$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: mQYLRwOXskOXW9u0SYHMfRsjuLtpVepS2/HkrB4Gfo8= Subject key identifier: AF:6E:77:3C:EB:F0:A2:E4:9E:10:72:85:94:E7:83:C7:48:5B:35:E5 Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 0645 Signing time: Fri 22 Aug 2025 22:49:33 +0000 Manifest this update: Fri 22 Aug 2025 22:49:33 +0000 Manifest next update: Fri 29 Aug 2025 22:49:33 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: 1gVlxRsoEIgEppdqHZbFFH/v4AMTqy/Bw5aiF+Zn0sk=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: vwAWNkOECPjjWatP7CXVkY05vRy7dP/taTedzApQJgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Aug 22 22:49:33 2025 GMT Not After : Aug 29 22:49:33 2025 GMT Subject: CN=68a8f3fd-0695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:0f:e7:dd:6c:8c:fd:40:26:32:4b:f5:23: d7:99:f6:8d:03:84:13:dc:b8:14:2e:c4:c9:e5:76: 24:a0:ff:31:4d:fc:fb:75:84:a8:e8:61:6d:9b:82: 77:7f:e6:1a:0a:7c:5c:f3:1c:c8:92:cf:8a:91:03: 8f:09:73:01:04:09:36:54:c6:0b:f8:23:be:92:46: 43:7c:f6:d7:b9:3b:ac:49:65:46:83:d3:45:bb:be: ce:82:2c:5b:84:87:aa:6c:fe:e3:03:48:40:e3:1b: 05:a6:58:ee:5f:a3:1b:10:49:b2:31:72:59:49:f2: e6:fa:67:4b:72:1c:99:e2:13:26:6a:34:94:a1:b0: 9f:ff:de:ad:01:99:ca:36:06:d9:12:47:16:c7:72: 19:27:80:4a:d4:a7:0e:9f:13:72:86:f3:06:af:eb: d3:9d:2c:36:89:16:17:de:b3:6a:d2:40:36:96:74: 7a:33:84:d7:f0:3c:50:7e:d5:41:c8:50:7a:32:10: 5c:3a:55:eb:5d:39:26:ae:f6:22:3d:a0:92:98:3d: f8:bd:78:db:2e:5f:35:95:c9:0f:ea:1f:1a:b5:77: 29:2b:47:51:9d:34:ee:43:15:c2:ea:8f:65:16:8d: 0b:9a:e0:52:15:00:a8:75:6c:3d:d5:68:bb:b6:0f: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6E:77:3C:EB:F0:A2:E4:9E:10:72:85:94:E7:83:C7:48:5B:35:E5 X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c4:68:04:13:85:b8:92:62:53:5d:3f:1b:44:37:2d:e7:76: d1:f7:bf:5a:f0:52:f6:88:15:92:40:35:46:9d:61:ce:88:5a: 9d:57:78:8e:ba:b1:8e:ed:8a:38:5c:0a:35:d1:73:22:8f:11: cc:bb:21:ce:3b:8c:ea:62:15:0b:79:fa:8e:9b:f5:15:05:aa: 9d:05:10:32:70:c0:7c:c4:87:7e:b9:f6:60:63:02:95:db:16: be:f9:eb:c1:df:e0:24:85:d1:2b:af:05:cf:d4:aa:3e:5e:78: e8:73:71:74:49:95:32:d5:fa:e8:06:e5:c3:8e:65:32:21:87: 12:2f:43:b3:dc:29:e7:1d:20:cf:c1:ae:ba:c1:7c:e4:25:96: b8:f0:5b:9e:aa:40:80:8e:78:4a:34:2a:49:82:4a:93:13:f6: f9:af:1c:9f:67:62:26:29:fc:2a:0e:30:67:b5:56:c4:c2:44: 31:d3:d2:ba:4e:b2:25:91:40:af:80:61:e8:a3:3c:13:3f:5f: 6b:7e:4d:59:a2:5c:b0:95:a4:e2:cc:0e:80:30:16:8d:66:20: 1a:97:96:85:fa:1f:b7:24:84:ab:5a:09:3d:67:30:76:a6:da: 8c:47:9a:d1:3d:e2:b1:91:f0:20:96:66:e6:1f:8c:60:56:35: 69:a7:ce:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUwODIyMjI0OTMzWhcNMjUwODI5MjI0OTMzWjAYMRYwFAYD VQQDEw02OGE4ZjNmZC0wNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tEP591sjP1AJjJL9SPXmfaNA4QT3LgULsTJ5XYkoP8xTfz7dYSo6GFtm4J3 f+YaCnxc8xzIks+KkQOPCXMBBAk2VMYL+CO+kkZDfPbXuTusSWVGg9NFu77Ogixb hIeqbP7jA0hA4xsFpljuX6MbEEmyMXJZSfLm+mdLchyZ4hMmajSUobCf/96tAZnK NgbZEkcWx3IZJ4BK1KcOnxNyhvMGr+vTnSw2iRYX3rNq0kA2lnR6M4TX8DxQftVB yFB6MhBcOlXrXTkmrvYiPaCSmD34vXjbLl81lckP6h8atXcpK0dRnTTuQxXC6o9l Fo0LmuBSFQCodWw91Wi7tg+l5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9udzzr 8KLknhByhZTng8dIWzXlMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOxGgEE4W4kmJTXT8bRDct53bR979a8FL2iBWSQDVGnWHOiFqdV3iO urGO7Yo4XAo10XMijxHMuyHOO4zqYhULefqOm/UVBaqdBRAycMB8xId+ufZgYwKV 2xa++evB3+AkhdErrwXP1Ko+Xnjoc3F0SZUy1froBuXDjmUyIYcSL0Oz3CnnHSDP wa66wXzkJZa48FueqkCAjnhKNCpJgkqTE/b5rxyfZ2ImKfwqDjBntVbEwkQx09K6 TrIlkUCvgGHoozwTP19rfk1ZolywlaTizA6AMBaNZiAal5aF+h+3JISrWgk9ZzB2 ptqMR5rRPeKxkfAglmbmH4xgVjVpp84s -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:26 2025 by rpki-client