$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: 3Y2CQgJbUhVr3DLwYD97q85BKC0TRcgkFysTCrbBxtM= Subject key identifier: A9:25:FA:5D:02:73:8E:2D:A1:9E:79:FD:E3:C1:CA:BC:D6:CD:F8:41 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: F0 Signing time: Sat 23 Aug 2025 05:26:47 +0000 Manifest this update: Sat 23 Aug 2025 05:26:47 +0000 Manifest next update: Sat 30 Aug 2025 05:26:47 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: TiWSUZfRec1OxPRTnEyKqqjj80VfxBxKZ9FLGhIau6A=) 2: 57FBE074370111F094BF7862C4F9AE02.roa (hash: NzrXfR/7zniLvrCXQlmVGg2isIi5LfwP1ubwC3yxm7E=) 3: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: /GfdIIe6m1dYDx7Tm/mUgCqzxCNCLDFcedZ67s1StUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Aug 23 05:26:47 2025 GMT Not After : Aug 30 05:26:47 2025 GMT Subject: CN=68a95117-5493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:57:47:27:b4:fa:f5:3f:58:43:00:11:75: 52:9f:16:51:1d:ff:35:7d:11:1a:2a:e5:82:8b:c9: 0b:b9:99:3c:31:6c:2b:2a:dd:2d:58:90:59:a0:83: 38:fb:66:e3:f9:e9:42:84:05:9c:9d:df:cb:c5:68: 3b:03:70:00:bf:05:8a:59:3d:87:44:90:f8:0a:b0: cb:54:91:c0:f6:ae:34:d0:17:14:86:33:78:da:0b: de:67:45:80:86:66:c4:c8:7c:df:63:b9:28:4e:b8: 39:af:c6:e5:1b:a3:e5:9d:3e:08:bd:97:45:80:a0: b4:ee:c8:8c:8d:cc:98:5d:e0:89:1a:73:79:1c:a6: 50:3a:cb:8c:77:64:4c:b0:78:b4:a2:dc:51:f6:ba: 89:b6:26:6d:a0:32:83:8e:88:79:02:2b:ee:cc:b3: e1:7b:e2:a2:12:32:53:dc:39:d1:07:b8:c6:53:ff: d6:71:99:c3:b4:93:72:8d:e1:da:02:26:93:a8:6a: bd:7a:1d:c2:98:eb:ae:a0:86:fa:b5:12:9b:d5:ef: a9:20:e7:e4:59:a2:8e:8f:eb:02:9c:38:b0:b8:7b: 8e:19:50:6f:30:07:4b:a4:44:e9:61:58:45:e0:65: da:2e:87:c5:71:ec:5a:e8:29:48:df:a5:6c:aa:d5: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:25:FA:5D:02:73:8E:2D:A1:9E:79:FD:E3:C1:CA:BC:D6:CD:F8:41 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:65:ef:39:3c:08:a6:98:70:ef:60:e8:c9:2a:4e:7c:a3:8d: a3:61:fc:61:77:34:d8:e0:ee:8b:22:2e:93:ee:c1:04:cd:e5: 3b:7d:c8:52:03:f5:e1:2c:14:ba:ae:57:f2:f7:2f:76:4a:67: ec:87:74:4a:d4:c2:6a:d5:90:19:9c:90:23:e4:99:25:41:0c: d2:de:24:db:dd:99:9f:13:4c:7c:27:ce:83:c4:52:51:a2:2f: 41:bb:a9:51:ce:da:54:73:45:16:c7:55:a3:70:b1:9a:45:14: 9d:6d:0b:43:26:b6:8b:dd:61:e2:74:4b:c8:40:cc:eb:95:b9: 49:5d:ab:40:f5:23:5c:dd:fe:6d:d8:63:83:7c:8c:56:af:7d: 5c:bc:5a:26:34:e0:53:00:ba:af:2e:96:11:cb:61:85:5d:1c: 14:f6:e3:ee:b2:b2:6e:dd:05:51:ca:cc:34:f2:c1:dc:de:9e: 81:24:08:d7:6c:31:80:f4:aa:4c:6f:84:32:d4:d1:73:fb:7a: a0:d0:18:72:8a:b0:7f:55:10:80:2d:31:83:61:43:aa:0b:f4: 2c:9a:cc:ba:09:f0:90:fc:21:d8:a6:ef:e1:6d:8b:d5:c6:0b: aa:1b:20:ac:3c:84:44:b9:1f:e4:89:00:dc:d3:b5:1f:25:5b: 9e:74:37:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwODIzMDUyNjQ3WhcNMjUwODMwMDUyNjQ3WjAYMRYwFAYD VQQDEw02OGE5NTExNy01NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdBXRye0+vU/WEMAEXVSnxZRHf81fREaKuWCi8kLuZk8MWwrKt0tWJBZoIM4 +2bj+elChAWcnd/LxWg7A3AAvwWKWT2HRJD4CrDLVJHA9q400BcUhjN42gveZ0WA hmbEyHzfY7koTrg5r8blG6PlnT4IvZdFgKC07siMjcyYXeCJGnN5HKZQOsuMd2RM sHi0otxR9rqJtiZtoDKDjoh5AivuzLPhe+KiEjJT3DnRB7jGU//WcZnDtJNyjeHa AiaTqGq9eh3CmOuuoIb6tRKb1e+pIOfkWaKOj+sCnDiwuHuOGVBvMAdLpETpYVhF 4GXaLofFcexa6ClI36VsqtXOFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkl+l0C c44toZ55/ePByrzWzfhBMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbZe85PAimmHDvYOjJKk58o42jYfxhdzTY4O6LIi6T7sEEzeU7fchS A/XhLBS6rlfy9y92Smfsh3RK1MJq1ZAZnJAj5JklQQzS3iTb3ZmfE0x8J86DxFJR oi9Bu6lRztpUc0UWx1WjcLGaRRSdbQtDJraL3WHidEvIQMzrlblJXatA9SNc3f5t 2GODfIxWr31cvFomNOBTALqvLpYRy2GFXRwU9uPusrJu3QVRysw08sHc3p6BJAjX bDGA9KpMb4Qy1NFz+3qg0BhyirB/VRCALTGDYUOqC/Qsmsy6CfCQ/CHYpu/hbYvV xguqGyCsPIREuR/kiQDc07UfJVuedDfu -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:31 2025 by rpki-client