$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: GsvUBJYx08GCzAE6H+IAp63DV9yIKDf5dxwtjqp9Ej8= Subject key identifier: 98:E7:8F:69:2E:AF:7A:B3:C5:41:A8:DD:09:46:AA:F6:4B:2E:90:9B Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 135E Signing time: Sun 20 Jul 2025 19:25:57 +0000 Manifest this update: Sun 20 Jul 2025 19:25:56 +0000 Manifest next update: Sun 27 Jul 2025 19:25:56 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: PXlMF/FDXxwgZ2y+Zompbz0a47gvn4LnsGc2uDph/DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: Jul 20 19:25:56 2025 GMT Not After : Jul 27 19:25:56 2025 GMT Subject: CN=687d42c4-a36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:af:ad:72:e1:23:8f:4f:20:9f:4b:c9:12: 1f:52:ba:9c:fc:b0:12:b1:58:c3:12:59:86:be:46: d6:83:8a:c8:42:3a:0c:66:ac:b4:d8:50:ee:09:f6: d9:b7:e5:f8:f3:65:b0:7a:e9:8e:df:1b:30:e0:85: d2:98:7e:87:41:3d:20:24:05:f3:86:00:9c:a6:5e: 39:e6:d3:ab:c4:a9:98:91:f5:8b:b3:f1:f9:1a:c7: 86:ce:f3:31:86:9a:4d:ae:58:07:bb:0a:ef:cf:d0: e6:bb:eb:08:79:05:04:33:6b:1e:17:45:f9:fc:76: c4:d8:0a:34:69:9d:75:f6:fa:b5:bd:a5:58:51:20: 77:18:1a:88:a0:65:31:6c:1f:cc:38:f8:34:5f:ec: f7:11:2e:26:1f:4f:6c:f1:8e:0c:1e:cf:fb:da:36: aa:88:47:d3:d1:55:2a:d9:4c:79:8c:b2:21:9e:af: c8:43:5d:f2:27:1a:a0:5a:41:c1:a2:31:03:16:c0: 2f:d6:50:f9:72:4f:eb:a1:0f:ec:38:f1:57:f9:1d: 34:ff:32:5c:b7:e7:c5:f8:4d:33:3a:b8:82:a8:aa: af:02:69:9b:1a:f1:c0:b4:c7:6c:15:27:1d:75:47: 51:52:d8:97:74:e6:9d:c0:af:2c:4c:98:70:22:65: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E7:8F:69:2E:AF:7A:B3:C5:41:A8:DD:09:46:AA:F6:4B:2E:90:9B X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:41:4d:04:b2:37:3d:b7:19:9f:72:f4:8e:33:fb:a8:d8:42: 0b:38:75:ef:13:86:57:78:57:bb:93:b5:97:fd:68:bd:d8:77: f6:44:7a:bf:81:77:9b:73:3b:31:f8:43:c7:22:b7:95:36:dc: b4:4c:82:fa:85:cb:91:cc:fb:d6:d0:b0:7e:80:bf:e4:6a:0c: fa:88:03:70:04:09:00:53:9a:a5:fc:ed:12:7d:44:c9:39:76: 77:38:5a:dd:4d:b4:51:92:24:d7:4e:e2:36:e9:02:94:81:cd: e1:e2:7b:59:00:9d:af:89:d9:00:33:31:20:9d:9a:c7:ef:bd: 84:7c:09:b9:b8:9e:8e:02:c7:5c:18:59:47:c8:e1:3f:34:6d: a4:59:3f:7d:f4:db:f0:ae:96:05:e3:e7:85:36:3e:6d:72:62: db:21:1a:15:50:6f:63:e0:e1:85:aa:74:ba:d6:ab:b8:65:15: d2:ef:1c:17:b0:e2:b0:bf:1a:59:92:79:bc:fd:8d:8f:96:21: 5d:ae:9a:e8:e8:30:cd:ef:55:ea:95:f4:eb:6f:91:27:5f:0b: 0d:8c:3b:36:5c:82:eb:c9:c1:3e:e0:be:80:8f:55:78:ed:da: f4:37:50:2d:09:11:62:06:ab:02:77:a8:4f:6c:9e:27:5a:e4: ff:76:31:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjUwNzIwMTkyNTU2WhcNMjUwNzI3MTkyNTU2WjAYMRYwFAYD VQQDEw02ODdkNDJjNC1hMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugWvrXLhI49PIJ9LyRIfUrqc/LASsVjDElmGvkbWg4rIQjoMZqy02FDuCfbZ t+X482WweumO3xsw4IXSmH6HQT0gJAXzhgCcpl455tOrxKmYkfWLs/H5GseGzvMx hppNrlgHuwrvz9Dmu+sIeQUEM2seF0X5/HbE2Ao0aZ119vq1vaVYUSB3GBqIoGUx bB/MOPg0X+z3ES4mH09s8Y4MHs/72jaqiEfT0VUq2Ux5jLIhnq/IQ13yJxqgWkHB ojEDFsAv1lD5ck/roQ/sOPFX+R00/zJct+fF+E0zOriCqKqvAmmbGvHAtMdsFScd dUdRUtiXdOadwK8sTJhwImVpOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjnj2ku r3qzxUGo3QlGqvZLLpCbMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwQU0Esjc9txmfcvSOM/uo2EILOHXvE4ZXeFe7k7WX/Wi92Hf2RHq/ gXebczsx+EPHIreVNty0TIL6hcuRzPvW0LB+gL/kagz6iANwBAkAU5ql/O0SfUTJ OXZ3OFrdTbRRkiTXTuI26QKUgc3h4ntZAJ2vidkAMzEgnZrH772EfAm5uJ6OAsdc GFlHyOE/NG2kWT999NvwrpYF4+eFNj5tcmLbIRoVUG9j4OGFqnS61qu4ZRXS7xwX sOKwvxpZknm8/Y2PliFdrpro6DDN71XqlfTrb5EnXwsNjDs2XILrycE+4L6Aj1V4 7dr0N1AtCRFiBqsCd6hPbJ4nWuT/djFv -----END CERTIFICATE-----Generated at Mon Jul 21 06:57:43 2025 by rpki-client