$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: XBLCe357h6f/MH/xdBRpEoiBts2FrFE0vJETPY5QkTc= Subject key identifier: 91:39:0C:4E:B6:44:80:3F:76:EA:24:E1:D9:E8:15:16:FA:DF:B3:22 Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 08EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 08E6 Signing time: Wed 20 Aug 2025 20:26:54 +0000 Manifest this update: Wed 20 Aug 2025 20:26:54 +0000 Manifest next update: Wed 27 Aug 2025 20:26:54 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: zJPM/4j9BueMczp+fBCKDqGn9BfaHAIkLvGz8JM2Qzk=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: ttXfxcVj6+WhtbE63+vyOYQl4F7FNyy4bCidNx2zj30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2284 (0x8ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Aug 20 20:26:54 2025 GMT Not After : Aug 27 20:26:54 2025 GMT Subject: CN=68a62f8e-0f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:20:8e:35:42:d4:19:f4:23:2b:06:f1:60:b8: f5:02:dd:8a:33:cc:38:14:d3:8b:80:09:9d:23:66: 52:c8:81:6f:6e:1f:bb:26:00:94:71:0d:6e:52:7a: b7:2a:db:5a:8a:2b:37:53:1d:da:b6:2e:ec:37:50: 10:01:06:5a:51:23:0f:44:ea:ae:00:79:3c:12:bf: 68:e4:06:e2:88:45:d8:cb:f2:e8:37:ad:7c:7b:43: 87:64:58:dc:31:95:79:7f:fb:91:50:64:2f:4e:fb: 25:90:96:41:cf:d2:2f:1e:eb:18:32:a6:48:d8:06: 24:15:f0:f4:6e:11:b4:52:13:c2:c7:5a:5b:3a:26: 75:a9:7f:e9:a8:5a:15:b8:86:80:e0:61:ac:7e:a4: 0e:56:eb:83:dc:32:4c:9e:f3:40:fa:de:48:20:42: 8b:59:22:c2:69:66:4a:f2:14:93:70:8c:79:7f:ae: 7d:8e:39:09:21:08:35:d7:f9:9c:56:be:42:05:ec: 50:3a:c3:bb:b8:81:11:01:9c:3d:2e:7b:c3:06:0d: a7:4c:a9:bc:11:6d:b9:02:62:fb:41:a0:0d:7c:e4: 34:d0:a7:fd:52:7e:bf:72:b4:b8:8f:16:e0:6b:0c: f4:7f:d5:40:88:dc:39:e3:4f:4d:a9:ad:ba:97:3f: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:39:0C:4E:B6:44:80:3F:76:EA:24:E1:D9:E8:15:16:FA:DF:B3:22 X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:87:a1:0c:45:34:aa:ca:23:16:65:95:16:d3:1d:b6:2e:c3: ad:42:0e:45:d6:6a:7f:f5:1d:a8:6c:b8:9d:85:67:a2:83:54: 1d:71:01:6a:72:b3:23:db:f1:9b:e6:7c:1b:ee:d8:7e:05:3e: 5d:f1:28:90:e1:71:5e:04:07:d0:dd:2f:f5:dc:eb:92:4b:03: 82:0f:da:d2:b2:7a:47:66:2b:6d:a2:82:7e:da:33:39:4d:35: 4e:3c:d3:0d:c9:00:e3:75:16:21:95:25:47:49:87:4d:dc:72: 15:36:c1:6f:c7:c6:c1:5a:3c:4a:04:a4:58:ee:5a:23:7f:83: 79:99:35:9b:70:cf:d8:76:ef:bb:55:c8:31:ad:35:cb:7e:f8: 68:b4:32:73:8e:a3:ef:14:34:63:f3:a5:5d:60:6a:d5:57:1f: cc:43:42:ac:98:57:58:17:d8:44:ad:88:7f:e4:89:74:7f:0e: a3:b1:7c:e1:3c:3c:3e:52:f4:de:09:bb:9f:f7:16:c8:cf:c8: 42:83:d8:22:10:4e:9a:6b:ec:45:61:58:c8:66:2a:aa:25:f3: c3:90:76:e8:8b:b3:ed:9b:93:f2:6c:b5:a1:bf:ec:ee:05:28: 85:67:b9:66:5a:c5:89:b3:e5:92:ed:8b:65:ba:36:a5:a5:89: 50:36:b2:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjUwODIwMjAyNjU0WhcNMjUwODI3MjAyNjU0WjAYMRYwFAYD VQQDEw02OGE2MmY4ZS0wZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iCONULUGfQjKwbxYLj1At2KM8w4FNOLgAmdI2ZSyIFvbh+7JgCUcQ1uUnq3 Kttaiis3Ux3ati7sN1AQAQZaUSMPROquAHk8Er9o5AbiiEXYy/LoN618e0OHZFjc MZV5f/uRUGQvTvslkJZBz9IvHusYMqZI2AYkFfD0bhG0UhPCx1pbOiZ1qX/pqFoV uIaA4GGsfqQOVuuD3DJMnvNA+t5IIEKLWSLCaWZK8hSTcIx5f659jjkJIQg11/mc Vr5CBexQOsO7uIERAZw9LnvDBg2nTKm8EW25AmL7QaANfOQ00Kf9Un6/crS4jxbg awz0f9VAiNw5409Nqa26lz9QxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJE5DE62 RIA/duok4dnoFRb637MiMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEh6EMRTSqyiMWZZUW0x22LsOtQg5F1mp/9R2obLidhWeig1QdcQFq crMj2/Gb5nwb7th+BT5d8SiQ4XFeBAfQ3S/13OuSSwOCD9rSsnpHZittooJ+2jM5 TTVOPNMNyQDjdRYhlSVHSYdN3HIVNsFvx8bBWjxKBKRY7lojf4N5mTWbcM/Ydu+7 VcgxrTXLfvhotDJzjqPvFDRj86VdYGrVVx/MQ0KsmFdYF9hErYh/5Il0fw6jsXzh PDw+UvTeCbuf9xbIz8hCg9giEE6aa+xFYVjIZiqqJfPDkHboi7Ptm5PybLWhv+zu BSiFZ7lmWsWJs+WS7YtlujalpYlQNrKt -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:11 2025 by rpki-client