$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft File: kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json) Hash identifier: xQzj/was9v/WZS/w4TLAxpcVZo6cskzqaLK+7LPfgIk= Subject key identifier: 49:63:7C:8B:57:5F:67:CE:05:28:5A:6B:27:93:8F:B4:50:4A:C8:6C Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0BAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft Manifest number: 0B8D Signing time: Sat 06 Sep 2025 19:12:39 +0000 Manifest this update: Sat 06 Sep 2025 19:12:39 +0000 Manifest next update: Sat 13 Sep 2025 19:12:39 +0000 Files and hashes: 1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: q12mO2kmaV5jPkz5R+N1gT2Xc2i88yP3XtKowzCotXY=) 2: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: 3byzVFFSNIGYt/y2lN2Kplw2yu43h1x0nZS5XpZza6s=) 3: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: jfARn5Pllx6IMjPiI7FxZYgxXYW94DALaj8qH2++9WY=) 4: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: pJu8fJvPGWNBGFLFyKZvW8wCDFXLRMk1eEKwcDfxJhU=) 5: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: akcNDk8y+ODsfpu3oKFQYxPcSwPpaVaD8Gu1z5j+dkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2990 (0xbae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: Sep 6 19:12:39 2025 GMT Not After : Sep 13 19:12:39 2025 GMT Subject: CN=68bc87a7-a309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:9d:a8:63:e5:ae:ff:f1:09:42:0a:31:7e: 59:f5:f9:17:b2:18:d1:32:7d:8e:03:c0:32:2a:97: eb:cc:27:76:d8:4b:a8:06:4c:df:ee:b4:87:c2:d1: 48:a5:61:fa:b7:9f:dc:64:8d:ad:12:a8:8c:32:a4: 39:7d:17:2e:22:11:f4:42:19:cb:3c:3f:8d:d8:e5: 46:ee:a9:d3:69:75:08:a1:2d:4c:95:d8:e3:11:8e: 8b:d4:53:5b:03:d6:38:1d:1f:ac:5a:63:85:5d:60: f8:db:52:cc:83:f8:27:d6:cc:8c:91:80:e2:af:57: 07:9c:cf:66:20:97:9c:2a:de:a2:f3:b0:ac:9a:b7: 21:55:bd:e4:46:9f:9b:4c:6f:d9:39:be:e6:90:1f: 91:d5:ed:fd:cd:dc:d6:4d:91:24:4d:a0:5e:2e:f2: d5:82:c4:95:34:52:1b:84:7d:9e:d7:ee:38:7c:db: b4:7d:8e:23:91:ea:f3:e1:25:9e:f4:34:e4:34:18: 5d:43:09:d1:b5:73:15:2f:f4:11:7b:bb:06:9d:2d: 8f:b7:3b:80:31:81:f4:54:74:9d:18:2c:7b:b7:31: 56:6f:05:25:94:18:b1:7d:24:95:a0:74:8b:d6:1b: 76:5f:78:b8:23:c0:9c:05:74:e0:87:46:3e:81:4b: 39:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:63:7C:8B:57:5F:67:CE:05:28:5A:6B:27:93:8F:B4:50:4A:C8:6C X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3a:d8:99:f4:6c:71:0d:f9:3c:ba:13:ec:84:80:58:7c:6c: e4:a5:1d:9b:50:90:9a:f1:1b:c9:f5:bd:5c:e2:b7:8b:92:c8: 7e:d3:93:49:84:c8:9c:67:39:bf:1a:de:c9:ee:76:46:84:e2: a5:3f:25:4b:8a:05:da:2f:42:8b:51:50:e1:7e:15:85:1f:7d: 01:6a:64:3d:01:4e:e9:59:b4:0a:ca:7e:3e:b6:62:4c:f6:98: 1d:e2:ce:fe:80:39:d9:5d:59:00:df:00:9d:05:c1:56:d4:e2: 62:17:52:64:e6:3c:82:b4:6a:ea:76:43:12:da:20:a2:2a:86: 22:77:f9:a9:ba:3d:48:8d:86:5d:be:6f:41:4d:a5:b3:37:02: 2c:46:28:30:31:6c:32:aa:dd:d9:de:d4:82:3d:25:e1:37:23: 79:1b:e3:d2:fd:6c:b8:9c:5e:8b:66:54:11:f7:dd:ca:2c:24: cf:59:2d:f8:4b:45:ed:bc:b7:c2:c6:ab:3d:03:35:37:c6:b2: d8:15:b1:74:c3:5e:79:fa:79:1e:24:c1:a2:b8:a4:43:65:c4: a2:d0:a0:37:ae:5e:bb:bd:19:4a:84:11:7c:bd:90:ab:65:56: 50:be:21:33:9b:24:3c:c7:e6:93:e1:0d:ab:02:9a:45:c7:c7: 8d:f0:cf:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjUwOTA2MTkxMjM5WhcNMjUwOTEzMTkxMjM5WjAYMRYwFAYD VQQDEw02OGJjODdhNy1hMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6idqGPlrv/xCUIKMX5Z9fkXshjRMn2OA8AyKpfrzCd22EuoBkzf7rSHwtFI pWH6t5/cZI2tEqiMMqQ5fRcuIhH0QhnLPD+N2OVG7qnTaXUIoS1MldjjEY6L1FNb A9Y4HR+sWmOFXWD421LMg/gn1syMkYDir1cHnM9mIJecKt6i87CsmrchVb3kRp+b TG/ZOb7mkB+R1e39zdzWTZEkTaBeLvLVgsSVNFIbhH2e1+44fNu0fY4jkerz4SWe 9DTkNBhdQwnRtXMVL/QRe7sGnS2PtzuAMYH0VHSdGCx7tzFWbwUllBixfSSVoHSL 1ht2X3i4I8CcBXTgh0Y+gUs5XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEljfItX X2fOBShaayeTj7RQSshsMB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc4Ni9CMEQ3MjNFRTM1REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFS X0ZOUUlkaGZXdWVfdXRwWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfOtiZ9GxxDfk8uhPshIBYfGzkpR2bUJCa8RvJ9b1c4reLksh+05NJ hMicZzm/Gt7J7nZGhOKlPyVLigXaL0KLUVDhfhWFH30BamQ9AU7pWbQKyn4+tmJM 9pgd4s7+gDnZXVkA3wCdBcFW1OJiF1Jk5jyCtGrqdkMS2iCiKoYid/mpuj1IjYZd vm9BTaWzNwIsRigwMWwyqt3Z3tSCPSXhNyN5G+PS/Wy4nF6LZlQR993KLCTPWS34 S0XtvLfCxqs9AzU3xrLYFbF0w155+nkeJMGiuKRDZcSi0KA3rl67vRlKhBF8vZCr ZVZQviEzmyQ8x+aT4Q2rAppFx8eN8M/3 -----END CERTIFICATE-----Generated at Mon Sep 8 08:48:03 2025 by rpki-client