$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json) Hash identifier: 2tqgu6qlEFdWS38oQC2v22/7gjBOsnEh7U6cjx40Rxs= Subject key identifier: 5E:88:4D:E8:54:74:A7:76:F2:04:88:7B:CC:C3:7B:A6:8F:18:05:45 Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft Manifest number: 34E1 Signing time: Mon 08 Sep 2025 14:23:00 +0000 Manifest this update: Mon 08 Sep 2025 14:23:00 +0000 Manifest next update: Mon 15 Sep 2025 14:23:00 +0000 Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: GH+xEQQmwDtbq/WgW44RD27wxlaUK11f6n7net46OUg=) 2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: 393XehekPeHbrV2Jp2q+bd44TtCVra3Kkby1+LNFgLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Validity Not Before: Sep 8 14:23:00 2025 GMT Not After : Sep 15 14:23:00 2025 GMT Subject: CN=68bee6c4-202c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:bb:f2:6d:01:33:18:75:28:36:be:52:2a: 3b:af:c3:cd:05:15:ac:f5:7f:8d:a7:b8:a8:b1:fc: 29:15:85:95:10:93:20:20:38:31:54:20:8a:91:04: 7e:b8:fc:9d:b0:20:08:50:d5:0c:fa:7c:69:cb:6b: 7c:60:db:10:a9:15:0a:67:61:44:83:08:5b:3e:bb: 49:b4:39:2c:e5:49:3b:75:5f:ba:56:64:74:49:0f: 0b:3b:ed:96:fb:2b:62:d7:e2:25:be:a8:70:70:60: 0c:9a:b9:36:57:9b:01:58:b9:4a:1f:68:51:6c:4a: a8:07:e7:b8:f9:43:3f:fc:93:ee:5d:fa:44:28:e4: 75:ee:5c:dd:92:78:96:ad:d2:3b:6b:cb:a2:62:bf: 39:7c:42:2f:34:71:47:84:83:44:65:e3:3c:87:0e: f4:80:86:38:e6:2a:a1:ae:9c:d7:26:24:02:3b:fc: 8f:06:a1:7d:c5:c8:c1:79:31:df:24:cd:16:f7:6f: f3:37:e0:39:a8:fd:08:ab:7b:08:fc:f4:1f:74:a1: 85:41:00:ef:ea:a7:4d:01:88:41:2b:9e:8b:23:e9: 6f:60:e7:43:cd:df:f4:b6:49:59:f4:3f:36:c4:19: a6:57:cc:3f:91:f4:ea:a1:d4:ad:61:32:45:4c:65: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:88:4D:E8:54:74:A7:76:F2:04:88:7B:CC:C3:7B:A6:8F:18:05:45 X509v3 Authority Key Identifier: keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:2e:cf:b1:ef:0d:57:fe:ac:39:c6:a6:1c:5c:b9:42:4a:9a: 30:b2:36:94:5b:76:88:52:9e:f1:d6:6e:2e:ea:0e:89:ce:bd: bc:57:f8:88:9f:cf:ef:1d:13:ee:93:e0:7d:20:f4:19:dd:3a: a5:48:62:95:9a:bb:c6:c0:4c:54:30:25:38:cf:5a:f3:45:c0: 20:42:88:47:8b:8a:e9:05:7c:3f:c2:47:af:9e:08:bb:d5:13: 64:6d:3b:e7:b7:1c:f2:1b:61:bb:c1:11:33:fd:86:82:b1:dd: 2b:32:6d:a8:7b:bd:cb:71:c2:74:17:61:9d:0e:00:4d:af:95: d6:e2:69:de:87:f9:b2:b1:45:64:c2:60:4e:4c:cc:61:2e:7e: 2f:66:b2:39:87:55:19:b5:2e:15:2e:02:c9:63:86:6a:86:92: 92:3f:4f:07:ff:19:eb:9f:8e:d2:12:70:e1:2c:67:6b:e9:84: 8d:a1:61:2f:ec:91:83:0f:53:30:35:d7:02:aa:49:d1:aa:df: 90:47:1d:93:e6:c8:1f:9e:97:28:c9:03:c1:df:05:5a:11:d4: 76:65:53:c2:46:3a:ae:3b:b4:f9:b9:54:40:0b:36:bb:ae:69: 28:bf:00:2a:e0:f4:8c:2a:2c:50:e3:98:7b:f1:1f:f3:c1:c4: 17:e4:82:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx ODk3NEZERTIwHhcNMjUwOTA4MTQyMzAwWhcNMjUwOTE1MTQyMzAwWjAYMRYwFAYD VQQDEw02OGJlZTZjNC0yMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5O78m0BMxh1KDa+Uio7r8PNBRWs9X+Np7iosfwpFYWVEJMgIDgxVCCKkQR+ uPydsCAIUNUM+nxpy2t8YNsQqRUKZ2FEgwhbPrtJtDks5Uk7dV+6VmR0SQ8LO+2W +yti1+IlvqhwcGAMmrk2V5sBWLlKH2hRbEqoB+e4+UM//JPuXfpEKOR17lzdkniW rdI7a8uiYr85fEIvNHFHhINEZeM8hw70gIY45iqhrpzXJiQCO/yPBqF9xcjBeTHf JM0W92/zN+A5qP0Iq3sI/PQfdKGFQQDv6qdNAYhBK56LI+lvYOdDzd/0tklZ9D82 xBmmV8w/kfTqodStYTJFTGWSbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6ITehU dKd28gSIe8zDe6aPGAVFMB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnLs+x7w1X/qw5xqYcXLlCSpowsjaUW3aIUp7x1m4u6g6Jzr28V/iI n8/vHRPuk+B9IPQZ3TqlSGKVmrvGwExUMCU4z1rzRcAgQohHi4rpBXw/wkevngi7 1RNkbTvntxzyG2G7wREz/YaCsd0rMm2oe73LccJ0F2GdDgBNr5XW4mneh/mysUVk wmBOTMxhLn4vZrI5h1UZtS4VLgLJY4ZqhpKSP08H/xnrn47SEnDhLGdr6YSNoWEv 7JGDD1MwNdcCqknRqt+QRx2T5sgfnpcoyQPB3wVaEdR2ZVPCRjquO7T5uVRACza7 rmkovwAq4PSMKixQ45h78R/zwcQX5ILj -----END CERTIFICATE-----Generated at Mon Sep 8 22:18:33 2025 by rpki-client