$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: 4ShDMH1jXelhCMskemnC1mU0cTCzb4YVjDd3DOZ4vOg= Subject key identifier: D9:52:C3:05:77:05:D7:C3:28:44:11:57:DA:A3:D9:C3:0B:2B:A6:A8 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0B9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0B92 Signing time: Fri 22 Aug 2025 19:07:23 +0000 Manifest this update: Fri 22 Aug 2025 19:07:22 +0000 Manifest next update: Fri 29 Aug 2025 19:07:22 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: Uk+Hf2mFdE0USEtraCsiaU0sjoglfCFeO1un0Liem9I=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: 5tQROkuKBdGr5CDnMUVPHlhLeJ1/YaIHTHWkyStRniQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Aug 22 19:07:22 2025 GMT Not After : Aug 29 19:07:22 2025 GMT Subject: CN=68a8bfeb-90a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:e9:cf:1b:1b:ce:4e:fd:a4:4a:57:04:76: e8:54:21:f4:08:ff:e5:ca:67:e4:82:e2:0e:39:52: 39:66:17:1c:e2:5d:3c:33:c4:cc:e8:06:4f:9e:f4: f3:2a:d5:b2:3b:2c:a1:19:7a:46:f1:75:c2:08:3c: f5:52:d7:bb:23:12:5b:1b:e4:59:41:2e:3d:fe:8b: bf:e5:dc:26:25:81:a5:93:60:67:b4:8d:75:d8:20: 9b:5d:37:2e:71:1e:c9:4d:b0:cf:48:0b:8e:25:96: aa:97:ff:33:bc:0e:45:d1:76:74:75:7a:0b:ab:38: fd:44:71:9d:20:3b:5c:b9:d4:3f:55:cf:02:86:b2: 27:7d:ee:93:e6:d9:51:1f:eb:60:f7:ef:53:02:7c: d0:a6:37:16:78:e5:fe:09:8f:19:1a:ba:8a:76:14: 72:8a:fb:01:bb:d4:d9:d7:40:17:3c:d6:27:0b:3e: 86:0f:c6:52:62:d8:3c:8a:fe:a7:da:a7:f9:62:9f: 4d:de:9a:90:4f:5d:c0:a1:99:d0:a3:40:ac:ea:72: 42:18:cb:d1:88:98:87:e2:fa:d1:17:49:58:83:ce: ca:65:8f:a9:2c:b1:49:17:ff:15:ff:10:1b:ff:33: a9:e2:74:f4:ff:0c:b1:b8:8b:63:2b:6d:69:98:84: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:52:C3:05:77:05:D7:C3:28:44:11:57:DA:A3:D9:C3:0B:2B:A6:A8 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e1:06:9b:00:bf:79:39:99:ac:45:0e:22:76:a6:da:9a:34: f4:b6:8f:06:fa:53:ce:80:08:bc:76:42:0d:43:f4:c2:c0:48: 7f:f2:db:86:d4:4b:a7:68:69:67:5c:1f:97:c9:23:4b:28:a0: 5a:f9:24:6b:7b:fc:cd:60:7c:b9:73:33:cb:95:cb:e3:12:87: d7:4b:27:90:d3:c1:61:6b:cf:43:2e:8b:b7:13:dc:9c:ea:1d: 10:fc:4a:7a:4a:c8:8a:4e:1e:fc:58:95:fd:4a:9c:af:52:b6: 53:19:bf:ae:69:e2:ab:3d:b6:4e:b7:ad:99:2d:07:8d:2b:b4: 5b:bc:c4:94:e3:8d:38:86:18:0d:93:c9:f8:c0:b3:1b:bd:77: 23:22:15:58:32:9a:53:bb:cc:b5:54:af:95:27:54:30:55:d8: 53:99:4c:f4:fd:e6:be:09:5b:79:e8:48:91:bb:f8:ba:d7:d9: f8:80:e8:bb:a7:c8:3c:6f:be:e8:d2:f0:6a:11:e9:4c:73:23: d9:fb:fb:dd:60:23:aa:ed:ad:55:b8:e7:5d:17:8c:d2:40:fe: 76:00:7c:5b:0b:2c:00:1e:83:69:44:7a:f3:e5:b3:b0:d5:91: d7:83:91:fc:ea:49:10:03:7c:83:42:78:53:de:90:d1:d7:5b: e2:60:e0:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjUwODIyMTkwNzIyWhcNMjUwODI5MTkwNzIyWjAYMRYwFAYD VQQDEw02OGE4YmZlYi05MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR3pzxsbzk79pEpXBHboVCH0CP/lymfkguIOOVI5Zhcc4l08M8TM6AZPnvTz KtWyOyyhGXpG8XXCCDz1Ute7IxJbG+RZQS49/ou/5dwmJYGlk2BntI112CCbXTcu cR7JTbDPSAuOJZaql/8zvA5F0XZ0dXoLqzj9RHGdIDtcudQ/Vc8ChrInfe6T5tlR H+tg9+9TAnzQpjcWeOX+CY8ZGrqKdhRyivsBu9TZ10AXPNYnCz6GD8ZSYtg8iv6n 2qf5Yp9N3pqQT13AoZnQo0Cs6nJCGMvRiJiH4vrRF0lYg87KZY+pLLFJF/8V/xAb /zOp4nT0/wyxuItjK21pmIRxqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlSwwV3 BdfDKEQRV9qj2cMLK6aoMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN4QabAL95OZmsRQ4idqbamjT0to8G+lPOgAi8dkINQ/TCwEh/8tuG 1EunaGlnXB+XySNLKKBa+SRre/zNYHy5czPLlcvjEofXSyeQ08Fha89DLou3E9yc 6h0Q/Ep6SsiKTh78WJX9SpyvUrZTGb+uaeKrPbZOt62ZLQeNK7RbvMSU4404hhgN k8n4wLMbvXcjIhVYMppTu8y1VK+VJ1QwVdhTmUz0/ea+CVt56EiRu/i619n4gOi7 p8g8b77o0vBqEelMcyPZ+/vdYCOq7a1VuOddF4zSQP52AHxbCywAHoNpRHrz5bOw 1ZHXg5H86kkQA3yDQnhT3pDR11viYOCQ -----END CERTIFICATE-----Generated at Sun Aug 24 05:01:17 2025 by rpki-client