$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: +Td8HQ/OhRDQAmHTSTkFsGvnK/Cuilf365E99K9yetw= Subject key identifier: BE:8B:36:60:49:70:4B:56:8E:40:5D:07:EF:92:78:B9:45:06:D4:9B Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0BA0 Signing time: Thu 18 Sep 2025 19:10:27 +0000 Manifest this update: Thu 18 Sep 2025 19:10:27 +0000 Manifest next update: Thu 25 Sep 2025 19:10:27 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: bzevrptUWZL4nGCuRGgGNobG4KmgJGWU5xhj2pbo2us=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: 5tQROkuKBdGr5CDnMUVPHlhLeJ1/YaIHTHWkyStRniQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Sep 18 19:10:27 2025 GMT Not After : Sep 25 19:10:27 2025 GMT Subject: CN=68cc5923-232c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a3:09:10:92:a8:fc:2c:f3:a9:38:2a:2a:99: 8b:93:35:23:c8:b0:35:c1:aa:ef:58:2d:5d:1c:c9: 42:27:a4:af:8d:a1:22:8a:a7:99:f5:da:cb:5b:39: b7:44:bc:c0:6a:68:c9:a4:e9:bb:2e:68:0f:4c:4f: 86:0a:e8:7f:e7:79:bc:e7:37:d6:53:8d:d1:38:3b: ca:0a:29:82:f3:84:18:81:90:8e:ea:95:90:dd:43: 8f:61:15:5a:36:39:a4:e5:c8:e4:08:28:83:13:36: db:eb:61:5f:f9:24:b2:db:2b:2e:47:0c:c7:c5:05: 7e:cf:b3:76:4f:fe:21:c1:b7:59:fd:e0:c7:4b:76: f3:3a:12:4c:bd:3e:f5:25:e0:f6:be:60:d3:3d:e6: b4:95:d9:e8:65:38:fd:c5:06:73:9f:f1:a7:43:36: 01:d2:a9:5a:ed:1b:67:f6:b8:ed:d8:19:7e:59:31: 73:d0:6a:9f:30:49:3e:fd:36:62:db:59:f6:59:6c: c8:f8:f9:13:b6:80:ad:ee:3f:83:dd:50:94:7e:40: b4:f6:f2:f4:bc:5e:fb:6c:b0:02:06:b6:02:35:61: 71:fe:4d:7d:bf:53:a9:f0:8a:a4:0d:5e:45:47:03: 35:01:46:b5:14:e8:79:63:f6:b7:75:c6:45:d5:3b: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8B:36:60:49:70:4B:56:8E:40:5D:07:EF:92:78:B9:45:06:D4:9B X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cd:f7:7e:11:d6:54:55:84:3b:e6:6e:8b:e2:e5:04:c7:8b: ee:59:33:42:43:68:54:c6:3c:ca:6d:ee:41:cd:7c:4c:b3:49: d3:bc:04:89:9f:71:1a:75:52:f3:51:65:37:67:b0:12:3a:59: f5:be:9a:fa:21:3a:b5:3d:32:f1:f7:1b:76:e9:eb:9f:f6:a9: 1c:55:d5:92:8c:2a:c6:70:94:e9:ba:86:fb:55:b2:9a:b3:c6: c6:4d:90:f3:0c:f4:e0:b6:aa:65:36:40:c5:26:33:f1:39:54: 14:1c:fa:c8:e6:60:27:fa:6a:e8:dc:75:de:a4:6e:31:de:b9: 7b:19:cf:67:0e:d2:bc:71:87:80:f3:75:8a:17:49:4e:86:93: f1:52:75:48:65:2f:2c:c2:3a:c9:df:31:df:51:78:75:8c:01: e4:1a:bd:1d:b2:ab:52:0b:56:d4:33:c1:fb:cc:77:b8:1b:dc: de:d4:c6:c9:86:b5:85:36:76:f0:5d:39:4f:23:0f:de:34:67: c5:6b:1f:24:3f:56:32:77:4a:4b:b6:74:c7:4b:c1:6d:e1:ec: 88:e3:be:7f:e8:70:f1:70:62:77:26:03:9c:b7:33:8d:e1:fe: 45:91:b7:82:1f:b6:c5:54:ec:8b:fc:d4:69:25:b2:58:af:ed: 75:7c:77:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjUwOTE4MTkxMDI3WhcNMjUwOTI1MTkxMDI3WjAYMRYwFAYD VQQDEw02OGNjNTkyMy0yMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qMJEJKo/CzzqTgqKpmLkzUjyLA1warvWC1dHMlCJ6SvjaEiiqeZ9drLWzm3 RLzAamjJpOm7LmgPTE+GCuh/53m85zfWU43RODvKCimC84QYgZCO6pWQ3UOPYRVa Njmk5cjkCCiDEzbb62Ff+SSy2ysuRwzHxQV+z7N2T/4hwbdZ/eDHS3bzOhJMvT71 JeD2vmDTPea0ldnoZTj9xQZzn/GnQzYB0qla7Rtn9rjt2Bl+WTFz0GqfMEk+/TZi 21n2WWzI+PkTtoCt7j+D3VCUfkC09vL0vF77bLACBrYCNWFx/k19v1Op8IqkDV5F RwM1AUa1FOh5Y/a3dcZF1TvIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6LNmBJ cEtWjkBdB++SeLlFBtSbMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlzfd+EdZUVYQ75m6L4uUEx4vuWTNCQ2hUxjzKbe5BzXxMs0nTvASJ n3EadVLzUWU3Z7ASOln1vpr6ITq1PTLx9xt26euf9qkcVdWSjCrGcJTpuob7VbKa s8bGTZDzDPTgtqplNkDFJjPxOVQUHPrI5mAn+mro3HXepG4x3rl7Gc9nDtK8cYeA 83WKF0lOhpPxUnVIZS8swjrJ3zHfUXh1jAHkGr0dsqtSC1bUM8H7zHe4G9ze1MbJ hrWFNnbwXTlPIw/eNGfFax8kP1Yyd0pLtnTHS8Ft4eyI475/6HDxcGJ3JgOctzON 4f5FkbeCH7bFVOyL/NRpJbJYr+11fHcU -----END CERTIFICATE-----Generated at Fri Sep 19 08:52:23 2025 by rpki-client