$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft File: kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json) Hash identifier: Hky10+0R3xlRHIGGqOUu7uAX4MyalU9gSh+QKf1l484= Subject key identifier: 23:B8:C6:E3:BC:C6:44:68:B4:10:51:13:A0:6A:F5:8F:9C:27:38:37 Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft Manifest number: 03CA Signing time: Sat 23 Aug 2025 00:52:35 +0000 Manifest this update: Sat 23 Aug 2025 00:52:34 +0000 Manifest next update: Sat 30 Aug 2025 00:52:34 +0000 Files and hashes: 1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: 9hNzgUPu3kIohKTbkkt0ChB5AytBlgcP8xi2fjIKLgE=) 2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: ys9QvzSFj3FhbpKZdlZ1B6mYP128OL/SXk3uErxC5zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Validity Not Before: Aug 23 00:52:34 2025 GMT Not After : Aug 30 00:52:34 2025 GMT Subject: CN=68a910d2-ea9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:3c:15:7e:4e:e7:7b:28:a4:06:4c:f6:da: ea:6e:de:d9:1c:15:c5:62:ec:55:1a:87:7e:2a:51: af:aa:e2:6a:32:d8:82:e1:59:d2:cb:10:6f:70:a0: a4:c4:28:b4:45:45:a8:51:52:1e:b0:bc:e5:27:dc: 2b:4f:16:cd:a8:a3:e7:8a:69:2d:fb:30:1c:8e:16: 70:89:38:e6:3c:06:2c:bd:c2:d9:e9:64:5b:ca:16: 81:d2:06:bc:bc:19:ad:31:f2:c0:aa:bb:47:ad:b0: fc:37:e4:93:55:30:fd:4f:4e:d5:f1:a8:fa:9e:c9: 16:4f:bd:03:79:4d:a7:3a:b6:92:cf:6d:18:8c:db: b9:e4:fd:b1:43:4e:c3:39:f1:a6:65:5a:4f:9e:96: d9:9f:d5:60:6d:b2:8e:fe:49:81:f5:af:62:49:53: 9e:8e:7c:c4:d3:98:39:76:37:71:68:3b:3b:4a:bf: 3a:68:b8:8f:9b:39:12:41:dc:ee:cd:2b:52:40:7d: d8:95:4b:c2:19:0f:7a:fe:34:b5:76:89:b7:1c:c2: cd:3d:be:aa:0e:ab:83:ec:b7:34:0f:7c:3e:a8:3b: f9:b8:53:3f:fe:62:bb:2f:7c:e7:bb:1a:49:92:ca: db:06:95:2b:36:7b:d8:cd:7e:53:e1:72:92:64:2f: 27:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B8:C6:E3:BC:C6:44:68:B4:10:51:13:A0:6A:F5:8F:9C:27:38:37 X509v3 Authority Key Identifier: keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:90:b9:2c:2c:b1:19:ac:80:ba:6c:8a:a6:f7:ad:c8:97:e1: 26:a0:46:63:6c:ee:71:b8:6d:27:e7:4f:a5:1e:95:3f:50:cc: 9b:96:f7:c0:f0:25:4f:06:3d:75:81:b3:90:8b:a6:f5:86:fc: 4b:89:ad:a2:40:90:09:e8:09:2e:c4:90:e3:2c:a3:43:5d:4a: f4:e7:b8:19:61:e0:88:2e:05:7f:18:e9:a8:f3:84:49:5e:82: 52:25:c0:bf:7b:55:ee:58:f4:ba:78:70:fa:ec:4b:82:2e:b3: fb:57:f2:44:73:67:76:e5:52:47:6d:c7:41:61:8a:8b:47:41: f2:30:5e:f6:a4:51:f1:fb:a8:e1:be:58:ee:bb:d6:8f:c6:97: a7:79:10:8f:bb:ea:1d:47:73:b3:fc:3c:65:83:7a:d9:82:9b: 31:b8:89:b2:e7:af:8b:99:fe:00:ab:d1:e3:06:7b:b3:4c:c7: d4:a4:2f:df:98:1d:a3:0e:62:0f:eb:c1:2e:d1:e3:d9:6a:09: c9:b9:37:13:00:7a:8f:2c:cd:46:e3:94:21:9b:5b:b6:24:1e: a2:56:02:2b:ee:6a:e2:41:78:cf:18:69:a1:56:c3:10:7f:1a: 7a:b0:72:3d:7a:3a:1f:ff:b1:a0:34:62:f1:50:65:ce:be:29: ee:6b:9e:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBNjQxMTAvBgNVBAUTKDkwN0JCMjYyQjU3MTYyM0UzNEIyRTIwQzYwQTcxOEMx NzM5Q0MzQkQwHhcNMjUwODIzMDA1MjM0WhcNMjUwODMwMDA1MjM0WjAYMRYwFAYD VQQDEw02OGE5MTBkMi1lYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVw8FX5O53sopAZM9trqbt7ZHBXFYuxVGod+KlGvquJqMtiC4VnSyxBvcKCk xCi0RUWoUVIesLzlJ9wrTxbNqKPnimkt+zAcjhZwiTjmPAYsvcLZ6WRbyhaB0ga8 vBmtMfLAqrtHrbD8N+STVTD9T07V8aj6nskWT70DeU2nOraSz20YjNu55P2xQ07D OfGmZVpPnpbZn9VgbbKO/kmB9a9iSVOejnzE05g5djdxaDs7Sr86aLiPmzkSQdzu zStSQH3YlUvCGQ96/jS1dom3HMLNPb6qDquD7Lc0D3w+qDv5uFM//mK7L3znuxpJ ksrbBpUrNnvYzX5T4XKSZC8npQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCO4xuO8 xkRotBBRE6Bq9Y+cJzg3MB8GA1UdIwQYMBaAFJB7smK1cWI+NLLiDGCnGMFznMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0E2NC8zNThDNjdCRTlB REExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlqNDBzdUlNWUtjWXdYT2N3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIdXlZclZ4WWo0MHN1SU1ZS2NZd1hPY3c3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0E2NC8zNThDNjdCRTlBREExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlq NDBzdUlNWUtjWXdYT2N3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASkLksLLEZrIC6bIqm963Il+EmoEZjbO5xuG0n50+lHpU/UMyblvfA 8CVPBj11gbOQi6b1hvxLia2iQJAJ6AkuxJDjLKNDXUr057gZYeCILgV/GOmo84RJ XoJSJcC/e1XuWPS6eHD67EuCLrP7V/JEc2d25VJHbcdBYYqLR0HyMF72pFHx+6jh vljuu9aPxpeneRCPu+odR3Oz/Dxlg3rZgpsxuImy56+Lmf4Aq9HjBnuzTMfUpC/f mB2jDmIP68Eu0ePZagnJuTcTAHqPLM1G45Qhm1u2JB6iVgIr7mriQXjPGGmhVsMQ fxp6sHI9ejof/7GgNGLxUGXOvinua552 -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:52 2025 by rpki-client