$ rpki-client -vvf rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft File: KbnmrAGSmMyglt6Jcancj3144dk.mft (raw, json) Hash identifier: t297dFdTTrk9NX9qt6hOYmHDFARX8wFCtvzBGX38u9s= Subject key identifier: D5:84:D5:4C:14:28:A2:DC:36:D4:D1:94:C0:64:3B:E8:06:ED:1D:EF Authority key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 Certificate issuer: /CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Certificate serial: 11F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft Manifest number: 11EA Signing time: Sun 24 Aug 2025 17:07:55 +0000 Manifest this update: Sun 24 Aug 2025 17:07:54 +0000 Manifest next update: Sun 31 Aug 2025 17:07:54 +0000 Files and hashes: 1: KbnmrAGSmMyglt6Jcancj3144dk.crl (hash: e4hm7exktxQhm5s9xQ4P8ssv4OxgKmoPPAITeyM09EM=) 2: B6C2A27AF16A11E89550B621C4F9AE02.roa (hash: rYGwlaz3R02z4ql3MvAUj9rg5+gxsDR/Fvqrh9TzcP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4597 (0x11f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91371E4, serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Validity Not Before: Aug 24 17:07:54 2025 GMT Not After : Aug 31 17:07:54 2025 GMT Subject: CN=68ab46eb-1c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:5a:47:a8:e4:29:b7:21:97:a0:0e:15:70: 71:0c:3e:48:0f:a8:f9:8f:83:58:1f:84:a6:03:e8: d4:b3:b7:97:dd:ff:27:68:91:70:f3:2c:d9:5a:05: c3:98:9d:a4:da:b9:67:56:19:cb:d8:8f:66:9f:12: 99:98:59:a7:2f:7b:68:0a:79:c6:2e:83:69:c4:23: aa:bb:7b:e0:f1:41:c4:73:87:2c:50:2b:fd:86:8e: 33:40:df:68:84:ab:59:97:94:8c:6f:77:8c:02:c9: 15:72:ba:a4:1c:01:69:27:92:2d:35:c1:c6:f4:e6: 71:59:06:cd:d8:26:fc:dd:8e:82:2a:a8:1d:71:5d: bf:f4:48:a8:fa:2c:96:d5:26:d4:83:e4:7b:55:e0: 94:be:07:41:36:66:97:4e:d4:d0:57:76:26:53:4f: cc:d6:e1:4c:17:e8:57:c8:2d:ce:c2:9a:91:dd:8c: a8:66:92:bc:c4:c3:92:74:8e:81:0b:cd:0a:91:73: fe:9a:95:eb:da:3a:04:4d:40:50:b2:12:4e:2f:5a: 54:35:84:ac:26:3e:3a:7b:83:98:40:9c:2e:0b:9c: 27:dc:28:5a:25:7f:42:30:cd:77:ea:46:14:e7:d7: aa:d6:07:b2:95:e4:38:58:42:64:c7:f4:d0:e3:e1: 2c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:84:D5:4C:14:28:A2:DC:36:D4:D1:94:C0:64:3B:E8:06:ED:1D:EF X509v3 Authority Key Identifier: keyid:29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b0:26:43:f2:4f:f0:0c:fe:80:4d:48:e6:d8:e7:79:9c:46: 01:c5:cc:69:09:f6:a5:bd:7b:11:e2:3b:95:67:d3:ae:7e:fe: 65:4f:51:95:b1:35:f6:58:79:99:d5:35:8a:85:8f:fb:25:ac: 0a:d5:44:1e:40:04:ec:c3:fc:c8:b6:a8:1a:ee:5d:62:ff:39: 21:82:c6:d7:2b:a8:8d:9d:49:fc:81:a6:23:84:b1:be:68:13: c8:8b:e4:e5:51:7d:9e:07:7b:5f:c8:cc:44:a8:34:99:88:40: 24:94:d1:38:3b:9e:cd:c7:ae:83:4b:87:4b:c4:c7:40:39:94: ec:8a:29:25:5d:85:ab:74:4a:d9:74:f9:79:e1:f9:08:cc:20: 95:1b:f2:1d:7c:e9:70:9c:2b:af:2b:ea:09:93:eb:4a:29:b4: da:09:d9:df:89:c8:3c:b7:d1:ad:ba:cc:20:f9:93:d9:ff:38: 5c:c2:ab:27:40:6b:36:ed:1a:2d:01:9f:26:c3:9b:4c:91:00: ca:2b:13:11:c4:27:c2:c5:15:8b:84:c3:af:d2:a8:44:ae:b9: 4b:fd:67:c8:c5:08:82:8b:26:8b:f3:12:0d:5d:1b:de:1f:17: 37:01:19:3c:4e:20:2a:4c:43:45:e1:04:a7:12:cb:fa:9f:b8: 18:ad:7b:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcxRTQxMTAvBgNVBAUTKDI5QjlFNkFDMDE5Mjk4Q0NBMDk2REU4OTcxQTlEQzhG N0Q3OEUxRDkwHhcNMjUwODI0MTcwNzU0WhcNMjUwODMxMTcwNzU0WjAYMRYwFAYD VQQDEw02OGFiNDZlYi0xYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsphaR6jkKbchl6AOFXBxDD5ID6j5j4NYH4SmA+jUs7eX3f8naJFw8yzZWgXD mJ2k2rlnVhnL2I9mnxKZmFmnL3toCnnGLoNpxCOqu3vg8UHEc4csUCv9ho4zQN9o hKtZl5SMb3eMAskVcrqkHAFpJ5ItNcHG9OZxWQbN2Cb83Y6CKqgdcV2/9Eio+iyW 1SbUg+R7VeCUvgdBNmaXTtTQV3YmU0/M1uFMF+hXyC3OwpqR3YyoZpK8xMOSdI6B C80KkXP+mpXr2joETUBQshJOL1pUNYSsJj46e4OYQJwuC5wn3ChaJX9CMM136kYU 59eq1geyleQ4WEJkx/TQ4+Es3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWE1UwU KKLcNtTRlMBkO+gG7R3vMB8GA1UdIwQYMBaAFCm55qwBkpjMoJbeiXGp3I99eOHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzFFNC8zODI0N0E3MEYx NjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21NeWdsdDZKY2FuY2ozMTQ0 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tibm1yQUdTbU15Z2x0NkpjYW5jajMxNDRkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzFFNC8zODI0N0E3MEYxNjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21N eWdsdDZKY2FuY2ozMTQ0ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcsCZD8k/wDP6ATUjm2Od5nEYBxcxpCfalvXsR4juVZ9Oufv5lT1GV sTX2WHmZ1TWKhY/7JawK1UQeQATsw/zItqga7l1i/zkhgsbXK6iNnUn8gaYjhLG+ aBPIi+TlUX2eB3tfyMxEqDSZiEAklNE4O57Nx66DS4dLxMdAOZTsiiklXYWrdErZ dPl54fkIzCCVG/IdfOlwnCuvK+oJk+tKKbTaCdnficg8t9Gtuswg+ZPZ/zhcwqsn QGs27RotAZ8mw5tMkQDKKxMRxCfCxRWLhMOv0qhErrlL/WfIxQiCiyaL8xINXRve Hxc3ARk8TiAqTENF4QSnEsv6n7gYrXth -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:23 2025 by rpki-client