$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft File: kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json) Hash identifier: iwfgq5zcE4E+DgR1XDCo9OGtUWWsfDPXsORvZsaHqmc= Subject key identifier: D5:FB:11:91:2F:7B:30:B7:E6:25:CA:6F:D3:0C:77:DB:23:CB:62:61 Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5 Certificate issuer: /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5 Certificate serial: 18BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft Manifest number: 188C Signing time: Thu 18 Sep 2025 16:37:32 +0000 Manifest this update: Thu 18 Sep 2025 16:37:32 +0000 Manifest next update: Thu 25 Sep 2025 16:37:32 +0000 Files and hashes: 1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: tqc0/NzR/KwP5LGyeWbkoZeViZLW4CXvMYPIsqh6No0=) 2: 6C409F0C90D411F09617F260C4F9AE02.roa (hash: 6FRqRQRD3arLLtvaf1OQtNbxOsxM+Tuj9plItnbBKzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6335 (0x18bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5 Validity Not Before: Sep 18 16:37:32 2025 GMT Not After : Sep 25 16:37:32 2025 GMT Subject: CN=68cc354c-c211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:8f:92:c4:02:82:9e:f4:73:fe:bf:1e:97: 94:af:bb:58:65:06:37:cc:af:ea:09:a5:9c:18:76: 05:f3:53:fa:1e:e9:f9:01:3d:36:f6:e3:c6:bf:37: 21:89:18:08:a9:c5:66:1b:5f:57:db:90:40:3a:9e: 73:2f:24:c5:fc:74:22:3f:86:3c:ef:6d:44:01:a3: 13:9b:f6:95:b2:e6:59:58:b6:6b:c3:c0:e3:dd:59: d1:20:98:af:eb:a0:88:0c:cf:7e:60:85:83:e8:9b: 4e:17:93:cf:10:04:77:f0:33:a2:0a:dc:0d:ed:39: 60:4a:1a:7f:cc:99:7b:19:f4:f2:6a:cd:3f:fa:5b: 4d:df:05:ee:0a:71:81:bd:0d:4a:d0:09:c1:45:63: 48:cd:cb:7a:81:bc:4d:3e:68:cf:0f:67:4a:5e:00: 56:d3:7d:74:23:fd:db:11:38:ce:70:3a:db:04:ae: c2:46:aa:53:c6:7b:86:0b:46:f6:d7:b8:d1:7c:e2: f6:a1:70:95:e5:50:46:ff:da:f3:d8:d6:be:10:e6: 79:ce:00:05:45:de:af:35:05:c5:be:f0:f0:9d:9e: 2b:19:be:f3:78:9b:85:f8:c9:4d:35:ac:df:04:68: 24:5f:ca:11:ad:b6:29:0f:09:66:5e:76:54:84:58: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FB:11:91:2F:7B:30:B7:E6:25:CA:6F:D3:0C:77:DB:23:CB:62:61 X509v3 Authority Key Identifier: keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ff:3d:15:7a:3d:ca:44:06:b9:65:a2:3c:5f:80:5b:4a:d4: 9a:6d:0a:bc:84:09:f9:15:81:92:af:1e:bc:5b:54:9f:7b:1d: 11:5f:1d:f6:c8:4a:f0:6e:ed:ee:e9:91:06:a1:50:db:28:f1: ea:1e:84:36:c1:fc:f0:86:bf:bc:32:33:4b:5e:1b:3c:07:75: be:1a:49:a0:a9:b2:77:b3:7e:d6:22:d4:96:4c:00:18:1b:be: c4:6a:48:5c:18:ac:53:6d:46:21:83:6a:d2:9a:a3:6a:c7:3f: 4b:fc:2c:1c:0b:83:2c:b2:5b:50:c8:21:e0:c4:f5:33:68:7e: e4:8a:17:3d:34:7a:d9:1a:7f:d4:f2:7f:1c:f3:0b:75:8e:1f: 79:7f:25:77:7c:56:0a:88:12:92:69:97:6b:b3:a3:f5:af:31: fc:90:0f:dc:da:dc:40:43:a7:64:07:41:87:e4:0e:10:51:2f: 2c:52:f8:9e:32:2d:e9:0d:60:22:91:56:5a:01:f7:3b:d3:b9: 72:c2:bc:96:39:de:16:2f:5b:91:ab:1f:f3:17:18:5d:27:4c: bd:d9:65:c1:56:75:a7:22:2e:dc:2b:67:c5:8b:ed:4e:93:de: 6a:49:05:13:36:f4:b4:95:eb:b5:04:16:e6:10:69:3d:51:5e: 0f:0e:85:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNjkxMTAvBgNVBAUTKDkwMEI4NzBDODBDMEVCM0Y4NDY4RjUzRTc2NzJGQTc0 MTc1MkM1RDUwHhcNMjUwOTE4MTYzNzMyWhcNMjUwOTI1MTYzNzMyWjAYMRYwFAYD VQQDEw02OGNjMzU0Yy1jMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKSPksQCgp70c/6/HpeUr7tYZQY3zK/qCaWcGHYF81P6Hun5AT029uPGvzch iRgIqcVmG19X25BAOp5zLyTF/HQiP4Y8721EAaMTm/aVsuZZWLZrw8Dj3VnRIJiv 66CIDM9+YIWD6JtOF5PPEAR38DOiCtwN7TlgShp/zJl7GfTyas0/+ltN3wXuCnGB vQ1K0AnBRWNIzct6gbxNPmjPD2dKXgBW0310I/3bETjOcDrbBK7CRqpTxnuGC0b2 17jRfOL2oXCV5VBG/9rz2Na+EOZ5zgAFRd6vNQXFvvDwnZ4rGb7zeJuF+MlNNazf BGgkX8oRrbYpDwlmXnZUhFgPvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX7EZEv ezC35iXKb9MMd9sjy2JhMB8GA1UdIwQYMBaAFJALhwyAwOs/hGj1PnZy+nQXUsXV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE2OS81MDI2MDhCNEFE OTAxMUU3OTI2N0ZGMEZDNEY5QUUwMi9rQXVIRElEQTZ6LUVhUFUtZG5MNmRCZFN4 ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBdUhESURBNnotRWFQVS1kbkw2ZEJkU3hkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE2OS81MDI2MDhCNEFEOTAxMUU3OTI2N0ZGMEZDNEY5QUUwMi9rQXVIRElEQTZ6 LUVhUFUtZG5MNmRCZFN4ZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL/z0Vej3KRAa5ZaI8X4BbStSabQq8hAn5FYGSrx68W1Sfex0RXx32 yErwbu3u6ZEGoVDbKPHqHoQ2wfzwhr+8MjNLXhs8B3W+GkmgqbJ3s37WItSWTAAY G77EakhcGKxTbUYhg2rSmqNqxz9L/CwcC4MssltQyCHgxPUzaH7kihc9NHrZGn/U 8n8c8wt1jh95fyV3fFYKiBKSaZdrs6P1rzH8kA/c2txAQ6dkB0GH5A4QUS8sUvie Mi3pDWAikVZaAfc707lywryWOd4WL1uRqx/zFxhdJ0y92WXBVnWnIi7cK2fFi+1O k95qSQUTNvS0leu1BBbmEGk9UV4PDoXX -----END CERTIFICATE-----Generated at Thu Sep 18 20:51:08 2025 by rpki-client