$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json) Hash identifier: U8cdpnYrIyxGCRN5CJGeX8lVrFy/gdhrisoVoRM1Ssk= Subject key identifier: 10:59:47:23:DA:4D:04:B6:D9:95:C3:D6:44:66:BD:32:0E:C9:EE:A5 Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 0616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft Manifest number: 0611 Signing time: Thu 18 Sep 2025 23:07:44 +0000 Manifest this update: Thu 18 Sep 2025 23:07:44 +0000 Manifest next update: Thu 25 Sep 2025 23:07:44 +0000 Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: sEr6eAdZ+cxMHgD0Go0HlD3XaIrN079hTsnfA5MNnPM=) 2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: IADvK+KgV5vnYxJ4wHU1Xtz8TSGee8Bm5ZckrfzrChM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: Sep 18 23:07:44 2025 GMT Not After : Sep 25 23:07:44 2025 GMT Subject: CN=68cc90c0-b1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f8:1e:a6:85:0e:d1:5a:3f:55:ee:ab:ca:41: 30:48:16:0e:fa:16:38:a4:98:96:4c:e5:6c:eb:08: 53:79:18:99:44:de:99:20:bb:c3:a0:14:6e:2f:1e: 5e:77:dc:60:00:57:20:ad:96:d9:50:48:ec:43:ab: d6:29:5b:7f:a0:76:32:fa:ac:67:81:51:0f:83:a9: 74:7a:a0:13:99:96:0c:0e:f8:42:a3:ef:36:c5:31: 77:08:6c:98:31:32:3c:34:14:4a:a0:2b:52:9e:1b: 07:0f:e4:83:58:a7:2c:8d:1d:99:49:6d:28:1c:d1: 76:49:83:3f:fe:92:d7:ae:b6:20:b4:16:53:58:95: da:dd:51:86:a9:82:42:90:5a:91:4d:65:8f:f0:e4: 83:5c:ea:50:7b:65:b6:77:b4:2c:eb:a1:33:3e:11: 41:c6:9a:e5:31:fa:08:cb:33:22:de:be:47:bd:fb: 39:c8:21:35:a8:77:94:8e:94:60:38:95:50:e9:e6: 55:84:cd:04:cb:48:5b:8b:f8:aa:1f:7d:00:d6:13: 56:f5:ea:ff:3c:15:99:b2:0c:5f:ab:e3:c1:9c:e5: 94:ed:be:83:5c:29:b7:1c:94:7a:92:3f:bf:ef:2d: e0:08:6c:47:f5:e3:aa:00:ec:bf:45:6e:43:77:45: 44:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:59:47:23:DA:4D:04:B6:D9:95:C3:D6:44:66:BD:32:0E:C9:EE:A5 X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ce:33:c6:7c:6d:1b:3b:3e:e7:7b:d6:41:df:50:9a:46:30: 8c:e7:b2:8d:fe:b0:40:6a:1c:06:52:ca:41:05:79:c3:14:3a: 6f:22:bc:46:4f:25:f5:18:1d:11:5d:46:7d:3a:90:e6:b9:6d: 22:c1:4d:b2:22:f8:57:35:98:38:53:c0:bb:48:f6:26:b4:05: 2f:d0:16:c5:16:45:a4:a9:42:3f:3c:e5:c6:47:df:31:5c:05: e3:14:a5:59:2f:09:c6:3b:b3:43:0c:04:b7:7c:cb:45:5f:de: 68:db:cd:ba:8e:df:97:63:ec:e1:f9:98:e5:0c:e1:a3:bd:7d: c3:5c:4f:9c:39:d0:30:18:29:22:e2:b4:75:76:a5:60:98:46: 82:94:c4:68:91:fb:26:d6:f7:a4:31:c6:c7:44:55:1e:b2:26: 93:0c:08:5f:15:40:61:35:d8:e7:72:38:8a:d2:d2:dd:c2:fa: b1:3d:f3:1a:30:16:03:4e:19:97:bd:8e:8b:cb:4f:50:18:0e: 86:c1:ea:19:c0:a5:d5:f6:98:0a:18:77:a0:7c:cc:9c:df:00: 71:09:6c:9f:6a:e0:a2:b8:4d:de:b9:c3:c7:96:e6:24:6f:17: f5:3c:e5:32:da:46:17:6e:32:5f:6b:45:9d:74:27:fd:b4:76: 54:27:63:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjUwOTE4MjMwNzQ0WhcNMjUwOTI1MjMwNzQ0WjAYMRYwFAYD VQQDEw02OGNjOTBjMC1iMWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PgepoUO0Vo/Ve6rykEwSBYO+hY4pJiWTOVs6whTeRiZRN6ZILvDoBRuLx5e d9xgAFcgrZbZUEjsQ6vWKVt/oHYy+qxngVEPg6l0eqATmZYMDvhCo+82xTF3CGyY MTI8NBRKoCtSnhsHD+SDWKcsjR2ZSW0oHNF2SYM//pLXrrYgtBZTWJXa3VGGqYJC kFqRTWWP8OSDXOpQe2W2d7Qs66EzPhFBxprlMfoIyzMi3r5Hvfs5yCE1qHeUjpRg OJVQ6eZVhM0Ey0hbi/iqH30A1hNW9er/PBWZsgxfq+PBnOWU7b6DXCm3HJR6kj+/ 7y3gCGxH9eOqAOy/RW5Dd0VE2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBZRyPa TQS22ZXD1kRmvTIOye6lMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81 anRHemNqTkRGems0RW0zSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPzjPGfG0bOz7ne9ZB31CaRjCM57KN/rBAahwGUspBBXnDFDpvIrxG TyX1GB0RXUZ9OpDmuW0iwU2yIvhXNZg4U8C7SPYmtAUv0BbFFkWkqUI/POXGR98x XAXjFKVZLwnGO7NDDAS3fMtFX95o2826jt+XY+zh+ZjlDOGjvX3DXE+cOdAwGCki 4rR1dqVgmEaClMRokfsm1vekMcbHRFUesiaTDAhfFUBhNdjncjiK0tLdwvqxPfMa MBYDThmXvY6Ly09QGA6GweoZwKXV9pgKGHegfMyc3wBxCWyfauCiuE3eucPHluYk bxf1POUy2kYXbjJfa0WddCf9tHZUJ2OI -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:29 2025 by rpki-client