$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft File: kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json) Hash identifier: u8d7MJZ0LNwbaocD1tKlppN+mtIR8mivVQA45G0Cfuw= Subject key identifier: 44:31:12:C2:19:6E:E9:A9:DD:1F:68:B2:41:8A:3A:5F:91:2F:35:FC Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Certificate issuer: /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft Manifest number: 02B5 Signing time: Wed 17 Sep 2025 03:34:00 +0000 Manifest this update: Wed 17 Sep 2025 03:33:59 +0000 Manifest next update: Wed 24 Sep 2025 03:33:59 +0000 Files and hashes: 1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: 09pO1bQERFOEYRqoGTn9j2Eh9FMYhV+Add+YUtQ2ago=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Validity Not Before: Sep 17 03:33:59 2025 GMT Not After : Sep 24 03:33:59 2025 GMT Subject: CN=68ca2c28-3f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d9:25:a1:0e:13:00:43:ac:71:3a:4d:37:83: 88:f1:5b:58:9f:75:60:ed:1b:82:57:b5:ec:26:65: 69:4e:a1:80:ac:be:3d:45:3c:9d:ce:01:20:68:b8: 3e:bc:8e:60:89:da:3f:1d:2e:e6:0d:ce:aa:1e:3f: 9b:15:72:63:d6:0a:d5:9c:bd:f2:0d:4f:61:02:ed: 9b:a6:78:13:a0:68:b9:8e:cd:e6:4d:0c:a1:78:d3: 50:e0:8f:b6:71:57:7d:29:aa:8b:5b:09:ac:c5:df: 2e:f9:68:b4:83:c0:3d:ad:44:e5:20:df:b0:d6:a6: ce:2e:55:e0:57:fe:dc:94:1d:66:de:62:d1:0a:83: 61:8e:0c:dd:88:9d:90:0a:65:5a:2a:ff:a0:5c:b1: 09:f4:d5:e0:0e:76:9f:a3:ab:c6:01:98:88:e7:2b: e8:e8:30:db:3c:42:71:3e:16:3d:6f:f2:52:c6:83: 56:eb:81:69:90:ad:1f:ec:fa:4c:38:df:17:80:79: f9:4b:9a:f5:77:9c:0f:4c:12:e6:6e:61:8f:2d:fd: 75:ea:aa:b8:f7:23:58:f3:93:84:38:f8:99:b8:29: 95:54:bc:c9:7a:a1:6d:99:33:c8:3f:3d:a9:6b:83: 69:9f:40:b3:4c:27:de:9a:43:68:12:a9:05:ab:41: 11:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:31:12:C2:19:6E:E9:A9:DD:1F:68:B2:41:8A:3A:5F:91:2F:35:FC X509v3 Authority Key Identifier: keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:2e:d4:ce:f2:50:0a:c9:3c:59:92:04:1b:f8:cc:45:24:69: 02:04:fa:52:df:53:e6:ae:e2:ab:be:0a:a7:5c:f4:aa:72:b9: 4d:ae:72:3f:0b:95:10:13:f5:10:9f:ae:7d:22:8c:dc:6d:05: 7e:5f:52:b9:81:c4:17:56:a3:0d:1e:cc:43:04:f1:b6:93:89: 10:10:42:33:82:d1:83:84:f2:0a:ca:52:cf:ad:01:a7:8c:7d: 44:e0:0a:56:64:72:5a:4d:cb:bc:a7:f3:c9:2b:8e:8f:da:9e: c5:2e:14:2b:9c:2e:c6:9d:30:1a:49:37:55:4e:c9:ee:e0:b1: 0a:b9:04:69:ea:d0:a2:c6:69:ef:b9:a1:6f:99:a7:11:1f:9c: 6c:7e:79:7f:89:0a:5c:7d:6f:3d:b3:35:26:e1:20:08:f4:27: 2e:31:f0:f1:91:ff:06:5e:81:cb:75:0e:eb:ee:57:09:32:61: 87:0c:52:25:fb:73:01:f5:64:87:65:1b:80:4f:02:8b:28:dc: a1:1f:b2:e8:6f:17:8a:8f:c7:f4:11:20:3a:38:81:08:12:35: da:af:58:5e:0e:e4:ae:4f:42:96:ca:2f:c8:4a:db:89:75:13: ad:08:45:29:e5:e2:47:13:10:e1:e5:d3:fb:b6:bd:0a:10:81: 85:34:bb:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUNDNDI1OTJBRDA1 Qzk2NzZBNjIwHhcNMjUwOTE3MDMzMzU5WhcNMjUwOTI0MDMzMzU5WjAYMRYwFAYD VQQDEw02OGNhMmMyOC0zZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NkloQ4TAEOscTpNN4OI8VtYn3Vg7RuCV7XsJmVpTqGArL49RTydzgEgaLg+ vI5gido/HS7mDc6qHj+bFXJj1grVnL3yDU9hAu2bpngToGi5js3mTQyheNNQ4I+2 cVd9KaqLWwmsxd8u+Wi0g8A9rUTlIN+w1qbOLlXgV/7clB1m3mLRCoNhjgzdiJ2Q CmVaKv+gXLEJ9NXgDnafo6vGAZiI5yvo6DDbPEJxPhY9b/JSxoNW64FpkK0f7PpM ON8XgHn5S5r1d5wPTBLmbmGPLf116qq49yNY85OEOPiZuCmVVLzJeqFtmTPIPz2p a4Npn0CzTCfemkNoEqkFq0ERVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQxEsIZ bump3R9oskGKOl+RLzX8MB8GA1UdIwQYMBaAFJEtzXfOF2Jz2UocxCWSrQXJZ2pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFluUFpTaHpFSlpLdEJjbG5h bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTM05kODRYWW5QWlNoekVKWkt0QmNsbmFtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFlu UFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClLtTO8lAKyTxZkgQb+MxFJGkCBPpS31PmruKrvgqnXPSqcrlNrnI/ C5UQE/UQn659IozcbQV+X1K5gcQXVqMNHsxDBPG2k4kQEEIzgtGDhPIKylLPrQGn jH1E4ApWZHJaTcu8p/PJK46P2p7FLhQrnC7GnTAaSTdVTsnu4LEKuQRp6tCixmnv uaFvmacRH5xsfnl/iQpcfW89szUm4SAI9CcuMfDxkf8GXoHLdQ7r7lcJMmGHDFIl +3MB9WSHZRuATwKLKNyhH7LobxeKj8f0ESA6OIEIEjXar1heDuSuT0KWyi/IStuJ dROtCEUp5eJHExDh5dP7tr0KEIGFNLtH -----END CERTIFICATE-----Generated at Thu Sep 18 20:53:06 2025 by rpki-client