$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: XN5FARn1+f/5RuZBbW9CPLkFXP0u2PlPCPLDFsvVSjM= Subject key identifier: 23:5A:4D:0E:1E:D3:D5:97:EB:DC:61:C5:19:C7:76:D3:20:1D:1C:72 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 0707 Signing time: Sat 06 Sep 2025 22:10:41 +0000 Manifest this update: Sat 06 Sep 2025 22:10:41 +0000 Manifest next update: Sat 13 Sep 2025 22:10:40 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: jEp5/BXmqjbkkqfgumqOjqUf0YxsG74UJqghqbHKEas=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Sep 6 22:10:41 2025 GMT Not After : Sep 13 22:10:40 2025 GMT Subject: CN=68bcb161-621a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:12:f2:41:dd:c3:4e:ca:2c:3a:8f:9e:8d: ae:e3:f7:08:da:04:dc:13:29:aa:f9:47:4d:a7:78: 88:14:db:c3:bc:04:39:e6:9d:f8:94:24:4b:2d:a1: 9b:58:7d:77:05:c0:be:11:4e:8c:15:d8:2c:0e:a3: d8:cf:0f:1e:4e:d7:13:e8:0e:f8:5d:e8:e9:79:64: 43:27:ca:ce:17:f7:95:cc:a1:37:05:bf:51:14:ba: 24:ec:5d:5c:d0:96:a0:f0:52:4d:b3:28:4b:ca:b1: 63:36:78:d9:b6:7b:3a:24:b0:3d:15:ce:10:3a:10: cc:fa:14:54:eb:70:ec:11:4c:13:48:fc:4c:6d:87: bd:14:21:ad:81:79:23:e9:f2:26:d1:95:a5:11:bc: 8b:3c:fc:90:f9:56:c1:7c:46:11:de:fe:bc:64:59: d6:2c:b5:04:81:68:d7:9e:98:a7:9a:b0:44:15:95: 59:99:60:91:e2:0b:dc:18:f7:32:0b:8d:4b:5b:d7: a2:1b:db:3f:4a:1f:83:ef:d2:cd:06:20:cd:e2:c8: 45:0e:f9:7c:31:d9:9a:3d:60:05:a2:db:80:5b:0b: 7c:31:d1:e3:1b:56:40:73:cf:01:fb:34:7d:7c:bd: 4e:2f:d6:44:d7:3b:44:f1:da:a1:48:3b:8e:de:db: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5A:4D:0E:1E:D3:D5:97:EB:DC:61:C5:19:C7:76:D3:20:1D:1C:72 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:45:e2:a7:ec:9a:09:56:2b:66:f7:d6:e4:08:b4:d0:7e:7e: ec:cd:f9:96:1f:6e:f3:96:d1:a6:00:82:fb:1b:f0:18:e8:34: 4b:97:59:85:b3:20:84:46:9c:6a:ba:1f:55:e5:05:a9:61:6a: 2a:e9:6b:09:8b:97:7c:28:16:16:96:b1:fd:70:79:51:1f:05: 27:97:30:ed:8e:cd:b8:56:14:13:cd:7e:5a:80:b2:39:cc:76: f8:30:63:dc:bb:5d:70:cb:1e:38:22:84:e2:49:a8:84:76:8e: 4f:2d:9c:14:88:0c:b2:f9:07:93:03:8f:15:15:14:ba:4e:58: ac:05:36:ee:63:ec:c6:b7:36:3b:27:63:75:fe:f0:8a:d9:67: 17:2f:51:e8:ce:9b:a9:6a:15:16:9e:86:31:00:70:f0:21:8f: 0d:db:83:6d:74:21:29:4c:e6:89:29:b2:80:1d:24:78:2f:96: 42:06:b6:50:91:ec:b3:a5:93:0d:77:2c:c8:58:b7:9e:74:58: 88:fa:84:2f:5c:80:42:22:6f:92:6a:cc:c6:31:54:7c:54:6c: 4c:6d:13:2e:71:33:3e:c2:7d:38:a0:cd:ac:b9:79:f7:f6:b7: f9:f6:f8:d2:2f:57:73:e6:70:1d:4e:bd:11:39:db:1d:bc:96: a8:ae:87:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjUwOTA2MjIxMDQxWhcNMjUwOTEzMjIxMDQwWjAYMRYwFAYD VQQDEw02OGJjYjE2MS02MjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2QS8kHdw07KLDqPno2u4/cI2gTcEymq+UdNp3iIFNvDvAQ55p34lCRLLaGb WH13BcC+EU6MFdgsDqPYzw8eTtcT6A74XejpeWRDJ8rOF/eVzKE3Bb9RFLok7F1c 0Jag8FJNsyhLyrFjNnjZtns6JLA9Fc4QOhDM+hRU63DsEUwTSPxMbYe9FCGtgXkj 6fIm0ZWlEbyLPPyQ+VbBfEYR3v68ZFnWLLUEgWjXnpinmrBEFZVZmWCR4gvcGPcy C41LW9eiG9s/Sh+D79LNBiDN4shFDvl8MdmaPWAFotuAWwt8MdHjG1ZAc88B+zR9 fL1OL9ZE1ztE8dqhSDuO3tvdEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNaTQ4e 09WX69xhxRnHdtMgHRxyMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcReKn7JoJVitm99bkCLTQfn7szfmWH27zltGmAIL7G/AY6DRLl1mF syCERpxquh9V5QWpYWoq6WsJi5d8KBYWlrH9cHlRHwUnlzDtjs24VhQTzX5agLI5 zHb4MGPcu11wyx44IoTiSaiEdo5PLZwUiAyy+QeTA48VFRS6TlisBTbuY+zGtzY7 J2N1/vCK2WcXL1HozpupahUWnoYxAHDwIY8N24NtdCEpTOaJKbKAHSR4L5ZCBrZQ keyzpZMNdyzIWLeedFiI+oQvXIBCIm+SaszGMVR8VGxMbRMucTM+wn04oM2suXn3 9rf59vjSL1dz5nAdTr0ROdsdvJaorocB -----END CERTIFICATE-----Generated at Mon Sep 8 20:50:59 2025 by rpki-client