$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: 42eDinmKEiYTwIkHiL4j/v63mME1ghiHsw6+ORVATfw= Subject key identifier: 92:94:D9:23:31:AE:27:DB:46:A1:B0:37:99:1D:AE:1F:CB:72:14:D1 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 045F Signing time: Sat 23 Aug 2025 00:26:11 +0000 Manifest this update: Sat 23 Aug 2025 00:26:11 +0000 Manifest next update: Sat 30 Aug 2025 00:26:11 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: MH+C671NQi1NGF8ahc/ekkJ8KSAclzTh+gAi6cTaytg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Aug 23 00:26:11 2025 GMT Not After : Aug 30 00:26:11 2025 GMT Subject: CN=68a90aa3-d2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:a0:9b:f9:c5:5a:be:86:04:c5:a0:01:d8: 68:93:c1:61:9f:07:07:d4:c3:3e:1b:23:30:f1:73: ac:5c:4b:09:40:aa:94:f3:07:42:21:46:c7:7b:2c: fc:3b:c0:1c:fa:93:b9:ca:fe:65:b5:d1:7e:92:d5: 18:91:3c:ff:78:95:cc:93:53:1b:4d:69:1e:2b:2e: fc:00:2d:27:11:38:a7:95:03:4c:81:39:e9:92:c2: bc:c1:9b:0c:d3:41:df:e4:7e:77:a6:1d:7e:18:2b: 20:fc:22:af:d2:ff:57:32:1c:b1:89:53:93:b9:b4: 3b:08:b8:e3:ca:ad:9a:94:f0:0c:26:e4:33:f4:d2: b9:2b:c3:85:eb:75:21:bc:a7:77:aa:0d:a1:e7:b6: 98:3c:2a:b9:a5:35:fb:a5:bb:74:06:2e:02:be:51: 33:01:73:41:97:47:16:d7:28:3b:9b:c9:9d:12:a9: 99:05:a6:58:3f:69:ab:4d:7b:13:42:cf:4e:cc:3c: 6d:ec:1a:b8:e4:77:fb:2f:3e:52:28:c8:43:10:9b: d5:df:9b:8c:b5:81:e0:c2:c7:a3:99:36:82:02:d3: 75:4c:dd:f3:03:2a:be:83:bd:26:6b:ba:c7:ab:9a: 5c:88:58:14:bd:71:6a:ef:45:b2:29:c3:ca:95:db: 52:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:94:D9:23:31:AE:27:DB:46:A1:B0:37:99:1D:AE:1F:CB:72:14:D1 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b3:24:6b:81:44:2c:9a:0b:b1:4d:56:fb:b0:d2:d2:1d:20: db:cf:0d:c0:ef:54:8d:af:a6:d1:e0:40:fc:73:e1:f8:f1:74: 7f:10:29:83:f4:0a:b1:a2:16:90:6c:fb:07:38:3c:7e:ad:19: e4:5b:f7:50:f2:64:cb:60:fd:33:9a:4c:1e:cb:12:33:ec:55: 72:94:d6:69:40:18:45:77:97:cb:b8:f5:58:a4:29:e0:04:bb: 51:bd:2d:40:54:c1:3f:62:bb:63:df:7d:11:ab:f2:1c:38:3d: 1b:58:1e:ef:ec:3b:b1:5b:aa:c8:16:4a:a8:fa:e4:0f:53:56: 78:77:0e:60:a9:a1:26:ba:83:a2:9f:0a:ef:2b:26:80:29:23: 53:2c:c3:04:a8:df:f5:f8:f5:3f:8a:80:8d:08:3e:9c:f8:e9: 24:5b:10:4d:03:87:70:f1:26:e8:bf:a7:1e:64:b5:1b:8b:7f: af:05:57:db:65:ca:6a:74:f4:29:4b:1c:b4:bd:fd:b1:88:1d: 6f:4e:13:a9:50:31:d5:f0:1f:fb:7f:51:7e:00:9f:61:05:b6: e1:bc:7d:3b:3a:4a:95:77:03:12:28:e2:f2:74:9a:c2:c3:85: 95:8c:e6:e9:50:11:ea:96:56:40:05:9e:cd:f0:6e:d4:5d:b1: 07:dc:22:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUwODIzMDAyNjExWhcNMjUwODMwMDAyNjExWjAYMRYwFAYD VQQDEw02OGE5MGFhMy1kMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt2gm/nFWr6GBMWgAdhok8FhnwcH1MM+GyMw8XOsXEsJQKqU8wdCIUbHeyz8 O8Ac+pO5yv5ltdF+ktUYkTz/eJXMk1MbTWkeKy78AC0nETinlQNMgTnpksK8wZsM 00Hf5H53ph1+GCsg/CKv0v9XMhyxiVOTubQ7CLjjyq2alPAMJuQz9NK5K8OF63Uh vKd3qg2h57aYPCq5pTX7pbt0Bi4CvlEzAXNBl0cW1yg7m8mdEqmZBaZYP2mrTXsT Qs9OzDxt7Bq45Hf7Lz5SKMhDEJvV35uMtYHgwsejmTaCAtN1TN3zAyq+g70ma7rH q5pciFgUvXFq70WyKcPKldtSeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKU2SMx rifbRqGwN5kdrh/LchTRMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7syRrgUQsmguxTVb7sNLSHSDbzw3A71SNr6bR4ED8c+H48XR/ECmD 9AqxohaQbPsHODx+rRnkW/dQ8mTLYP0zmkweyxIz7FVylNZpQBhFd5fLuPVYpCng BLtRvS1AVME/Yrtj330Rq/IcOD0bWB7v7DuxW6rIFkqo+uQPU1Z4dw5gqaEmuoOi nwrvKyaAKSNTLMMEqN/1+PU/ioCNCD6c+OkkWxBNA4dw8Sbov6ceZLUbi3+vBVfb ZcpqdPQpSxy0vf2xiB1vThOpUDHV8B/7f1F+AJ9hBbbhvH07OkqVdwMSKOLydJrC w4WVjObpUBHqllZABZ7N8G7UXbEH3CLK -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:47 2025 by rpki-client