$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: KeGB8x1tKRYfYQfXz3ksPK6kAZwJU6/PpN8rOd4Ycls= Subject key identifier: 1D:4D:26:57:EA:E1:58:FA:E2:E0:C3:DD:98:0D:24:2C:6C:6D:8F:3F Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 03C3 Signing time: Wed 17 Sep 2025 01:08:53 +0000 Manifest this update: Wed 17 Sep 2025 01:08:53 +0000 Manifest next update: Wed 24 Sep 2025 01:08:53 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: RdXpkp+Oec7vzcJVmlIWO0CM3uxhNmD2f0csKSIGoKg=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 8U+UsiCXDKifnoegufsPJKGalX6CUXoFX96X70pYMYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Sep 17 01:08:53 2025 GMT Not After : Sep 24 01:08:53 2025 GMT Subject: CN=68ca0a25-96b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:32:b4:a4:99:68:a3:46:5f:22:3e:c9:44: 1f:c5:0c:7c:49:c9:a0:79:5a:18:b9:f9:07:14:14: 5c:16:32:b9:11:f5:6f:04:56:b6:56:5b:32:c1:1a: 5e:34:0e:4f:62:a1:34:b2:70:22:cc:db:4a:47:44: 24:b1:41:49:8b:7b:df:6f:f1:df:bc:d2:c6:94:89: 29:23:82:00:ce:64:aa:44:8f:53:cc:e2:84:5d:7c: 99:92:c1:77:f8:cf:60:47:48:d0:d9:40:b7:da:4d: 3f:e1:f8:1a:92:82:ba:58:b5:0e:56:9c:fe:b8:ca: 4a:63:ed:78:b6:ac:84:e4:ab:0e:07:ec:88:ae:6a: f1:84:35:f7:a1:13:05:74:65:5b:1d:48:f2:0c:94: 63:bd:32:ac:7e:32:b6:cf:98:53:1d:69:8b:a6:11: a9:4a:5e:d5:23:8e:77:fc:fa:c7:7c:2d:5f:78:42: 41:ee:a7:00:a4:8d:48:3a:bc:34:88:0f:aa:6d:34: e2:d1:d9:30:31:10:59:9a:db:77:f0:2a:85:84:73: 42:fe:92:6a:90:85:bb:e2:7b:a3:63:c5:b0:1b:db: 32:77:53:48:34:a8:d6:73:8f:3b:b6:4e:df:09:06: 54:22:15:45:c2:b5:29:f7:2b:73:69:32:60:a7:d0: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:26:57:EA:E1:58:FA:E2:E0:C3:DD:98:0D:24:2C:6C:6D:8F:3F X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f2:3b:87:54:59:e5:75:ce:9b:ca:c1:e9:60:e1:f1:12:ba: 05:0d:af:25:1b:38:a2:d8:86:01:f4:5a:86:2c:7f:1c:c2:90: 13:0f:e5:40:ca:e3:28:50:44:df:d8:41:2f:cd:1c:d2:1d:07: 63:8d:d5:4b:e4:4d:cf:7b:37:0a:f5:ca:60:47:55:0e:54:36: 7c:d6:0c:da:75:a1:57:d8:8d:55:55:ae:e2:bf:c3:75:f1:f0: 48:02:a9:c0:54:0c:36:13:60:20:e9:fa:38:f1:3b:14:02:1e: ad:8a:de:ad:85:49:ee:b5:8d:05:48:32:6e:f4:aa:34:14:17: 79:74:97:94:fb:e6:71:f4:67:ac:1e:a9:a6:79:cd:10:1b:e2: 22:f0:36:7f:86:f9:21:e3:bb:59:94:df:61:fd:ce:fb:29:09: 20:7f:fb:b8:be:17:67:e6:17:ed:86:36:aa:66:49:2d:5b:f8: ac:89:07:94:d0:c5:51:6b:08:d3:7e:d3:b7:44:48:b6:d3:e1: e0:74:35:d6:f2:8a:f8:ba:b9:8f:78:6b:a1:87:cd:b0:1b:0e: 41:e1:ac:fe:44:f3:ac:f5:e5:1b:fd:1c:4b:0a:11:73:19:2e: 6f:3f:4b:e8:e2:a3:99:17:70:59:3d:7f:6e:92:ad:99:d5:b2: 85:96:c3:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjUwOTE3MDEwODUzWhcNMjUwOTI0MDEwODUzWjAYMRYwFAYD VQQDEw02OGNhMGEyNS05NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyUytKSZaKNGXyI+yUQfxQx8ScmgeVoYufkHFBRcFjK5EfVvBFa2VlsywRpe NA5PYqE0snAizNtKR0QksUFJi3vfb/HfvNLGlIkpI4IAzmSqRI9TzOKEXXyZksF3 +M9gR0jQ2UC32k0/4fgakoK6WLUOVpz+uMpKY+14tqyE5KsOB+yIrmrxhDX3oRMF dGVbHUjyDJRjvTKsfjK2z5hTHWmLphGpSl7VI453/PrHfC1feEJB7qcApI1IOrw0 iA+qbTTi0dkwMRBZmtt38CqFhHNC/pJqkIW74nujY8WwG9syd1NINKjWc487tk7f CQZUIhVFwrUp9ytzaTJgp9BSqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1NJlfq 4Vj64uDD3ZgNJCxsbY8/MB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/8juHVFnldc6bysHpYOHxEroFDa8lGzii2IYB9FqGLH8cwpATD+VA yuMoUETf2EEvzRzSHQdjjdVL5E3PezcK9cpgR1UOVDZ81gzadaFX2I1VVa7iv8N1 8fBIAqnAVAw2E2Ag6fo48TsUAh6tit6thUnutY0FSDJu9Ko0FBd5dJeU++Zx9Ges Hqmmec0QG+Ii8DZ/hvkh47tZlN9h/c77KQkgf/u4vhdn5hfthjaqZkktW/isiQeU 0MVRawjTftO3REi20+HgdDXW8or4urmPeGuhh82wGw5B4az+RPOs9eUb/RxLChFz GS5vP0vo4qOZF3BZPX9ukq2Z1bKFlsPg -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:33 2025 by rpki-client