$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json) Hash identifier: zyTNvxDAdMRqA3b0x1+bc2uj2UQBDFnYON4qg3Dl2UY= Subject key identifier: 51:78:03:4A:79:FE:A2:F3:3D:37:60:02:B0:1C:09:71:03:93:14:65 Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft Manifest number: 77 Signing time: Fri 05 Sep 2025 07:16:45 +0000 Manifest this update: Fri 05 Sep 2025 07:16:44 +0000 Manifest next update: Fri 12 Sep 2025 07:16:44 +0000 Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: GHIiJsvXFu81LkaPgjRa9DeS0/N5sSzjTWuMODbWajs=) 2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Validity Not Before: Sep 5 07:16:44 2025 GMT Not After : Sep 12 07:16:44 2025 GMT Subject: CN=68ba8e5d-79f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:07:4f:16:4a:02:5c:6a:92:6c:14:d6:a5:26: af:0d:43:e8:c5:69:dc:02:27:a4:cf:fe:6b:d9:13: 7c:52:df:d5:68:96:32:15:6a:1e:52:69:81:97:bd: c3:81:73:28:03:c7:08:b6:55:b1:84:c4:14:85:bb: 3a:cf:5a:67:61:1b:84:7a:f1:31:7d:a8:65:ca:30: 22:59:2a:c8:1f:8c:f9:c8:28:7e:0b:e6:fc:37:a5: bc:e0:1f:33:10:22:dc:71:37:36:ea:28:a8:67:72: 08:09:c6:45:e1:b6:7c:44:72:da:e5:87:aa:e1:93: 35:a2:10:73:43:77:2a:8b:f2:9e:6c:7f:a6:f0:91: 4f:61:13:17:18:61:9f:ac:6a:98:94:cf:e6:ec:41: 79:a7:2c:ef:88:30:73:60:35:0e:2d:9a:95:7a:ab: 5d:1a:93:8d:b9:14:44:bb:57:36:65:ed:76:f3:46: a9:f2:72:69:d5:35:9a:e6:80:d0:b0:7f:5d:aa:10: 8c:1f:24:03:92:2b:be:a5:8c:6e:95:9b:40:7e:a5: d0:f9:4d:96:89:88:96:19:ed:53:9b:6b:05:56:fd: ad:46:a5:b5:80:11:ca:87:c7:81:17:03:ee:37:c4: 46:a1:66:af:de:ed:44:ae:e3:47:27:ea:4f:65:c7: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:78:03:4A:79:FE:A2:F3:3D:37:60:02:B0:1C:09:71:03:93:14:65 X509v3 Authority Key Identifier: keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:57:1e:65:3f:ef:37:f5:70:c5:48:a1:a1:8b:11:5e:75:72: 6a:62:df:b1:9b:ff:01:15:83:0b:42:4f:09:1b:68:ba:31:a6: f0:7f:d3:fa:46:7e:83:e6:56:06:1f:56:f7:34:e3:1d:0e:47: 80:bd:e0:ec:67:b9:0a:3f:5b:cb:36:88:ff:a8:f6:0d:cd:a0: cd:b2:8d:2e:19:62:64:9a:5a:56:88:1b:03:f8:b7:37:e3:9b: d5:1b:b7:d0:29:24:4f:5e:eb:66:d8:79:8e:a1:49:31:bb:9f: b4:5b:f5:82:3d:23:b8:95:67:93:cc:e2:fd:f5:73:fb:33:5c: ae:d8:d1:0f:ab:f4:91:f5:4c:16:5f:bf:ef:36:ea:c5:b6:46: 22:bb:5c:e2:58:95:d8:f0:1a:a6:87:9f:66:04:a3:a1:fa:56: 95:7d:48:5d:7f:76:f7:74:a4:98:80:e2:57:59:68:b8:3e:dc: 54:9e:b8:6f:7c:c8:81:0c:1d:28:3a:4f:6f:df:5a:49:67:2e: 11:88:59:67:ac:e1:af:54:e4:19:96:bd:1b:cc:0a:c1:64:22: 19:34:4a:bd:ad:a8:6f:46:c4:87:5c:cb:73:d6:34:ea:22:cb: fa:78:25:8d:aa:20:53:78:86:8b:15:e6:16:e2:ef:d7:d4:b2: a6:47:34:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoOTI0ODY2QjQwQzMwNDQyRDY5NkYyNDc3MDE1NDc1QzVG MDcwMkFDODAeFw0yNTA5MDUwNzE2NDRaFw0yNTA5MTIwNzE2NDRaMBgxFjAUBgNV BAMTDTY4YmE4ZTVkLTc5ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoB08WSgJcapJsFNalJq8NQ+jFadwCJ6TP/mvZE3xS39VoljIVah5SaYGXvcOB cygDxwi2VbGExBSFuzrPWmdhG4R68TF9qGXKMCJZKsgfjPnIKH4L5vw3pbzgHzMQ ItxxNzbqKKhncggJxkXhtnxEctrlh6rhkzWiEHNDdyqL8p5sf6bwkU9hExcYYZ+s apiUz+bsQXmnLO+IMHNgNQ4tmpV6q10ak425FES7VzZl7XbzRqnycmnVNZrmgNCw f12qEIwfJAOSK76ljG6Vm0B+pdD5TZaJiJYZ7VObawVW/a1GpbWAEcqHx4EXA+43 xEahZq/e7USu40cn6k9lx5cfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUXgDSnn+ ovM9N2ACsBwJcQOTFGUwHwYDVR0jBBgwFoAUkkhmtAwwRC1pbyR3AVR1xfBwKsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1Lzk5Mjc3ODQ2RDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tobXRBd3dSQzFwYnlSM0FWUjF4ZkJ3S3NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1Lzk5Mjc3ODQ2RDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMx cGJ5UjNBVlIxeGZCd0tzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKFXHmU/7zf1cMVIoaGLEV51cmpi37Gb/wEVgwtCTwkbaLoxpvB/0/pG foPmVgYfVvc04x0OR4C94OxnuQo/W8s2iP+o9g3NoM2yjS4ZYmSaWlaIGwP4tzfj m9Ubt9ApJE9e62bYeY6hSTG7n7Rb9YI9I7iVZ5PM4v31c/szXK7Y0Q+r9JH1TBZf v+826sW2RiK7XOJYldjwGqaHn2YEo6H6VpV9SF1/dvd0pJiA4ldZaLg+3FSeuG98 yIEMHSg6T2/fWklnLhGIWWes4a9U5BmWvRvMCsFkIhk0Sr2tqG9GxIdcy3PWNOoi y/p4JY2qIFN4hosV5hbi79fUsqZHNJE= -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:05 2025 by rpki-client