$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: gu/iMQAxNYdAPbhRSF52AE7vNwdd2rdVWdT6CZIeN0M= Subject key identifier: 84:03:1E:75:8A:1D:FF:59:DD:23:4F:4E:BE:E8:0F:1F:A3:7D:6A:44 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 06FF Signing time: Fri 22 Aug 2025 22:04:36 +0000 Manifest this update: Fri 22 Aug 2025 22:04:35 +0000 Manifest next update: Fri 29 Aug 2025 22:04:35 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: 21DJiEOh2FB+7WhjQPg6JKu2EIQA7lWVfIoZTDDqKlY=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Aug 22 22:04:35 2025 GMT Not After : Aug 29 22:04:35 2025 GMT Subject: CN=68a8e973-44ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:52:52:be:10:ce:47:c2:d0:0b:6a:1b:3b: 6b:10:81:da:aa:6d:cb:7b:51:2d:af:5c:c0:a9:39: 58:49:5f:5a:33:e4:49:66:36:c9:88:5a:e1:c2:09: a2:ea:43:e0:51:74:51:5e:5c:00:f4:6d:50:35:a9: 23:8f:d4:96:a0:bf:b3:c9:70:e7:4c:9d:3f:7a:6f: 51:9f:fa:7c:42:00:7c:fd:dc:9d:05:e9:03:fe:d1: 67:3e:d0:70:4f:63:0a:06:cf:0d:80:61:8a:c1:59: 6c:ff:6d:f0:38:53:d0:0b:85:1f:38:c4:4b:05:4d: ed:13:d9:06:28:37:88:24:fd:4a:90:6c:36:27:c6: 97:b2:64:4c:90:11:02:23:37:3a:e1:25:22:49:8e: b3:9d:43:d8:99:15:98:ca:53:69:e8:75:15:e7:f7: 2d:d3:88:74:fe:c8:d7:45:c1:c6:38:f6:4f:c4:2b: 12:62:d0:4d:da:61:0b:12:cd:11:bf:72:66:cd:6d: 30:47:49:2b:e2:00:f4:47:20:3b:1e:e1:3b:be:ee: 0e:49:42:e4:e9:c2:4a:76:f1:ff:2e:d4:27:a9:d7: bb:67:1b:a9:ce:34:ad:71:6d:a8:ea:67:a7:95:f8: 39:5b:5d:d9:85:08:4e:37:cb:81:ba:25:3f:a8:14: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:03:1E:75:8A:1D:FF:59:DD:23:4F:4E:BE:E8:0F:1F:A3:7D:6A:44 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:81:ce:19:08:00:f6:21:e2:56:f2:1b:41:ed:d4:f9:c9:d1: 9e:f2:a3:1e:b6:e7:4a:69:50:bd:19:b1:4c:9a:02:d5:3e:6f: 15:34:a3:08:de:a3:e7:62:50:76:17:e8:1a:0a:5f:9e:41:ad: a2:19:33:5d:0d:53:a3:43:7a:41:07:1e:a5:99:a6:0f:fe:0a: 05:7e:0f:c7:c4:8d:7d:18:d1:8a:9f:72:11:0e:3f:0f:83:44: c2:51:53:0a:65:54:cc:10:26:f0:06:68:53:25:67:c5:25:69: 23:23:ad:6a:ca:9d:fb:2b:c2:77:11:95:f2:9f:52:01:a0:35: 9c:2b:96:7c:df:72:b8:cb:19:0d:06:4b:55:26:72:9a:9b:95: 5a:7b:7f:15:cc:d8:dc:ee:9a:7d:cb:fe:b1:ba:81:09:05:d1: a7:af:46:b2:fd:64:e0:20:1f:66:fc:11:49:e0:1a:ae:ef:72: 6f:d3:d2:7f:23:47:2a:62:86:0f:70:b2:55:c7:8e:b9:de:82: e9:e5:ff:6c:ef:da:bf:e6:d6:99:c7:82:c7:43:18:68:ff:29: 22:11:ce:27:02:39:c7:18:50:04:d8:c1:6f:16:00:4a:bc:0c: c4:82:f7:06:31:ad:28:58:2e:b4:a1:3e:f4:87:1a:36:a8:60: 39:10:e5:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjUwODIyMjIwNDM1WhcNMjUwODI5MjIwNDM1WjAYMRYwFAYD VQQDEw02OGE4ZTk3My00NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydFSUr4QzkfC0AtqGztrEIHaqm3Le1Etr1zAqTlYSV9aM+RJZjbJiFrhwgmi 6kPgUXRRXlwA9G1QNakjj9SWoL+zyXDnTJ0/em9Rn/p8QgB8/dydBekD/tFnPtBw T2MKBs8NgGGKwVls/23wOFPQC4UfOMRLBU3tE9kGKDeIJP1KkGw2J8aXsmRMkBEC Izc64SUiSY6znUPYmRWYylNp6HUV5/ct04h0/sjXRcHGOPZPxCsSYtBN2mELEs0R v3JmzW0wR0kr4gD0RyA7HuE7vu4OSULk6cJKdvH/LtQnqde7ZxupzjStcW2o6men lfg5W13ZhQhON8uBuiU/qBSgkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQDHnWK Hf9Z3SNPTr7oDx+jfWpEMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNgc4ZCAD2IeJW8htB7dT5ydGe8qMetudKaVC9GbFMmgLVPm8VNKMI 3qPnYlB2F+gaCl+eQa2iGTNdDVOjQ3pBBx6lmaYP/goFfg/HxI19GNGKn3IRDj8P g0TCUVMKZVTMECbwBmhTJWfFJWkjI61qyp37K8J3EZXyn1IBoDWcK5Z833K4yxkN BktVJnKam5Vae38VzNjc7pp9y/6xuoEJBdGnr0ay/WTgIB9m/BFJ4Bqu73Jv09J/ I0cqYoYPcLJVx4653oLp5f9s79q/5taZx4LHQxho/ykiEc4nAjnHGFAE2MFvFgBK vAzEgvcGMa0oWC60oT70hxo2qGA5EOVS -----END CERTIFICATE-----Generated at Sun Aug 24 00:02:18 2025 by rpki-client