$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: zdnEg4UBW15QSgPiJDGLUKuQINFlQZvO6ar1B9LkQt0= Subject key identifier: 7B:CD:0C:38:F3:2E:FC:7E:A9:82:2B:E0:19:96:E1:0E:CA:BB:E4:57 Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 119B Signing time: Fri 22 Aug 2025 19:41:12 +0000 Manifest this update: Fri 22 Aug 2025 19:41:11 +0000 Manifest next update: Fri 29 Aug 2025 19:41:11 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: nmg0iUmRnTDqFw3DNs1ZCBoibezJklqNV4R5ztcSodQ=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: kG/awft1YnlMUcGo/TLCAbm8s2p3POH5kub747SVbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: Aug 22 19:41:11 2025 GMT Not After : Aug 29 19:41:11 2025 GMT Subject: CN=68a8c7d7-000d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:d3:ef:5e:77:fb:3b:69:87:66:cd:49:88: f0:98:71:35:81:38:a9:d3:fb:dc:4f:bf:a9:23:47: 05:12:a8:7a:d8:f0:9d:be:dc:59:f9:86:8c:85:a2: 3a:b0:d3:84:22:f3:3d:2a:65:63:ce:30:7e:ae:68: b3:85:bb:3f:ad:c4:3d:b4:0e:43:cd:b8:ce:a6:5c: 67:e9:c4:db:24:cc:be:f5:ec:fa:5f:57:6c:17:df: 2f:7c:9a:c4:0f:60:f7:f4:de:4e:a0:73:d0:08:b4: 35:ad:af:ef:41:d9:be:08:a9:0a:59:6f:90:b8:3c: 57:f6:0c:0d:54:1e:d5:99:ce:47:bc:46:f0:de:96: 60:e6:15:df:97:5f:81:fe:22:47:b4:78:0e:f8:56: 4e:dd:27:3c:6d:09:3d:d6:96:b2:47:24:15:b4:a5: a4:b4:93:77:23:91:f6:71:6a:db:39:ba:8f:6f:b5: 2a:ad:5d:69:4f:85:92:fb:f1:f9:86:e0:9b:35:fe: ef:30:d4:5b:d5:bb:91:ec:a7:89:0b:9f:2e:37:75: 25:82:ab:2a:89:05:91:3d:9e:f9:29:1d:c7:78:79: 6d:6a:e4:ed:b1:b5:7f:35:24:09:a6:22:32:dd:47: 3d:6b:2f:29:c9:4a:96:f4:fe:bf:0b:88:a2:75:7f: 95:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CD:0C:38:F3:2E:FC:7E:A9:82:2B:E0:19:96:E1:0E:CA:BB:E4:57 X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:d4:b4:be:e4:15:6a:a9:7d:dd:bf:46:ab:24:58:9b:b7:ae: df:2f:8b:70:93:bf:ac:cc:e3:d9:97:c0:14:60:96:fe:3b:c5: 83:07:27:61:bb:ac:51:8a:62:ae:a2:92:1e:ec:30:cc:0c:3b: 7b:d2:44:f8:0e:00:c5:49:9f:e7:90:2f:12:41:ef:93:5d:aa: 84:59:d9:b0:fa:45:c3:b5:3a:ab:da:1a:34:bc:f7:55:e4:19: 1e:f9:2d:94:7c:cc:32:bb:db:6a:bb:16:a3:3e:6f:93:6b:78: 81:ec:fd:a8:a0:8d:18:53:1c:48:a6:e3:f5:be:ec:a3:8d:e1: 16:da:0e:3d:a7:b6:81:d2:b6:b5:91:68:26:ec:4b:cc:cb:79: 2d:fb:d4:dc:11:5b:ec:9e:3c:4c:b3:91:4c:0c:69:5d:bf:56: 7c:35:72:b0:6d:48:c0:0f:7d:40:95:96:69:ae:89:32:9f:19: ba:b8:f2:c0:93:dc:bc:60:e1:ff:69:ca:7e:70:d5:c0:02:2a: 50:12:61:c1:64:f1:b5:99:cb:42:71:c4:4d:38:07:c0:98:01: 92:c9:b7:ec:33:58:8c:4e:d6:1b:68:49:40:bb:63:6e:34:d5: da:86:4e:01:a7:1f:62:13:c2:b4:9e:d5:b5:7b:61:81:0f:21: 54:94:aa:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjUwODIyMTk0MTExWhcNMjUwODI5MTk0MTExWjAYMRYwFAYD VQQDEw02OGE4YzdkNy0wMDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqC7T7153+ztph2bNSYjwmHE1gTip0/vcT7+pI0cFEqh62PCdvtxZ+YaMhaI6 sNOEIvM9KmVjzjB+rmizhbs/rcQ9tA5DzbjOplxn6cTbJMy+9ez6X1dsF98vfJrE D2D39N5OoHPQCLQ1ra/vQdm+CKkKWW+QuDxX9gwNVB7Vmc5HvEbw3pZg5hXfl1+B /iJHtHgO+FZO3Sc8bQk91payRyQVtKWktJN3I5H2cWrbObqPb7UqrV1pT4WS+/H5 huCbNf7vMNRb1buR7KeJC58uN3UlgqsqiQWRPZ75KR3HeHltauTtsbV/NSQJpiIy 3Uc9ay8pyUqW9P6/C4iidX+V8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvNDDjz Lvx+qYIr4BmW4Q7Ku+RXMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs1LS+5BVqqX3dv0arJFibt67fL4twk7+szOPZl8AUYJb+O8WDBydh u6xRimKuopIe7DDMDDt70kT4DgDFSZ/nkC8SQe+TXaqEWdmw+kXDtTqr2ho0vPdV 5Bke+S2UfMwyu9tquxajPm+Ta3iB7P2ooI0YUxxIpuP1vuyjjeEW2g49p7aB0ra1 kWgm7EvMy3kt+9TcEVvsnjxMs5FMDGldv1Z8NXKwbUjAD31AlZZprokynxm6uPLA k9y8YOH/acp+cNXAAipQEmHBZPG1mctCccRNOAfAmAGSybfsM1iMTtYbaElAu2Nu NNXahk4Bpx9iE8K0ntW1e2GBDyFUlKoY -----END CERTIFICATE-----Generated at Sun Aug 24 09:15:22 2025 by rpki-client