$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json) Hash identifier: qE4xsdoEWdgALX0no6j8cSPRj9+aI75sSOprVvh9+ug= Subject key identifier: 95:9E:6E:EA:D0:73:82:2C:76:E5:B9:38:BF:DF:F0:14:4E:4E:EA:9D Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft Manifest number: 013C Signing time: Wed 17 Sep 2025 04:57:22 +0000 Manifest this update: Wed 17 Sep 2025 04:57:21 +0000 Manifest next update: Wed 24 Sep 2025 04:57:21 +0000 Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: MV/vnFmKTGeX9vYLELBnCaQBfFe1RE5JvK4GTB89bgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Validity Not Before: Sep 17 04:57:21 2025 GMT Not After : Sep 24 04:57:21 2025 GMT Subject: CN=68ca3fb2-e959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:4f:6e:c7:65:c4:d3:89:2f:ab:50:ff:dd: 89:ff:ca:2b:4e:7b:40:48:13:ce:d5:a2:1f:17:57: 30:80:5d:c1:dd:4b:3d:4e:06:48:53:a1:ec:cd:c7: b2:55:ab:c3:b4:78:12:27:a0:0f:ae:94:a1:2c:1e: 8c:57:06:df:cc:6f:98:60:e8:1a:ea:dd:b0:55:76: dd:9b:bb:f5:fe:c1:4f:12:7b:28:55:31:b9:02:cd: f2:7d:53:5d:f6:a4:a7:42:ee:5e:9f:14:20:d7:1b: ed:18:1e:14:79:8b:9f:a5:9d:1f:64:00:d2:0a:bd: 9f:18:bf:41:fa:eb:01:99:08:30:73:f8:2d:ba:38: 3f:3d:43:eb:61:5f:27:2a:2f:a0:28:9b:90:82:b2: ce:b2:1a:4a:35:8b:7a:53:2b:b9:39:c3:16:cf:78: c8:e4:1f:50:a4:b5:47:33:61:25:57:41:9b:8a:13: c2:a5:38:de:64:7b:d8:8f:47:b3:d1:f8:f0:3a:9c: ce:6f:61:2a:0b:d1:92:bf:97:0a:68:92:a0:58:36: f1:f4:0e:bf:ed:6f:95:b8:90:f6:54:73:82:5c:9b: 68:7a:0c:19:9c:3a:d8:e8:cf:57:29:d0:0f:f5:38: 86:ff:96:da:70:0c:39:8e:5f:f4:af:6d:79:54:ea: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9E:6E:EA:D0:73:82:2C:76:E5:B9:38:BF:DF:F0:14:4E:4E:EA:9D X509v3 Authority Key Identifier: keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:23:cd:20:df:ef:41:ff:31:4d:20:40:60:04:95:26:59:87: 09:3c:82:9b:a2:b0:bc:bf:02:69:82:48:4e:58:2d:9f:f1:15: e1:05:9d:a6:7c:cd:02:7c:d3:e1:6a:ab:26:9e:e6:92:d2:a4: 61:ac:a7:fc:20:e1:ba:52:e2:68:58:87:ed:8f:36:ff:f3:07: 11:d9:2e:d9:fb:50:1c:5a:41:e8:b7:79:ba:9c:9e:e4:98:c9: 2d:a5:e6:ec:fb:8a:ba:c1:fb:08:c3:52:05:ad:f5:d9:b0:25: 1b:b9:bd:40:46:65:d5:7d:fd:c8:20:50:ce:6b:fe:86:84:25: e2:09:1b:5a:84:9e:d1:d2:44:a2:e6:f5:f9:cf:0b:af:5c:76: 70:aa:e0:1e:1c:a9:4d:80:56:a4:67:a4:27:8c:cf:6a:1b:e3: 92:85:25:7f:ff:a5:1f:6d:fe:19:c3:7c:e1:de:c3:d1:d6:aa: ad:b9:d9:3b:52:85:69:07:0c:1e:5c:f7:4c:e7:5c:68:28:54: dc:b8:ad:8e:98:1e:f4:9e:fe:06:86:ff:cd:54:f6:84:f6:dc: 8a:29:b1:00:3f:bf:61:18:d9:70:56:a5:bf:dd:6c:14:a6:a8: d5:99:ee:77:e0:fa:ad:34:9d:05:0c:d6:ad:c8:b4:a5:d4:85: 23:e8:90:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4 RTUwNzNCQzQwHhcNMjUwOTE3MDQ1NzIxWhcNMjUwOTI0MDQ1NzIxWjAYMRYwFAYD VQQDEw02OGNhM2ZiMi1lOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSRPbsdlxNOJL6tQ/92J/8orTntASBPO1aIfF1cwgF3B3Us9TgZIU6Hszcey VavDtHgSJ6APrpShLB6MVwbfzG+YYOga6t2wVXbdm7v1/sFPEnsoVTG5As3yfVNd 9qSnQu5enxQg1xvtGB4UeYufpZ0fZADSCr2fGL9B+usBmQgwc/gtujg/PUPrYV8n Ki+gKJuQgrLOshpKNYt6Uyu5OcMWz3jI5B9QpLVHM2ElV0GbihPCpTjeZHvYj0ez 0fjwOpzOb2EqC9GSv5cKaJKgWDbx9A6/7W+VuJD2VHOCXJtoegwZnDrY6M9XKdAP 9TiG/5bacAw5jl/0r215VOoJuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWeburQ c4IsduW5OL/f8BROTuqdMB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF TXBRXzNsZktNOUtPVUhPOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeI80g3+9B/zFNIEBgBJUmWYcJPIKborC8vwJpgkhOWC2f8RXhBZ2m fM0CfNPhaqsmnuaS0qRhrKf8IOG6UuJoWIftjzb/8wcR2S7Z+1AcWkHot3m6nJ7k mMktpebs+4q6wfsIw1IFrfXZsCUbub1ARmXVff3IIFDOa/6GhCXiCRtahJ7R0kSi 5vX5zwuvXHZwquAeHKlNgFakZ6QnjM9qG+OShSV//6Ufbf4Zw3zh3sPR1qqtudk7 UoVpBwweXPdM51xoKFTcuK2OmB70nv4Ghv/NVPaE9tyKKbEAP79hGNlwVqW/3WwU pqjVme534PqtNJ0FDNatyLSl1IUj6JA2 -----END CERTIFICATE-----Generated at Thu Sep 18 21:59:35 2025 by rpki-client