZPr455i6SNvpW5aGQdRTqGf5oEJkJ9hPm/GWVZ1qF XBjdI+x5hStgGsHwPizxz2z7oGFoL9HEPxF/pLdp1DJ1O7PLSsDjXkYAlKf8Jp1l 5ZCcpA6mrO19MAsQUVe3Nn7iPqBfNKKXkNCFmYLuBxFZ8Izr4Kl3kXh4DSyQyyfM NS6iFVNr5Eb1B6UI8MgxnUFIOQVICB0JoRYjxJdkWzw4HPat+a017OweYbbRnHUP mk5P79nx0wCySFTwFfF7iHWQ5Xw0dkj9uJM555LHZnCi9+IozGJO/HLCf+qFlNyN w+nslP5Hl1tGXCW9JfJqFN3ILZiQYAsc -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:14 2025 by rpki-client