$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json) Hash identifier: Eve0+ei70LBpAuEhRykSwCB1hZRgjsqOQFxWO+QAm3U= Subject key identifier: A5:7A:47:CF:90:55:9C:CB:08:F7:3D:A8:48:00:B8:37:14:5C:99:9E Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Certificate serial: 032A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft Manifest number: 0324 Signing time: Sat 23 Aug 2025 01:23:22 +0000 Manifest this update: Sat 23 Aug 2025 01:23:22 +0000 Manifest next update: Sat 30 Aug 2025 01:23:22 +0000 Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: YZ8QWIPuYvq8GJ5MFj+CmMsnHmdwPn1tQdttsiU1Zdo=) 2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: Crj6EQEsFsVZ7Rl37tD7+KlB9qlhMrOAHvL0KyIGgkI=) 3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: 16TIMxSDuDuwbvd9GQ+m4o06d2DMg8lDV7WSYdSxPbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Validity Not Before: Aug 23 01:23:22 2025 GMT Not After : Aug 30 01:23:22 2025 GMT Subject: CN=68a9180a-b29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:48:3e:a1:41:d7:9b:e0:14:b0:f9:6f:1f: 58:63:dc:b7:93:d9:5e:44:b1:98:c9:4a:d9:e1:79: d6:d7:5f:a5:b1:3f:04:43:56:0c:33:77:15:a6:cc: c4:67:a2:4e:be:8d:7e:b7:6a:a3:9c:07:11:d5:2e: bc:40:c1:93:b9:7d:39:05:bb:1a:1b:f8:50:b9:12: 99:8c:d7:e5:c8:6f:b1:d9:e3:29:ac:92:d4:f4:a5: 83:03:ae:7e:5c:62:a9:96:61:00:1a:07:1d:24:99: b0:fe:ed:b5:76:6a:c7:b6:bf:04:ed:41:03:8e:b9: bc:37:ce:b0:85:a3:fe:d7:a9:67:51:0b:fb:2c:8a: 09:47:12:aa:96:0c:7a:74:6a:c6:7e:a4:06:26:a9: 5a:45:0b:15:39:43:7e:ba:fd:80:ca:6e:ab:51:c2: 7c:38:bd:44:3d:eb:15:b3:3c:d9:22:1f:84:02:22: f6:b7:85:c1:27:0e:40:7b:ed:4d:09:54:fe:71:c5: 38:11:17:3b:3b:74:07:28:90:ed:59:2f:3a:30:88: 1f:57:0f:a8:2d:b7:ec:68:3c:9a:dd:a5:36:01:f5: 37:c6:3a:38:e3:b5:a0:3e:01:e2:99:20:22:ca:c7: cf:76:86:0f:9d:19:e1:e1:4d:c8:e1:a4:38:cd:4d: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:47:CF:90:55:9C:CB:08:F7:3D:A8:48:00:B8:37:14:5C:99:9E X509v3 Authority Key Identifier: keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:0f:08:ed:1e:0d:43:b7:53:93:a1:da:c0:7e:f1:21:fa:f1: ff:30:b9:38:d3:5d:7e:43:44:1d:5f:94:40:62:9a:0f:d8:9e: 65:f5:b0:cd:44:7c:79:3c:91:d2:47:c1:c6:19:ea:b1:bb:ca: a2:85:94:b5:30:ed:0a:50:1f:94:81:4f:88:4b:8c:1f:c9:e7: 38:a2:33:82:02:6f:a8:7c:90:99:12:6a:34:df:cc:72:d6:48: 8b:97:04:0e:63:0a:6c:08:28:c6:27:73:56:f5:1a:e7:50:64: c1:04:4b:e1:66:c4:e8:fb:0f:81:65:06:e5:22:99:d9:33:2c: c9:d5:99:fe:f7:c9:f6:57:71:c8:ff:a2:85:5e:f3:89:7f:b9: 80:b3:74:63:f2:ec:2d:41:ff:5c:e2:94:6a:79:26:7e:19:45: 4c:fd:be:f7:c1:3f:25:1d:c9:08:06:46:33:96:ff:38:ba:3d: 2b:ad:4b:80:f2:01:1a:12:07:59:c7:4a:38:10:91:b7:67:a9: f0:a7:48:6c:6a:9f:a9:43:3d:2d:eb:4c:8d:46:90:ff:e6:40: 4a:a6:0b:82:10:6c:60:90:9d:dc:97:d1:25:83:06:de:6e:5d: d4:76:6b:b2:06:65:89:e3:50:d9:0f:04:ff:66:0e:cd:aa:35: af:cb:c7:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRDIxMTAvBgNVBAUTKDJCMUJCMjRBRENEQjE0RjZFMkM3QkJCMkQ4OEFCQURC MURERDg5OEQwHhcNMjUwODIzMDEyMzIyWhcNMjUwODMwMDEyMzIyWjAYMRYwFAYD VQQDEw02OGE5MTgwYS1iMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4hIPqFB15vgFLD5bx9YY9y3k9leRLGYyUrZ4XnW11+lsT8EQ1YMM3cVpszE Z6JOvo1+t2qjnAcR1S68QMGTuX05BbsaG/hQuRKZjNflyG+x2eMprJLU9KWDA65+ XGKplmEAGgcdJJmw/u21dmrHtr8E7UEDjrm8N86whaP+16lnUQv7LIoJRxKqlgx6 dGrGfqQGJqlaRQsVOUN+uv2Aym6rUcJ8OL1EPesVszzZIh+EAiL2t4XBJw5Ae+1N CVT+ccU4ERc7O3QHKJDtWS86MIgfVw+oLbfsaDya3aU2AfU3xjo447WgPgHimSAi ysfPdoYPnRnh4U3I4aQ4zU31UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV6R8+Q VZzLCPc9qEgAuDcUXJmeMB8GA1UdIwQYMBaAFCsbskrc2xT24se7stiKutsd3YmN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBEMi9ENDI4RDBDNkRB REUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQYml4N3V5MklxNjJ4M2Rp WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4dXlTdHpiRlBiaXg3dXkySXE2MngzZGlZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBEMi9ENDI4RDBDNkRBREUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQ Yml4N3V5MklxNjJ4M2RpWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEDwjtHg1Dt1OTodrAfvEh+vH/MLk4011+Q0QdX5RAYpoP2J5l9bDN RHx5PJHSR8HGGeqxu8qihZS1MO0KUB+UgU+IS4wfyec4ojOCAm+ofJCZEmo038xy 1kiLlwQOYwpsCCjGJ3NW9RrnUGTBBEvhZsTo+w+BZQblIpnZMyzJ1Zn+98n2V3HI /6KFXvOJf7mAs3Rj8uwtQf9c4pRqeSZ+GUVM/b73wT8lHckIBkYzlv84uj0rrUuA 8gEaEgdZx0o4EJG3Z6nwp0hsap+pQz0t60yNRpD/5kBKpguCEGxgkJ3cl9Elgwbe bl3UdmuyBmWJ41DZDwT/Zg7NqjWvy8cp -----END CERTIFICATE-----Generated at Sat Aug 23 19:07:41 2025 by rpki-client