$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: jBcNRRBsw20odGUiP0nMLC1iLrq63kJTKE2u+PlghoA= Subject key identifier: 8C:1B:4A:6F:25:74:64:D2:63:6E:67:E2:A6:26:68:B3:31:D4:EA:5A Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 16D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 16C3 Signing time: Fri 22 Aug 2025 16:46:24 +0000 Manifest this update: Fri 22 Aug 2025 16:46:24 +0000 Manifest next update: Fri 29 Aug 2025 16:46:24 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: P/nXKJjrxDaQzvOouk86ZOACYsirg17VB3ByeSDUa1I=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5849 (0x16d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Aug 22 16:46:24 2025 GMT Not After : Aug 29 16:46:24 2025 GMT Subject: CN=68a89ee0-ec29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:09:64:94:59:2b:ef:38:80:e7:9f:fd:f6: 92:05:71:f4:c0:38:fa:15:b0:ff:ec:1b:db:47:7f: 99:de:25:da:83:a8:e4:cc:a1:dd:0e:0b:6f:17:31: 48:90:97:cd:4b:43:15:2a:96:7a:e0:68:6b:94:b5: ad:42:d5:26:bd:26:19:b6:66:f8:9c:6a:63:29:c7: d6:8d:e4:46:0d:73:b7:aa:f3:ce:5d:68:c9:bf:8d: 4b:e1:28:2c:4c:30:fb:bc:49:91:14:9b:c4:d3:a4: 70:d0:0a:ee:fc:33:70:11:97:1b:e4:55:23:a5:bf: 66:96:27:14:53:ed:6f:85:d0:d1:41:26:38:03:62: 3c:ea:f5:4d:4e:93:fc:40:10:ff:4b:bc:21:30:0f: a0:13:4a:c1:f5:77:cc:df:5a:1f:6a:16:53:72:69: af:8d:b7:9c:d8:86:ac:ad:69:06:ba:63:02:ee:a4: bb:32:60:e9:fd:ce:e5:bc:66:fa:c6:c3:33:d1:20: 61:a9:0f:54:01:12:78:ac:32:00:0a:9b:f6:c1:09: b0:09:96:ef:2c:3a:5e:10:ea:a3:38:95:5f:a6:11: 90:bb:cc:f9:09:99:f9:e7:72:da:86:4d:e4:f3:74: e8:c4:3c:b6:65:06:97:5f:ae:1e:b0:0d:5a:94:7a: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1B:4A:6F:25:74:64:D2:63:6E:67:E2:A6:26:68:B3:31:D4:EA:5A X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ef:1c:47:05:0a:84:fe:6e:57:a9:37:06:24:fa:08:b0:c0: 4f:ec:34:4f:66:e4:d7:6a:e1:5b:d6:49:51:dc:cb:c1:21:2d: 1c:55:d4:86:91:cc:c8:d6:2f:bc:6c:a8:31:58:09:32:b4:f2: d0:90:72:b8:b4:77:da:37:cd:53:a6:1c:09:3b:80:7b:b5:7d: 74:9f:8b:b8:21:b9:31:ce:ef:69:4d:fa:2b:f8:14:fb:dd:c0: c2:2f:d2:9e:7e:8b:34:5f:d2:c4:80:0c:30:c7:ce:28:f5:fa: d2:9b:01:e1:6d:09:b0:e4:13:b8:87:c1:9e:3e:9d:a4:d3:9b: 6d:59:32:41:09:45:da:06:08:c6:8a:66:dc:04:ff:a9:90:58: 45:76:0f:3e:0e:20:85:4e:1c:a1:36:59:2a:b1:4b:5e:33:e6: 63:f7:a7:38:4a:0e:56:6a:df:89:7e:b0:67:65:02:51:28:13: cc:7d:3a:6a:31:3c:cd:49:5d:41:ab:18:ab:b6:c6:79:5b:85: cf:7b:0c:b5:e3:2e:4e:9f:88:c8:c4:4f:c0:b4:a0:89:80:fb: af:94:a4:d9:9d:5f:6c:45:35:50:e9:4b:24:36:96:e8:f2:60: ea:c0:f5:ba:ba:37:66:69:cc:e7:80:0d:ba:e5:be:1b:fd:87: 63:61:8b:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUwODIyMTY0NjI0WhcNMjUwODI5MTY0NjI0WjAYMRYwFAYD VQQDEw02OGE4OWVlMC1lYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMIJZJRZK+84gOef/faSBXH0wDj6FbD/7BvbR3+Z3iXag6jkzKHdDgtvFzFI kJfNS0MVKpZ64GhrlLWtQtUmvSYZtmb4nGpjKcfWjeRGDXO3qvPOXWjJv41L4Sgs TDD7vEmRFJvE06Rw0Aru/DNwEZcb5FUjpb9mlicUU+1vhdDRQSY4A2I86vVNTpP8 QBD/S7whMA+gE0rB9XfM31ofahZTcmmvjbec2IasrWkGumMC7qS7MmDp/c7lvGb6 xsMz0SBhqQ9UARJ4rDIACpv2wQmwCZbvLDpeEOqjOJVfphGQu8z5CZn553Lahk3k 83ToxDy2ZQaXX64esA1alHqtewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwbSm8l dGTSY25n4qYmaLMx1OpaMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi7xxHBQqE/m5XqTcGJPoIsMBP7DRPZuTXauFb1klR3MvBIS0cVdSG kczI1i+8bKgxWAkytPLQkHK4tHfaN81TphwJO4B7tX10n4u4Ibkxzu9pTfor+BT7 3cDCL9Kefos0X9LEgAwwx84o9frSmwHhbQmw5BO4h8GePp2k05ttWTJBCUXaBgjG imbcBP+pkFhFdg8+DiCFThyhNlkqsUteM+Zj96c4Sg5Wat+JfrBnZQJRKBPMfTpq MTzNSV1BqxirtsZ5W4XPewy14y5On4jIxE/AtKCJgPuvlKTZnV9sRTVQ6UskNpbo 8mDqwPW6ujdmaczngA265b4b/YdjYYug -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:41 2025 by rpki-client