$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft File: rt-KIRgobseQH6KolLlMoQCj_Xg.mft (raw, json) Hash identifier: pHk4MLaFnMucfipEuweohAzrrOgLwye4nGrZNYoH7Qs= Subject key identifier: 9F:83:38:E2:7D:CE:F2:98:FD:AF:E9:4B:21:86:1F:50:70:18:36:CA Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 Certificate issuer: /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft Manifest number: 1D Signing time: Sat 23 Aug 2025 08:06:53 +0000 Manifest this update: Sat 23 Aug 2025 08:06:52 +0000 Manifest next update: Sat 30 Aug 2025 08:06:52 +0000 Files and hashes: 1: rt-KIRgobseQH6KolLlMoQCj_Xg.crl (hash: bpPDlu81V4iKlaWJh3+DCPWDVpqxsBp1fv1KFjMcR9s=) 2: 077331D0564511F09ED8993AC4F9AE02.roa (hash: UUG92P2AWbXaMrK3iyqoTf0N43jcCkwVZ/K5MaIHibg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Validity Not Before: Aug 23 08:06:52 2025 GMT Not After : Aug 30 08:06:52 2025 GMT Subject: CN=68a9769c-1042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:d4:da:ed:e8:29:1f:0c:ed:db:8e:d7:4a: 68:86:ee:a5:b7:74:7f:44:8a:c9:d5:02:7c:04:fd: 4e:0e:d7:75:61:78:6f:a8:6f:ae:d2:3f:0b:b5:69: e3:46:e3:be:00:35:35:2d:74:ac:c7:cc:be:9a:f1: 7e:5f:32:5b:6a:9c:f4:68:3b:89:6d:9c:05:0d:5d: 3a:57:6e:dc:19:a9:2b:26:0e:62:ad:9a:06:e3:a3: cd:7a:a7:db:b2:8e:4c:7a:be:87:41:12:11:36:36: 44:3f:7e:33:d8:f2:40:44:9a:1a:c7:0c:ab:23:3b: e4:d9:b6:ba:b4:9b:3d:f1:8f:4b:c5:8c:62:4e:c0: 30:1b:54:f6:4d:15:e2:db:66:6e:6f:3e:d8:f8:f2: 43:cd:03:4d:b0:5e:22:23:0a:9c:a3:6f:ad:51:c1: ff:f8:9e:cb:cf:07:b8:94:ca:72:38:77:a5:e5:b2: 79:3a:dc:0c:57:51:e6:c2:16:6a:37:95:3f:41:79: 19:6d:2a:cf:16:a5:9b:33:39:36:79:5a:2d:0c:fc: 68:3d:ea:63:84:57:a0:dd:1b:45:ba:1f:ea:85:ff: 73:ce:0c:3b:f7:e4:d5:69:8b:8b:1e:c6:74:dc:58: 39:b9:57:0f:32:23:55:c6:43:26:a6:8c:2c:dd:5e: 0b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:83:38:E2:7D:CE:F2:98:FD:AF:E9:4B:21:86:1F:50:70:18:36:CA X509v3 Authority Key Identifier: keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:16:60:11:b5:23:99:26:b9:b6:cf:af:ef:f6:ba:ca:38:b9: 37:96:f2:80:23:bb:f5:14:71:89:51:e6:bf:52:56:e6:72:c0: 84:f0:3c:73:76:9f:b5:e5:0e:fa:62:84:0d:1c:e6:ce:ec:3f: 04:51:03:83:ed:22:46:cf:2b:cb:e0:b9:18:bb:5e:a2:c0:5d: eb:87:44:e3:43:71:57:0c:c5:7c:01:99:20:02:e2:9c:1c:b4: 8c:ca:08:ff:96:5b:2f:18:58:e6:74:df:3f:c3:7d:6a:bd:04: 85:2f:93:b7:af:e1:e7:b3:92:c0:ad:ce:17:f7:d4:0f:53:a5: 0a:4c:dd:9c:98:32:bd:e1:48:6d:51:27:6d:2d:11:53:e9:7a: f7:f3:30:db:89:ee:0f:cc:b8:7c:26:d7:6f:ef:8d:db:67:7d: 1f:9f:3a:24:b8:f3:7f:03:75:7a:98:a0:ed:63:32:87:7c:92: b0:17:6d:03:ce:2c:15:dc:30:d1:b9:75:87:4c:6f:5e:14:d5: e7:ab:d9:d7:f6:30:4d:1d:39:4f:f5:81:b2:49:4c:5d:b4:3b: 3f:d8:56:0c:33:8f:39:06:49:69:ea:ef:d0:b5:59:dd:a8:4b: fa:36:55:c1:82:94:79:de:af:fd:12:10:8b:64:6c:10:f8:df: 79:86:08:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNGRTExMC8GA1UEBRMoQUVERjhBMjExODI4NkVDNzkwMUZBMkE4OTRCOTRDQTEw MEEzRkQ3ODAeFw0yNTA4MjMwODA2NTJaFw0yNTA4MzAwODA2NTJaMBgxFjAUBgNV BAMTDTY4YTk3NjljLTEwNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/UdTa7egpHwzt247XSmiG7qW3dH9EisnVAnwE/U4O13VheG+ob67SPwu1aeNG 474ANTUtdKzHzL6a8X5fMltqnPRoO4ltnAUNXTpXbtwZqSsmDmKtmgbjo816p9uy jkx6vodBEhE2NkQ/fjPY8kBEmhrHDKsjO+TZtrq0mz3xj0vFjGJOwDAbVPZNFeLb Zm5vPtj48kPNA02wXiIjCpyjb61Rwf/4nsvPB7iUynI4d6Xlsnk63AxXUebCFmo3 lT9BeRltKs8WpZszOTZ5Wi0M/Gg96mOEV6DdG0W6H+qF/3PODDv35NVpi4sexnTc WDm5Vw8yI1XGQyamjCzdXguhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn4M44n3O 8pj9r+lLIYYfUHAYNsowHwYDVR0jBBgwFoAUrt+KIRgobseQH6KolLlMoQCj/Xgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzk2NkQ3MUVBNTY0 MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNlUUg2S29sTGxNb1FDal9Y Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnQtS0lSZ29ic2VRSDZLb2xMbE1vUUNqX1hnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0ZFLzk2NkQ3MUVBNTY0MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNl UUg2S29sTGxNb1FDal9YZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4WYBG1I5kmubbPr+/2uso4uTeW8oAju/UUcYlR5r9SVuZywITwPHN2 n7XlDvpihA0c5s7sPwRRA4PtIkbPK8vguRi7XqLAXeuHRONDcVcMxXwBmSAC4pwc tIzKCP+WWy8YWOZ03z/DfWq9BIUvk7ev4eezksCtzhf31A9TpQpM3ZyYMr3hSG1R J20tEVPpevfzMNuJ7g/MuHwm12/vjdtnfR+fOiS4838DdXqYoO1jMod8krAXbQPO LBXcMNG5dYdMb14U1eer2df2ME0dOU/1gbJJTF20Oz/YVgwzjzkGSWnq79C1Wd2o S/o2VcGClHner/0SEItkbBD433mGCPA= -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:24 2025 by rpki-client