$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft File: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json) Hash identifier: twQb62Wq1xIHUFbPnbtRZT/32SJ5GOF7ErIxIjWJYac= Subject key identifier: BF:11:43:BF:39:B1:6F:DB:72:69:28:2B:76:D7:12:25:35:2F:3F:EC Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 Certificate issuer: /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft Manifest number: 0531 Signing time: Fri 22 Aug 2025 23:43:24 +0000 Manifest this update: Fri 22 Aug 2025 23:43:23 +0000 Manifest next update: Fri 29 Aug 2025 23:43:23 +0000 Files and hashes: 1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: g9edY22eYH8zhXvAyxmSQga110+mJPF8YkHHyvJ2aro=) 2: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: UqwW3+FUgPzbj2YyLXYH5l6BXL9hPH8o6Nx6xYGrJ2k=) 3: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: SwY4+qrxa1ahiaCiMH8AacLxplCwzZdSG9lVRFDM4X4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Validity Not Before: Aug 22 23:43:23 2025 GMT Not After : Aug 29 23:43:23 2025 GMT Subject: CN=68a9009c-5a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:77:f7:f1:4b:60:46:40:7d:a3:56:0a:5c: 57:7f:a0:66:63:e1:89:b5:8a:49:7f:5d:09:ac:79: 94:85:26:ce:04:1a:0b:cb:dc:1f:8e:87:c6:68:f9: c0:11:11:bb:da:5b:71:92:2d:cb:91:e7:49:d2:59: e4:c5:df:79:a1:7b:20:64:9a:4f:f4:18:f4:a0:2d: 0f:d4:52:92:a8:23:3e:48:51:07:3f:c8:64:1d:d3: 63:34:73:cb:f7:a6:f9:04:e7:23:1c:3f:d6:17:2b: ff:81:3a:9b:4c:56:69:06:2b:d8:67:f5:00:4d:3b: e4:62:0b:e1:2b:e3:95:ef:15:4c:18:c4:53:ae:df: 8c:63:ee:0e:16:e4:cf:b2:72:d7:56:1c:37:94:bd: 7d:dd:c1:82:6e:fb:0d:bf:f2:72:bf:a8:b9:4b:48: d8:a3:6e:fa:56:82:5e:7a:d5:e5:48:0b:3a:d6:e5: 21:29:7b:d0:ce:b9:1d:af:d8:d0:18:27:d1:d1:2c: ef:9e:1f:a0:47:5d:cf:49:18:bc:b9:7d:fb:58:3c: 20:bc:3f:34:6e:67:e6:a9:3d:e5:2f:37:65:af:1e: f6:f0:9f:06:39:b8:b7:fb:51:76:ad:92:d4:42:2e: 98:57:52:a9:04:ec:9b:91:dd:05:2f:b7:b6:b5:19: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:11:43:BF:39:B1:6F:DB:72:69:28:2B:76:D7:12:25:35:2F:3F:EC X509v3 Authority Key Identifier: keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d5:8e:17:fd:9a:f3:8b:8a:d9:ac:5a:b5:0a:74:73:66:fd: 78:58:7c:3b:08:b2:75:f3:09:4d:a2:8d:ab:2a:c5:03:96:2d: b2:60:3c:0e:f4:1b:a0:da:22:3f:6c:b4:2b:e8:4e:54:ba:f8: ca:5a:8a:6b:40:58:f5:93:70:70:85:b4:4f:15:c3:83:f3:a4: bf:07:28:c9:ea:7a:a7:a5:72:84:18:73:54:32:8a:8e:bc:35: 61:25:84:d3:d1:4c:8b:09:f6:a4:ce:1f:3e:75:b4:eb:a8:b9: 4d:f7:aa:a5:ea:79:1f:a1:e7:f4:f9:ff:1d:47:0e:de:d8:cc: 03:89:a9:57:47:0a:0b:23:e7:b9:24:5a:23:c4:86:f0:67:56: 98:66:14:d1:c2:7b:10:c6:90:1d:2d:eb:8f:0e:36:14:ce:bf: 61:aa:f2:21:c1:d1:7a:b3:d1:ee:72:af:19:c4:f3:b8:3c:84: 4c:61:45:bb:8a:bf:4f:16:ff:a0:bd:15:37:40:f4:84:06:9f: 32:7f:c5:f1:1e:93:c2:8f:f0:db:ef:17:ab:cc:49:e6:fb:34: 57:b6:03:50:7c:d3:74:c4:dd:a1:53:d8:92:b4:06:c9:db:5b: 6d:0b:9c:4e:77:1a:c8:e3:90:9b:0b:a1:6d:b7:49:f6:b5:a4: fb:a9:a2:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVGMzMxMTAvBgNVBAUTKDkzMTdCQjE5RkY5MDdGNDcxODExRUI1NjEwMEFBMEJD OTJDRjE0OTcwHhcNMjUwODIyMjM0MzIzWhcNMjUwODI5MjM0MzIzWjAYMRYwFAYD VQQDEw02OGE5MDA5Yy01YTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeR39/FLYEZAfaNWClxXf6BmY+GJtYpJf10JrHmUhSbOBBoLy9wfjofGaPnA ERG72ltxki3LkedJ0lnkxd95oXsgZJpP9Bj0oC0P1FKSqCM+SFEHP8hkHdNjNHPL 96b5BOcjHD/WFyv/gTqbTFZpBivYZ/UATTvkYgvhK+OV7xVMGMRTrt+MY+4OFuTP snLXVhw3lL193cGCbvsNv/Jyv6i5S0jYo276VoJeetXlSAs61uUhKXvQzrkdr9jQ GCfR0Szvnh+gR13PSRi8uX37WDwgvD80bmfmqT3lLzdlrx728J8GObi3+1F2rZLU Qi6YV1KpBOybkd0FL7e2tRnf1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8RQ785 sW/bcmkoK3bXEiU1Lz/sMB8GA1UdIwQYMBaAFJMXuxn/kH9HGBHrVhAKoLySzxSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUYzMy8yRjZBQzEzQzBC RUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYwY1lFZXRXRUFxZ3ZKTFBG SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4ZTdHZi1RZjBjWUVldFdFQXFndkpMUEZKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUYzMy8yRjZBQzEzQzBCRUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYw Y1lFZXRXRUFxZ3ZKTFBGSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs1Y4X/Zrzi4rZrFq1CnRzZv14WHw7CLJ18wlNoo2rKsUDli2yYDwO 9Bug2iI/bLQr6E5UuvjKWoprQFj1k3BwhbRPFcOD86S/ByjJ6nqnpXKEGHNUMoqO vDVhJYTT0UyLCfakzh8+dbTrqLlN96ql6nkfoef0+f8dRw7e2MwDialXRwoLI+e5 JFojxIbwZ1aYZhTRwnsQxpAdLeuPDjYUzr9hqvIhwdF6s9Hucq8ZxPO4PIRMYUW7 ir9PFv+gvRU3QPSEBp8yf8XxHpPCj/Db7xerzEnm+zRXtgNQfNN0xN2hU9iStAbJ 21ttC5xOdxrI45CbC6Ftt0n2taT7qaI8 -----END CERTIFICATE-----Generated at Sat Aug 23 12:45:41 2025 by rpki-client