$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: 8q0tpDcyg9+uB0cFI3CK+mkWPQVN8u66uRdBWfFB2v0= Subject key identifier: 8B:BE:E2:AC:55:61:82:A5:C6:12:C2:A1:F7:8A:EB:D0:7E:A2:96:F1 Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0A4E Signing time: Fri 22 Aug 2025 19:50:16 +0000 Manifest this update: Fri 22 Aug 2025 19:50:15 +0000 Manifest next update: Fri 29 Aug 2025 19:50:15 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: isy3CdfTvf6D1fejHqyAaqrTFERWNgEyWqSwgVq78Qc=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: MlTCpmNvZBXbaN3j5f/1p2NogI1xqgj2n12XSV4tPcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2645 (0xa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Aug 22 19:50:15 2025 GMT Not After : Aug 29 19:50:15 2025 GMT Subject: CN=68a8c9f7-84a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:d5:52:0e:94:c6:e9:54:40:ea:27:4a:48: 88:79:75:fd:2c:fd:dc:f7:7e:3b:e8:e3:9e:d7:51: 02:0b:d5:f0:58:c0:20:f7:ea:8a:c0:d9:d3:f9:b9: 13:3f:55:cd:47:5c:a4:5c:49:91:a3:b7:1b:28:21: f1:ee:4a:d0:07:aa:d6:54:7b:6e:bc:42:84:de:a4: 0d:6d:0c:1d:7a:2a:87:95:8f:67:13:60:43:23:9f: 31:6c:7e:07:b2:7c:75:16:60:66:69:17:7c:ff:d3: 3a:2d:6d:d2:0e:32:5d:b5:c9:f5:6d:69:97:d3:2d: 40:a1:7a:fd:d1:0b:29:02:b3:41:43:80:82:0a:92: f2:fc:34:f8:0d:12:09:d4:d2:e1:25:81:b9:16:d8: 60:aa:03:7c:32:68:f9:39:5d:4f:70:5b:91:a3:8b: 60:d7:7e:4f:42:c9:02:53:a8:9f:5c:36:ea:b4:0e: 0f:cc:e5:16:e5:c0:db:fb:48:d2:c7:7f:2a:85:7e: 92:47:17:98:8e:26:7e:85:8a:20:50:43:b7:4a:89: b5:b1:c7:61:2d:5e:ba:58:41:7a:5e:6f:3a:70:98: f5:59:88:07:12:fd:e5:72:7b:0e:66:6c:7a:c9:24: fe:ee:9e:b4:e2:b9:ab:aa:89:3b:e6:af:55:fc:54: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BE:E2:AC:55:61:82:A5:C6:12:C2:A1:F7:8A:EB:D0:7E:A2:96:F1 X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:f5:ba:ce:81:4a:d7:1f:96:8d:a8:bc:73:86:67:4f:fc:16: a0:93:4e:da:a0:7d:32:d5:ce:07:31:56:ae:91:ab:2e:aa:78: 51:63:21:a5:93:b2:95:90:bd:a9:31:df:09:93:44:40:82:62: 00:d9:10:bc:56:4c:16:0d:5a:50:e9:fd:00:de:28:e6:f5:38: f7:73:37:9a:8f:32:e3:a9:b7:87:0d:2d:bb:c0:31:f2:a5:1a: 3c:80:53:ea:b9:fb:80:67:81:9e:a2:8b:40:e5:fb:5f:bc:bc: 74:f3:48:ff:c2:56:17:47:ad:e6:94:c1:de:98:50:f7:e8:6b: cc:1c:b7:bb:ea:75:fd:b3:cd:ee:01:9e:60:5a:28:f4:7a:5a: e7:ed:de:54:36:37:53:f6:65:8c:ff:cd:ea:ca:8a:23:ba:fc: ef:d3:e1:94:77:30:a2:9c:56:f2:4a:a0:80:c6:e7:7f:6d:9e: f4:72:5f:36:32:34:17:05:0a:7d:84:1b:37:40:2a:07:eb:ec: 1d:59:31:34:53:8d:de:6b:b6:65:4a:d7:f1:6b:01:70:02:69: 60:fb:d7:37:b7:d4:cb:da:5c:1b:39:a6:04:d7:82:bf:57:28: 41:0f:dc:1d:36:c5:12:57:50:59:59:45:25:c0:c0:91:74:b9: 83:45:c1:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjUwODIyMTk1MDE1WhcNMjUwODI5MTk1MDE1WjAYMRYwFAYD VQQDEw02OGE4YzlmNy04NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEXVUg6UxulUQOonSkiIeXX9LP3c93476OOe11ECC9XwWMAg9+qKwNnT+bkT P1XNR1ykXEmRo7cbKCHx7krQB6rWVHtuvEKE3qQNbQwdeiqHlY9nE2BDI58xbH4H snx1FmBmaRd8/9M6LW3SDjJdtcn1bWmX0y1AoXr90QspArNBQ4CCCpLy/DT4DRIJ 1NLhJYG5FthgqgN8Mmj5OV1PcFuRo4tg135PQskCU6ifXDbqtA4PzOUW5cDb+0jS x38qhX6SRxeYjiZ+hYogUEO3Som1scdhLV66WEF6Xm86cJj1WYgHEv3lcnsOZmx6 yST+7p604rmrqok75q9V/FQLcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIu+4qxV YYKlxhLCofeK69B+opbxMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx9brOgUrXH5aNqLxzhmdP/Bagk07aoH0y1c4HMVaukasuqnhRYyGl k7KVkL2pMd8Jk0RAgmIA2RC8VkwWDVpQ6f0A3ijm9Tj3czeajzLjqbeHDS27wDHy pRo8gFPqufuAZ4GeootA5ftfvLx080j/wlYXR63mlMHemFD36GvMHLe76nX9s83u AZ5gWij0elrn7d5UNjdT9mWM/83qyoojuvzv0+GUdzCinFbySqCAxud/bZ70cl82 MjQXBQp9hBs3QCoH6+wdWTE0U43ea7ZlStfxawFwAmlg+9c3t9TL2lwbOaYE14K/ VyhBD9wdNsUSV1BZWUUlwMCRdLmDRcHp -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:09 2025 by rpki-client