$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json) Hash identifier: oNDlG/Tfj4s9vD6tbFgvT2a3QcAhSnW+7NxXc8TrkYg= Subject key identifier: 62:BB:41:99:13:3A:C8:3D:6E:A6:09:9C:FB:A9:52:67:6F:8D:14:A5 Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft Manifest number: 0128 Signing time: Fri 05 Sep 2025 05:01:15 +0000 Manifest this update: Fri 05 Sep 2025 05:01:15 +0000 Manifest next update: Fri 12 Sep 2025 05:01:15 +0000 Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: qcz1VzcpToDxH1d44xD2FsuZhiyTXMAI/chldY1+XFw=) 2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: 9frZlnTUA25wzcLVRZfcMG1N4NRYNcJ6CAVrVhpGid0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Validity Not Before: Sep 5 05:01:15 2025 GMT Not After : Sep 12 05:01:15 2025 GMT Subject: CN=68ba6e9b-dfde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:95:f8:3e:a2:7b:33:08:ca:d2:6d:c2:00: 69:35:25:c4:e1:01:dc:4f:aa:fa:ea:01:c1:38:92: f6:9c:e4:8b:8a:ca:64:5e:b2:5a:20:35:fa:88:c7: 1b:37:57:5a:52:e7:88:ba:88:b9:4f:3d:d1:27:6e: 35:a0:6c:73:f7:53:f0:b0:c6:b1:16:ea:29:fb:f8: 03:14:3f:1b:08:33:83:eb:af:05:77:84:fb:a9:a8: ed:0b:01:b4:bd:1d:35:7e:6a:4f:c2:8c:da:7e:ee: d4:88:e2:e1:ef:29:13:f4:99:25:09:0a:ca:5f:eb: 24:92:47:68:44:88:f9:52:6a:ba:e6:56:94:9c:91: a0:18:46:e1:9c:6a:a5:cd:53:c8:7b:63:58:ad:8b: f4:63:4c:6f:b2:cb:a1:b2:d4:c4:93:3f:d3:a7:a6: 2c:d7:10:95:6a:e6:99:93:30:9d:a7:74:78:15:1c: 3d:11:67:3d:96:c3:d6:54:38:f1:e5:27:a3:b7:55: 82:e8:84:ec:df:80:9f:e4:92:ee:25:15:1b:5e:1a: 8e:bf:30:57:f6:31:a2:2c:63:ec:ea:9d:97:f3:c0: 27:61:42:30:08:8b:b7:d5:63:58:6f:cd:35:b2:d2: df:83:55:a7:7b:1f:77:6c:1c:1a:6b:93:d5:c5:52: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BB:41:99:13:3A:C8:3D:6E:A6:09:9C:FB:A9:52:67:6F:8D:14:A5 X509v3 Authority Key Identifier: keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:bb:63:3b:3f:5f:a3:b4:60:1a:02:fd:84:58:30:ac:2e:ad: 68:a1:2e:91:1c:b0:40:cb:72:53:62:3a:22:f3:74:a6:61:5e: ae:05:e7:19:4b:f9:32:5c:de:cd:62:3c:e7:43:4c:9a:c2:aa: 2e:98:21:9e:85:57:7b:88:4f:8f:ac:ce:72:ce:ab:58:d0:3c: f7:9f:b9:68:9f:39:79:3a:20:72:d6:fb:00:a7:2f:d2:5b:91: 1e:0f:11:58:c3:7a:8a:46:e8:5e:eb:5f:a5:24:6f:d0:0b:75: 09:94:b3:82:5b:b0:28:9c:a5:3a:8c:c5:12:64:fc:d6:e7:d0: 4a:66:2f:92:a8:40:7c:b5:9c:b1:98:be:74:c1:36:9b:f1:15: 2d:fb:4c:dd:ac:6e:62:45:4e:d3:5c:3b:3c:6e:81:bb:42:68: 6f:ee:4d:80:31:e2:36:89:d0:a7:35:18:e4:80:3b:b3:71:b6: b6:20:ff:e5:c4:2d:4d:2a:1c:e3:26:1e:63:98:93:99:16:94: 5e:a0:56:b5:d7:9f:2b:d5:23:c4:2e:1b:96:79:96:e3:8c:45: 0f:f7:c5:f1:f5:09:4e:a8:9b:51:53:fc:f1:ea:ce:70:1d:6f: bc:9a:86:65:57:7b:57:c2:a2:a2:5e:01:88:e7:be:92:cb:f8: a2:ca:f3:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDJCQTFBRTkzQkJGNTZBNkY2Qzk2NTA4NEYwNDg4MTdC QjdBOThGMEYwHhcNMjUwOTA1MDUwMTE1WhcNMjUwOTEyMDUwMTE1WjAYMRYwFAYD VQQDEw02OGJhNmU5Yi1kZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmr6V+D6iezMIytJtwgBpNSXE4QHcT6r66gHBOJL2nOSLispkXrJaIDX6iMcb N1daUueIuoi5Tz3RJ241oGxz91PwsMaxFuop+/gDFD8bCDOD668Fd4T7qajtCwG0 vR01fmpPwozafu7UiOLh7ykT9JklCQrKX+skkkdoRIj5Umq65laUnJGgGEbhnGql zVPIe2NYrYv0Y0xvssuhstTEkz/Tp6Ys1xCVauaZkzCdp3R4FRw9EWc9lsPWVDjx 5Sejt1WC6ITs34Cf5JLuJRUbXhqOvzBX9jGiLGPs6p2X88AnYUIwCIu31WNYb801 stLfg1Wnex93bBwaa5PVxVIOUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGK7QZkT Osg9bqYJnPupUmdvjRSlMB8GA1UdIwQYMBaAFCuhrpO79WpvbJZQhPBIgXu3qY8P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FM0JFQTQ3QUMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFtOXNsbENFOEVpQmU3ZXBq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FM0JFQTQ3QUMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFt OXNsbENFOEVpQmU3ZXBqdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsu2M7P1+jtGAaAv2EWDCsLq1ooS6RHLBAy3JTYjoi83SmYV6uBecZ S/kyXN7NYjznQ0yawqoumCGehVd7iE+PrM5yzqtY0Dz3n7lonzl5OiBy1vsApy/S W5EeDxFYw3qKRuhe61+lJG/QC3UJlLOCW7AonKU6jMUSZPzW59BKZi+SqEB8tZyx mL50wTab8RUt+0zdrG5iRU7TXDs8boG7Qmhv7k2AMeI2idCnNRjkgDuzcba2IP/l xC1NKhzjJh5jmJOZFpReoFa1158r1SPELhuWeZbjjEUP98Xx9QlOqJtRU/zx6s5w HW+8moZlV3tXwqKiXgGI576Sy/iiyvOj -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:52 2025 by rpki-client