$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: fxOgCvM9927zrntL80ah7hUtIbNJXTt58urGzaCeuws= Subject key identifier: BC:B1:AD:31:AF:D9:F0:25:19:CA:22:74:53:63:AA:E4:C8:17:C0:C9 Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 0791 Signing time: Wed 20 Aug 2025 21:34:03 +0000 Manifest this update: Wed 20 Aug 2025 21:34:02 +0000 Manifest next update: Wed 27 Aug 2025 21:34:02 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: OfeQz3Yt3H2H6E7w3sC0ro7bc/+BSNuktxKCcaWUsf0=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: PfwMudypLXBG0l/8zURzPSjDmL/lqt08xsdYYn3A5t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F, serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: Aug 20 21:34:02 2025 GMT Not After : Aug 27 21:34:02 2025 GMT Subject: CN=68a63f4b-37a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:92:32:db:18:79:17:3e:9d:62:92:74:8f: 8d:8c:dd:6f:63:c2:2e:f7:10:83:c7:86:1f:78:6a: 0e:ae:82:5d:08:74:83:04:31:6e:37:33:4d:ea:d1: 38:12:30:29:5c:a8:5e:e4:3a:37:3c:7a:86:9f:06: a4:be:18:52:da:b4:f9:a7:94:30:75:c7:7d:67:ff: 3a:cc:96:3e:d4:b4:85:c6:ce:2a:e8:61:dd:41:f3: 11:4c:fd:b8:d5:45:f9:10:71:cd:f4:28:d2:aa:b7: 48:47:4e:c3:e7:2e:ee:99:1c:ac:a6:b8:c4:4a:71: bf:d2:7b:39:76:69:b0:1a:95:86:dd:6c:f9:8e:e1: e5:5a:b7:8d:b2:6a:1b:c5:92:83:35:b8:a4:c6:87: 5f:21:1d:87:82:aa:a6:c4:bf:11:54:e8:a4:2d:28: 96:42:df:29:22:74:84:28:d6:ea:06:31:c3:2b:62: e7:ea:8e:bb:7f:c9:3f:6c:6a:56:1f:b0:bf:22:c8: a3:87:69:db:cf:ad:50:b6:5a:55:13:eb:f3:6f:5b: 13:cf:c0:57:f7:84:9f:b8:09:62:d3:39:2d:05:fe: 05:e3:25:b4:5c:8a:99:8a:e6:4e:e7:b3:ca:1f:5b: c7:b7:e1:c5:57:8c:a2:99:4d:c9:06:9e:6b:84:a9: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B1:AD:31:AF:D9:F0:25:19:CA:22:74:53:63:AA:E4:C8:17:C0:C9 X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:04:9b:1e:5a:4a:59:0a:be:0a:df:08:78:ef:77:2f:7c:31: c9:ee:12:7e:89:de:e7:9e:95:8b:4c:e0:9c:dc:fa:ac:79:6e: ef:28:7b:b4:92:a5:62:0e:99:93:39:06:1e:89:bf:19:d0:7c: a6:22:2f:ff:ce:d9:b8:1a:02:90:08:28:20:bf:a9:84:a8:78: bc:3e:36:ce:f2:f1:61:69:24:b9:cc:58:cd:12:9b:bb:80:c1: f7:c4:e0:35:07:a9:8e:9b:1c:6c:a0:23:72:57:38:ef:19:96: e4:0d:18:52:7c:aa:40:ae:b2:38:a6:05:fd:b1:62:74:99:f9: 1a:88:55:22:16:fa:0b:61:af:2c:96:a1:a7:4c:77:77:ad:ba: e1:88:fc:a7:f3:4d:13:56:d1:80:7a:7c:44:cf:a9:bb:c7:b7: 48:2c:81:0a:95:34:1d:a3:c4:a9:54:df:80:56:05:4c:8c:f0: 60:85:4b:98:5b:16:ae:8a:c5:00:cf:5d:cf:63:44:0b:46:c8: b4:93:32:42:58:06:d7:5d:ce:72:97:10:cb:32:d5:dc:19:21: c1:9c:00:b8:87:aa:97:98:f2:62:cc:46:f9:40:e6:ac:85:f4: ce:7f:88:6b:34:0a:b5:f5:f4:e8:a7:56:a6:88:75:c2:25:8f: 26:03:17:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjUwODIwMjEzNDAyWhcNMjUwODI3MjEzNDAyWjAYMRYwFAYD VQQDEw02OGE2M2Y0Yi0zN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnmSMtsYeRc+nWKSdI+NjN1vY8Iu9xCDx4YfeGoOroJdCHSDBDFuNzNN6tE4 EjApXKhe5Do3PHqGnwakvhhS2rT5p5Qwdcd9Z/86zJY+1LSFxs4q6GHdQfMRTP24 1UX5EHHN9CjSqrdIR07D5y7umRysprjESnG/0ns5dmmwGpWG3Wz5juHlWreNsmob xZKDNbikxodfIR2HgqqmxL8RVOikLSiWQt8pInSEKNbqBjHDK2Ln6o67f8k/bGpW H7C/Isijh2nbz61QtlpVE+vzb1sTz8BX94SfuAli0zktBf4F4yW0XIqZiuZO57PK H1vHt+HFV4yimU3JBp5rhKnLvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyxrTGv 2fAlGcoidFNjquTIF8DJMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzBJseWkpZCr4K3wh473cvfDHJ7hJ+id7nnpWLTOCc3PqseW7vKHu0 kqViDpmTOQYeib8Z0HymIi//ztm4GgKQCCggv6mEqHi8PjbO8vFhaSS5zFjNEpu7 gMH3xOA1B6mOmxxsoCNyVzjvGZbkDRhSfKpArrI4pgX9sWJ0mfkaiFUiFvoLYa8s lqGnTHd3rbrhiPyn800TVtGAenxEz6m7x7dILIEKlTQdo8SpVN+AVgVMjPBghUuY WxauisUAz13PY0QLRsi0kzJCWAbXXc5ylxDLMtXcGSHBnAC4h6qXmPJizEb5QOas hfTOf4hrNAq19fTop1amiHXCJY8mAxdq -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:14 2025 by rpki-client