$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: tglleryxfTF+yDDYQ4PMNUjEq3NdmpW14BMtcKelD90= Subject key identifier: FA:77:52:01:C2:19:AD:F4:3C:56:D1:E3:C0:41:C1:4A:81:D5:25:0C Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 05DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 05D5 Signing time: Thu 04 Sep 2025 23:18:38 +0000 Manifest this update: Thu 04 Sep 2025 23:18:37 +0000 Manifest next update: Thu 11 Sep 2025 23:18:37 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: k3l0L6xJAkYRqPgpAdx6iPsdOUlR86pC5DQZmSJ+W4w=) 2: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1502 (0x5de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Sep 4 23:18:37 2025 GMT Not After : Sep 11 23:18:37 2025 GMT Subject: CN=68ba1e4d-2965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:95:25:3e:fe:ae:9a:5b:ed:c3:22:34:2a: d9:34:1a:cc:df:57:92:4b:bd:99:33:fa:e9:84:e0: 25:c8:2b:8b:5a:d7:36:29:2e:c0:ab:b0:ba:ee:36: 9a:83:77:2b:8e:a3:f8:b0:0e:90:83:d2:68:45:33: c8:90:66:da:61:21:c9:ed:54:40:e1:c0:ff:77:6a: d2:b8:b1:82:e9:24:88:3d:42:94:c9:03:61:67:1e: c8:5e:71:17:87:f9:cd:e0:85:10:e2:c2:52:5a:e0: 63:30:b4:64:1e:04:1d:f7:76:ff:22:c0:89:ca:05: 3e:62:92:37:36:d6:62:82:e5:ee:33:ef:cd:86:da: 86:c1:78:95:15:1e:ce:48:04:2d:ca:eb:d3:84:34: 7f:c5:ff:88:94:ce:1f:81:45:88:40:a2:67:8d:c6: 78:cf:ab:3f:3e:65:b2:8d:7b:ce:f5:cb:1a:7e:eb: 5e:17:fb:f8:95:2e:e5:19:a0:9d:19:25:7d:27:4d: 62:ad:d6:66:79:6e:94:26:10:89:59:35:ee:3f:80: 78:6c:06:6a:2a:bf:f5:4d:92:97:2f:57:a0:73:26: 75:66:27:ac:14:eb:38:7a:a3:76:78:2d:13:5b:86: c2:64:d2:f0:b0:04:e3:67:f9:45:5e:11:b6:25:f8: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:77:52:01:C2:19:AD:F4:3C:56:D1:E3:C0:41:C1:4A:81:D5:25:0C X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:86:31:d4:8f:e3:4c:47:bc:9c:f6:c1:fa:b0:1a:af:9f:01: 74:da:7e:dd:49:6e:30:41:37:a2:2f:29:10:e3:7d:c6:61:47: 44:7a:34:0d:86:6c:f3:13:5d:b7:db:85:a5:7a:2f:91:07:6f: 97:7a:f3:05:53:17:ff:37:00:d3:f4:37:43:99:2b:22:4a:af: 52:18:68:5b:37:9c:44:61:f4:86:50:b0:47:de:a7:54:8c:81: c3:10:48:3a:67:16:21:da:d9:57:e0:c5:78:f6:f3:51:5d:07: 39:73:ad:96:52:95:9f:73:48:58:56:c0:bc:0a:49:f2:ea:ab: 5d:96:da:37:b5:2c:03:41:84:fa:01:e1:89:7c:95:8a:fb:60: 2c:a5:71:95:8d:ec:c0:b9:fb:73:b0:89:3b:de:fe:de:97:78: f2:d0:4b:76:74:e3:53:62:82:13:22:1e:94:c7:8b:fa:91:d9: 4d:09:f9:1b:d3:a9:90:e7:52:da:31:24:74:c1:d4:3f:f4:1d: 8b:51:8d:49:6f:4c:d7:f4:cf:49:ae:77:6b:2d:8b:a6:df:b2: 9f:7a:ab:a3:b9:a8:38:0d:83:ac:a6:7f:be:16:4f:13:6f:b9: 97:89:ac:3b:d9:54:07:ea:f5:5d:2b:92:10:0d:de:46:ac:b0: 1c:75:0e:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUwOTA0MjMxODM3WhcNMjUwOTExMjMxODM3WjAYMRYwFAYD VQQDEw02OGJhMWU0ZC0yOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8KVJT7+rppb7cMiNCrZNBrM31eSS72ZM/rphOAlyCuLWtc2KS7Aq7C67jaa g3crjqP4sA6Qg9JoRTPIkGbaYSHJ7VRA4cD/d2rSuLGC6SSIPUKUyQNhZx7IXnEX h/nN4IUQ4sJSWuBjMLRkHgQd93b/IsCJygU+YpI3NtZiguXuM+/NhtqGwXiVFR7O SAQtyuvThDR/xf+IlM4fgUWIQKJnjcZ4z6s/PmWyjXvO9csafuteF/v4lS7lGaCd GSV9J01irdZmeW6UJhCJWTXuP4B4bAZqKr/1TZKXL1egcyZ1ZiesFOs4eqN2eC0T W4bCZNLwsATjZ/lFXhG2JfjzOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPp3UgHC Ga30PFbR48BBwUqB1SUMMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBthjHUj+NMR7yc9sH6sBqvnwF02n7dSW4wQTeiLykQ433GYUdEejQN hmzzE12324Wlei+RB2+XevMFUxf/NwDT9DdDmSsiSq9SGGhbN5xEYfSGULBH3qdU jIHDEEg6ZxYh2tlX4MV49vNRXQc5c62WUpWfc0hYVsC8Ckny6qtdlto3tSwDQYT6 AeGJfJWK+2AspXGVjezAuftzsIk73v7el3jy0Et2dONTYoITIh6Ux4v6kdlNCfkb 06mQ51LaMSR0wdQ/9B2LUY1Jb0zX9M9JrndrLYum37Kfequjuag4DYOspn++Fk8T b7mXiaw72VQH6vVdK5IQDd5GrLAcdQ5O -----END CERTIFICATE-----Generated at Sat Sep 6 11:49:03 2025 by rpki-client