$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json) Hash identifier: +r/4KObhEAfEIHnyNwPZ9M5jubCIsdVeVWOb6BojZro= Subject key identifier: 23:19:55:B1:D5:EA:A5:80:89:B7:4B:C0:CB:DC:51:54:7C:D6:98:99 Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 103D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft Manifest number: 102C Signing time: Thu 18 Sep 2025 17:35:30 +0000 Manifest this update: Thu 18 Sep 2025 17:35:30 +0000 Manifest next update: Thu 25 Sep 2025 17:35:30 +0000 Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: 0UcQWbahVc4dl15+5vD4aJAyZPyUiuXl73R25ae2l0I=) 2: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: fPoBgkYnMh4IMhrB/TA39+M1O1OAHZFrtUEJDkMooUg=) 3: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: ucL3j8TnFmy+7V5qbIqZDaLy79WcFoXLeH1a5In6i8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4157 (0x103d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Sep 18 17:35:30 2025 GMT Not After : Sep 25 17:35:30 2025 GMT Subject: CN=68cc42e2-ca46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:bf:7d:d0:8f:f6:2e:37:64:b3:0c:d3:c3: a8:7b:7c:1a:67:72:10:33:13:4f:2b:bb:00:89:06: ba:76:71:a4:da:5e:4f:a8:18:d6:8a:9a:4d:99:c5: c0:1d:4c:1a:58:4b:c4:eb:46:1c:5a:d1:4c:7b:85: 6f:4b:7d:9f:0f:60:8b:81:f1:66:aa:d5:ab:04:7f: 3a:ac:f6:68:b4:5e:07:60:92:9b:5b:ce:19:64:62: af:10:7f:db:86:a7:b2:b7:a4:74:16:22:04:03:8d: c3:a3:c8:7c:d9:9a:2d:1e:e9:96:8d:ad:6c:cc:0b: e9:46:14:2f:82:b4:14:fe:da:db:9b:c0:3b:c6:68: 24:d6:b6:be:f5:5d:54:bd:da:5a:d0:a3:42:76:32: 24:7c:9c:44:6d:7c:d3:47:67:11:80:8a:70:c1:f5: 9a:bb:87:3c:95:12:fe:0e:a4:b6:b3:f8:68:bb:51: 07:45:b9:37:97:d0:dd:f9:71:8c:ce:46:a3:70:84: 32:12:21:07:4d:68:c3:ca:2b:85:5f:ea:91:10:88: e5:f3:46:47:e5:e1:77:bf:a9:e0:99:56:23:42:5f: 5e:fc:d6:d4:70:42:2f:2b:a3:0e:4c:05:a0:60:05: 9f:3a:92:59:12:b6:d5:2b:2b:ff:be:93:75:f2:aa: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:19:55:B1:D5:EA:A5:80:89:B7:4B:C0:CB:DC:51:54:7C:D6:98:99 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:1a:94:6a:7b:73:b9:69:af:2b:ad:1f:c3:ec:ef:36:6e:af: 65:52:f5:9b:5c:d1:27:24:26:29:23:12:54:7f:f3:64:d0:95: ad:3f:60:92:5b:ed:86:79:39:63:a6:ce:c9:55:0c:24:d1:5d: 4f:63:54:4a:0a:14:c7:0d:a6:4a:1c:84:26:7b:89:35:2a:19: 67:0a:03:1a:2e:5d:f9:c1:ef:bf:9f:1a:8d:9e:b1:66:90:61: db:0f:9b:d5:23:f5:fd:23:46:f1:67:74:be:f3:35:b0:fb:c0: b4:9c:49:50:76:e2:eb:e0:a2:9b:9c:9b:b6:e8:2d:ef:12:e5: 01:de:a1:f9:aa:2b:89:bd:d6:bb:1f:67:10:54:67:5a:5c:fa: 2a:22:6b:9a:ec:1d:fb:cc:a5:01:80:b6:4c:61:cb:ff:3b:b5: 21:05:c7:2d:65:88:fa:11:0f:7b:c0:e5:c8:7c:4f:95:50:7e: 45:18:70:cb:7a:8b:f8:63:45:da:3b:18:4c:ce:0a:06:3c:80: f3:a3:60:91:9d:d4:cc:1e:29:1c:ea:67:e9:9d:41:5b:4a:ca: 3d:ab:6e:d9:43:ea:ab:7f:73:1e:42:1d:a1:5a:7d:ac:ae:d2: 7f:0d:03:36:ee:d3:35:5e:86:f7:61:c2:aa:13:35:b0:cb:ee: 76:87:79:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICED0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjUwOTE4MTczNTMwWhcNMjUwOTI1MTczNTMwWjAYMRYwFAYD VQQDEw02OGNjNDJlMi1jYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sO/fdCP9i43ZLMM08Ooe3waZ3IQMxNPK7sAiQa6dnGk2l5PqBjWippNmcXA HUwaWEvE60YcWtFMe4VvS32fD2CLgfFmqtWrBH86rPZotF4HYJKbW84ZZGKvEH/b hqeyt6R0FiIEA43Do8h82ZotHumWja1szAvpRhQvgrQU/trbm8A7xmgk1ra+9V1U vdpa0KNCdjIkfJxEbXzTR2cRgIpwwfWau4c8lRL+DqS2s/hou1EHRbk3l9Dd+XGM zkajcIQyEiEHTWjDyiuFX+qREIjl80ZH5eF3v6ngmVYjQl9e/NbUcEIvK6MOTAWg YAWfOpJZErbVKyv/vpN18qoj7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMZVbHV 6qWAibdLwMvcUVR81piZMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0MyMi82OTA2QzZGQTRDNzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxo M0ZVS2xKSk52Ty03WjJsTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYGpRqe3O5aa8rrR/D7O82bq9lUvWbXNEnJCYpIxJUf/Nk0JWtP2CS W+2GeTljps7JVQwk0V1PY1RKChTHDaZKHIQme4k1KhlnCgMaLl35we+/nxqNnrFm kGHbD5vVI/X9I0bxZ3S+8zWw+8C0nElQduLr4KKbnJu26C3vEuUB3qH5qiuJvda7 H2cQVGdaXPoqImua7B37zKUBgLZMYcv/O7UhBcctZYj6EQ97wOXIfE+VUH5FGHDL eov4Y0XaOxhMzgoGPIDzo2CRndTMHikc6mfpnUFbSso9q27ZQ+qrf3MeQh2hWn2s rtJ/DQM27tM1Xob3YcKqEzWwy+52h3n2 -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:55 2025 by rpki-client