$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json) Hash identifier: rAYcxBDm7pCEwaZQSUKwYWTeHQJyZ4shYjSPVVaegZY= Subject key identifier: E7:1A:E3:58:40:FE:AA:7C:AA:00:14:9B:12:46:82:8A:B2:84:A2:1D Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft Manifest number: E3 Signing time: Tue 09 Sep 2025 05:31:34 +0000 Manifest this update: Tue 09 Sep 2025 05:31:34 +0000 Manifest next update: Tue 16 Sep 2025 05:31:34 +0000 Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: A5JjPwM8Jra5pBmeIMC4g9qYfieys56WS+9mG5YMhHA=) 2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 01Cn3pOh4671ZkIDU6odEQ9G33TuU+ryqBzUYewO8xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Validity Not Before: Sep 9 05:31:34 2025 GMT Not After : Sep 16 05:31:34 2025 GMT Subject: CN=68bfbbb6-5b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:56:2c:ac:0f:2b:75:2d:00:6a:76:f3:ff:08: 4b:ae:e3:87:d1:cc:17:76:2b:2f:44:c4:c0:9d:e5: 1f:90:fd:62:6b:bf:52:d0:4f:07:e3:f3:3f:55:f5: 24:f6:af:f8:59:46:da:b8:18:72:19:70:62:36:36: 7b:3a:a5:79:89:89:10:26:02:52:ff:57:3f:1c:8f: d0:7f:db:ba:6b:42:ca:9e:7b:53:a6:1d:1a:e0:09: 07:d4:6d:73:02:ca:03:41:a0:1f:0a:e4:4a:86:6e: be:65:76:b3:85:ae:98:cb:9f:22:0b:8f:c4:ff:c9: 6b:bc:b4:5e:e4:51:b4:16:40:d7:8b:04:42:75:97: b7:95:da:4e:0c:12:0b:2a:00:4b:03:ed:2e:a5:5f: 22:72:52:e0:88:7d:ca:9c:e4:9b:3e:4b:62:d0:94: 95:52:a0:b3:d2:8c:24:60:29:81:0f:b3:68:92:be: 22:26:56:8f:e1:fd:a9:82:c9:20:2d:00:56:24:56: 1b:7d:83:3a:6e:1a:cb:39:a7:b2:29:b6:3f:f2:cd: a1:29:e9:23:2e:a0:be:0b:7e:c4:af:37:de:45:b2: e3:dd:84:4f:3f:ea:be:81:82:60:7f:13:b9:16:2b: 6e:8e:d5:35:df:80:90:b2:fa:98:12:59:76:20:40: ee:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1A:E3:58:40:FE:AA:7C:AA:00:14:9B:12:46:82:8A:B2:84:A2:1D X509v3 Authority Key Identifier: keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9d:8c:ce:03:9c:c1:99:2a:00:9e:06:8a:0f:9a:0c:ab:2a: 18:11:97:ea:30:0e:6e:96:51:88:4d:2b:b0:24:e3:0e:b4:fd: 61:66:81:2a:11:73:47:e9:07:90:c7:c0:53:02:58:50:b0:41: b4:13:c5:99:f3:21:4b:2c:5a:68:55:bd:7b:bc:17:92:b4:57: 0c:c5:81:0a:75:34:56:ae:7d:f8:89:d4:58:67:ef:c9:8a:7a: 99:e6:00:92:7d:12:f0:5a:c4:47:ab:3f:02:19:0a:eb:ab:f9: 95:6a:c9:dd:4b:c1:e4:a1:16:c2:80:83:bb:85:04:87:2b:e9: 33:9a:57:61:0b:6c:68:d4:96:f7:4a:24:a1:ad:77:95:1f:9b: 3a:1e:b5:24:fa:b4:99:8e:0a:65:69:75:55:c3:f7:3c:91:37: 33:62:a4:e6:9f:a2:b2:e4:9e:4f:1a:41:04:4a:c7:34:df:1b: ab:1f:f7:05:f3:b8:d2:f7:e7:7b:7b:fa:ed:3d:db:a2:37:d9: 9d:d0:92:8b:5b:51:0f:f6:fc:d9:a2:1a:d8:20:1b:17:82:5a: f4:f9:ee:04:81:f3:6d:6c:44:ba:41:38:22:62:c7:6f:1d:3b: c8:c5:8e:3d:e2:9d:f9:d4:99:55:be:50:62:1c:07:87:b6:dd: c7:f4:26:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDkyMjQxNjY1OTU1ODIxN0M5MzYyN0I5NkQ5QzlFQUZB QzFGQUEzRUUwHhcNMjUwOTA5MDUzMTM0WhcNMjUwOTE2MDUzMTM0WjAYMRYwFAYD VQQDEw02OGJmYmJiNi01YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8FYsrA8rdS0Aanbz/whLruOH0cwXdisvRMTAneUfkP1ia79S0E8H4/M/VfUk 9q/4WUbauBhyGXBiNjZ7OqV5iYkQJgJS/1c/HI/Qf9u6a0LKnntTph0a4AkH1G1z AsoDQaAfCuRKhm6+ZXazha6Yy58iC4/E/8lrvLRe5FG0FkDXiwRCdZe3ldpODBIL KgBLA+0upV8iclLgiH3KnOSbPkti0JSVUqCz0owkYCmBD7Nokr4iJlaP4f2pgskg LQBWJFYbfYM6bhrLOaeyKbY/8s2hKekjLqC+C37ErzfeRbLj3YRPP+q+gYJgfxO5 FitujtU134CQsvqYEll2IEDu5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOca41hA /qp8qgAUmxJGgoqyhKIdMB8GA1UdIwQYMBaAFJIkFmWVWCF8k2J7ltnJ6vrB+qPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi84MTY5NzJDNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlYeVRZbnVXMmNucS1zSDZv LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlY eVRZbnVXMmNucS1zSDZvLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUnYzOA5zBmSoAngaKD5oMqyoYEZfqMA5ullGITSuwJOMOtP1hZoEq EXNH6QeQx8BTAlhQsEG0E8WZ8yFLLFpoVb17vBeStFcMxYEKdTRWrn34idRYZ+/J inqZ5gCSfRLwWsRHqz8CGQrrq/mVasndS8HkoRbCgIO7hQSHK+kzmldhC2xo1Jb3 SiShrXeVH5s6HrUk+rSZjgplaXVVw/c8kTczYqTmn6Ky5J5PGkEESsc03xurH/cF 87jS9+d7e/rtPduiN9md0JKLW1EP9vzZohrYIBsXglr0+e4EgfNtbES6QTgiYsdv HTvIxY494p351JlVvlBiHAeHtt3H9Cbi -----END CERTIFICATE-----Generated at Tue Sep 9 13:22:41 2025 by rpki-client