$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: xiNBi97yRuYqUU4FTbTCvLx6kUHy+LHnNQiRaTbul+g= Subject key identifier: F5:92:05:D8:CC:1A:CF:46:1E:2C:7B:95:D1:97:2D:AD:D8:99:78:D1 Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 2E Signing time: Sat 19 Jul 2025 07:59:15 +0000 Manifest this update: Sat 19 Jul 2025 07:59:15 +0000 Manifest next update: Sat 26 Jul 2025 07:59:15 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: LCCCTctWB/hANoBAhkQcvcUT3MfHNHy4tllbuKTq7aA=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Jul 19 07:59:15 2025 GMT Not After : Jul 26 07:59:15 2025 GMT Subject: CN=687b5053-a390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:e8:6b:78:77:a6:c3:4d:c5:99:5a:18:24: ab:0b:a5:d1:13:80:4f:b2:f7:7d:b3:08:7f:58:75: 6a:16:37:14:b6:ab:e0:e5:c2:01:64:c7:db:7d:e3: 2c:a0:54:81:38:aa:fa:41:14:82:97:ff:22:d5:03: 58:6f:b0:58:ac:6d:f3:52:b5:a7:e5:09:d4:84:be: a5:7c:c4:76:14:35:fc:3f:83:43:01:00:91:f3:1e: 4f:82:d5:1c:af:d8:53:56:72:e4:e5:6d:02:97:0d: 13:fa:6e:5b:19:a6:d9:26:2d:43:aa:43:5d:00:1d: 8d:89:37:c6:64:d8:0e:cc:ca:8c:8b:ee:d8:f8:aa: fc:d2:9a:bc:b0:05:61:d1:d9:cf:15:9d:00:08:d8: fa:81:df:cf:2d:3e:2c:54:8f:a9:20:20:64:46:0e: 5e:b9:d0:db:87:83:24:91:85:f2:71:4a:14:70:b7: 53:5e:d6:54:5e:6f:dd:e3:11:e8:8e:36:bd:9d:a9: 6e:ae:6d:07:b1:80:22:f1:43:d6:c5:cc:55:c1:c7: 11:0b:85:3c:05:bf:c2:93:1f:dc:c0:96:54:50:37: 0c:1c:02:e5:de:59:3d:c0:10:c2:d9:7d:d6:c0:f6: 0c:72:dc:c2:45:3a:8a:46:a7:46:b6:0b:20:2e:16: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:92:05:D8:CC:1A:CF:46:1E:2C:7B:95:D1:97:2D:AD:D8:99:78:D1 X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:7a:c6:65:9b:12:fa:27:fb:b5:c6:26:be:ab:16:f4:ed:e5: 02:9c:c4:bb:dd:e9:9a:9e:bc:16:a1:f4:c3:f6:1f:51:95:67: aa:18:28:18:61:b6:ad:09:58:30:70:c7:27:98:47:98:56:5e: ac:e7:6c:39:51:69:8c:6e:bf:11:4c:d4:ae:ed:14:70:37:cf: 4f:dc:4e:4f:26:3b:ee:3d:6d:a0:d0:bc:f5:3c:78:d4:9f:3c: e4:a0:2f:a3:06:41:a6:d4:6d:8d:38:8b:13:9b:a4:bd:e2:6d: 44:bc:35:77:8b:0a:b1:4f:26:7c:95:40:70:3f:18:29:dc:8d: e0:70:e1:d4:25:d6:62:37:86:7a:2d:85:16:04:eb:a5:eb:4a: 42:d8:0e:b5:3e:6b:30:ca:cc:7a:40:65:8c:7b:48:9d:a0:8d: 59:f3:62:95:18:f4:ac:82:ba:5c:34:bc:63:01:48:06:5b:a2: 4d:89:20:4f:2d:e2:da:8c:89:3f:34:ae:06:aa:f2:9d:f6:e2: 3e:79:4a:14:3c:29:5b:6a:df:6a:ba:8d:63:66:7f:5c:81:f4: e7:62:77:4b:29:75:ef:11:0f:f8:cf:cc:f4:c5:8c:76:56:7e: 77:12:01:66:38:7c:01:bd:47:e4:8f:d5:e6:a6:6c:58:b0:ca: 3a:a0:3f:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTA3MTkwNzU5MTVaFw0yNTA3MjYwNzU5MTVaMBgxFjAUBgNV BAMTDTY4N2I1MDUzLWEzOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn2ehreHemw03FmVoYJKsLpdETgE+y932zCH9YdWoWNxS2q+DlwgFkx9t94yyg VIE4qvpBFIKX/yLVA1hvsFisbfNStaflCdSEvqV8xHYUNfw/g0MBAJHzHk+C1Ryv 2FNWcuTlbQKXDRP6blsZptkmLUOqQ10AHY2JN8Zk2A7MyoyL7tj4qvzSmrywBWHR 2c8VnQAI2PqB388tPixUj6kgIGRGDl650NuHgySRhfJxShRwt1Ne1lReb93jEeiO Nr2dqW6ubQexgCLxQ9bFzFXBxxELhTwFv8KTH9zAllRQNwwcAuXeWT3AEMLZfdbA 9gxy3MJFOopGp0a2CyAuFlvZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9ZIF2Mwa z0YeLHuV0ZctrdiZeNEwHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIN6xmWbEvon+7XGJr6rFvTt5QKcxLvd6ZqevBah9MP2H1GVZ6oYKBhh tq0JWDBwxyeYR5hWXqznbDlRaYxuvxFM1K7tFHA3z0/cTk8mO+49baDQvPU8eNSf POSgL6MGQabUbY04ixObpL3ibUS8NXeLCrFPJnyVQHA/GCncjeBw4dQl1mI3hnot hRYE66XrSkLYDrU+azDKzHpAZYx7SJ2gjVnzYpUY9KyCulw0vGMBSAZbok2JIE8t 4tqMiT80rgaq8p324j55ShQ8KVtq32q6jWNmf1yB9Odid0spde8RD/jPzPTFjHZW fncSAWY4fAG9R+SP1eambFiwyjqgP9o= -----END CERTIFICATE-----Generated at Mon Jul 21 05:55:36 2025 by rpki-client