$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json) Hash identifier: c7smjoWbbCIdZmQw9IQrszI+jy4XLh6Ms7jFPBHSxbY= Subject key identifier: AA:02:0D:21:47:BD:AC:76:CF:7C:99:6C:97:7F:00:F3:0E:95:8C:E9 Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft Manifest number: 42 Signing time: Fri 05 Sep 2025 07:55:59 +0000 Manifest this update: Fri 05 Sep 2025 07:55:58 +0000 Manifest next update: Fri 12 Sep 2025 07:55:58 +0000 Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: 4E7f1jTLMJmDI4dzMPtCexhYzS0diA7vsifZ/EN6aOU=) 2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: SpbPHZ/krAG/WpD65rr9pmBtHMuwVfhmB9bAKCP8oRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Validity Not Before: Sep 5 07:55:58 2025 GMT Not After : Sep 12 07:55:58 2025 GMT Subject: CN=68ba978f-51bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d9:9d:fc:c2:83:a5:f3:64:7b:ca:0a:33:ea: 5b:0b:f9:57:a2:d2:ef:c1:d0:ab:52:b9:e7:80:9b: 34:a8:f4:4c:ef:e3:ce:94:36:d1:6f:bf:4d:7d:f4: 16:be:e1:8e:22:7b:59:f2:57:16:d2:0b:b9:6a:23: 5f:94:ef:0f:f8:25:00:f0:9e:7e:5f:d2:0f:d3:4e: 0e:9f:99:58:a0:7b:7a:cc:4a:df:0c:02:24:c1:4f: ad:bb:f4:01:36:6c:a5:ed:37:5d:18:28:ea:ad:f6: 6a:f5:5b:fb:f8:e8:48:4d:fb:0e:1e:62:5c:3a:83: 4a:b5:26:af:e1:63:b4:34:5a:7f:7a:1a:6f:06:8e: c8:2d:e8:fe:13:a6:a1:2a:c5:dc:58:a2:0c:be:cd: be:e8:e4:4f:fa:f2:d4:f1:81:e1:7e:b9:ce:f7:4a: ca:59:a8:8b:db:12:c1:e5:88:aa:c8:75:ef:ca:61: 9d:d8:4c:e0:65:68:3b:5f:be:1f:f9:d7:3a:0f:54: 2a:60:f3:92:6c:df:3f:6b:7c:85:a8:3c:3c:5c:0d: a5:f9:81:f3:ef:46:6e:26:a7:bd:42:6b:90:21:50: 42:86:14:49:7b:ef:5e:6d:59:38:91:fe:40:fd:21: 5c:af:65:cf:7b:9c:82:31:9a:8d:9d:4a:be:c2:99: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:02:0D:21:47:BD:AC:76:CF:7C:99:6C:97:7F:00:F3:0E:95:8C:E9 X509v3 Authority Key Identifier: keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0f:3b:68:99:47:fc:d3:6f:6f:e4:9a:ed:62:1a:e3:00:66: ee:cd:06:84:4b:bd:a5:b9:7d:fa:0a:63:82:f5:3d:f1:6e:b5: 61:48:6e:26:ea:9b:15:1a:60:ee:76:eb:fa:9b:77:fb:39:a0: 1a:26:c7:b0:f2:f2:52:fd:5a:83:b0:8c:0b:2c:17:eb:aa:e0: 4d:6f:de:6c:4e:6d:88:a3:e7:ef:92:e3:ce:9d:f2:b0:81:47: 1f:4d:6c:c2:26:9e:05:a6:23:24:d8:63:71:9b:04:09:66:ea: 23:97:71:cf:1d:ce:e9:00:19:e4:85:b2:06:5c:37:bb:4b:1d: 38:40:cb:ae:e8:fc:d6:d6:a9:97:c1:e9:a2:64:8f:bc:7e:7b: c8:45:dd:0a:87:9a:d1:4e:ab:f3:68:4c:4b:10:7d:73:3a:44: 87:15:51:65:9f:69:6a:ec:d3:54:bd:e6:7a:17:15:fb:d2:3c: 57:5d:70:bb:5a:00:db:43:19:28:02:84:b0:db:d9:76:62:78: e3:2c:09:16:58:17:ef:52:e4:a1:a1:08:cb:b9:ed:d6:08:57: fb:d7:1a:56:f7:25:c1:71:be:f1:e2:81:e1:5d:8c:79:c7:34: 4a:85:2c:fe:99:f0:53:79:05:33:eb:30:2a:03:90:69:c1:08: 18:d4:e7:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoMkEwMEZENUQ1RUFFRjgxRjMyQjAwQjJFNUM4MkM1RUNE QUMxMjY5MzAeFw0yNTA5MDUwNzU1NThaFw0yNTA5MTIwNzU1NThaMBgxFjAUBgNV BAMTDTY4YmE5NzhmLTUxYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf2Z38woOl82R7ygoz6lsL+Vei0u/B0KtSueeAmzSo9Ezv486UNtFvv0199Ba+ 4Y4ie1nyVxbSC7lqI1+U7w/4JQDwnn5f0g/TTg6fmVige3rMSt8MAiTBT6279AE2 bKXtN10YKOqt9mr1W/v46EhN+w4eYlw6g0q1Jq/hY7Q0Wn96Gm8Gjsgt6P4TpqEq xdxYogy+zb7o5E/68tTxgeF+uc73SspZqIvbEsHliKrIde/KYZ3YTOBlaDtfvh/5 1zoPVCpg85Js3z9rfIWoPDxcDaX5gfPvRm4mp71Ca5AhUEKGFEl7715tWTiR/kD9 IVyvZc97nIIxmo2dSr7CmbuPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqgINIUe9 rHbPfJlsl38A8w6VjOkwHwYDVR0jBBgwFoAUKgD9XV6u+B8ysAsuXILF7NrBJpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0JCNDJDMURFMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2dEOVhWNnUtQjh5c0FzdVhJTEY3TnJCSnBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0JCNDJDMURFMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4 eXNBc3VYSUxGN05yQkpwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADYPO2iZR/zTb2/kmu1iGuMAZu7NBoRLvaW5ffoKY4L1PfFutWFIbibq mxUaYO526/qbd/s5oBomx7Dy8lL9WoOwjAssF+uq4E1v3mxObYij5++S486d8rCB Rx9NbMImngWmIyTYY3GbBAlm6iOXcc8dzukAGeSFsgZcN7tLHThAy67o/NbWqZfB 6aJkj7x+e8hF3QqHmtFOq/NoTEsQfXM6RIcVUWWfaWrs01S95noXFfvSPFddcLta ANtDGSgChLDb2XZieOMsCRZYF+9S5KGhCMu57dYIV/vXGlb3JcFxvvHigeFdjHnH NEqFLP6Z8FN5BTPrMCoDkGnBCBjU56A= -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:06 2025 by rpki-client