$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: ZaziUmGYLWzvmJpYJtCKkoKlOihw/JzX9pb/dDQtZyM= Subject key identifier: 00:75:11:4A:A3:1B:69:21:3B:A2:B6:0F:2A:97:0F:93:C4:3F:01:6E Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 03C6 Signing time: Sat 23 Aug 2025 00:53:06 +0000 Manifest this update: Sat 23 Aug 2025 00:53:05 +0000 Manifest next update: Sat 30 Aug 2025 00:53:05 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: 17F7wVLxfYDUolXnukLmzZvQ7LvAKY+b+eLP13jrMNA=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Aug 23 00:53:05 2025 GMT Not After : Aug 30 00:53:05 2025 GMT Subject: CN=68a910f1-b959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:30:10:6f:fb:24:60:f3:bd:9b:b5:b6:06: 2a:73:0e:66:24:b7:26:2a:2a:4b:e0:ce:5b:5d:0f: a4:9a:77:34:11:bc:31:e7:aa:69:5f:80:38:9b:39: 1a:ea:34:1f:8b:9b:61:d8:9a:dc:a0:24:19:46:dd: 43:fa:89:2c:0b:99:74:56:bd:3e:61:96:79:a7:be: c4:42:b8:5b:e0:2d:d0:ad:01:7e:48:eb:be:4c:19: f4:61:77:bb:40:ee:a1:13:50:af:26:b6:8e:66:f5: 2f:e6:81:29:17:25:03:96:34:2c:a5:d9:fb:44:6f: 77:c6:75:c2:c8:9a:41:95:70:04:5f:9d:55:4d:01: dc:cb:2d:0c:85:e0:ee:a1:3c:14:93:c0:00:fd:29: 5c:27:69:6f:af:2c:d7:6c:2a:1b:b2:9c:5d:ef:db: a3:47:3b:29:55:8d:c4:63:3d:88:33:ea:6f:6d:bb: 15:63:9c:ec:87:af:b1:52:68:05:98:2c:fc:b9:78: 67:77:03:00:4d:42:19:42:86:92:2c:9d:fe:01:08: a4:90:9a:e0:d3:e1:73:92:8d:8f:ad:67:e5:82:b1: cd:83:3b:76:79:3a:db:fd:bd:1a:f8:f3:89:2c:6d: a9:3e:e8:76:81:a8:f4:1d:19:39:b0:4a:3c:bc:5e: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:75:11:4A:A3:1B:69:21:3B:A2:B6:0F:2A:97:0F:93:C4:3F:01:6E X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a8:c1:80:b5:ee:51:8b:66:7c:22:13:68:84:a3:db:47:2e: 3d:64:10:79:1f:38:73:ad:14:07:e3:02:74:40:41:8d:59:d4: a1:65:b3:0f:7b:dd:32:ac:d1:c7:f3:9b:d0:23:5b:f6:ed:ea: 4d:6c:6e:33:a5:b9:a4:fe:b6:18:11:9f:32:d5:ae:a0:3e:7e: 30:cd:d4:6c:d7:48:44:e4:d5:cb:2e:a1:1d:5a:b8:14:db:be: d1:d0:33:55:a5:62:62:db:13:38:de:dd:06:0c:66:2a:d8:39: c7:a6:13:7a:e5:af:8d:02:3a:97:b9:9c:d4:15:82:9a:fb:c4: 0f:e7:0b:e7:c9:ca:26:c6:6e:66:ac:54:19:9e:eb:9b:43:e8: dc:d1:ca:8c:22:8a:82:b9:3b:73:80:5e:7f:da:76:17:5e:1c: d2:b3:5c:d1:c4:fb:24:ff:d9:1f:0c:14:91:71:51:24:06:b2: da:59:fe:67:bc:b7:05:fd:4c:06:c1:69:67:f0:eb:0b:ee:15: c6:d6:fa:a4:ed:49:7a:6e:88:0e:60:c5:5e:97:b8:82:db:f5: d2:4a:d7:3f:80:df:d2:a9:ba:24:a0:b3:56:e3:c8:57:29:82: 2b:a0:cd:e3:f7:77:ef:19:4d:73:c6:01:29:86:08:71:7d:8f: c1:70:e1:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUwODIzMDA1MzA1WhcNMjUwODMwMDA1MzA1WjAYMRYwFAYD VQQDEw02OGE5MTBmMS1iOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/MwEG/7JGDzvZu1tgYqcw5mJLcmKipL4M5bXQ+kmnc0Ebwx56ppX4A4mzka 6jQfi5th2JrcoCQZRt1D+oksC5l0Vr0+YZZ5p77EQrhb4C3QrQF+SOu+TBn0YXe7 QO6hE1CvJraOZvUv5oEpFyUDljQspdn7RG93xnXCyJpBlXAEX51VTQHcyy0MheDu oTwUk8AA/SlcJ2lvryzXbCobspxd79ujRzspVY3EYz2IM+pvbbsVY5zsh6+xUmgF mCz8uXhndwMATUIZQoaSLJ3+AQikkJrg0+Fzko2PrWflgrHNgzt2eTrb/b0a+POJ LG2pPuh2gaj0HRk5sEo8vF7JHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB1EUqj G2khO6K2DyqXD5PEPwFuMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJqMGAte5Ri2Z8IhNohKPbRy49ZBB5HzhzrRQH4wJ0QEGNWdShZbMP e90yrNHH85vQI1v27epNbG4zpbmk/rYYEZ8y1a6gPn4wzdRs10hE5NXLLqEdWrgU 277R0DNVpWJi2xM43t0GDGYq2DnHphN65a+NAjqXuZzUFYKa+8QP5wvnycomxm5m rFQZnuubQ+jc0cqMIoqCuTtzgF5/2nYXXhzSs1zRxPsk/9kfDBSRcVEkBrLaWf5n vLcF/UwGwWln8OsL7hXG1vqk7Ul6bogOYMVel7iC2/XSStc/gN/SqbokoLNW48hX KYIroM3j93fvGU1zxgEphghxfY/BcOFo -----END CERTIFICATE-----Generated at Sat Aug 23 16:46:17 2025 by rpki-client