$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json) Hash identifier: QGHB7YvzeMCj6/Jni88oWO6teZcz/xnrBYhASc/E9zY= Subject key identifier: 3D:49:D2:78:DE:90:AE:33:9B:5C:AF:81:B9:0E:82:E0:54:06:9E:9D Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 06B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft Manifest number: 06AA Signing time: Thu 18 Sep 2025 22:27:43 +0000 Manifest this update: Thu 18 Sep 2025 22:27:43 +0000 Manifest next update: Thu 25 Sep 2025 22:27:43 +0000 Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: vvHpFRAFPP1ra6RJZ4vbFgYI/1wnvPsKwy9li5Y4pcU=) 2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: TnZM67noo4lbQHfXpAgCtw+JAFkneMpGmuhyQRw2ydg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712 (0x6b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: Sep 18 22:27:43 2025 GMT Not After : Sep 25 22:27:43 2025 GMT Subject: CN=68cc875f-fd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:98:71:94:37:5b:35:4e:75:9f:12:58:33: 92:3f:21:e1:3b:aa:71:b5:84:2e:92:8c:ec:0d:4a: dd:ff:16:ae:8f:c3:b2:f0:3e:dd:d7:54:02:c5:d8: 99:99:15:b6:f3:86:ea:09:43:e0:1b:6e:d8:60:af: f5:85:1c:f5:bc:ba:7c:1d:ca:4b:a0:a4:5c:23:45: 57:ef:f5:86:48:1b:17:89:a0:c9:03:38:65:81:13: bd:94:72:57:08:f3:10:a8:66:d0:41:a4:5e:5c:ec: d7:7e:ef:9a:17:b6:a0:e2:cf:df:63:cd:c8:8b:7c: b8:4e:a6:4b:89:38:58:2b:da:d1:59:42:a5:d4:fc: f9:25:25:c9:b1:5c:f2:c0:74:b5:0d:c7:75:7b:3f: 88:d8:a3:b1:80:b8:d6:6f:11:e9:5b:72:bc:b7:88: c9:81:42:3c:1f:9d:bc:44:2d:2a:ef:f5:15:16:f5: b5:f8:27:f7:15:63:8f:d5:63:24:a0:c1:a5:18:4e: 7b:67:52:61:29:96:67:40:2e:67:b4:44:c5:1d:10: 9b:28:70:00:b7:c3:a4:f0:20:c5:9d:78:c4:c0:47: e8:ba:4a:26:c9:05:22:54:5b:a2:f4:5c:f4:e2:55: d4:82:3c:1d:f3:f2:3a:a1:5a:ee:67:1f:69:80:79: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:49:D2:78:DE:90:AE:33:9B:5C:AF:81:B9:0E:82:E0:54:06:9E:9D X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:9b:4c:9a:2c:c7:19:1b:da:a1:fe:8c:c7:9a:67:42:06:ef: 9a:bc:08:d3:d1:c2:ba:cd:b3:a0:c8:0c:0f:2b:24:6d:43:dc: 40:0f:b9:4d:1c:37:b7:f1:31:2f:30:a6:86:c2:d6:5f:de:4b: c8:05:ae:77:f8:09:c6:50:79:46:cc:84:d1:20:ad:24:8a:a5: b1:a4:01:92:18:6a:72:9d:ce:23:16:e7:08:f5:6e:a2:69:97: 08:e1:81:35:5e:82:a7:95:23:0a:ba:42:48:8f:80:d5:3e:d2: 87:93:3c:b4:78:3c:0a:5a:2f:cc:f0:6f:6b:f2:08:ae:64:82: ed:4a:56:49:28:99:94:79:2c:c4:c0:cc:f2:21:2c:70:41:61: a1:66:e7:be:f6:97:6d:10:10:40:bb:17:dc:8c:e8:9a:e3:1b: 03:5c:d9:f2:bd:d3:e6:20:18:c8:f9:0e:ae:d0:35:e2:b3:ca: 2e:c7:13:e9:37:a0:d2:45:9b:a2:3c:3b:d8:03:72:5f:a5:ed: 0f:07:ac:97:60:07:7a:a9:f9:04:ba:33:38:f7:fe:e4:ae:95: 0d:4e:2b:6a:90:95:17:85:d1:f7:6f:90:14:42:05:41:ff:54: 5f:78:6d:fc:76:1a:5e:5f:af:f6:fb:8f:d7:9b:02:db:1c:f8: 4e:23:8b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjUwOTE4MjIyNzQzWhcNMjUwOTI1MjIyNzQzWjAYMRYwFAYD VQQDEw02OGNjODc1Zi1mZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh+YcZQ3WzVOdZ8SWDOSPyHhO6pxtYQukozsDUrd/xauj8Oy8D7d11QCxdiZ mRW284bqCUPgG27YYK/1hRz1vLp8HcpLoKRcI0VX7/WGSBsXiaDJAzhlgRO9lHJX CPMQqGbQQaReXOzXfu+aF7ag4s/fY83Ii3y4TqZLiThYK9rRWUKl1Pz5JSXJsVzy wHS1Dcd1ez+I2KOxgLjWbxHpW3K8t4jJgUI8H528RC0q7/UVFvW1+Cf3FWOP1WMk oMGlGE57Z1JhKZZnQC5ntETFHRCbKHAAt8Ok8CDFnXjEwEfoukomyQUiVFui9Fz0 4lXUgjwd8/I6oVruZx9pgHkzDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1J0nje kK4zm1yvgbkOguBUBp6dMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0Rz NlZwNlZXNFF2Tl9YSTMyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTm0yaLMcZG9qh/ozHmmdCBu+avAjT0cK6zbOgyAwPKyRtQ9xAD7lN HDe38TEvMKaGwtZf3kvIBa53+AnGUHlGzITRIK0kiqWxpAGSGGpync4jFucI9W6i aZcI4YE1XoKnlSMKukJIj4DVPtKHkzy0eDwKWi/M8G9r8giuZILtSlZJKJmUeSzE wMzyISxwQWGhZue+9pdtEBBAuxfcjOia4xsDXNnyvdPmIBjI+Q6u0DXis8ouxxPp N6DSRZuiPDvYA3Jfpe0PB6yXYAd6qfkEujM49/7krpUNTitqkJUXhdH3b5AUQgVB /1RfeG38dhpeX6/2+4/XmwLbHPhOI4tH -----END CERTIFICATE-----Generated at Fri Sep 19 10:38:57 2025 by rpki-client