$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: tdMZ5Zll7u06T8d/QNTk8u33IggI438aw6KK39vBIlI= Subject key identifier: 02:C3:49:17:8D:D8:5F:49:7C:A3:D5:F1:1B:68:22:34:FB:3F:26:2F Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 0792 Signing time: Fri 22 Aug 2025 21:38:43 +0000 Manifest this update: Fri 22 Aug 2025 21:38:42 +0000 Manifest next update: Fri 29 Aug 2025 21:38:42 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: pfqeGw9QT1gnZTfH4SbbMsj01vghMzh9WPMt6+dPl5k=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: PfwMudypLXBG0l/8zURzPSjDmL/lqt08xsdYYn3A5t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F, serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: Aug 22 21:38:42 2025 GMT Not After : Aug 29 21:38:42 2025 GMT Subject: CN=68a8e363-9033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:01:d3:a7:e2:fb:74:00:39:31:88:12:5d: 3c:68:a9:21:56:6b:70:01:20:77:94:9c:05:a3:85: 1b:eb:6f:30:37:1a:0b:d6:39:4a:d8:53:cc:06:9a: 23:46:18:4c:b8:3f:04:28:44:ef:07:3d:f6:41:19: ec:3b:74:05:8d:f4:a3:a3:f6:21:cd:51:b0:70:c8: f9:ff:09:f5:2f:64:d1:d6:39:31:73:b0:2a:27:5e: 6f:f9:0e:40:50:58:e5:58:e7:96:13:51:79:af:3b: 79:d1:72:fb:31:d6:89:28:91:98:68:9c:36:26:39: d3:36:59:a7:d5:48:44:00:eb:e8:8b:30:f0:3c:25: e6:fe:76:db:21:3d:99:fe:17:67:ef:25:de:fc:1e: d9:98:86:20:89:16:8a:b8:08:04:8d:db:9d:c5:52: a8:43:07:fb:9d:33:3b:0b:17:80:42:0d:63:29:06: a4:9d:53:02:5d:8a:74:b7:7c:c3:c4:e8:d4:7e:2c: a3:b2:55:69:51:e4:6e:d1:bf:69:6d:93:2d:b7:e3: 94:54:40:32:f0:e8:a1:18:ad:6f:ea:b8:e1:e6:38: 29:2d:1d:9c:64:3c:4b:46:c7:9b:5d:1c:53:59:f9: 48:90:67:18:36:84:a4:af:15:6b:d3:da:27:30:de: d2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C3:49:17:8D:D8:5F:49:7C:A3:D5:F1:1B:68:22:34:FB:3F:26:2F X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:eb:3f:3a:c1:70:18:11:e4:43:40:bf:2b:4e:fd:9c:ad:63: 00:ae:c6:92:95:77:33:c4:94:68:13:d5:fe:0d:6b:2c:63:19: 52:79:31:51:32:89:3b:19:da:37:86:7b:55:d6:7f:6a:72:6c: b1:02:f4:42:61:39:03:ba:f3:52:5c:c6:5c:4b:05:d1:94:43: 1b:24:62:66:9d:3a:71:e4:aa:11:d4:d9:95:18:ce:cc:7d:b0: 83:25:54:3b:0d:72:a5:3d:07:cb:fd:5a:2d:1d:1b:34:e2:02: 29:ec:f2:c5:2d:c1:19:c7:33:b8:48:88:c0:dc:74:01:bb:7c: 93:d0:45:55:e2:20:b4:74:6e:bf:de:54:02:7d:da:50:30:80: ea:fa:cd:1a:a7:92:ff:8b:6f:1b:c4:48:6e:39:95:62:7f:d6: ed:c5:47:51:c3:1e:f0:3f:65:7d:90:6c:7a:dd:b1:40:6a:ff: d2:30:3c:3f:37:a4:ac:b0:1e:47:13:c5:01:37:48:c7:69:de: ad:77:c4:5c:6e:7e:25:7c:e1:2f:f3:1e:d1:79:1d:8e:77:20: aa:5e:78:13:08:51:60:87:7b:55:d1:fe:31:b6:e2:a8:00:ec: 0b:a2:74:96:82:93:bf:96:27:21:76:2b:45:9d:c3:d0:16:0e: 82:2d:d3:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjUwODIyMjEzODQyWhcNMjUwODI5MjEzODQyWjAYMRYwFAYD VQQDEw02OGE4ZTM2My05MDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys4B06fi+3QAOTGIEl08aKkhVmtwASB3lJwFo4Ub628wNxoL1jlK2FPMBpoj RhhMuD8EKETvBz32QRnsO3QFjfSjo/YhzVGwcMj5/wn1L2TR1jkxc7AqJ15v+Q5A UFjlWOeWE1F5rzt50XL7MdaJKJGYaJw2JjnTNlmn1UhEAOvoizDwPCXm/nbbIT2Z /hdn7yXe/B7ZmIYgiRaKuAgEjdudxVKoQwf7nTM7CxeAQg1jKQaknVMCXYp0t3zD xOjUfiyjslVpUeRu0b9pbZMtt+OUVEAy8OihGK1v6rjh5jgpLR2cZDxLRsebXRxT WflIkGcYNoSkrxVr09onMN7SXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALDSReN 2F9JfKPV8RtoIjT7PyYvMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA96z86wXAYEeRDQL8rTv2crWMArsaSlXczxJRoE9X+DWssYxlSeTFR Mok7Gdo3hntV1n9qcmyxAvRCYTkDuvNSXMZcSwXRlEMbJGJmnTpx5KoR1NmVGM7M fbCDJVQ7DXKlPQfL/VotHRs04gIp7PLFLcEZxzO4SIjA3HQBu3yT0EVV4iC0dG6/ 3lQCfdpQMIDq+s0ap5L/i28bxEhuOZVif9btxUdRwx7wP2V9kGx63bFAav/SMDw/ N6SssB5HE8UBN0jHad6td8Rcbn4lfOEv8x7ReR2OdyCqXngTCFFgh3tV0f4xtuKo AOwLonSWgpO/lichditFncPQFg6CLdNV -----END CERTIFICATE-----Generated at Sun Aug 24 04:16:42 2025 by rpki-client