$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json) Hash identifier: qeOSvTbFaKgnx8vhia20Kci0zJ5WDzVcgzj6AWoxpg4= Subject key identifier: 4F:BF:05:C3:76:F2:72:E4:0D:CD:0E:8C:44:55:E2:B2:7F:D3:C1:B1 Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft Manifest number: 12 Signing time: Sat 23 Aug 2025 08:17:56 +0000 Manifest this update: Sat 23 Aug 2025 08:17:55 +0000 Manifest next update: Sat 30 Aug 2025 08:17:55 +0000 Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: KEuzwLEaAmy7/O7g+C9XCbJvOeEMRl4RfqmLE9BVQh4=) 2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: IhK2cshQpEX+npxu/NN0aCUzUVi2L+34EqYhm+54jyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Validity Not Before: Aug 23 08:17:55 2025 GMT Not After : Aug 30 08:17:55 2025 GMT Subject: CN=68a97933-ddd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ec:5d:21:1f:cf:32:fb:8e:a5:c0:96:71:71: e0:84:d7:61:84:2e:e2:11:6c:a4:ea:04:78:9a:a9: 6f:c5:c0:93:01:33:43:8d:d3:28:46:05:ff:83:42: f4:de:e1:dc:d6:05:26:5b:15:41:f1:ec:d0:9d:90: 56:cb:fd:87:60:5c:23:72:5a:db:76:4a:08:c6:16: 0b:95:89:17:9d:e9:20:c5:a9:ed:f1:14:69:a1:97: d0:df:a3:c0:c2:49:93:7c:1c:0e:38:28:02:ae:76: 84:c8:f3:8b:4b:d3:03:4e:a6:52:c8:23:90:67:12: 05:4e:23:3c:28:9d:6d:c2:e3:21:ef:b8:69:2c:f7: ff:56:8b:37:d5:f9:a0:53:9f:65:8f:98:97:30:0d: 3c:c5:7f:36:74:09:f2:fa:bd:54:77:52:8f:f2:a6: e8:ea:d1:ad:b8:79:42:11:e7:42:61:6f:c1:1a:88: f4:3b:cb:2c:07:53:ca:a3:3a:b3:ea:c2:4e:a9:e3: 58:f4:45:74:13:16:3b:b0:cc:65:f7:9d:92:dd:46: 23:5f:8e:f0:40:43:06:97:47:fc:5e:96:70:d3:25: 11:db:66:4e:3e:9a:9b:0d:3e:b7:26:cb:a5:26:10: 61:3e:f8:78:95:93:ed:3c:03:c7:83:57:00:c3:11: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BF:05:C3:76:F2:72:E4:0D:CD:0E:8C:44:55:E2:B2:7F:D3:C1:B1 X509v3 Authority Key Identifier: keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4e:cd:64:df:00:6c:d5:6a:c5:23:c2:a3:88:5a:b2:a1:b3: e6:24:36:5b:1c:0e:9d:1e:ba:f5:ad:b0:11:a8:e2:68:2f:64: ec:86:0c:d1:86:45:3c:ab:57:bf:a1:e1:34:d1:74:6b:7d:bb: 1b:b5:8c:65:bf:33:48:28:1a:a2:d3:28:b3:42:16:94:ff:3e: 04:c8:60:0e:a1:d6:24:e0:65:26:e5:3d:a3:29:a3:81:1f:cd: 29:dc:ab:7f:a4:d4:59:0c:98:b7:51:70:21:60:51:a7:61:e7: 56:34:2a:41:71:2b:dd:08:fa:10:4d:75:18:78:07:cc:db:20: 93:90:a6:c7:32:fc:1c:7e:65:b2:10:cc:d6:fa:6a:d2:89:5b: 34:a2:74:28:27:bf:6e:62:9c:72:ef:49:1b:6d:83:f6:e3:d9: bf:63:b0:fa:ce:e5:32:cf:c4:53:c3:3f:78:e6:1e:bd:37:ea: 78:19:21:96:82:be:f5:fb:df:67:aa:03:c8:89:c3:a9:b1:50: 4e:2c:39:18:65:c8:43:6f:4d:cd:ce:35:45:ee:19:24:d1:c2: eb:be:97:35:c3:47:c1:2d:35:e8:63:82:00:0f:bc:3b:65:24: 77:e2:0e:5d:19:20:e8:65:86:b0:e6:d7:ea:38:e8:35:a5:e7: cf:92:f7:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjgyMDExMC8GA1UEBRMoRkNBQzZGQTgzMUU4RjVBMjg0MTM0Qzk1QThEMDIwRkNC QzhFQzlGMjAeFw0yNTA4MjMwODE3NTVaFw0yNTA4MzAwODE3NTVaMBgxFjAUBgNV BAMTDTY4YTk3OTMzLWRkZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb7F0hH88y+46lwJZxceCE12GELuIRbKTqBHiaqW/FwJMBM0ON0yhGBf+DQvTe 4dzWBSZbFUHx7NCdkFbL/YdgXCNyWtt2SgjGFguViRed6SDFqe3xFGmhl9Dfo8DC SZN8HA44KAKudoTI84tL0wNOplLII5BnEgVOIzwonW3C4yHvuGks9/9WizfV+aBT n2WPmJcwDTzFfzZ0CfL6vVR3Uo/ypujq0a24eUIR50Jhb8EaiPQ7yywHU8qjOrPq wk6p41j0RXQTFjuwzGX3nZLdRiNfjvBAQwaXR/xelnDTJRHbZk4+mpsNPrcmy6Um EGE++HiVk+08A8eDVwDDEUjpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT78Fw3by cuQNzQ6MRFXisn/TwbEwHwYDVR0jBBgwFoAU/KxvqDHo9aKEE0yVqNAg/LyOyfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCODIwLzkwQThCMDhBNjg0 MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFLRUUweVZxTkFnX0x5T3lm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX0t4dnFESG85YUtFRTB5VnFOQWdfTHlPeWZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC ODIwLzkwQThCMDhBNjg0MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFL RUUweVZxTkFnX0x5T3lmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF1OzWTfAGzVasUjwqOIWrKhs+YkNlscDp0euvWtsBGo4mgvZOyGDNGG RTyrV7+h4TTRdGt9uxu1jGW/M0goGqLTKLNCFpT/PgTIYA6h1iTgZSblPaMpo4Ef zSncq3+k1FkMmLdRcCFgUadh51Y0KkFxK90I+hBNdRh4B8zbIJOQpscy/Bx+ZbIQ zNb6atKJWzSidCgnv25inHLvSRttg/bj2b9jsPrO5TLPxFPDP3jmHr036ngZIZaC vvX732eqA8iJw6mxUE4sORhlyENvTc3ONUXuGSTRwuu+lzXDR8EtNehjggAPvDtl JHfiDl0ZIOhlhrDm1+o46DWl58+S9yE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:39:34 2025 by rpki-client