$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: cdNUBglcxuxPTqK9vjZgYeC21mZh/2KglN85hZ4juqk= Subject key identifier: 23:9D:5B:FE:41:F2:F8:B7:C1:91:CB:CD:B9:46:92:F2:E8:6D:61:89 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 0463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 045E Signing time: Thu 21 Aug 2025 00:20:52 +0000 Manifest this update: Thu 21 Aug 2025 00:20:52 +0000 Manifest next update: Thu 28 Aug 2025 00:20:52 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: lZ3tMHwVBNxXr18peBNk139N1IlMc3AtT6ZzEchA6xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Aug 21 00:20:52 2025 GMT Not After : Aug 28 00:20:52 2025 GMT Subject: CN=68a66664-12f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3e:08:7d:6d:d9:77:d0:aa:d1:aa:5b:8e:98: 7c:a1:36:bc:28:c8:fc:f1:7f:44:df:a2:bf:91:71: 5b:6d:4d:04:4d:25:df:f1:d8:ee:f4:e2:29:31:f7: 5f:e8:70:37:95:7a:50:0e:03:0a:5d:d3:52:0a:7d: 87:01:26:4d:35:e4:f0:e7:a6:8c:f6:ed:e1:08:22: 18:c3:94:ed:bd:d8:42:74:01:25:32:50:2f:eb:fe: e3:90:12:93:6e:a8:cf:a9:6f:07:15:ee:5a:78:57: d9:de:7e:2f:20:fe:cf:57:e0:ca:4c:3b:12:d9:ff: fa:70:58:51:af:9c:f7:84:75:5a:70:9d:d5:54:04: 06:05:b1:7b:b6:46:cc:f0:ca:7f:01:12:09:60:04: 12:8b:28:3d:58:f4:28:5d:c5:d8:2c:d3:38:08:e9: c3:27:77:f0:2c:b6:70:f4:f2:70:86:ee:f0:f8:ca: d2:57:9c:60:d6:d4:f4:58:c9:6d:eb:68:0a:53:f5: 28:10:33:fd:0e:d4:31:5e:c8:41:b5:28:df:cc:78: 37:4b:c5:31:11:86:01:9c:bf:4b:ff:e6:e8:bd:9c: 31:24:16:1e:ca:04:4d:f4:c6:79:02:c5:5d:e9:fb: 2c:40:00:c6:56:dc:b6:cc:aa:73:3d:86:38:fd:eb: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9D:5B:FE:41:F2:F8:B7:C1:91:CB:CD:B9:46:92:F2:E8:6D:61:89 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:59:9e:52:49:32:a8:51:56:d7:e0:36:aa:6f:e8:54:31:c4: 19:0e:93:3b:c0:71:f0:8c:44:80:77:2c:2f:44:35:d2:2e:72: 4f:c6:19:e4:60:ae:84:c6:ea:10:c4:33:01:77:f7:04:93:67: 6a:1d:a2:8e:2e:7c:b7:15:17:48:f4:98:ee:ea:10:18:95:af: fc:60:5f:53:11:2e:52:e3:f6:d7:2a:0c:7d:7a:55:86:eb:f7: 13:4c:ab:0a:7a:e7:37:71:28:e1:33:46:f1:a7:5d:20:b6:46: 2e:79:b9:7c:df:99:e0:3e:7d:39:43:9b:66:b9:e0:39:0b:31: 67:b3:a4:96:9a:0f:f0:6c:71:fe:57:70:09:50:0e:81:48:b6: 1d:80:3a:68:4a:dc:65:c7:ab:2b:bb:65:0c:fb:c7:d2:c7:38: 8c:fa:10:ce:30:38:64:ef:4f:2d:c6:a4:0a:30:e3:a0:fc:13: 8a:a0:42:a8:af:c2:5c:5b:ee:7a:d0:a2:39:98:fb:a1:68:39: e5:a1:6c:e8:f7:f5:92:45:fe:85:dd:32:41:4f:32:d7:6e:3b: 4d:34:59:92:45:04:05:7d:f8:de:95:18:36:c5:fe:b3:e8:92: da:0e:b2:68:7b:de:5e:91:cd:42:d1:0f:ca:9d:b9:a1:53:09: 83:a1:60:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUwODIxMDAyMDUyWhcNMjUwODI4MDAyMDUyWjAYMRYwFAYD VQQDEw02OGE2NjY2NC0xMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9z4IfW3Zd9Cq0apbjph8oTa8KMj88X9E36K/kXFbbU0ETSXf8dju9OIpMfdf 6HA3lXpQDgMKXdNSCn2HASZNNeTw56aM9u3hCCIYw5TtvdhCdAElMlAv6/7jkBKT bqjPqW8HFe5aeFfZ3n4vIP7PV+DKTDsS2f/6cFhRr5z3hHVacJ3VVAQGBbF7tkbM 8Mp/ARIJYAQSiyg9WPQoXcXYLNM4COnDJ3fwLLZw9PJwhu7w+MrSV5xg1tT0WMlt 62gKU/UoEDP9DtQxXshBtSjfzHg3S8UxEYYBnL9L/+bovZwxJBYeygRN9MZ5AsVd 6fssQADGVty2zKpzPYY4/euapwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOdW/5B 8vi3wZHLzblGkvLobWGJMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnWZ5SSTKoUVbX4Daqb+hUMcQZDpM7wHHwjESAdywvRDXSLnJPxhnk YK6ExuoQxDMBd/cEk2dqHaKOLny3FRdI9Jju6hAYla/8YF9TES5S4/bXKgx9elWG 6/cTTKsKeuc3cSjhM0bxp10gtkYuebl835ngPn05Q5tmueA5CzFns6SWmg/wbHH+ V3AJUA6BSLYdgDpoStxlx6sru2UM+8fSxziM+hDOMDhk708txqQKMOOg/BOKoEKo r8JcW+560KI5mPuhaDnloWzo9/WSRf6F3TJBTzLXbjtNNFmSRQQFffjelRg2xf6z 6JLaDrJoe95ekc1C0Q/KnbmhUwmDoWA2 -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:12 2025 by rpki-client