$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: aevcESQ+9ZjRC3ypaVfxUaumt+i7ss7q/keTg+baavE= Subject key identifier: 9B:18:91:44:EC:2F:08:4E:54:E4:DA:6E:7F:91:70:46:AD:69:39:9F Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 01B9 Signing time: Wed 17 Sep 2025 03:45:24 +0000 Manifest this update: Wed 17 Sep 2025 03:45:24 +0000 Manifest next update: Wed 24 Sep 2025 03:45:24 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: FCSNRLi+cnv6ebBROeAEpVsDzMJ11mx9pRzctD2ocAU=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: 3V/ibErrTNJ9w1YW/LwCYcNNPjpkRJOqZOAkX5zvOXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Sep 17 03:45:24 2025 GMT Not After : Sep 24 03:45:24 2025 GMT Subject: CN=68ca2ed4-3fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:59:fd:34:98:cf:16:49:fd:18:11:bc:41:c5: fd:b6:6f:5b:e8:ea:7a:85:bd:5f:b0:1f:16:11:26: 39:a9:bb:73:91:25:0e:7a:cd:26:17:04:bb:f4:84: d2:36:52:67:75:19:34:de:d1:bb:6e:5c:f1:38:86: 48:e6:38:fd:27:8a:1d:15:76:9a:88:79:56:88:80: c5:6d:55:83:c0:a5:4d:d3:b5:11:e7:c3:38:24:0e: dd:a6:95:01:d6:06:32:b5:2f:4d:81:ad:9e:6e:ee: c0:62:f1:64:8d:ed:e7:8e:c1:4a:89:22:55:f5:34: eb:03:90:0e:93:25:5f:83:a7:e6:3e:5c:b5:14:01: c1:5b:a9:fd:42:17:8e:36:26:bc:8d:a2:46:c3:f4: c3:e9:27:47:c9:c9:b7:f3:91:aa:04:22:8e:f7:84: 6b:5a:0c:0a:2c:f0:8b:17:e4:7b:f2:69:50:b2:75: 56:4a:e5:9b:7e:e8:04:9f:b5:3e:41:1b:d8:47:5f: f1:d9:30:1a:ea:d8:a6:c5:4e:60:db:45:db:1e:7f: c4:e9:f3:fc:8d:5c:16:17:06:24:82:43:b8:7c:ed: 5b:79:2b:cc:19:05:82:d1:d1:bc:25:78:63:54:bb: ab:84:a5:c1:7e:a4:77:a7:92:b0:a7:dc:3a:02:08: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:18:91:44:EC:2F:08:4E:54:E4:DA:6E:7F:91:70:46:AD:69:39:9F X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f5:b1:ed:54:08:eb:8b:9c:ea:c4:55:27:00:fd:c7:e3:e1: db:98:79:76:cc:b1:73:45:e7:e8:5a:67:71:4d:55:aa:c7:4f: 21:e3:ef:eb:42:38:10:8a:bc:ae:e6:f3:85:b3:a4:2e:84:da: 7d:c1:ff:71:39:9a:36:cb:45:44:b5:4f:ab:14:d6:1a:e0:e9: 4b:53:8c:6a:1d:16:a3:dd:fa:ca:b9:06:53:f4:63:73:22:ee: 04:f8:e2:46:7b:df:22:ae:4a:c5:97:55:55:26:c6:10:3e:9f: 27:46:45:3e:44:c3:84:05:69:16:28:2c:f7:6f:b4:36:3e:4a: 20:09:66:62:5c:76:cd:eb:6e:e6:6d:89:4e:5a:e2:7f:e1:09: f7:1a:26:b5:e5:02:ac:92:3e:e9:7f:99:0f:5b:f9:33:d1:18: f6:58:3c:e3:8e:e0:46:26:ff:6f:e6:2c:88:8c:f6:cb:16:3b: ef:21:4f:89:5d:98:b4:e4:9c:87:7d:56:82:99:37:b9:3c:86: a1:bb:d9:31:48:2f:7c:bb:dc:35:71:fd:27:0a:12:8b:c6:de: 1b:42:c3:d7:d7:13:39:d1:fb:3c:72:6c:9c:ed:c5:45:5f:31: 98:d0:81:ea:9c:8d:bd:e6:e2:41:75:9e:19:8b:1d:74:19:e8: e0:d5:7a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjUwOTE3MDM0NTI0WhcNMjUwOTI0MDM0NTI0WjAYMRYwFAYD VQQDEw02OGNhMmVkNC0zZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ln9NJjPFkn9GBG8QcX9tm9b6Op6hb1fsB8WESY5qbtzkSUOes0mFwS79ITS NlJndRk03tG7blzxOIZI5jj9J4odFXaaiHlWiIDFbVWDwKVN07UR58M4JA7dppUB 1gYytS9Nga2ebu7AYvFkje3njsFKiSJV9TTrA5AOkyVfg6fmPly1FAHBW6n9QheO Nia8jaJGw/TD6SdHycm385GqBCKO94RrWgwKLPCLF+R78mlQsnVWSuWbfugEn7U+ QRvYR1/x2TAa6timxU5g20XbHn/E6fP8jVwWFwYkgkO4fO1beSvMGQWC0dG8JXhj VLurhKXBfqR3p5Kwp9w6AgjwzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsYkUTs LwhOVOTabn+RcEataTmfMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo9bHtVAjri5zqxFUnAP3H4+HbmHl2zLFzRefoWmdxTVWqx08h4+/r QjgQiryu5vOFs6QuhNp9wf9xOZo2y0VEtU+rFNYa4OlLU4xqHRaj3frKuQZT9GNz Iu4E+OJGe98irkrFl1VVJsYQPp8nRkU+RMOEBWkWKCz3b7Q2PkogCWZiXHbN627m bYlOWuJ/4Qn3Gia15QKskj7pf5kPW/kz0Rj2WDzjjuBGJv9v5iyIjPbLFjvvIU+J XZi05JyHfVaCmTe5PIahu9kxSC98u9w1cf0nChKLxt4bQsPX1xM50fs8cmyc7cVF XzGY0IHqnI295uJBdZ4Zix10Gejg1Xqt -----END CERTIFICATE-----Generated at Thu Sep 18 14:50:58 2025 by rpki-client