$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json) Hash identifier: qLzkJyimT+DA1B28ng8kP5uCvn9MepxQMi/ea62t5uo= Subject key identifier: ED:78:47:11:43:12:4A:42:72:95:0D:5C:60:25:32:EE:5F:F6:2A:D5 Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Certificate serial: 06FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft Manifest number: 06F0 Signing time: Mon 08 Sep 2025 22:02:02 +0000 Manifest this update: Mon 08 Sep 2025 22:02:01 +0000 Manifest next update: Mon 15 Sep 2025 22:02:01 +0000 Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: zI5twMhDSExW0Zy1ofXHDpO+xaXxbKa/QqRwIXwYWq0=) 2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vMhYeDmA4rQgDzWKujwjU7tw9Dx++6v75EIl46gAbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1787 (0x6fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Validity Not Before: Sep 8 22:02:01 2025 GMT Not After : Sep 15 22:02:01 2025 GMT Subject: CN=68bf5259-dc1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fe:70:e1:5c:fc:e9:d7:5c:d6:ea:90:1a:95: 11:42:b6:f6:4d:e1:d2:ef:1d:95:4b:c1:33:db:2e: 8f:6f:15:a1:1e:12:f8:97:ca:43:3d:0c:cc:45:09: cc:76:8f:7b:12:a7:e6:fa:f2:02:4d:1d:4d:a9:98: b8:f9:84:8f:b4:34:60:b7:5b:a0:31:42:d0:d0:be: 9f:1f:e2:d6:28:75:7f:6a:0c:65:be:d0:94:e4:ed: bb:ef:4e:a1:4d:1d:77:94:83:60:15:31:6e:04:c2: 0c:3f:82:40:73:7f:41:39:66:5e:ac:20:32:f8:7e: 33:f1:83:6b:63:52:f0:a9:01:ed:58:ae:e5:25:b6: 1b:b3:20:b7:e1:88:13:e7:f1:d9:9c:12:24:65:be: 67:7c:0f:65:a8:84:84:5b:9a:1d:fd:0b:aa:77:d4: b2:07:68:e6:80:3d:aa:62:64:f5:b2:25:27:85:e4: ec:5d:cc:5b:07:4c:ec:44:4b:e7:9c:c3:e4:55:03: 6b:9e:8f:5c:47:7e:3f:a3:98:9b:0b:d9:48:5c:29: 62:db:2a:d4:02:a0:9f:60:dd:6d:9d:f7:1a:fc:98: 9a:8f:bd:3c:e2:14:78:de:26:32:75:1c:98:72:24: 30:ec:c8:f5:b3:a9:30:ba:22:a7:8a:37:1f:ff:1b: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:78:47:11:43:12:4A:42:72:95:0D:5C:60:25:32:EE:5F:F6:2A:D5 X509v3 Authority Key Identifier: keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7c:e8:85:30:e9:0c:dc:e1:84:7d:3f:7f:ea:44:a4:4e:65: eb:4b:7b:89:08:74:9e:4c:6a:b4:45:3f:22:e7:d2:17:f8:f9: a5:ee:3e:b6:36:9c:77:c6:5b:a4:5c:a7:d9:91:b5:85:b3:fd: 61:83:a6:19:c3:b6:9b:53:10:2d:6a:2a:a0:0b:4a:f8:af:71: ba:4a:9c:22:60:87:a2:9e:4d:07:9f:ee:45:40:21:41:96:2a: 23:51:2d:26:14:f2:d1:f1:38:2a:54:1a:a2:de:42:47:c5:4b: 08:67:be:8a:6c:ed:d8:7c:76:b7:fa:2c:3a:53:02:f9:90:37: f5:64:6d:b2:8e:cb:a5:ec:8d:46:a1:8c:32:53:ee:98:7c:8c: db:c6:7d:23:34:f3:4c:6e:1c:fc:f6:26:df:82:ef:b3:60:57: 86:4a:c3:70:c7:98:0a:ef:51:6d:df:57:3e:88:0a:3b:99:19: 8b:f8:fe:c5:15:1e:16:d9:4a:a9:b0:c1:ca:82:3d:95:50:eb: 95:d4:2a:d7:0c:a3:c3:a3:f6:bc:9a:a0:a1:7c:8d:82:42:87: 11:80:71:32:c1:6c:3a:04:8f:b1:62:6c:68:44:84:d7:cc:36: fb:e2:88:4b:52:18:8b:8d:bc:bc:64:d4:f0:19:a6:cb:00:05: 4f:cd:69:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1RkIxMTAvBgNVBAUTKDkxN0E5RjdBQTIyODFCMTlGOTQ3NDIzRTk4NjEyQjFG NjNEMTdFMEUwHhcNMjUwOTA4MjIwMjAxWhcNMjUwOTE1MjIwMjAxWjAYMRYwFAYD VQQDEw02OGJmNTI1OS1kYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5v5w4Vz86ddc1uqQGpURQrb2TeHS7x2VS8Ez2y6PbxWhHhL4l8pDPQzMRQnM do97Eqfm+vICTR1NqZi4+YSPtDRgt1ugMULQ0L6fH+LWKHV/agxlvtCU5O27706h TR13lINgFTFuBMIMP4JAc39BOWZerCAy+H4z8YNrY1LwqQHtWK7lJbYbsyC34YgT 5/HZnBIkZb5nfA9lqISEW5od/Quqd9SyB2jmgD2qYmT1siUnheTsXcxbB0zsREvn nMPkVQNrno9cR34/o5ibC9lIXCli2yrUAqCfYN1tnfca/Jiaj7084hR43iYydRyY ciQw7Mj1s6kwuiKnijcf/xtOkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO14RxFD EkpCcpUNXGAlMu5f9irVMB8GA1UdIwQYMBaAFJF6n3qiKBsZ+UdCPphhKx9j0X4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzVGQi82QzI5NkQzQTYx NDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4bjVSMEktbUdFckgyUFJm ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tYcWZlcUlvR3huNVIwSS1tR0VySDJQUmZnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzVGQi82QzI5NkQzQTYxNDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4 bjVSMEktbUdFckgyUFJmZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmfOiFMOkM3OGEfT9/6kSkTmXrS3uJCHSeTGq0RT8i59IX+Pml7j62 Npx3xlukXKfZkbWFs/1hg6YZw7abUxAtaiqgC0r4r3G6SpwiYIeink0Hn+5FQCFB liojUS0mFPLR8TgqVBqi3kJHxUsIZ76KbO3YfHa3+iw6UwL5kDf1ZG2yjsul7I1G oYwyU+6YfIzbxn0jNPNMbhz89ibfgu+zYFeGSsNwx5gK71Ft31c+iAo7mRmL+P7F FR4W2UqpsMHKgj2VUOuV1CrXDKPDo/a8mqChfI2CQocRgHEywWw6BI+xYmxoRITX zDb74ohLUhiLjby8ZNTwGabLAAVPzWmu -----END CERTIFICATE-----Generated at Tue Sep 9 03:14:18 2025 by rpki-client