$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: sDveIKiCI6+nrdXoHMaa+hXcahr8NjJL9fgwMM9HXdg= Subject key identifier: 25:D0:79:A0:8C:6B:A6:25:1B:77:E7:B3:5C:2B:10:2C:B4:35:94:44 Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 013E Signing time: Sat 23 Aug 2025 04:35:16 +0000 Manifest this update: Sat 23 Aug 2025 04:35:16 +0000 Manifest next update: Sat 30 Aug 2025 04:35:16 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: WOk3PBOtAzNtLs9mnvABUesrJ8BsEB0JrQhfwCA/+7I=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: Aug 23 04:35:16 2025 GMT Not After : Aug 30 04:35:16 2025 GMT Subject: CN=68a94504-1572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:06:4d:86:67:9e:4f:3e:39:c8:8e:78:41: 61:e5:a4:f8:e0:c8:8f:63:70:4c:d9:3d:53:7a:35: 4b:b2:b3:62:57:59:0d:6a:4c:25:ad:00:58:1e:0d: 51:c1:cb:19:05:26:5f:06:3c:fb:6f:a4:55:f2:37: ee:e6:65:2c:fa:2f:4c:79:f7:a8:93:e8:7c:14:62: 73:35:33:b5:c9:47:0c:59:d3:9e:cc:bb:ad:33:cd: e6:33:f1:a3:88:56:45:d2:e4:68:72:24:af:72:76: a6:ae:71:d0:50:15:7a:a3:a3:02:b5:54:b2:8e:a1: 6a:e8:53:51:6f:27:03:03:1e:05:58:84:d2:a7:9f: 7f:d2:db:e3:7c:07:07:18:79:15:12:8c:13:78:35: 1c:95:fe:43:8b:02:1f:44:37:ce:b2:92:1f:f6:3b: 04:3c:bb:f4:f6:bb:da:78:10:17:7d:f2:d6:d1:c0: 23:0f:23:08:a1:98:40:6d:9d:bf:cd:14:69:05:24: 95:35:1a:80:54:b8:cb:e9:24:ae:e6:f3:99:bc:76: b5:65:30:c4:1a:9b:1d:5d:51:15:5d:28:7d:8d:aa: 2f:28:c7:04:28:1c:1f:24:1a:fc:b5:09:17:95:04: 2f:1a:48:b2:1d:62:ae:42:6a:ac:1a:41:0e:b3:63: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D0:79:A0:8C:6B:A6:25:1B:77:E7:B3:5C:2B:10:2C:B4:35:94:44 X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ed:0c:4f:47:a6:98:7a:61:83:72:2b:06:d0:82:b4:a1:ea: 11:3e:01:c3:44:f8:f1:24:cc:e2:03:3f:29:32:80:3f:b2:57: ed:58:ab:f4:96:23:79:fe:14:12:fb:fa:7b:28:c0:f8:b5:98: ff:bf:86:51:b6:1b:22:cc:91:20:49:ae:57:47:38:24:4c:a0: 35:8f:96:ff:10:92:38:93:8d:a2:c9:b3:8e:71:e4:ca:37:be: 75:14:27:1b:6b:75:14:c1:02:4c:11:b5:4d:06:10:8c:67:8e: 9d:f4:d5:c7:3e:57:d7:15:53:c9:d6:ac:a1:5e:81:4e:34:15: ee:29:a2:e7:bf:d0:ee:9f:d4:85:d2:87:12:6d:1d:c5:14:c7: ee:e7:1c:b1:5b:42:c9:df:29:0a:b7:4d:14:5d:8c:a6:06:47: 95:82:2c:79:cb:77:c8:61:c0:10:0f:bf:a9:59:a4:85:bf:de: d2:b8:c5:fe:8b:55:92:84:03:a4:ff:33:5d:e1:a7:5f:e4:d2: 29:e8:d3:02:df:b8:00:07:00:1a:a8:b3:4c:11:3c:66:9a:4f: 7b:f9:2f:f3:ed:fd:01:77:11:25:fa:59:b9:3b:13:90:0a:d8: 24:38:28:5b:5d:12:7b:50:3e:c4:7c:61:be:91:4c:da:ae:86: 69:94:5f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE OEZBRkJDQTgwHhcNMjUwODIzMDQzNTE2WhcNMjUwODMwMDQzNTE2WjAYMRYwFAYD VQQDEw02OGE5NDUwNC0xNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqsGTYZnnk8+OciOeEFh5aT44MiPY3BM2T1TejVLsrNiV1kNakwlrQBYHg1R wcsZBSZfBjz7b6RV8jfu5mUs+i9Mefeok+h8FGJzNTO1yUcMWdOezLutM83mM/Gj iFZF0uRociSvcnamrnHQUBV6o6MCtVSyjqFq6FNRbycDAx4FWITSp59/0tvjfAcH GHkVEowTeDUclf5DiwIfRDfOspIf9jsEPLv09rvaeBAXffLW0cAjDyMIoZhAbZ2/ zRRpBSSVNRqAVLjL6SSu5vOZvHa1ZTDEGpsdXVEVXSh9jaovKMcEKBwfJBr8tQkX lQQvGkiyHWKuQmqsGkEOs2Pa9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXQeaCM a6YlG3fns1wrECy0NZREMB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw7QxPR6aYemGDcisG0IK0oeoRPgHDRPjxJMziAz8pMoA/slftWKv0 liN5/hQS+/p7KMD4tZj/v4ZRthsizJEgSa5XRzgkTKA1j5b/EJI4k42iybOOceTK N751FCcba3UUwQJMEbVNBhCMZ46d9NXHPlfXFVPJ1qyhXoFONBXuKaLnv9Dun9SF 0ocSbR3FFMfu5xyxW0LJ3ykKt00UXYymBkeVgix5y3fIYcAQD7+pWaSFv97SuMX+ i1WShAOk/zNd4adf5NIp6NMC37gABwAaqLNMETxmmk97+S/z7f0BdxEl+lm5OxOQ CtgkOChbXRJ7UD7EfGG+kUzaroZplF/0 -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:36 2025 by rpki-client