$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: lQi3UU10ogtA9LxFf+nY0cPJmD84cU5W8xXblM7pBUc= Subject key identifier: 52:13:6B:E2:7D:AA:3C:4D:5B:EC:79:6D:B5:88:00:C8:FD:1E:99:E5 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: 0100 Signing time: Fri 19 Sep 2025 05:43:54 +0000 Manifest this update: Fri 19 Sep 2025 05:43:53 +0000 Manifest next update: Fri 26 Sep 2025 05:43:53 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: tb+2tppqjXrMOHDOA3P+M1A9jYJGkCYWqB3CIoOo4g0=) 2: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: cSZNA9xFMjtULJTWhj5iUzlZdi4hLGYSAlp+qRF7bTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Sep 19 05:43:53 2025 GMT Not After : Sep 26 05:43:53 2025 GMT Subject: CN=68cced99-72da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:90:2c:80:25:84:ec:d5:4f:ff:38:fa:b4: 11:f4:14:26:ba:15:c6:ef:70:2b:be:09:3a:4c:f5: 7d:f0:68:89:19:91:0d:d8:08:eb:74:33:84:fb:53: 1a:d8:22:b7:30:15:9a:9b:59:25:af:9f:ac:cb:0d: 3c:70:24:1b:75:6e:ab:e4:67:b9:2a:31:11:53:6c: c4:ac:a8:b6:d3:a1:e2:2e:df:eb:4f:4e:c9:bc:da: d2:e1:5a:f4:b9:d6:96:bb:76:bb:f2:50:32:e6:e6: 22:bf:86:e9:c8:89:ab:08:b8:91:d8:07:71:38:cd: 6a:f7:71:12:c4:9d:e4:77:bc:ff:f7:a4:cb:14:d7: 4a:c4:84:3a:98:23:64:2b:7e:14:82:3d:3d:75:d8: da:ee:88:e7:9b:97:c4:28:05:2c:5e:84:b7:05:2a: 61:56:05:ef:9c:3f:3e:e6:2c:b9:90:e6:8a:2f:ca: 0f:d5:8e:c0:ff:06:a0:c9:2f:16:3d:7f:15:59:19: eb:3d:aa:e9:bd:e7:96:10:21:be:53:bd:a8:57:13: 9c:8a:04:de:4b:ab:72:48:19:ea:6b:44:4e:e1:ae: bc:0c:47:30:29:2d:54:15:c8:97:cc:11:cb:cf:cf: 17:31:10:b0:7b:a1:db:6d:81:fd:1c:64:ee:36:17: 30:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:13:6B:E2:7D:AA:3C:4D:5B:EC:79:6D:B5:88:00:C8:FD:1E:99:E5 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:55:ae:4e:9f:79:eb:22:3a:92:0f:5f:6e:4b:f1:76:20:d7: 02:8a:46:34:87:92:26:28:7d:7e:08:ad:39:a3:d7:b0:cc:52: d3:30:6d:c7:3a:13:bd:c0:ab:6e:04:88:6a:52:88:86:41:06: ae:c6:95:b8:b9:5a:3e:10:c5:bd:4e:fe:d3:78:23:33:75:bd: ff:41:eb:b1:1f:d0:c9:e7:22:f0:80:8b:23:d5:20:27:b9:66: c4:7b:fb:89:96:f3:ac:48:e7:81:4d:24:f4:72:14:ca:f3:50: 38:d9:cb:10:fd:0d:9d:42:00:00:ea:75:2a:7d:7c:a3:fb:a1: 3d:ab:96:5d:2b:34:2f:f4:ad:87:8d:b4:10:ea:3b:89:fe:85: 91:dc:07:7d:03:99:44:5b:f8:81:27:fc:73:a6:41:16:c8:d6: 97:35:10:cf:1f:7b:e9:10:6c:85:6e:c7:9f:b0:e5:81:2f:3f: e4:97:ca:0a:a3:f4:59:d4:d4:ee:b8:93:d6:9e:da:6e:93:02: 1a:da:c2:43:78:1b:cd:cb:07:db:14:6d:27:8a:12:ad:43:bc: 25:f1:e9:4a:1d:9f:77:f9:51:5c:9f:82:a0:16:fe:33:63:74: bf:2e:d9:e7:73:3f:90:2f:5f:eb:33:e8:06:62:5e:93:f8:89: 83:76:5c:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwOTE5MDU0MzUzWhcNMjUwOTI2MDU0MzUzWjAYMRYwFAYD VQQDEw02OGNjZWQ5OS03MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EmQLIAlhOzVT/84+rQR9BQmuhXG73Arvgk6TPV98GiJGZEN2AjrdDOE+1Ma 2CK3MBWam1klr5+syw08cCQbdW6r5Ge5KjERU2zErKi206HiLt/rT07JvNrS4Vr0 udaWu3a78lAy5uYiv4bpyImrCLiR2AdxOM1q93ESxJ3kd7z/96TLFNdKxIQ6mCNk K34Ugj09ddja7ojnm5fEKAUsXoS3BSphVgXvnD8+5iy5kOaKL8oP1Y7A/wagyS8W PX8VWRnrParpveeWECG+U72oVxOcigTeS6tySBnqa0RO4a68DEcwKS1UFciXzBHL z88XMRCwe6HbbYH9HGTuNhcwAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFITa+J9 qjxNW+x5bbWIAMj9HpnlMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANVa5On3nrIjqSD19uS/F2INcCikY0h5ImKH1+CK05o9ewzFLTMG3H OhO9wKtuBIhqUoiGQQauxpW4uVo+EMW9Tv7TeCMzdb3/QeuxH9DJ5yLwgIsj1SAn uWbEe/uJlvOsSOeBTST0chTK81A42csQ/Q2dQgAA6nUqfXyj+6E9q5ZdKzQv9K2H jbQQ6juJ/oWR3Ad9A5lEW/iBJ/xzpkEWyNaXNRDPH3vpEGyFbsefsOWBLz/kl8oK o/RZ1NTuuJPWntpukwIa2sJDeBvNywfbFG0nihKtQ7wl8elKHZ93+VFcn4KgFv4z Y3S/Ltnncz+QL1/rM+gGYl6T+ImDdlzv -----END CERTIFICATE-----Generated at Sat Sep 20 01:49:35 2025 by rpki-client