$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json) Hash identifier: Z3mzklykRcYxi3x7Ugn0U/wzLuLswSuvSjNXjB4Iyu0= Subject key identifier: F6:39:C1:90:BC:98:2A:24:78:E0:BA:52:CF:CC:6D:0C:ED:2F:1D:C0 Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft Manifest number: 0679 Signing time: Sat 06 Sep 2025 22:44:28 +0000 Manifest this update: Sat 06 Sep 2025 22:44:28 +0000 Manifest next update: Sat 13 Sep 2025 22:44:28 +0000 Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: 9/6dY0pM1PVUghkF4skWooRvjXrgV+6r2YcTpF9Jw9I=) 2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: QIcvi4uK4+sV4KonLrCq7np3/p5FTh38+jPZf45l5Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: Sep 6 22:44:28 2025 GMT Not After : Sep 13 22:44:28 2025 GMT Subject: CN=68bcb94c-be79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:e8:05:67:8c:cf:89:72:00:fb:fd:2a:8a: 2a:10:02:1f:47:5f:b0:79:f8:e3:a5:fe:20:62:97: bb:3f:1e:42:e9:d3:0c:07:a4:d4:7f:69:1b:ff:24: bb:ee:2f:64:17:d2:c8:7e:fa:ed:5f:5f:81:ca:dc: d4:ed:44:fa:95:46:db:63:df:6e:9c:b7:18:ca:cb: 4c:47:e1:de:0d:05:11:08:f7:50:c6:b8:f1:f6:ec: 09:1c:11:49:34:ef:8c:e0:26:ad:20:66:31:3b:64: 7b:61:b2:78:30:f6:bb:f9:04:1a:5b:dc:db:78:dc: ed:bc:2c:8f:1c:9b:2d:bf:40:cb:a6:e6:65:5e:2b: e5:fd:53:6d:8f:e6:c8:1b:54:5f:cf:19:cd:d1:97: 45:64:aa:44:d7:52:e5:15:b6:17:0b:de:8b:70:b2: c4:68:65:48:1c:b1:9f:fb:f6:66:b4:5c:e5:14:13: 68:70:1c:5c:55:91:c4:6a:33:19:af:59:fb:fc:83: 28:2a:ca:af:b0:a8:aa:fd:c8:ac:ec:c1:be:02:b2: e8:4d:82:9e:cc:44:38:90:2c:99:9e:16:4b:91:23: 2d:84:55:95:3b:9e:e3:45:1f:4a:d2:7b:80:38:17: 1a:69:3c:48:39:81:6c:77:d6:ea:34:88:37:12:e9: d3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:39:C1:90:BC:98:2A:24:78:E0:BA:52:CF:CC:6D:0C:ED:2F:1D:C0 X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e8:e4:02:c6:73:c4:52:5d:b8:d3:29:2e:d9:6d:43:60:69: bb:f1:77:07:ed:05:4b:94:d2:e4:18:76:31:d3:b8:bf:d6:13: fd:6b:3e:22:ad:85:1e:f6:7a:58:27:7d:66:e5:70:bd:8a:83: da:2c:a1:e0:d2:91:b0:ba:04:36:20:84:2d:6d:1f:bd:92:6c: 0d:0a:d4:e4:3b:01:b3:f6:27:ba:d4:45:d5:c7:3c:fe:2c:af: 3c:71:a8:ae:1e:4c:da:d9:e9:7b:44:7a:94:61:16:26:a7:74: c3:b0:da:f3:1b:8e:18:7f:ab:c4:77:dc:ab:dc:ca:76:1e:3b: 1a:f8:48:7b:c2:9f:ba:be:35:3d:eb:b3:07:91:97:04:e8:e5: 0d:c5:09:88:1b:cf:92:74:7e:e1:a8:c3:c4:de:6e:22:20:26: df:ee:2e:e1:8a:59:ab:be:6a:9d:3c:08:f4:72:f5:f0:9e:54: 38:e4:9d:f8:3d:2a:a8:1b:81:2e:60:77:64:cf:e3:c3:2a:33: bb:13:6d:a6:bd:53:da:a4:b9:f9:ca:de:ae:80:14:9e:11:23: 85:66:41:13:b7:77:76:01:62:7b:08:e2:e9:ee:d9:2a:f0:e8: 48:80:91:1b:f7:ad:26:65:76:47:fc:90:4d:f6:9d:7a:8e:58: 26:16:eb:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjUwOTA2MjI0NDI4WhcNMjUwOTEzMjI0NDI4WjAYMRYwFAYD VQQDEw02OGJjYjk0Yy1iZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZjoBWeMz4lyAPv9KooqEAIfR1+wefjjpf4gYpe7Px5C6dMMB6TUf2kb/yS7 7i9kF9LIfvrtX1+BytzU7UT6lUbbY99unLcYystMR+HeDQURCPdQxrjx9uwJHBFJ NO+M4CatIGYxO2R7YbJ4MPa7+QQaW9zbeNztvCyPHJstv0DLpuZlXivl/VNtj+bI G1RfzxnN0ZdFZKpE11LlFbYXC96LcLLEaGVIHLGf+/ZmtFzlFBNocBxcVZHEajMZ r1n7/IMoKsqvsKiq/cis7MG+ArLoTYKezEQ4kCyZnhZLkSMthFWVO57jRR9K0nuA OBcaaTxIOYFsd9bqNIg3EunTwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPY5wZC8 mCokeOC6Us/MbQztLx3AMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjY5RC9CRjZFMjBBNjhEQUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlK UUUwWkR5bU1NczFnbjgtbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ6OQCxnPEUl240yku2W1DYGm78XcH7QVLlNLkGHYx07i/1hP9az4i rYUe9npYJ31m5XC9ioPaLKHg0pGwugQ2IIQtbR+9kmwNCtTkOwGz9ie61EXVxzz+ LK88caiuHkza2el7RHqUYRYmp3TDsNrzG44Yf6vEd9yr3Mp2Hjsa+Eh7wp+6vjU9 67MHkZcE6OUNxQmIG8+SdH7hqMPE3m4iICbf7i7hilmrvmqdPAj0cvXwnlQ45J34 PSqoG4EuYHdkz+PDKjO7E22mvVPapLn5yt6ugBSeESOFZkETt3d2AWJ7COLp7tkq 8OhIgJEb960mZXZH/JBN9p16jlgmFusL -----END CERTIFICATE-----Generated at Mon Sep 8 12:51:45 2025 by rpki-client