$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: A5WFQXNFKcBJcTf0sMp6jfMzfzVkM4U5FEHHOjnu3L4= Subject key identifier: 1B:C5:08:E5:F7:43:09:4A:88:63:05:42:5B:89:48:F5:FA:50:31:DD Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 0169 Signing time: Thu 21 Aug 2025 03:59:29 +0000 Manifest this update: Thu 21 Aug 2025 03:59:29 +0000 Manifest next update: Thu 28 Aug 2025 03:59:29 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: xp5IGnp0nLwKqCuIumD9ISTaTeL0uZT2FKBWHODbZus=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: s8Vu/R6gOMwvLzsGf3nk9tFhiMljx1hOH6LnsMms3Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Aug 21 03:59:29 2025 GMT Not After : Aug 28 03:59:29 2025 GMT Subject: CN=68a699a1-1d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:e6:a5:3a:bb:32:27:fe:bf:36:52:a4:2d: e5:60:15:1d:41:74:85:33:d2:08:d7:53:e5:7e:97: c0:9e:28:8f:52:b8:86:03:34:25:cf:2a:6c:06:28: 21:b0:c1:bf:2b:56:b0:73:8f:69:8d:e3:38:8e:a3: b3:38:9e:d8:8a:c7:65:c5:25:40:36:e8:39:65:eb: e3:04:0e:db:a9:90:ba:f8:89:7a:70:3f:d3:a8:fa: 6b:27:b7:5f:79:37:75:8c:06:68:01:f1:3d:62:f1: d2:88:de:41:01:a2:3d:f3:81:64:9b:a8:be:25:a8: ab:da:57:01:b0:bb:ac:6d:a1:28:76:b3:c0:c0:e6: 51:28:cd:fb:6b:67:0d:28:6c:27:b1:1e:df:6a:17: 82:13:42:93:da:ca:54:1b:4f:be:89:38:9b:3b:ca: d6:ef:ad:b6:b4:55:b8:00:27:cf:f3:39:87:f8:6d: 41:07:c4:57:7e:2c:1b:3a:5e:b2:87:46:40:f2:12: b5:24:e8:b7:f9:34:a2:18:a2:8c:ac:85:3f:c0:5c: 65:8c:bd:1a:cb:a8:54:51:fe:15:d6:c9:73:01:4c: a9:53:71:49:25:a5:70:6d:1c:06:d2:ab:54:b5:54: 0b:60:24:89:d0:9d:6f:42:44:fe:0c:10:7c:a6:34: a5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C5:08:E5:F7:43:09:4A:88:63:05:42:5B:89:48:F5:FA:50:31:DD X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:17:c4:7f:c0:af:c7:eb:ad:76:af:1f:fa:54:a0:e9:96:0d: a8:7f:50:5c:c8:c7:7e:12:99:cf:fe:72:f8:91:7d:42:7c:f2: 14:a4:5a:bb:64:00:c6:73:b7:98:78:64:6a:35:dc:ff:5f:d4: 61:1f:42:1f:76:d4:e8:f1:48:20:ea:41:bc:2c:b6:a7:1b:f4: 50:d4:8f:f3:4c:b9:56:c7:b4:58:cd:52:d8:dd:7a:31:fa:c4: 04:45:b3:3f:54:80:9b:53:15:a1:f1:2d:db:b4:4a:bd:63:6b: 74:3d:6d:c1:93:af:be:c2:74:8c:28:86:ab:3a:30:06:1d:16: c6:97:30:e3:dd:64:64:e2:89:1e:32:bc:0c:db:17:cd:2a:1e: 42:aa:9f:47:c1:ef:ef:1a:e3:98:9f:a5:55:a8:80:0a:d1:ff: c4:42:65:df:0e:80:23:8d:7e:da:4d:f0:9f:e2:5b:26:c9:60: 27:71:38:3c:22:9e:94:43:ae:7d:ac:ec:cc:28:00:c0:f7:81: 17:99:ec:ab:70:3c:cf:98:8e:4f:2d:72:2d:57:59:a3:0b:4a: 97:19:8d:07:d1:4e:d1:7a:b0:54:cc:39:46:66:ca:fe:a5:c0: 36:f0:20:43:f7:1e:bb:ad:62:66:8b:cd:09:bd:8b:d4:8b:21: c1:71:aa:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjUwODIxMDM1OTI5WhcNMjUwODI4MDM1OTI5WjAYMRYwFAYD VQQDEw02OGE2OTlhMS0xZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovjmpTq7Mif+vzZSpC3lYBUdQXSFM9II11PlfpfAniiPUriGAzQlzypsBigh sMG/K1awc49pjeM4jqOzOJ7YisdlxSVANug5ZevjBA7bqZC6+Il6cD/TqPprJ7df eTd1jAZoAfE9YvHSiN5BAaI984Fkm6i+Jair2lcBsLusbaEodrPAwOZRKM37a2cN KGwnsR7faheCE0KT2spUG0++iTibO8rW7622tFW4ACfP8zmH+G1BB8RXfiwbOl6y h0ZA8hK1JOi3+TSiGKKMrIU/wFxljL0ay6hUUf4V1slzAUypU3FJJaVwbRwG0qtU tVQLYCSJ0J1vQkT+DBB8pjSlvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvFCOX3 QwlKiGMFQluJSPX6UDHdMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq MFlDVE5GczNKWTdqdlg4LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgF8R/wK/H6612rx/6VKDplg2of1BcyMd+EpnP/nL4kX1CfPIUpFq7 ZADGc7eYeGRqNdz/X9RhH0IfdtTo8Ugg6kG8LLanG/RQ1I/zTLlWx7RYzVLY3Xox +sQERbM/VICbUxWh8S3btEq9Y2t0PW3Bk6++wnSMKIarOjAGHRbGlzDj3WRk4oke MrwM2xfNKh5Cqp9Hwe/vGuOYn6VVqIAK0f/EQmXfDoAjjX7aTfCf4lsmyWAncTg8 Ip6UQ659rOzMKADA94EXmeyrcDzPmI5PLXItV1mjC0qXGY0H0U7RerBUzDlGZsr+ pcA28CBD9x67rWJmi80JvYvUiyHBcapT -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:11 2025 by rpki-client