$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: uy6odEVFUEQZUqmK5ZaoOvaCaInEMkF86aGaOPZbMoU= Subject key identifier: 32:BD:0E:46:C5:C1:32:72:B3:B5:29:A3:98:2F:11:C9:4E:01:D4:5C Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 0118 Signing time: Fri 01 Aug 2025 06:12:26 +0000 Manifest this update: Fri 01 Aug 2025 06:12:26 +0000 Manifest next update: Fri 08 Aug 2025 06:12:25 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: VhqXe9p8fm+T6Cu6sXJsPiDranE7tE9VlX0wRl5TXNg=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Aug 1 06:12:26 2025 GMT Not After : Aug 8 06:12:25 2025 GMT Subject: CN=688c5aca-bf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:c5:36:e6:03:1d:65:3c:e9:72:29:d6:32: 3a:cc:48:a7:7c:10:63:26:db:3f:6f:f2:5d:c8:fb: 5f:7d:c2:85:aa:da:fc:cf:ba:8f:77:ba:e6:c3:9b: f3:6e:3e:ee:0e:79:89:95:83:e8:9f:39:d1:59:88: 1b:cd:fb:b9:ad:b3:a1:76:bc:97:03:88:51:f8:bd: a8:fd:ed:37:fc:54:e3:07:8c:46:d9:2a:3d:32:7b: 44:53:12:ea:b0:da:29:89:4b:a8:f5:d5:08:51:00: 9c:76:3d:9c:fa:37:2c:ba:4b:3f:6c:ab:51:fb:59: 79:11:eb:4a:51:07:9c:31:d3:6f:4c:d6:9a:b8:ed: 81:d0:ae:10:58:82:c7:f0:32:53:25:80:45:35:ed: b8:2a:bd:d3:cf:c9:9d:00:4b:2e:23:bc:9b:cc:7c: 59:e4:40:fb:8d:52:36:0d:f4:46:69:29:5d:2f:d5: ac:e8:0c:95:d8:f6:74:2d:54:75:d9:40:3b:e6:b5: b2:ec:f0:ed:0c:ea:be:8e:25:03:64:c8:d0:3a:9f: e7:b5:aa:14:cc:6a:99:b0:3c:de:66:16:e4:a1:07: f5:bd:1e:81:ad:77:ed:d8:3f:36:1b:f6:46:6d:95: ab:d1:b2:20:ed:f3:54:86:f1:fe:ca:9b:f9:69:45: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BD:0E:46:C5:C1:32:72:B3:B5:29:A3:98:2F:11:C9:4E:01:D4:5C X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:c1:58:32:41:c1:45:fc:e0:ac:57:1b:f8:9f:c8:c5:cf: d6:7f:70:3b:9f:fc:74:a3:a9:b3:48:0d:ca:bf:79:ec:44:62: 5f:c4:79:d8:1e:90:ff:99:8f:2c:70:3c:86:22:3f:86:17:52: 7a:22:ba:db:78:87:21:65:07:ee:c6:b8:f0:9a:16:57:39:1d: d4:b8:60:0d:e9:e1:fd:3b:a1:13:57:c8:41:8d:07:dd:2b:9b: 24:fa:67:50:67:53:d0:a2:d6:3a:8a:71:19:7b:c4:fd:b4:39: 1e:20:14:d5:9b:b4:2e:45:79:d1:76:3e:59:1e:e8:c4:50:5d: 96:72:86:14:66:ca:44:a6:81:46:4d:c7:d4:7e:97:36:44:12: ce:99:f1:d8:93:35:54:61:e4:dd:53:61:d5:e9:85:c5:54:6e: a5:d3:ac:b5:ce:b6:1d:52:26:5a:22:4c:a5:2a:d7:6e:4a:c7: 5c:39:61:09:52:dd:63:5e:14:35:12:83:df:e4:f5:62:0e:21: be:65:e3:98:7f:c4:fc:ab:90:85:f4:00:1c:68:53:85:32:a4: 4c:a0:fe:42:7b:5e:71:e4:b5:4c:30:a1:3a:f2:ca:7f:f5:cd: 05:ac:10:3f:33:17:e0:8d:7a:d5:6a:f6:11:10:79:3f:8b:1f: 11:c6:bb:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjUwODAxMDYxMjI2WhcNMjUwODA4MDYxMjI1WjAYMRYwFAYD VQQDEw02ODhjNWFjYS1iZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5PFNuYDHWU86XIp1jI6zEinfBBjJts/b/JdyPtffcKFqtr8z7qPd7rmw5vz bj7uDnmJlYPonznRWYgbzfu5rbOhdryXA4hR+L2o/e03/FTjB4xG2So9MntEUxLq sNopiUuo9dUIUQCcdj2c+jcsuks/bKtR+1l5EetKUQecMdNvTNaauO2B0K4QWILH 8DJTJYBFNe24Kr3Tz8mdAEsuI7ybzHxZ5ED7jVI2DfRGaSldL9Ws6AyV2PZ0LVR1 2UA75rWy7PDtDOq+jiUDZMjQOp/ntaoUzGqZsDzeZhbkoQf1vR6BrXft2D82G/ZG bZWr0bIg7fNUhvH+ypv5aUW+yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK9DkbF wTJys7Upo5gvEclOAdRcMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8UsFYMkHBRfzgrFcb+J/Ixc/Wf3A7n/x0o6mzSA3Kv3nsRGJfxHnY HpD/mY8scDyGIj+GF1J6IrrbeIchZQfuxrjwmhZXOR3UuGAN6eH9O6ETV8hBjQfd K5sk+mdQZ1PQotY6inEZe8T9tDkeIBTVm7QuRXnRdj5ZHujEUF2WcoYUZspEpoFG TcfUfpc2RBLOmfHYkzVUYeTdU2HV6YXFVG6l06y1zrYdUiZaIkylKtduSsdcOWEJ Ut1jXhQ1EoPf5PViDiG+ZeOYf8T8q5CF9AAcaFOFMqRMoP5Ce15x5LVMMKE68sp/ 9c0FrBA/MxfgjXrVavYREHk/ix8RxrtH -----END CERTIFICATE-----Generated at Sat Aug 2 05:34:56 2025 by rpki-client