$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json) Hash identifier: 7QjRvP16guCVefDznSCR13jqEpRQZs3dkjHnPi7fvQg= Subject key identifier: D7:74:6B:26:D3:7C:3C:19:7A:21:D5:C9:EF:C1:AF:32:97:E7:85:DD Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft Manifest number: 18 Signing time: Wed 03 Sep 2025 08:41:47 +0000 Manifest this update: Wed 03 Sep 2025 08:41:47 +0000 Manifest next update: Wed 10 Sep 2025 08:41:47 +0000 Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: lxBNasp9/WxYeRJwb9oR/QxzodgypaiiqFewwOrE690=) 2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: IhK2cshQpEX+npxu/NN0aCUzUVi2L+34EqYhm+54jyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Validity Not Before: Sep 3 08:41:47 2025 GMT Not After : Sep 10 08:41:47 2025 GMT Subject: CN=68b7ff4b-51f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:e7:05:a9:d2:da:8d:be:be:cd:3e:9d:9e: 92:07:40:fd:bf:e3:10:10:22:3c:f4:8b:e5:d1:80: a4:79:1f:c7:fd:b8:f6:89:41:00:7f:c4:a8:76:99: 93:0b:18:12:41:91:e9:67:2e:f9:1e:55:10:13:ef: 1a:8c:bd:6c:51:7d:51:a3:2c:03:41:a7:5f:8b:cf: c0:8d:67:d5:96:73:5b:82:0e:b6:d8:e6:1c:1f:f9: ed:98:51:92:cc:37:ad:a5:d4:41:d5:d8:98:f1:b3: 2c:e2:f6:46:35:23:c7:4f:b6:dc:d7:93:19:f8:44: 23:42:f7:01:3e:ef:62:59:b3:2e:4d:fa:37:ef:c3: ae:06:0e:48:4d:77:5a:3e:58:d9:85:8d:81:83:fe: 23:60:08:ab:30:d4:db:38:c6:58:67:cf:37:ea:a9: 7f:4e:57:e8:e3:3a:c6:dd:17:e1:bc:c4:ea:dc:77: 03:33:a4:18:76:47:c1:10:30:f7:64:4e:3a:45:9d: 34:4f:aa:3a:86:20:8c:be:79:3c:21:02:de:65:b5: 2c:a7:f7:e1:4a:15:df:92:b8:24:5f:e5:0b:ce:60: 1f:a1:86:7b:f1:4f:f9:94:4b:7d:dd:43:29:25:61: 32:fa:55:ef:b3:44:77:b1:99:d6:94:38:3d:d2:5b: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:6B:26:D3:7C:3C:19:7A:21:D5:C9:EF:C1:AF:32:97:E7:85:DD X509v3 Authority Key Identifier: keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:88:65:a2:85:d0:9d:13:e4:8e:23:e5:a6:1b:41:a3:ca:87: 3e:74:a1:4d:dd:d7:41:3c:27:4d:85:1c:53:78:cb:37:44:76: 72:79:01:7d:b2:65:99:e7:61:9f:bd:75:e9:0f:30:fb:02:f5: f9:2a:83:ac:af:07:ee:d8:60:33:3e:eb:21:f7:88:0a:20:03: 7a:38:a2:2b:9b:4b:b5:3f:eb:25:c1:98:c2:2c:c4:eb:dd:8b: 9e:47:43:b9:0a:3d:76:af:7f:1c:ce:fb:f6:f7:68:87:54:47: ec:7e:4f:14:5b:2a:dd:35:7b:ca:5e:48:20:df:ee:2c:71:8b: 4c:e1:c6:9b:11:d9:51:56:9c:1a:8f:cf:26:dd:da:1e:b5:5a: c0:dd:cf:77:03:57:6f:fe:41:58:34:22:be:90:15:74:68:76: a0:57:25:a6:82:64:1f:39:b7:df:b7:12:f7:54:36:4e:5c:03: cc:74:29:bd:27:64:19:91:bf:d9:c4:6e:ad:c3:b4:6d:2d:a7: c4:96:90:87:40:29:7c:cf:c8:f1:b8:7e:a4:42:33:93:ae:9c: 76:ab:92:63:0a:77:66:ca:64:48:36:d5:3e:31:49:cd:a9:d5: f4:1a:ec:92:f0:d9:40:b3:d7:4d:49:bf:6c:a1:5c:6e:42:84: 35:79:ae:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjgyMDExMC8GA1UEBRMoRkNBQzZGQTgzMUU4RjVBMjg0MTM0Qzk1QThEMDIwRkNC QzhFQzlGMjAeFw0yNTA5MDMwODQxNDdaFw0yNTA5MTAwODQxNDdaMBgxFjAUBgNV BAMTDTY4YjdmZjRiLTUxZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYJOcFqdLajb6+zT6dnpIHQP2/4xAQIjz0i+XRgKR5H8f9uPaJQQB/xKh2mZML GBJBkelnLvkeVRAT7xqMvWxRfVGjLANBp1+Lz8CNZ9WWc1uCDrbY5hwf+e2YUZLM N62l1EHV2Jjxsyzi9kY1I8dPttzXkxn4RCNC9wE+72JZsy5N+jfvw64GDkhNd1o+ WNmFjYGD/iNgCKsw1Ns4xlhnzzfqqX9OV+jjOsbdF+G8xOrcdwMzpBh2R8EQMPdk TjpFnTRPqjqGIIy+eTwhAt5ltSyn9+FKFd+SuCRf5QvOYB+hhnvxT/mUS33dQykl YTL6Ve+zRHexmdaUOD3SW74ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU13RrJtN8 PBl6IdXJ78GvMpfnhd0wHwYDVR0jBBgwFoAU/KxvqDHo9aKEE0yVqNAg/LyOyfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCODIwLzkwQThCMDhBNjg0 MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFLRUUweVZxTkFnX0x5T3lm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX0t4dnFESG85YUtFRTB5VnFOQWdfTHlPeWZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC ODIwLzkwQThCMDhBNjg0MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFL RUUweVZxTkFnX0x5T3lmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI6IZaKF0J0T5I4j5aYbQaPKhz50oU3d10E8J02FHFN4yzdEdnJ5AX2y ZZnnYZ+9dekPMPsC9fkqg6yvB+7YYDM+6yH3iAogA3o4oiubS7U/6yXBmMIsxOvd i55HQ7kKPXavfxzO+/b3aIdUR+x+TxRbKt01e8peSCDf7ixxi0zhxpsR2VFWnBqP zybd2h61WsDdz3cDV2/+QVg0Ir6QFXRodqBXJaaCZB85t9+3EvdUNk5cA8x0Kb0n ZBmRv9nEbq3DtG0tp8SWkIdAKXzPyPG4fqRCM5OunHarkmMKd2bKZEg21T4xSc2p 1fQa7JLw2UCz101Jv2yhXG5ChDV5rl0= -----END CERTIFICATE-----Generated at Thu Sep 4 14:06:17 2025 by rpki-client