$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft File: kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft (raw, json) Hash identifier: LifurscboXZJpTZGXpJp8H5wOB2JPm4f8BdkgJbv4LE= Subject key identifier: 79:A6:B6:B3:49:25:62:2F:4B:10:59:88:EB:A3:7A:D7:89:46:2D:DA Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft Manifest number: 0C29 Signing time: Thu 18 Sep 2025 18:54:04 +0000 Manifest this update: Thu 18 Sep 2025 18:54:03 +0000 Manifest next update: Thu 25 Sep 2025 18:54:03 +0000 Files and hashes: 1: kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl (hash: x+T0fuEtB1m8MBgoSR74xf79XhTkIUTIH9HsKGU3FRU=) 2: EA531ACE61C211EF89F25E2CC4F9AE02.roa (hash: wvS2IKCsAphgy9VmVy8jmzdrhXrxZNTENgiqGBEyqqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6462, serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Validity Not Before: Sep 18 18:54:03 2025 GMT Not After : Sep 25 18:54:03 2025 GMT Subject: CN=68cc554c-1e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:50:da:7e:37:cb:7a:2e:f1:c2:4d:9c:c2: 18:3a:25:0d:4e:16:d4:ab:f4:80:4f:0c:cb:68:63: 89:13:fe:c1:29:c0:9d:74:e5:11:8c:f1:c9:8d:f5: 29:92:1d:2e:51:2f:89:f6:26:7b:a5:10:a0:c5:f0: 21:77:fa:a1:40:a3:6a:85:0b:5d:b0:14:2d:5b:be: b9:86:50:01:67:db:8e:86:a7:d1:51:95:09:51:23: b4:4b:33:9c:9a:db:b0:5d:e7:ff:c0:c0:38:3b:2a: 95:af:0e:d3:07:0b:b7:3f:fc:0e:78:8b:5c:c8:0a: 47:98:b7:90:e7:05:5f:52:d3:82:19:28:ec:80:80: 6a:6d:e2:ee:d5:cc:11:2f:49:16:01:65:26:77:a3: 29:e9:a5:5a:e1:a6:12:e7:59:28:f4:3b:2a:93:95: 9d:fc:6a:40:81:95:b2:91:2f:6a:af:8c:87:c8:50: 8c:4e:7e:5b:a7:c1:96:dc:b2:79:1e:af:10:ec:38: bb:65:e6:19:62:a4:6d:e7:ee:8d:bd:3e:c4:68:4c: 13:06:2e:d1:fe:27:e4:76:41:9f:a5:11:92:20:52: 18:59:00:6f:f4:fa:52:07:d1:6b:bc:7f:92:24:5a: a7:22:30:0f:ca:61:e3:44:07:cf:44:4d:f8:a0:f9: b2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A6:B6:B3:49:25:62:2F:4B:10:59:88:EB:A3:7A:D7:89:46:2D:DA X509v3 Authority Key Identifier: keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:cc:f5:6c:73:a9:20:5b:5c:b1:83:3c:98:82:b4:76:38:ba: eb:6a:a7:01:a5:65:bf:48:9f:76:e5:c6:05:25:97:4e:92:e9: 07:14:c1:5b:1e:f5:2d:28:a7:8c:5f:9d:b5:de:98:8a:4a:bf: 8a:a0:90:9a:d8:23:4d:0e:46:de:b9:17:29:b9:5c:9d:30:54: 43:61:27:b7:0c:e8:9c:d5:e8:10:f6:ba:4a:17:a4:7e:8d:c1: 6e:74:8c:d3:62:90:57:15:78:1f:10:09:3c:8d:88:b5:f6:f7: 2a:1a:67:44:73:e9:ef:2a:0b:fa:a1:0d:a5:1d:e5:fb:5f:86: ce:b1:f8:eb:95:b3:a4:a5:d3:00:b5:86:92:36:35:be:0c:3f: 4e:0f:52:b0:a8:23:02:97:29:1c:5e:cf:64:cf:71:22:8b:ea: 10:02:c7:c6:a9:07:c4:04:71:56:d5:db:92:b5:fc:f2:52:49: aa:e2:d1:15:11:c8:3e:f0:a8:1f:fb:a0:eb:c5:63:d6:8a:23: ee:61:f2:23:70:f2:5d:51:f7:6d:37:b1:e1:6e:a2:65:66:a6: 1f:df:3d:c6:8d:ff:fd:7d:73:25:83:83:db:a3:27:c2:ac:44: 48:21:12:5b:cb:05:fa:25:4b:11:5a:20:68:16:4d:58:c7:b6: 56:cd:04:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE MjBDMzgwMzkwHhcNMjUwOTE4MTg1NDAzWhcNMjUwOTI1MTg1NDAzWjAYMRYwFAYD VQQDEw02OGNjNTU0Yy0xZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9dQ2n43y3ou8cJNnMIYOiUNThbUq/SATwzLaGOJE/7BKcCddOURjPHJjfUp kh0uUS+J9iZ7pRCgxfAhd/qhQKNqhQtdsBQtW765hlABZ9uOhqfRUZUJUSO0SzOc mtuwXef/wMA4OyqVrw7TBwu3P/wOeItcyApHmLeQ5wVfUtOCGSjsgIBqbeLu1cwR L0kWAWUmd6Mp6aVa4aYS51ko9Dsqk5Wd/GpAgZWykS9qr4yHyFCMTn5bp8GW3LJ5 Hq8Q7Di7ZeYZYqRt5+6NvT7EaEwTBi7R/ifkdkGfpRGSIFIYWQBv9PpSB9FrvH+S JFqnIjAPymHjRAfPRE34oPmyxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmmtrNJ JWIvSxBZiOujeteJRi3aMB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4 NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjQ2Mi9EQUY0MzVFMDE4NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZj UXhudS1mMmpLSHJTRERnRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCszPVsc6kgW1yxgzyYgrR2OLrraqcBpWW/SJ925cYFJZdOkukHFMFb HvUtKKeMX5213piKSr+KoJCa2CNNDkbeuRcpuVydMFRDYSe3DOic1egQ9rpKF6R+ jcFudIzTYpBXFXgfEAk8jYi19vcqGmdEc+nvKgv6oQ2lHeX7X4bOsfjrlbOkpdMA tYaSNjW+DD9OD1KwqCMClykcXs9kz3Eii+oQAsfGqQfEBHFW1duStfzyUkmq4tEV Ecg+8Kgf+6DrxWPWiiPuYfIjcPJdUfdtN7HhbqJlZqYf3z3Gjf/9fXMlg4PboyfC rERIIRJbywX6JUsRWiBoFk1Yx7ZWzQTY -----END CERTIFICATE-----Generated at Fri Sep 19 10:46:22 2025 by rpki-client