$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json) Hash identifier: jZO9Hr5G3SmYsVATYSWl7SPHVASUgTjf+sBFEjqnycc= Subject key identifier: 6A:30:F0:85:8A:6C:0A:56:A2:67:EF:BC:D4:89:17:B8:B5:37:A0:CA Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft Manifest number: 70 Signing time: Sat 23 Aug 2025 07:07:10 +0000 Manifest this update: Sat 23 Aug 2025 07:07:10 +0000 Manifest next update: Sat 30 Aug 2025 07:07:10 +0000 Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: IDFCntEyyXWpuLAjt9i2h9kp3lW8NxcBsClpNV4tg7w=) 2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Validity Not Before: Aug 23 07:07:10 2025 GMT Not After : Aug 30 07:07:10 2025 GMT Subject: CN=68a9689e-1807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:75:20:41:c2:81:c8:06:24:a9:f9:f7:b7:36: 02:58:70:be:c8:11:a4:86:eb:fa:54:d0:8a:5b:85: 18:e8:7b:a0:8c:f4:43:67:1b:32:7b:8c:5a:ee:8a: ae:b6:a0:b5:1e:22:89:3c:6b:b0:bf:0f:bf:a3:0b: 6a:71:e9:13:d9:e2:7d:cd:4d:51:b3:ef:6c:8a:82: 67:f0:bd:49:f4:8d:3a:d1:f2:19:0a:df:4a:9d:2d: cf:15:10:9c:6d:e6:a8:3a:64:b3:f2:4e:21:c6:61: 65:22:63:e4:c9:16:6f:53:f3:78:8c:e1:09:3f:fd: d4:fa:07:bf:23:da:eb:b0:9d:b1:d2:24:37:6d:8b: 9c:56:c5:63:ce:7a:5e:df:fe:98:24:65:56:ea:5e: f7:70:ee:ff:dd:98:02:86:f4:b0:31:4b:ed:e2:32: bc:7d:cf:a0:45:0d:19:dd:9f:01:96:a2:cf:61:7f: b5:5e:f0:a9:84:ff:e0:69:0e:71:a8:8a:9b:17:ff: 3e:bd:7b:1a:55:bb:da:ca:5c:d3:e4:95:ee:7a:40: 82:42:49:01:45:19:d3:a9:53:d1:81:4f:f3:d9:fb: f4:f2:d3:b1:9e:02:b2:ce:dc:71:33:b8:1f:38:c5: 40:57:10:03:fa:72:fd:a0:28:27:23:95:a0:83:05: 5c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:F0:85:8A:6C:0A:56:A2:67:EF:BC:D4:89:17:B8:B5:37:A0:CA X509v3 Authority Key Identifier: keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b0:fe:2e:22:ed:a2:d6:cf:6d:58:9d:10:ee:88:7f:7c:a3: e2:b4:37:24:a5:04:0d:b1:bc:9e:23:9b:10:b2:14:d9:8a:82: a2:e4:b7:4f:07:ce:f5:93:f0:58:d4:e1:68:c3:36:1e:6d:14: a9:b1:5f:7e:9f:2b:f7:45:15:85:bf:83:0e:39:c8:75:e2:bd: 77:c2:b5:e3:08:93:8a:8e:16:ac:ce:b8:71:57:10:fb:b8:21: 50:ca:98:3a:da:27:4d:b9:f0:6b:f2:67:ea:e1:97:45:f0:30: 12:c0:e8:66:a6:b0:e0:8b:02:63:01:1e:ba:ea:94:04:ad:5a: 08:98:ef:b3:cf:47:94:16:c1:87:96:11:c9:0e:86:7a:d3:8e: b8:82:c0:5c:02:34:ab:52:e1:62:07:f1:f3:a4:c7:6e:64:ae: 3f:a2:a0:a6:a9:26:a1:7f:95:89:56:49:63:02:d1:01:23:86: 52:24:3c:39:69:de:8c:3b:87:f0:c0:0a:06:e4:d2:0d:ed:aa: d4:61:e8:5a:7c:57:05:0c:ce:72:4d:f4:eb:d7:35:8f:56:50: 9d:bc:e7:d0:4d:53:7c:7b:ba:a9:bb:7a:0b:bc:ad:97:6e:7e: d8:5f:a1:f6:27:a7:fd:fb:d9:3f:e4:5a:20:33:39:98:f9:ce: 1d:49:b8:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoOTI0ODY2QjQwQzMwNDQyRDY5NkYyNDc3MDE1NDc1QzVG MDcwMkFDODAeFw0yNTA4MjMwNzA3MTBaFw0yNTA4MzAwNzA3MTBaMBgxFjAUBgNV BAMTDTY4YTk2ODllLTE4MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDldSBBwoHIBiSp+fe3NgJYcL7IEaSG6/pU0IpbhRjoe6CM9ENnGzJ7jFruiq62 oLUeIok8a7C/D7+jC2px6RPZ4n3NTVGz72yKgmfwvUn0jTrR8hkK30qdLc8VEJxt 5qg6ZLPyTiHGYWUiY+TJFm9T83iM4Qk//dT6B78j2uuwnbHSJDdti5xWxWPOel7f /pgkZVbqXvdw7v/dmAKG9LAxS+3iMrx9z6BFDRndnwGWos9hf7Ve8KmE/+BpDnGo ipsX/z69expVu9rKXNPkle56QIJCSQFFGdOpU9GBT/PZ+/Ty07GeArLO3HEzuB84 xUBXEAP6cv2gKCcjlaCDBVzhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUajDwhYps ClaiZ++81IkXuLU3oMowHwYDVR0jBBgwFoAUkkhmtAwwRC1pbyR3AVR1xfBwKsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1Lzk5Mjc3ODQ2RDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tobXRBd3dSQzFwYnlSM0FWUjF4ZkJ3S3NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1Lzk5Mjc3ODQ2RDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMx cGJ5UjNBVlIxeGZCd0tzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI6w/i4i7aLWz21YnRDuiH98o+K0NySlBA2xvJ4jmxCyFNmKgqLkt08H zvWT8FjU4WjDNh5tFKmxX36fK/dFFYW/gw45yHXivXfCteMIk4qOFqzOuHFXEPu4 IVDKmDraJ0258GvyZ+rhl0XwMBLA6GamsOCLAmMBHrrqlAStWgiY77PPR5QWwYeW EckOhnrTjriCwFwCNKtS4WIH8fOkx25krj+ioKapJqF/lYlWSWMC0QEjhlIkPDlp 3ow7h/DACgbk0g3tqtRh6Fp8VwUMznJN9OvXNY9WUJ2859BNU3x7uqm7egu8rZdu fthfofYnp/372T/kWiAzOZj5zh1JuC4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:52 2025 by rpki-client