$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft File: kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json) Hash identifier: w9h/Zsewd7ABJWor19thiRqOejtv+DUCnCG/u/Z4Ar4= Subject key identifier: B2:AB:A7:DF:A4:08:FF:59:90:B6:6B:29:5E:BC:9B:E0:15:0A:06:1E Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24 Certificate issuer: /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft Manifest number: 83 Signing time: Wed 17 Sep 2025 07:20:54 +0000 Manifest this update: Wed 17 Sep 2025 07:20:54 +0000 Manifest next update: Wed 24 Sep 2025 07:20:54 +0000 Files and hashes: 1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: ygj4Y+UxSDZme7eWSjKh0++GxgsQGdSP/5hvNwcXhng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24 Validity Not Before: Sep 17 07:20:54 2025 GMT Not After : Sep 24 07:20:54 2025 GMT Subject: CN=68ca6156-4f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a4:92:f3:e6:71:68:d8:20:c9:9b:3f:5b:cd: fa:9b:5f:5d:6b:fa:02:fa:9e:86:5f:1a:40:15:3f: 9a:3f:8e:cc:2e:7a:15:8d:8e:70:50:ce:e8:0c:ce: 69:d7:4e:d8:a0:1a:a5:4a:3e:80:14:9c:60:51:62: 9b:f7:e7:9b:54:ce:dc:ef:74:33:48:f6:ca:5f:73: 99:92:b1:a9:89:f0:98:59:cc:c2:06:71:8c:fe:59: b7:0b:b3:e4:8c:c6:01:f1:c8:7f:6f:50:ac:ee:59: af:b8:c0:c2:fc:62:53:a4:b5:52:ae:61:2b:3c:6a: d5:43:3d:8a:dd:c0:ba:56:3e:94:77:6c:8a:00:fa: 88:aa:89:27:15:53:ea:fa:2e:02:72:e5:0b:3b:a7: ca:d1:c9:28:c8:96:f7:d1:95:df:b1:c2:5d:cc:8f: 21:5b:7d:91:8e:4c:56:e6:74:23:27:ce:4d:9b:30: 2a:26:44:f0:e1:88:5c:e1:d0:fd:28:e7:e6:aa:28: c8:c2:ba:f3:7f:a3:82:3f:67:b4:15:30:1e:17:b7: 0c:4d:2f:30:dd:35:7b:1d:f1:e5:8d:a8:3e:56:d9: ea:b1:4f:bc:ed:d5:66:93:5f:e6:a6:08:db:9b:38: e7:d3:7e:b3:82:49:79:f7:08:7a:1d:89:0e:93:30: 51:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AB:A7:DF:A4:08:FF:59:90:B6:6B:29:5E:BC:9B:E0:15:0A:06:1E X509v3 Authority Key Identifier: keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:73:8f:b4:51:49:d5:10:04:d5:d6:b8:ba:4b:36:92:f2:81: 3b:87:69:50:64:a3:c5:fe:4e:4e:ac:e4:49:ab:fe:5c:12:c6: 4b:d4:f9:21:6b:20:0b:68:3c:88:d9:a4:e2:78:4d:87:14:a7: f8:09:dc:e0:82:fe:50:44:c0:80:38:9c:a8:9e:5f:65:c9:7d: 5a:47:e7:0a:0c:09:84:bf:7d:e0:ce:53:79:c4:b9:ae:b5:2d: 0d:62:5d:09:db:0c:db:7d:65:57:22:e4:10:31:c8:29:92:1f: aa:ec:6a:cc:aa:de:fd:d2:35:2e:6b:47:f7:6f:ef:26:44:cc: 1a:8f:8b:56:f4:52:91:18:b1:72:35:76:e9:7e:08:2f:1c:b8: e8:8e:a8:06:8a:cc:48:70:be:9d:29:44:1b:d6:ed:bf:a1:e6: 9a:02:3f:66:0c:c4:9a:35:47:e3:50:d0:70:0f:14:77:d3:00: e3:51:a1:b5:66:df:04:85:6e:59:34:66:8c:3e:81:b8:b0:e3: d8:1a:b5:ec:c4:2b:46:f3:f3:93:95:46:07:f5:5d:84:5b:11: 10:4e:1e:55:d2:54:90:61:72:f9:58:21:13:38:6d:3f:26:6d: 92:ca:71:9f:6c:08:5f:34:68:7a:f4:d6:c1:52:40:df:64:80: 4e:aa:12:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzNzcxMTAvBgNVBAUTKDkwODBEQjUwRkYwQjc0M0ZGQTMyQjc5RDBERDVDMzE5 MDIxRDZFMjQwHhcNMjUwOTE3MDcyMDU0WhcNMjUwOTI0MDcyMDU0WjAYMRYwFAYD VQQDEw02OGNhNjE1Ni00ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qSS8+ZxaNggyZs/W836m19da/oC+p6GXxpAFT+aP47MLnoVjY5wUM7oDM5p 107YoBqlSj6AFJxgUWKb9+ebVM7c73QzSPbKX3OZkrGpifCYWczCBnGM/lm3C7Pk jMYB8ch/b1Cs7lmvuMDC/GJTpLVSrmErPGrVQz2K3cC6Vj6Ud2yKAPqIqoknFVPq +i4CcuULO6fK0ckoyJb30ZXfscJdzI8hW32RjkxW5nQjJ85NmzAqJkTw4Yhc4dD9 KOfmqijIwrrzf6OCP2e0FTAeF7cMTS8w3TV7HfHljag+VtnqsU+87dVmk1/mpgjb mzjn036zgkl59wh6HYkOkzBR8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKrp9+k CP9ZkLZrKV68m+AVCgYeMB8GA1UdIwQYMBaAFJCA21D/C3Q/+jK3nQ3VwxkCHW4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTM3Ny9GM0M0NEE3OEND NTgxMUVGOTk5ODVEODZDNEY5QUUwMi9rSURiVVA4TGREXzZNcmVkRGRYREdRSWRi aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJRGJVUDhMZERfNk1yZWREZFhER1FJZGJpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTM3Ny9GM0M0NEE3OENDNTgxMUVGOTk5ODVEODZDNEY5QUUwMi9rSURiVVA4TGRE XzZNcmVkRGRYREdRSWRiaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPc4+0UUnVEATV1ri6SzaS8oE7h2lQZKPF/k5OrORJq/5cEsZL1Pkh ayALaDyI2aTieE2HFKf4Cdzggv5QRMCAOJyonl9lyX1aR+cKDAmEv33gzlN5xLmu tS0NYl0J2wzbfWVXIuQQMcgpkh+q7GrMqt790jUua0f3b+8mRMwaj4tW9FKRGLFy NXbpfggvHLjojqgGisxIcL6dKUQb1u2/oeaaAj9mDMSaNUfjUNBwDxR30wDjUaG1 Zt8EhW5ZNGaMPoG4sOPYGrXsxCtG8/OTlUYH9V2EWxEQTh5V0lSQYXL5WCETOG0/ Jm2SynGfbAhfNGh69NbBUkDfZIBOqhJH -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:14 2025 by rpki-client