$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: BkyyH8qaGcMuhhMFMJMZBs02XPo4ltRhHjYRcGCsoW4= Subject key identifier: E7:AD:29:BA:17:A8:CA:F0:3E:83:45:40:18:47:F4:B9:97:1D:AC:0B Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 0130 Signing time: Wed 17 Sep 2025 05:12:37 +0000 Manifest this update: Wed 17 Sep 2025 05:12:36 +0000 Manifest next update: Wed 24 Sep 2025 05:12:36 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: G5JB0Bd7DBnseZV5uSw+162HMfyxrZQ0VVRudRWI/8A=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Sep 17 05:12:36 2025 GMT Not After : Sep 24 05:12:36 2025 GMT Subject: CN=68ca4345-fce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:23:0f:ea:1c:2f:31:2b:54:46:9b:4f:ca: 61:16:dc:43:ed:60:b7:34:55:fc:8d:62:63:e6:40: 0a:77:fa:bf:6f:20:ed:31:59:fa:cb:8c:9a:83:54: 41:2d:4e:b1:bd:28:b1:e4:34:23:32:d1:f5:57:6c: 3a:39:c3:f1:13:1a:70:66:9c:c7:2d:d5:88:4d:4c: d3:48:2c:b0:77:7d:0f:b3:cb:52:f8:5c:ae:0e:69: 69:21:0c:d2:e5:7b:0c:fe:e6:df:e3:5a:11:44:64: e5:8d:50:90:66:1c:17:73:4a:ef:b0:e1:d7:60:25: f5:74:37:de:dd:61:a3:48:cb:2a:68:29:65:c3:71: 9c:00:c1:7f:bd:6f:3a:9c:a8:a6:e3:7a:39:7f:c0: 9d:c0:dd:c9:61:cf:46:b9:30:bc:68:cf:ce:0a:99: db:ae:a0:84:99:4b:58:7b:45:dd:40:90:c7:ee:65: 33:d3:b1:18:be:ee:82:ed:41:4c:89:4f:31:01:dd: 26:c8:91:bd:05:1c:11:6c:da:61:07:55:ce:fe:f4: 8f:fa:e3:89:3b:95:23:8e:22:9e:ff:d1:71:e0:8b: f2:6d:46:f3:68:2c:07:db:ee:9d:54:c6:53:67:fc: 89:07:4c:aa:02:d2:14:a6:d3:58:37:43:e3:6d:cc: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AD:29:BA:17:A8:CA:F0:3E:83:45:40:18:47:F4:B9:97:1D:AC:0B X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:89:31:21:fc:3f:21:aa:47:ed:76:51:ed:13:0e:0f:61:85: fb:8d:cf:e3:51:d1:49:09:6c:03:51:c2:bb:ec:bd:4e:0c:47: 1d:99:4c:a1:32:ab:09:48:f2:cc:12:d4:b5:2d:25:84:84:b4: df:dd:69:8a:fe:58:0b:17:27:a4:d2:33:57:8e:46:85:57:ce: 18:b2:63:16:7f:08:3c:91:9c:ea:15:8e:7a:0e:bd:93:e9:ae: d3:ed:99:ee:12:b6:c7:6b:1e:ff:65:79:99:dc:d5:6a:0a:3e: f6:d5:06:7a:4c:9f:e0:e6:4f:19:db:6a:00:1e:73:8d:91:56: 92:60:25:28:6f:a7:cd:de:55:59:f0:a4:37:92:63:30:66:ad: 24:05:39:dc:57:f1:fe:07:c4:92:6a:82:ec:5b:f8:9b:ca:dd: 2c:44:5d:8f:3b:2b:c6:ab:41:3a:bb:78:7b:f8:f3:20:af:52: 19:87:d6:7f:35:ac:00:11:d1:ba:7c:3f:69:89:76:37:c8:02: 4c:52:6e:0b:82:bd:1e:16:ca:61:6d:44:bc:15:85:8e:64:4f: 63:59:41:ef:57:27:2e:83:c8:00:67:ac:16:a5:5f:5f:e3:65: 90:37:0f:dc:1a:b4:c1:c5:fe:7c:e4:29:c1:34:00:a6:e1:17: 48:47:9b:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjUwOTE3MDUxMjM2WhcNMjUwOTI0MDUxMjM2WjAYMRYwFAYD VQQDEw02OGNhNDM0NS1mY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2QjD+ocLzErVEabT8phFtxD7WC3NFX8jWJj5kAKd/q/byDtMVn6y4yag1RB LU6xvSix5DQjMtH1V2w6OcPxExpwZpzHLdWITUzTSCywd30Ps8tS+FyuDmlpIQzS 5XsM/ubf41oRRGTljVCQZhwXc0rvsOHXYCX1dDfe3WGjSMsqaCllw3GcAMF/vW86 nKim43o5f8CdwN3JYc9GuTC8aM/OCpnbrqCEmUtYe0XdQJDH7mUz07EYvu6C7UFM iU8xAd0myJG9BRwRbNphB1XO/vSP+uOJO5UjjiKe/9Fx4IvybUbzaCwH2+6dVMZT Z/yJB0yqAtIUptNYN0Pjbcz75wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOetKboX qMrwPoNFQBhH9LmXHawLMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWiTEh/D8hqkftdlHtEw4PYYX7jc/jUdFJCWwDUcK77L1ODEcdmUyh MqsJSPLMEtS1LSWEhLTf3WmK/lgLFyek0jNXjkaFV84YsmMWfwg8kZzqFY56Dr2T 6a7T7ZnuErbHax7/ZXmZ3NVqCj721QZ6TJ/g5k8Z22oAHnONkVaSYCUob6fN3lVZ 8KQ3kmMwZq0kBTncV/H+B8SSaoLsW/ibyt0sRF2POyvGq0E6u3h7+PMgr1IZh9Z/ NawAEdG6fD9piXY3yAJMUm4Lgr0eFsphbUS8FYWOZE9jWUHvVycug8gAZ6wWpV9f 42WQNw/cGrTBxf585CnBNACm4RdIR5um -----END CERTIFICATE-----Generated at Wed Sep 17 07:57:24 2025 by rpki-client