$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json) Hash identifier: ZIkFLtaPulwXU5P63zi+iREiO4TN+A8T303rX41WT9o= Subject key identifier: C9:2A:47:20:2B:05:8A:41:2A:8A:A7:51:B4:C7:48:86:71:9C:41:38 Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft Manifest number: 0121 Signing time: Sat 23 Aug 2025 04:52:06 +0000 Manifest this update: Sat 23 Aug 2025 04:52:05 +0000 Manifest next update: Sat 30 Aug 2025 04:52:05 +0000 Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: m1lq1eyfaRIlXapcZ1PPMSVCcJEbp0FQBWj6hbZq2bI=) 2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: 9frZlnTUA25wzcLVRZfcMG1N4NRYNcJ6CAVrVhpGid0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Validity Not Before: Aug 23 04:52:05 2025 GMT Not After : Aug 30 04:52:05 2025 GMT Subject: CN=68a948f6-bb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:f4:07:90:98:14:c9:27:9a:7e:56:1c:c4: 61:c2:0f:23:b9:41:b3:20:a0:71:00:44:ca:2b:9c: fb:af:f3:c1:9e:ba:25:af:64:dc:30:59:bb:85:17: 0a:92:7b:06:0a:bf:23:03:a6:20:26:d9:d8:00:83: 07:08:e0:3c:24:35:00:66:98:a0:2e:ee:31:bc:43: 1b:5e:65:c9:64:63:ba:f3:a7:4a:53:cb:8d:80:29: c6:0f:23:68:82:31:6b:ee:09:c8:0c:38:b2:6f:ba: a0:4a:83:c7:b4:19:5d:69:cd:ab:28:90:11:64:48: 4b:11:ed:2e:16:b0:7b:d3:78:e0:77:48:f7:d6:48: 87:ab:28:63:ab:68:0c:a1:c2:b1:a6:93:d8:48:cb: e8:97:79:d8:59:d6:43:30:29:0e:b6:be:30:f5:31: 5e:37:8e:78:0f:51:da:24:ea:63:72:7c:16:d5:cf: 82:da:8d:57:84:27:35:35:97:52:4a:23:49:33:71: 36:56:d4:95:11:e3:bc:1d:b8:44:06:d0:ca:1a:c8: 9f:3b:dd:48:0d:7f:3f:03:ac:55:d5:80:b0:c3:cd: 6d:2c:a4:36:02:7b:5b:c0:11:ee:fc:a4:e8:34:99: 57:a2:7c:77:a3:c0:89:ce:14:22:b8:1e:0f:07:2e: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2A:47:20:2B:05:8A:41:2A:8A:A7:51:B4:C7:48:86:71:9C:41:38 X509v3 Authority Key Identifier: keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d5:9a:f1:46:0e:bd:76:c3:4f:2a:8f:c1:ae:b6:51:f6:5d: de:88:68:68:c4:d4:3c:6c:d7:a1:bb:18:16:6c:27:42:e4:08: 77:66:17:2a:c0:86:88:58:89:01:ce:47:a6:4d:2c:1e:fb:cf: 28:3e:f3:94:53:25:fc:27:a2:e9:99:f3:fc:4c:9f:71:ca:c2: 9c:45:74:aa:25:0c:67:4d:90:d2:d9:7f:53:90:04:ee:4a:78: a8:e6:f5:02:8c:ca:61:38:e1:96:08:a2:56:81:58:45:c7:f7: be:ed:72:bb:69:f0:ad:d0:07:ef:16:f8:18:66:4e:78:2c:9d: 89:fd:30:fe:57:8b:c2:26:6a:77:8e:45:72:86:a6:6b:bd:12: b7:a6:6f:35:e9:64:c5:ee:10:62:88:b7:ed:d7:ec:3b:27:86: d8:b4:27:74:5a:48:db:dc:f2:e3:c6:2d:68:df:81:4c:e6:57: dc:8f:35:b2:14:23:d1:b3:80:3d:78:c9:5d:cc:13:32:95:94: 5f:fb:76:b9:f6:c8:a3:d7:10:19:4d:95:7e:7c:8d:19:30:b2: f3:f4:f8:32:a4:6d:9c:75:36:61:c1:79:56:4c:fb:3e:23:ed: f3:c9:9f:d4:6c:ea:af:c6:32:65:8e:85:59:a8:10:eb:e4:84: 38:d0:8b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDJCQTFBRTkzQkJGNTZBNkY2Qzk2NTA4NEYwNDg4MTdC QjdBOThGMEYwHhcNMjUwODIzMDQ1MjA1WhcNMjUwODMwMDQ1MjA1WjAYMRYwFAYD VQQDEw02OGE5NDhmNi1iYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy070B5CYFMknmn5WHMRhwg8juUGzIKBxAETKK5z7r/PBnrolr2TcMFm7hRcK knsGCr8jA6YgJtnYAIMHCOA8JDUAZpigLu4xvEMbXmXJZGO686dKU8uNgCnGDyNo gjFr7gnIDDiyb7qgSoPHtBldac2rKJARZEhLEe0uFrB703jgd0j31kiHqyhjq2gM ocKxppPYSMvol3nYWdZDMCkOtr4w9TFeN454D1HaJOpjcnwW1c+C2o1XhCc1NZdS SiNJM3E2VtSVEeO8HbhEBtDKGsifO91IDX8/A6xV1YCww81tLKQ2AntbwBHu/KTo NJlXonx3o8CJzhQiuB4PBy7q+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkqRyAr BYpBKoqnUbTHSIZxnEE4MB8GA1UdIwQYMBaAFCuhrpO79WpvbJZQhPBIgXu3qY8P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FM0JFQTQ3QUMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFtOXNsbENFOEVpQmU3ZXBq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FM0JFQTQ3QUMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFt OXNsbENFOEVpQmU3ZXBqdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ1ZrxRg69dsNPKo/BrrZR9l3eiGhoxNQ8bNehuxgWbCdC5Ah3Zhcq wIaIWIkBzkemTSwe+88oPvOUUyX8J6LpmfP8TJ9xysKcRXSqJQxnTZDS2X9TkATu Snio5vUCjMphOOGWCKJWgVhFx/e+7XK7afCt0AfvFvgYZk54LJ2J/TD+V4vCJmp3 jkVyhqZrvRK3pm816WTF7hBiiLft1+w7J4bYtCd0Wkjb3PLjxi1o34FM5lfcjzWy FCPRs4A9eMldzBMylZRf+3a59sij1xAZTZV+fI0ZMLLz9PgypG2cdTZhwXlWTPs+ I+3zyZ/UbOqvxjJljoVZqBDr5IQ40Ivk -----END CERTIFICATE-----Generated at Sat Aug 23 10:29:01 2025 by rpki-client