$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json) Hash identifier: 26hagv50Na8PMblvdrfrmCVZkH2FmiDZbsDGBd1WgCQ= Subject key identifier: 75:0D:68:63:98:58:D5:D2:5A:D5:2F:AA:D9:97:3D:50:F4:4C:F5:41 Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Certificate serial: 34BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft Manifest number: 34BC Signing time: Thu 18 Sep 2025 15:21:40 +0000 Manifest this update: Thu 18 Sep 2025 15:21:40 +0000 Manifest next update: Thu 25 Sep 2025 15:21:40 +0000 Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: nyfNXsWx5uF5a2mf+g5xDvDyRJho0ROP5+rnSqAIbeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13502 (0x34be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Validity Not Before: Sep 18 15:21:40 2025 GMT Not After : Sep 25 15:21:40 2025 GMT Subject: CN=68cc2384-46e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:e5:29:d2:78:65:ea:8d:c6:4b:00:5b:df: b8:46:7e:57:e7:8c:6f:d3:e6:05:af:83:95:4e:1f: 6f:88:18:83:b1:22:81:65:4b:6f:d6:79:c4:8a:a5: ae:90:9a:f1:9a:72:a3:9a:e6:9b:43:0a:82:9b:1a: 3d:9c:52:fa:6e:b6:32:07:2f:e8:95:6f:c1:11:20: 08:b1:45:c7:9e:12:fa:e8:57:c6:f6:cc:7e:49:a3: 0d:5c:29:4f:5b:70:8f:3b:9f:91:20:02:ac:b6:c8: 28:ca:db:5d:20:1a:51:74:7b:fc:c8:9d:25:a1:96: 43:78:79:2c:7d:4b:a0:f1:38:64:65:e4:b1:be:91: a8:b2:cf:08:ea:48:31:94:8b:2f:9f:7d:4d:3a:6b: cc:0c:4c:24:f9:6b:4d:21:dd:f7:65:1f:66:76:11: 15:03:9f:60:c7:6e:d8:44:4a:3e:1d:e5:89:bb:74: d8:1b:ec:99:2f:c7:7c:a0:99:87:61:fa:14:ba:54: bc:e5:e3:0d:69:05:a1:a6:62:33:17:9d:19:28:98: b1:31:a3:0d:34:30:d3:13:c1:29:e6:fb:c3:ad:99: b5:5d:81:fd:6e:75:4b:4e:b1:f3:74:8b:18:76:cb: 2a:db:04:66:2c:d7:b3:d5:92:25:0d:fa:ac:ab:16: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0D:68:63:98:58:D5:D2:5A:D5:2F:AA:D9:97:3D:50:F4:4C:F5:41 X509v3 Authority Key Identifier: keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:21:51:1e:31:57:e3:4d:af:75:ab:37:c0:78:f6:97:1b:de: ec:87:89:3c:12:c1:0e:7e:a1:25:81:7e:90:6f:76:8e:6f:50: 56:b1:17:66:1d:24:0e:a4:45:99:c2:90:78:fb:92:58:ab:c8: fe:58:26:b3:b3:3f:73:7f:bc:b0:f1:34:3b:7e:99:ab:76:27: 4e:76:33:45:14:24:0a:9d:04:de:d3:de:e1:05:a7:a1:02:0b: 66:8b:46:44:9f:0a:9b:aa:35:28:cd:92:de:5d:b6:3a:48:33: 25:bd:02:4e:be:4a:c4:7a:9e:9a:e3:e8:1b:4d:bd:eb:f3:d2: 4a:01:36:91:35:56:d6:60:4c:91:4d:da:69:b8:1e:a0:2a:54: e9:b0:97:53:50:f2:be:88:8d:c8:03:2b:17:96:4f:84:58:26: 14:76:26:ee:05:83:fa:3e:ce:8a:31:ab:bb:62:94:a7:8e:54: 3c:85:38:bf:56:db:a2:19:aa:01:22:fc:29:6d:92:52:99:2d: 32:26:c0:ba:9a:a7:a9:3c:3c:50:66:09:e5:b2:6d:68:b9:68: 2c:f9:f7:d0:b7:6f:94:33:3b:f6:47:1c:f5:13:2f:4d:cf:02: c1:9e:cd:7e:ec:a6:67:45:ff:97:3a:df:43:74:bd:9c:6c:f7: 54:8e:51:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG NTQwNjEwODIwHhcNMjUwOTE4MTUyMTQwWhcNMjUwOTI1MTUyMTQwWjAYMRYwFAYD VQQDEw02OGNjMjM4NC00NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhvlKdJ4ZeqNxksAW9+4Rn5X54xv0+YFr4OVTh9viBiDsSKBZUtv1nnEiqWu kJrxmnKjmuabQwqCmxo9nFL6brYyBy/olW/BESAIsUXHnhL66FfG9sx+SaMNXClP W3CPO5+RIAKstsgoyttdIBpRdHv8yJ0loZZDeHksfUug8ThkZeSxvpGoss8I6kgx lIsvn31NOmvMDEwk+WtNId33ZR9mdhEVA59gx27YREo+HeWJu3TYG+yZL8d8oJmH YfoUulS85eMNaQWhpmIzF50ZKJixMaMNNDDTE8Ep5vvDrZm1XYH9bnVLTrHzdIsY dssq2wRmLNez1ZIlDfqsqxZp2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUNaGOY WNXSWtUvqtmXPVD0TPVBMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfIVEeMVfjTa91qzfAePaXG97sh4k8EsEOfqElgX6Qb3aOb1BWsRdm HSQOpEWZwpB4+5JYq8j+WCazsz9zf7yw8TQ7fpmrdidOdjNFFCQKnQTe097hBaeh Agtmi0ZEnwqbqjUozZLeXbY6SDMlvQJOvkrEep6a4+gbTb3r89JKATaRNVbWYEyR TdppuB6gKlTpsJdTUPK+iI3IAysXlk+EWCYUdibuBYP6Ps6KMau7YpSnjlQ8hTi/ VtuiGaoBIvwpbZJSmS0yJsC6mqepPDxQZgnlsm1ouWgs+ffQt2+UMzv2Rxz1Ey9N zwLBns1+7KZnRf+XOt9DdL2cbPdUjlE7 -----END CERTIFICATE-----Generated at Fri Sep 19 05:43:59 2025 by rpki-client