$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: n286h4tY9VkcEUheSUJ1HKZpywLnjEX4AP/DQ1bjMP4= Subject key identifier: B8:3F:05:BB:4E:F3:46:B8:54:06:2B:F5:D0:6C:2C:5A:DE:47:80:5F Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 16DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 16C4 Signing time: Sun 24 Aug 2025 16:38:39 +0000 Manifest this update: Sun 24 Aug 2025 16:38:39 +0000 Manifest next update: Sun 31 Aug 2025 16:38:39 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: WePuQCXgj7HRGEg5YFiVIDMNxeOFFVo8IZWscjFfufU=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5850 (0x16da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Aug 24 16:38:39 2025 GMT Not After : Aug 31 16:38:39 2025 GMT Subject: CN=68ab400f-de1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:6b:4a:33:1c:61:40:9a:d9:0a:9d:15:91: 6b:7f:49:a3:bb:fd:26:54:88:58:88:35:f3:f1:e0: a5:62:47:38:c4:9a:c6:d8:80:42:3b:57:84:c3:ee: bd:b7:49:24:36:41:52:ff:70:c7:8a:53:f8:e1:cb: 4b:e8:9d:a8:a5:b8:78:c1:64:32:bd:12:c4:b3:d1: 9c:da:56:17:49:1f:47:02:bb:0b:82:01:3e:85:e5: 01:7a:46:03:ad:31:64:3d:b0:86:09:c2:36:82:31: 01:d9:13:ca:30:ea:43:a8:03:80:1f:9d:f3:25:be: 8e:bf:d0:c5:a1:1d:d1:81:60:20:b9:05:81:aa:02: a0:b2:d1:81:70:dd:27:2d:b1:d5:bf:23:74:bf:41: 24:d1:8f:c1:aa:fa:56:26:fb:7f:a2:0d:72:51:7e: ae:50:8c:4b:6c:06:21:cc:53:98:97:9e:a7:63:59: f2:be:fe:0a:04:69:4f:ad:55:de:bd:75:81:f9:09: 13:76:cb:90:d4:c7:d5:3b:d0:4a:a5:f1:55:81:f9: 27:21:b5:a8:bb:70:82:3e:69:af:0c:bc:71:59:e4: 95:70:df:ba:16:92:a9:a5:d9:ca:58:f4:74:54:78: 4a:d1:08:f1:5c:16:a6:b4:9e:93:fb:dd:c4:d6:d9: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3F:05:BB:4E:F3:46:B8:54:06:2B:F5:D0:6C:2C:5A:DE:47:80:5F X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e3:ee:85:d2:c7:b0:ff:1d:fb:3b:eb:81:46:3f:69:f2:05: e5:4d:df:60:b5:bb:e0:5f:77:20:01:ae:9a:19:d8:ab:d4:ec: f5:80:79:fd:00:f4:59:21:b3:9b:70:cb:6e:f0:d9:e1:f2:57: 7c:b9:09:bc:66:83:f5:be:2b:01:b9:16:5a:11:29:e7:1e:8d: e8:2b:70:31:b3:b8:49:b6:d6:00:2d:33:ff:a5:f0:89:57:1d: 8a:86:b3:6a:27:be:51:69:cc:d3:34:0a:de:df:84:cc:b7:0c: 31:6d:6e:61:65:35:ca:73:f8:19:68:fb:f5:c6:d3:53:e3:f6: a1:3f:e7:e6:82:07:96:e5:ef:da:78:26:c4:bf:00:ca:8e:9b: 43:25:01:50:1d:b1:00:02:7d:a7:4e:b8:b7:52:81:b3:e9:78: 3e:48:54:ef:a3:0d:ef:80:ef:5a:fd:e8:ea:fe:e0:b3:38:97: 92:b1:d4:0a:b4:ff:39:ef:b6:61:fe:2f:d4:51:96:09:ab:dc: cd:4a:3b:03:01:8b:a4:61:6d:1a:e9:15:4c:cc:c4:ac:5a:53: db:2d:30:88:c6:2f:44:18:d4:52:8e:cc:73:ec:90:17:6a:38: b3:73:78:9c:b9:19:7d:a0:d2:37:d7:05:b2:39:c6:5c:6a:8e: c7:61:3b:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUwODI0MTYzODM5WhcNMjUwODMxMTYzODM5WjAYMRYwFAYD VQQDEw02OGFiNDAwZi1kZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmq9rSjMcYUCa2QqdFZFrf0mju/0mVIhYiDXz8eClYkc4xJrG2IBCO1eEw+69 t0kkNkFS/3DHilP44ctL6J2opbh4wWQyvRLEs9Gc2lYXSR9HArsLggE+heUBekYD rTFkPbCGCcI2gjEB2RPKMOpDqAOAH53zJb6Ov9DFoR3RgWAguQWBqgKgstGBcN0n LbHVvyN0v0Ek0Y/BqvpWJvt/og1yUX6uUIxLbAYhzFOYl56nY1nyvv4KBGlPrVXe vXWB+QkTdsuQ1MfVO9BKpfFVgfknIbWou3CCPmmvDLxxWeSVcN+6FpKppdnKWPR0 VHhK0QjxXBamtJ6T+93E1tmxaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg/BbtO 80a4VAYr9dBsLFreR4BfMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp4+6F0sew/x37O+uBRj9p8gXlTd9gtbvgX3cgAa6aGdir1Oz1gHn9 APRZIbObcMtu8Nnh8ld8uQm8ZoP1visBuRZaESnnHo3oK3Axs7hJttYALTP/pfCJ Vx2KhrNqJ75RaczTNAre34TMtwwxbW5hZTXKc/gZaPv1xtNT4/ahP+fmggeW5e/a eCbEvwDKjptDJQFQHbEAAn2nTri3UoGz6Xg+SFTvow3vgO9a/ejq/uCzOJeSsdQK tP8577Zh/i/UUZYJq9zNSjsDAYukYW0a6RVMzMSsWlPbLTCIxi9EGNRSjsxz7JAX ajizc3icuRl9oNI31wWyOcZcao7HYTti -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:04 2025 by rpki-client