$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: utgxMMxlSFL0ORQin2l1/xShM7nka0gIGl7sa17NMLk= Subject key identifier: 2D:09:94:93:ED:BA:18:DF:7F:88:B6:86:D7:11:9C:0B:A6:1A:95:41 Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 014B Signing time: Wed 17 Sep 2025 04:52:40 +0000 Manifest this update: Wed 17 Sep 2025 04:52:40 +0000 Manifest next update: Wed 24 Sep 2025 04:52:40 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: /fBsvuNCsS4q1s6qo0syxAy05KEXB42jR2JXpj84tbg=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: Sep 17 04:52:40 2025 GMT Not After : Sep 24 04:52:40 2025 GMT Subject: CN=68ca3e98-e0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:83:b0:87:b4:f4:c8:81:35:8a:1b:f0:cd: ef:e2:a9:0c:39:4f:d8:95:ec:4d:a8:55:7e:bb:69: 0a:b3:41:5f:fc:fb:3c:06:4e:95:cb:cd:11:42:27: 7c:9a:9d:0d:97:67:ab:60:d5:d1:79:83:05:4d:f5: f4:62:68:62:4d:c3:8f:01:b4:1c:b5:a8:07:74:e6: 84:64:23:11:76:7e:8e:15:bb:e0:08:1b:43:86:f8: 32:d8:af:c8:b5:7e:3b:04:19:80:e5:d0:3c:15:91: 1c:d6:61:c4:2a:30:9c:5c:72:0b:a4:44:cd:c0:83: 0a:60:1e:d2:ed:4d:25:15:80:c7:af:78:d9:d8:bc: 1c:bd:ad:77:6b:73:09:3b:16:ee:c4:83:e4:b0:fe: d2:72:59:74:15:39:d7:9e:42:3b:02:1f:d1:d3:c7: 50:3e:e7:35:c9:c5:8f:89:34:f6:0e:1e:8d:02:6e: 7f:9c:22:db:bd:4a:af:a6:cb:d0:86:3e:db:26:e8: be:19:ce:b1:12:12:6f:e2:bd:e5:00:5d:28:66:06: 8a:2d:67:e7:79:e0:e7:04:54:96:e5:d7:f4:c3:0c: 47:a3:14:cb:71:d1:8c:94:3b:98:ee:1c:5f:a9:98: 77:fa:a0:cb:76:e7:b9:df:b8:fe:95:71:2c:f9:fd: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:09:94:93:ED:BA:18:DF:7F:88:B6:86:D7:11:9C:0B:A6:1A:95:41 X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f8:aa:77:78:2c:e4:75:69:3b:6d:86:88:f4:8f:11:19:8f: c5:93:1f:12:a5:d3:ab:a0:ae:6b:11:07:44:59:d2:00:a6:c3: e6:bd:3f:43:db:9b:0b:2f:4d:cb:a0:72:2a:3b:92:c9:71:30: 1c:a4:57:67:4c:7d:29:bd:73:7b:f7:0f:b8:95:f1:14:a4:97: 64:8e:6a:fc:a3:04:a4:8a:d5:e5:7c:5c:71:40:1b:2b:5f:f7: 99:fd:99:fd:ff:34:94:6c:92:c7:6a:fc:b4:9d:9d:66:84:8e: 68:e6:19:9e:8e:12:26:de:5b:ab:4d:20:85:1c:c6:75:9d:e9: 6e:2e:42:81:5b:42:0a:ac:4a:94:a7:cd:f1:de:eb:94:21:bb: 65:77:4a:c9:40:b2:4b:f3:14:1c:2e:f9:a6:24:9a:8f:14:15: 55:dc:90:1b:4f:3d:6b:93:c9:e3:9e:8b:ad:8e:0c:71:a8:68: e3:17:a5:19:77:a3:29:eb:c5:ba:8c:2c:4e:26:b8:1c:24:45: 8e:6c:17:54:1a:2d:46:ec:20:11:2a:a5:00:b8:02:06:d2:61: 5d:14:e2:28:6d:dc:e2:82:c8:44:93:d5:61:f1:80:32:8c:04: c1:c9:02:95:8b:7c:bc:9f:19:4f:56:75:c4:ae:84:4e:35:02: 30:03:b5:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE OEZBRkJDQTgwHhcNMjUwOTE3MDQ1MjQwWhcNMjUwOTI0MDQ1MjQwWjAYMRYwFAYD VQQDEw02OGNhM2U5OC1lMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxSDsIe09MiBNYob8M3v4qkMOU/YlexNqFV+u2kKs0Ff/Ps8Bk6Vy80RQid8 mp0Nl2erYNXReYMFTfX0YmhiTcOPAbQctagHdOaEZCMRdn6OFbvgCBtDhvgy2K/I tX47BBmA5dA8FZEc1mHEKjCcXHILpETNwIMKYB7S7U0lFYDHr3jZ2Lwcva13a3MJ OxbuxIPksP7Scll0FTnXnkI7Ah/R08dQPuc1ycWPiTT2Dh6NAm5/nCLbvUqvpsvQ hj7bJui+Gc6xEhJv4r3lAF0oZgaKLWfneeDnBFSW5df0wwxHoxTLcdGMlDuY7hxf qZh3+qDLdue537j+lXEs+f3G+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0JlJPt uhjff4i2htcRnAumGpVBMB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr+Kp3eCzkdWk7bYaI9I8RGY/Fkx8SpdOroK5rEQdEWdIApsPmvT9D 25sLL03LoHIqO5LJcTAcpFdnTH0pvXN79w+4lfEUpJdkjmr8owSkitXlfFxxQBsr X/eZ/Zn9/zSUbJLHavy0nZ1mhI5o5hmejhIm3lurTSCFHMZ1neluLkKBW0IKrEqU p83x3uuUIbtld0rJQLJL8xQcLvmmJJqPFBVV3JAbTz1rk8njnoutjgxxqGjjF6UZ d6Mp68W6jCxOJrgcJEWObBdUGi1G7CARKqUAuAIG0mFdFOIobdzigshEk9Vh8YAy jATByQKVi3y8nxlPVnXEroRONQIwA7XU -----END CERTIFICATE-----Generated at Thu Sep 18 23:28:55 2025 by rpki-client