$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft File: rt-KIRgobseQH6KolLlMoQCj_Xg.mft (raw, json) Hash identifier: 0L/WsZI6SZRkFSQSrWBd1l9wh94XN+tVMCpJTqAAE2U= Subject key identifier: 97:84:74:D3:08:53:E5:E7:FD:C0:AB:0E:FE:0D:46:0C:8A:69:E2:55 Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 Certificate issuer: /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft Manifest number: 1C Signing time: Thu 21 Aug 2025 08:06:47 +0000 Manifest this update: Thu 21 Aug 2025 08:06:47 +0000 Manifest next update: Thu 28 Aug 2025 08:06:47 +0000 Files and hashes: 1: rt-KIRgobseQH6KolLlMoQCj_Xg.crl (hash: avOTtlFbNq7FYWfViJaiV0ZAWbqXzjjz2bj/7sn/nPI=) 2: 077331D0564511F09ED8993AC4F9AE02.roa (hash: UUG92P2AWbXaMrK3iyqoTf0N43jcCkwVZ/K5MaIHibg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Validity Not Before: Aug 21 08:06:47 2025 GMT Not After : Aug 28 08:06:47 2025 GMT Subject: CN=68a6d397-5787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:fb:01:65:34:83:15:4d:b1:05:8e:5d:46: 0d:ef:95:0a:3e:4c:c0:41:f9:f5:f9:3f:07:a2:9b: 96:66:68:0b:96:f4:bc:64:6b:01:1c:2b:fc:e3:66: 94:11:77:53:ad:26:b0:13:2e:f7:36:86:a2:99:5f: 60:b1:d1:ad:6b:72:15:fe:30:85:fd:70:8a:26:c9: 4c:e8:08:24:b2:da:54:59:ce:dc:12:aa:94:d7:aa: 79:3a:19:c8:3b:a0:76:7c:b9:f9:43:ab:04:8c:e8: 51:c0:3d:4c:bf:f0:49:dd:2c:85:0a:b3:8b:7a:f7: 68:06:3e:6d:21:50:bc:a0:ba:ee:ef:9c:72:ae:d0: 34:af:90:6d:48:f0:1f:dc:01:37:b9:b0:14:50:c0: 17:14:85:9b:0b:59:b5:08:1e:57:22:80:98:29:57: 3a:eb:d1:03:70:42:c1:36:ba:a1:fa:2b:52:21:c0: 5d:2d:86:3a:a6:09:6b:d5:bd:b4:f1:1a:dc:9f:4c: d9:7f:d1:e2:d2:f5:30:ad:5e:92:1c:c3:f0:ac:fc: 57:1e:a4:57:4e:30:18:73:db:84:ae:c1:1b:9b:d1: bb:68:e7:0e:55:61:92:f3:46:3f:88:5b:fc:14:cb: 01:69:ab:8c:b1:00:c6:7b:64:5d:45:7d:a9:aa:0d: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:84:74:D3:08:53:E5:E7:FD:C0:AB:0E:FE:0D:46:0C:8A:69:E2:55 X509v3 Authority Key Identifier: keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:48:29:76:39:29:fc:8d:0d:3d:69:ea:ec:73:70:71:c8:98: ce:8f:d0:60:86:f1:b9:19:d5:ae:d3:12:cc:4a:b4:da:3e:ac: 44:ec:96:1f:f9:48:36:c2:62:58:d8:91:00:e8:c3:94:4d:8e: d2:35:3a:15:19:53:01:3a:62:af:7c:c5:81:e7:38:77:6f:e0: ec:b8:8c:5d:6d:d8:7b:3d:2b:6b:bc:78:cd:1c:d3:4e:a2:24: 9a:d8:e6:b2:74:64:63:f5:76:03:7a:6c:81:6d:d0:96:86:a8: b3:d8:07:76:f3:eb:56:54:d1:9b:58:ac:b5:7d:ee:eb:25:78: 9a:f3:2c:56:b4:c5:57:f3:d9:85:b7:6e:0f:44:45:85:90:00: 4e:66:93:33:d6:e7:40:be:9d:33:37:de:5b:50:5c:e5:cd:15: 20:2d:e7:0c:4e:0c:07:25:0c:ab:95:28:56:e1:dd:e2:4c:72: b9:f5:03:aa:50:5a:91:44:31:21:97:a9:39:1d:c0:7f:4d:ce: a2:74:50:43:b6:09:bf:a6:65:20:86:3b:5c:b7:df:0e:f1:ea: 0e:d4:39:7d:e3:06:89:ac:c3:0d:bd:5f:44:98:1d:d2:9f:92: 4e:f5:2a:e9:0b:1c:ab:47:82:e6:37:27:86:d3:a9:1f:04:f6: 9a:05:19:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNGRTExMC8GA1UEBRMoQUVERjhBMjExODI4NkVDNzkwMUZBMkE4OTRCOTRDQTEw MEEzRkQ3ODAeFw0yNTA4MjEwODA2NDdaFw0yNTA4MjgwODA2NDdaMBgxFjAUBgNV BAMTDTY4YTZkMzk3LTU3ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcT/sBZTSDFU2xBY5dRg3vlQo+TMBB+fX5Pweim5ZmaAuW9LxkawEcK/zjZpQR d1OtJrATLvc2hqKZX2Cx0a1rchX+MIX9cIomyUzoCCSy2lRZztwSqpTXqnk6Gcg7 oHZ8uflDqwSM6FHAPUy/8EndLIUKs4t692gGPm0hULyguu7vnHKu0DSvkG1I8B/c ATe5sBRQwBcUhZsLWbUIHlcigJgpVzrr0QNwQsE2uqH6K1IhwF0thjqmCWvVvbTx GtyfTNl/0eLS9TCtXpIcw/Cs/FcepFdOMBhz24SuwRub0bto5w5VYZLzRj+IW/wU ywFpq4yxAMZ7ZF1FfamqDRk7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl4R00whT 5ef9wKsO/g1GDIpp4lUwHwYDVR0jBBgwFoAUrt+KIRgobseQH6KolLlMoQCj/Xgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzk2NkQ3MUVBNTY0 MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNlUUg2S29sTGxNb1FDal9Y Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnQtS0lSZ29ic2VRSDZLb2xMbE1vUUNqX1hnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0ZFLzk2NkQ3MUVBNTY0MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNl UUg2S29sTGxNb1FDal9YZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAENIKXY5KfyNDT1p6uxzcHHImM6P0GCG8bkZ1a7TEsxKtNo+rETslh/5 SDbCYljYkQDow5RNjtI1OhUZUwE6Yq98xYHnOHdv4Oy4jF1t2Hs9K2u8eM0c006i JJrY5rJ0ZGP1dgN6bIFt0JaGqLPYB3bz61ZU0ZtYrLV97usleJrzLFa0xVfz2YW3 bg9ERYWQAE5mkzPW50C+nTM33ltQXOXNFSAt5wxODAclDKuVKFbh3eJMcrn1A6pQ WpFEMSGXqTkdwH9NzqJ0UEO2Cb+mZSCGO1y33w7x6g7UOX3jBomsww29X0SYHdKf kk71KukLHKtHguY3J4bTqR8E9poFGVQ= -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:48 2025 by rpki-client