$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft File: kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft (raw, json) Hash identifier: zqu7+YaPz6CgkRwB8wZtxuxPX8N4+O4AVUhGyfNOvV8= Subject key identifier: D5:52:FC:7D:D1:46:FC:F4:12:F1:97:E2:2B:5B:2F:50:E6:F1:04:06 Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft Manifest number: 0C1B Signing time: Fri 22 Aug 2025 18:51:23 +0000 Manifest this update: Fri 22 Aug 2025 18:51:22 +0000 Manifest next update: Fri 29 Aug 2025 18:51:22 +0000 Files and hashes: 1: kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl (hash: SLZPQQiNj7kMt5fGHvOrnu6WmN6S9WTYfpTlveZnYvw=) 2: EA531ACE61C211EF89F25E2CC4F9AE02.roa (hash: wvS2IKCsAphgy9VmVy8jmzdrhXrxZNTENgiqGBEyqqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6462, serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Validity Not Before: Aug 22 18:51:22 2025 GMT Not After : Aug 29 18:51:22 2025 GMT Subject: CN=68a8bc2b-5f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:5a:6d:8b:a1:bc:7d:d6:d2:78:db:dc:7e: 6b:85:cb:71:a6:7d:d8:ee:b4:55:52:f0:9a:5b:23: d8:45:54:9a:2d:81:1e:f6:21:76:ca:92:2b:02:b4: e6:c3:bf:f2:fd:32:99:ae:de:a7:a6:de:72:0c:ee: 98:8a:2d:3e:52:a0:ec:19:3d:b2:83:05:99:f7:f1: f9:a5:69:6c:b9:d0:74:89:f0:31:8a:d9:43:1a:50: 6c:c4:14:a0:85:4f:6e:7c:14:9d:8f:be:a6:86:ec: ec:73:23:af:2b:b8:08:70:b3:9d:d3:7c:d0:d0:9f: ec:05:ea:00:88:50:f7:82:fc:2d:66:7f:58:87:54: 26:c7:0c:54:22:49:58:1b:33:c4:2d:b2:e6:70:63: 3c:0d:05:b0:48:e9:66:64:b3:c7:b0:cc:2e:bc:27: 49:98:d9:b8:cf:34:07:ee:71:28:bd:01:cb:fe:24: 2c:c6:91:4f:00:c7:6a:63:1a:cc:70:9c:ab:b7:57: 6a:b1:c3:bf:41:8e:41:5f:1b:b6:b5:8b:ac:0b:b0: be:6a:23:7b:7f:ac:0f:f4:1e:9f:11:cd:1c:74:e6: 59:6b:e0:93:37:93:35:ad:06:f3:99:23:28:93:1d: df:c0:45:e7:58:8f:41:eb:41:7d:b4:48:1d:78:cb: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:52:FC:7D:D1:46:FC:F4:12:F1:97:E2:2B:5B:2F:50:E6:F1:04:06 X509v3 Authority Key Identifier: keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ba:54:c1:f8:d0:4c:12:a3:df:89:3f:83:20:5f:98:b8:63: ce:87:a2:e7:6e:e2:7e:dd:fb:59:28:09:d9:29:50:06:b7:f7: c0:20:5d:63:01:31:d7:77:69:36:7f:d8:5a:3e:58:12:3b:2f: 94:74:7d:79:b1:fd:4c:1c:46:90:ee:5f:dc:8a:65:b9:4a:03: 9f:a5:36:69:2f:81:a6:ce:4f:15:aa:81:17:f9:45:13:30:aa: 5c:89:2a:0d:37:04:fd:53:fe:32:54:bd:33:41:64:29:b6:42: 1e:78:92:b4:25:b8:80:17:37:fa:c1:7a:a7:1f:53:d1:47:a0: 78:fb:6f:1d:db:3b:da:04:31:a3:e4:42:34:ed:6f:81:02:4f: 60:ae:ff:65:1d:56:f7:fc:aa:1a:a6:b5:c6:96:5f:8d:27:0a: 06:0b:2e:e4:e8:3a:73:63:a9:50:d5:53:e9:57:81:7f:4b:3e: f1:ed:b1:b9:89:e4:9b:8f:43:e1:a9:13:28:92:01:c0:ca:24: 92:06:67:d2:a2:01:cf:6a:8e:24:cf:a5:8b:61:b6:22:49:b5: 31:fa:cd:50:5e:fc:c9:b5:2f:ff:71:f9:6c:a1:9f:45:5f:fd: fa:8d:2c:42:57:ec:4e:7f:a8:86:6d:c1:8a:9e:ac:c6:12:9d: 22:44:31:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE MjBDMzgwMzkwHhcNMjUwODIyMTg1MTIyWhcNMjUwODI5MTg1MTIyWjAYMRYwFAYD VQQDEw02OGE4YmMyYi01ZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVJabYuhvH3W0njb3H5rhctxpn3Y7rRVUvCaWyPYRVSaLYEe9iF2ypIrArTm w7/y/TKZrt6npt5yDO6Yii0+UqDsGT2ygwWZ9/H5pWlsudB0ifAxitlDGlBsxBSg hU9ufBSdj76mhuzscyOvK7gIcLOd03zQ0J/sBeoAiFD3gvwtZn9Yh1QmxwxUIklY GzPELbLmcGM8DQWwSOlmZLPHsMwuvCdJmNm4zzQH7nEovQHL/iQsxpFPAMdqYxrM cJyrt1dqscO/QY5BXxu2tYusC7C+aiN7f6wP9B6fEc0cdOZZa+CTN5M1rQbzmSMo kx3fwEXnWI9B60F9tEgdeMvKBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVS/H3R Rvz0EvGX4itbL1Dm8QQGMB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4 NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjQ2Mi9EQUY0MzVFMDE4NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZj UXhudS1mMmpLSHJTRERnRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaulTB+NBMEqPfiT+DIF+YuGPOh6LnbuJ+3ftZKAnZKVAGt/fAIF1j ATHXd2k2f9haPlgSOy+UdH15sf1MHEaQ7l/cimW5SgOfpTZpL4Gmzk8VqoEX+UUT MKpciSoNNwT9U/4yVL0zQWQptkIeeJK0JbiAFzf6wXqnH1PRR6B4+28d2zvaBDGj 5EI07W+BAk9grv9lHVb3/KoaprXGll+NJwoGCy7k6DpzY6lQ1VPpV4F/Sz7x7bG5 ieSbj0PhqRMokgHAyiSSBmfSogHPao4kz6WLYbYiSbUx+s1QXvzJtS//cflsoZ9F X/36jSxCV+xOf6iGbcGKnqzGEp0iRDE0 -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:49 2025 by rpki-client