$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: C/RxjnxcXKS4vCOpfF0saY4VBbsPLtzk7dLje3A7zAU= Subject key identifier: E6:F3:AE:3E:6B:B1:CD:FE:C8:48:1E:DE:25:D4:03:69:DA:D5:80:DB Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 40 Signing time: Sat 23 Aug 2025 07:44:15 +0000 Manifest this update: Sat 23 Aug 2025 07:44:15 +0000 Manifest next update: Sat 30 Aug 2025 07:44:15 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: +B+sMF8JYIFt0pYh8H/qqrUaU3g621/glNjMSBLYVmE=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Aug 23 07:44:15 2025 GMT Not After : Aug 30 07:44:15 2025 GMT Subject: CN=68a9714f-53d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bd:f6:4a:cb:85:dd:3a:e7:6c:60:3a:49:8b: da:88:57:ba:6e:bf:39:b8:57:a4:61:04:2b:cd:39: 25:c1:2e:60:9b:70:61:87:8c:01:df:97:b6:ae:80: 54:55:15:6c:38:fc:df:be:6f:1e:4b:f1:13:55:34: d3:36:e3:08:df:72:b9:6b:2e:04:b0:a0:d7:6f:5e: b6:0b:c8:b6:1e:7a:2d:a0:98:3e:eb:2e:f9:ca:98: ee:19:14:e9:7c:72:93:3f:7a:8b:59:50:74:41:16: e4:88:93:1c:17:ee:39:f2:fe:b2:db:95:ba:f1:d1: 9f:7c:96:2f:88:6e:21:8a:71:0c:37:c4:b2:f4:01: cb:09:ea:8b:21:d8:f0:ee:12:29:78:21:4d:e6:0a: 19:b2:a6:07:46:d2:27:ff:44:3e:87:57:2c:e0:73: e2:f5:fe:91:12:be:db:92:2e:86:c3:6e:75:52:72: e3:e2:13:60:08:ff:3d:db:e6:7a:94:31:36:3f:fe: de:5b:6e:aa:3a:e3:84:d1:72:16:1b:a7:b7:2b:b2: 49:25:78:cb:c5:b4:23:4b:13:82:4b:f0:86:ae:4f: f0:c1:2a:2f:94:f4:ec:7c:69:2f:a7:c7:c1:48:7d: b4:de:aa:57:07:0d:d9:ae:45:f8:8e:5a:65:a2:dd: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F3:AE:3E:6B:B1:CD:FE:C8:48:1E:DE:25:D4:03:69:DA:D5:80:DB X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:27:c9:d3:9a:49:51:c5:65:ec:f5:53:83:66:31:a5:29:96: a3:5b:29:63:ff:20:d6:02:e7:3d:23:8a:32:90:4b:b9:63:0c: 4f:7c:8b:c5:73:cd:ff:da:7a:6e:11:cf:62:17:a7:f0:28:24: d6:3d:41:78:28:07:77:d2:c6:c8:68:c1:81:25:f2:0e:6f:2c: 2f:cc:7f:37:01:28:1e:d7:cb:4f:af:13:28:f6:2e:3e:2d:91: 85:cc:b4:95:59:dc:b9:db:29:9e:a3:2e:66:89:d1:8a:99:92: 39:f8:30:92:2d:98:07:35:4a:80:ca:f2:cc:9d:50:1b:b2:6a: c1:4a:59:1c:15:a1:c7:79:5c:d2:8a:44:1a:7f:21:fe:d1:2f: ec:51:7c:57:6c:92:0c:55:6a:b5:40:e8:0e:09:c3:1a:4a:7d: 9c:54:3a:7d:2f:e1:ae:6b:06:0d:6a:98:8e:20:b7:8e:b5:9a: 7a:c5:2c:a3:ee:c4:1a:4f:58:e6:eb:4b:99:3b:48:03:32:51: d8:6e:58:ff:44:e7:be:09:5e:98:18:59:e0:7a:5b:3c:ac:11: 09:61:be:7a:21:be:73:fe:af:a8:fc:88:3f:4f:44:62:0c:47: 71:db:ac:da:35:ee:46:27:2c:0d:ae:18:e3:aa:31:60:3a:02: 8d:44:48:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTA4MjMwNzQ0MTVaFw0yNTA4MzAwNzQ0MTVaMBgxFjAUBgNV BAMTDTY4YTk3MTRmLTUzZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSvfZKy4XdOudsYDpJi9qIV7puvzm4V6RhBCvNOSXBLmCbcGGHjAHfl7augFRV FWw4/N++bx5L8RNVNNM24wjfcrlrLgSwoNdvXrYLyLYeei2gmD7rLvnKmO4ZFOl8 cpM/eotZUHRBFuSIkxwX7jny/rLblbrx0Z98li+IbiGKcQw3xLL0AcsJ6osh2PDu Eil4IU3mChmypgdG0if/RD6HVyzgc+L1/pESvtuSLobDbnVScuPiE2AI/z3b5nqU MTY//t5bbqo644TRchYbp7crskkleMvFtCNLE4JL8IauT/DBKi+U9Ox8aS+nx8FI fbTeqlcHDdmuRfiOWmWi3ZVTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5vOuPmux zf7ISB7eJdQDadrVgNswHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAInydOaSVHFZez1U4NmMaUplqNbKWP/INYC5z0jijKQS7ljDE98i8Vz zf/aem4Rz2IXp/AoJNY9QXgoB3fSxshowYEl8g5vLC/MfzcBKB7Xy0+vEyj2Lj4t kYXMtJVZ3LnbKZ6jLmaJ0YqZkjn4MJItmAc1SoDK8sydUBuyasFKWRwVocd5XNKK RBp/If7RL+xRfFdskgxVarVA6A4JwxpKfZxUOn0v4a5rBg1qmI4gt461mnrFLKPu xBpPWObrS5k7SAMyUdhuWP9E574JXpgYWeB6WzysEQlhvnohvnP+r6j8iD9PRGIM R3HbrNo17kYnLA2uGOOqMWA6Ao1ESFY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:49 2025 by rpki-client