$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: 3R2BkXs0Gre1bfi9Zfy1yvnhiolGvTRutno8WMY1KMw= Subject key identifier: C2:D6:B0:87:09:33:34:EE:12:9A:02:F3:87:70:6C:2E:DD:4F:8D:02 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: 0109 Signing time: Fri 05 Sep 2025 05:30:57 +0000 Manifest this update: Fri 05 Sep 2025 05:30:56 +0000 Manifest next update: Fri 12 Sep 2025 05:30:56 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: VlbmLt1PGSXVuVeeqbsPGI3a21Psfh4qIofoZPPJxsY=) 2: 62B87A26895B11EFBA2A3B22C4F9AE02.roa (hash: GkfnFa85sf2ihLyLByQY01IPDXpueRzZ4fB3mmtkqLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Sep 5 05:30:56 2025 GMT Not After : Sep 12 05:30:56 2025 GMT Subject: CN=68ba7590-2cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:5e:83:84:39:87:8b:cf:c0:34:1d:ae:e2: cf:0f:ca:1d:19:fc:19:60:07:40:33:9a:a2:c6:89: 23:01:bb:6c:b5:97:08:4e:9b:cd:28:a8:f3:eb:f4: fb:6b:65:93:48:00:5d:c6:dd:fc:37:c1:8c:e2:ba: 08:31:13:88:88:ae:f7:0b:be:f6:de:30:61:ac:36: 67:e6:f3:39:eb:0a:25:3c:40:f8:69:d9:b3:bb:66: 78:57:77:d6:e7:84:ba:90:fb:bb:4c:ef:91:00:7e: 55:ab:a5:92:69:04:ed:7b:84:99:d5:ae:b7:4b:fb: f7:68:85:7e:48:4e:35:72:1b:33:2e:96:3c:b0:d8: cd:e3:e9:44:7b:ea:6d:16:85:bd:ae:2b:ac:88:b6: 45:e7:64:c6:11:cc:46:79:e7:e3:e4:8e:20:ac:26: b3:a0:05:3e:ab:e1:42:8e:39:4e:04:02:4d:56:a8: f7:b4:bc:b4:3b:7d:b9:9f:85:60:5b:9e:46:e0:ad: 5a:03:39:c3:24:9a:f3:95:34:64:30:25:d2:65:6d: e6:3f:dc:1f:e5:69:50:80:ef:4d:b3:90:f5:46:56: de:ae:3e:bc:da:34:c1:40:01:9c:6b:f5:a0:f5:62: c3:da:97:7c:fb:b5:a3:f8:58:b3:f2:ff:6e:be:a6: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D6:B0:87:09:33:34:EE:12:9A:02:F3:87:70:6C:2E:DD:4F:8D:02 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:9a:11:5d:37:b3:d3:b5:33:a6:12:e4:b4:d7:4c:bb:1f:25: 13:2b:43:08:45:a6:68:5a:04:df:cb:51:6f:57:6b:bd:5b:54: 8d:d0:ab:69:17:3a:7d:77:1b:ee:83:17:4c:58:3d:2e:4f:8b: 44:00:66:b0:70:dd:8c:09:93:7e:19:7d:b3:8e:4b:89:a1:7c: 5c:6e:a4:3b:33:f8:24:e4:bd:6b:b9:11:b2:67:1c:58:32:d4: e1:b8:93:13:8d:27:1a:da:13:3f:f8:67:c8:6f:cb:0d:b5:5c: 1e:65:da:83:fb:7a:18:72:e1:e4:7a:0d:31:5f:29:cf:73:cd: 7d:b0:6e:15:07:f7:2c:f8:5e:5c:55:04:5a:49:62:d7:c2:8b: 7f:60:44:c8:1d:71:e6:18:cf:1a:d3:e1:82:76:24:9b:5d:3a: 61:26:2d:ba:50:61:79:5d:6d:e5:50:8e:1d:f6:83:a4:3d:28: af:5a:0b:91:6d:1f:16:28:ed:7f:ae:81:32:2e:2f:bf:69:46: 23:1c:e5:32:14:3d:a7:03:59:ab:df:0a:a8:af:3f:c4:fd:1d: 3a:12:23:06:19:88:9e:ae:94:89:67:eb:17:44:60:2d:12:3a: d3:81:af:9d:17:ed:e0:7d:e9:2d:d7:fa:9f:15:aa:ac:82:86: e1:3b:2d:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjUwOTA1MDUzMDU2WhcNMjUwOTEyMDUzMDU2WjAYMRYwFAYD VQQDEw02OGJhNzU5MC0yY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+Neg4Q5h4vPwDQdruLPD8odGfwZYAdAM5qixokjAbtstZcITpvNKKjz6/T7 a2WTSABdxt38N8GM4roIMROIiK73C7723jBhrDZn5vM56wolPED4admzu2Z4V3fW 54S6kPu7TO+RAH5Vq6WSaQTte4SZ1a63S/v3aIV+SE41chszLpY8sNjN4+lEe+pt FoW9riusiLZF52TGEcxGeefj5I4grCazoAU+q+FCjjlOBAJNVqj3tLy0O325n4Vg W55G4K1aAznDJJrzlTRkMCXSZW3mP9wf5WlQgO9Ns5D1Rlberj682jTBQAGca/Wg 9WLD2pd8+7Wj+Fiz8v9uvqaRrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLWsIcJ MzTuEpoC84dwbC7dT40CMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUmhFdN7PTtTOmEuS010y7HyUTK0MIRaZoWgTfy1FvV2u9W1SN0Ktp Fzp9dxvugxdMWD0uT4tEAGawcN2MCZN+GX2zjkuJoXxcbqQ7M/gk5L1ruRGyZxxY MtThuJMTjSca2hM/+GfIb8sNtVweZdqD+3oYcuHkeg0xXynPc819sG4VB/cs+F5c VQRaSWLXwot/YETIHXHmGM8a0+GCdiSbXTphJi26UGF5XW3lUI4d9oOkPSivWguR bR8WKO1/roEyLi+/aUYjHOUyFD2nA1mr3wqorz/E/R06EiMGGYierpSJZ+sXRGAt EjrTga+dF+3gfekt1/qfFaqsgobhOy1N -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:26 2025 by rpki-client