$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: hNrumhQ+U6orD6+SFbxcksfCzgWZHIRv2qnQp/tk90M= Subject key identifier: 29:38:74:39:9F:E6:99:94:0A:C3:42:FE:67:30:8C:67:30:62:84:EF Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 03D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 03CF Signing time: Tue 09 Sep 2025 00:41:37 +0000 Manifest this update: Tue 09 Sep 2025 00:41:37 +0000 Manifest next update: Tue 16 Sep 2025 00:41:37 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: LDTmNwVvtwwYAafmSxvAyT3/e4on2/XmJOc0hwNzbUA=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 980 (0x3d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Sep 9 00:41:37 2025 GMT Not After : Sep 16 00:41:37 2025 GMT Subject: CN=68bf77c1-da03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:c4:b7:22:ab:2b:5c:2a:c9:cc:06:32:1a: 8a:88:1a:fc:36:27:86:4b:02:92:96:e7:0b:7e:f1: 48:8e:b6:13:8f:0e:97:da:38:1d:19:df:8b:69:c0: 7d:93:90:bf:84:b1:d1:07:48:84:15:f8:6f:d7:e3: e7:5d:8f:59:d7:bc:df:37:66:1c:81:03:22:11:b9: 35:a9:71:c9:1c:39:50:01:34:e1:28:ea:1d:4f:74: 80:b5:f7:0f:53:df:a3:74:3a:65:9c:e7:ea:c9:57: 46:9a:ab:4e:85:81:33:3a:df:20:01:ef:35:c3:79: 47:11:3d:88:5c:32:c7:da:08:ba:9c:00:62:07:70: 70:46:6b:f5:44:dd:94:9d:d5:04:7c:72:54:da:eb: 52:d1:a9:24:85:57:00:c5:69:7b:c3:a5:73:b4:3e: 68:a8:f2:ca:3f:32:9a:ab:24:09:ed:09:02:31:5e: e1:63:5a:01:d6:67:c4:1f:46:d0:e5:9f:2d:51:c1: 42:3a:51:75:0b:3b:82:78:ae:77:2b:72:40:e3:8f: df:a5:53:3d:c5:b2:3f:5d:d1:7a:92:76:c6:09:47: 60:37:1d:96:87:1e:c3:59:d2:b2:4f:d6:e8:65:ce: f3:71:81:3a:9c:ac:a5:94:cb:74:4c:ee:9d:08:d0: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:38:74:39:9F:E6:99:94:0A:C3:42:FE:67:30:8C:67:30:62:84:EF X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e7:f1:1e:73:47:89:84:2a:12:c7:3b:d2:67:c7:92:3f:be: 1f:cf:ce:cd:20:76:19:51:53:bf:a4:5e:e9:5d:e3:99:b5:5a: 6c:54:d5:71:b6:83:b5:85:94:36:de:db:3c:e8:14:2a:16:38: 27:99:b2:f5:45:db:cc:87:54:85:fe:5f:fe:d2:ff:f5:cb:a3: be:30:91:ef:e1:f6:56:05:08:f2:e8:89:1c:c9:b0:5c:4b:a3: 15:7c:01:e2:dd:09:cc:43:c0:87:ca:6b:34:dd:84:2b:ec:ae: 62:e1:76:f3:04:70:5e:6e:f3:32:c1:a7:00:77:56:78:d8:8a: 6f:00:84:c0:15:5d:fe:e0:45:56:ee:93:83:29:de:3d:10:08: c0:3c:ce:d9:43:e0:c7:12:e6:02:d6:18:63:15:55:29:e9:7a: c6:62:1d:01:e4:ab:8b:20:08:d7:f7:54:87:03:e8:f3:2e:e8: 32:2c:a9:48:52:b1:3f:c5:93:77:15:a4:7c:fc:79:7e:8e:7f: 30:59:3e:f0:d0:72:59:a3:7a:33:43:93:8d:5c:a5:b2:a9:ae: 86:8f:0b:f2:2d:57:de:68:1a:bd:ff:0e:55:33:4b:e1:9b:cd: 06:cd:d6:d2:fe:cf:b7:7b:41:25:1f:af:15:06:89:a9:d4:99: ad:30:fd:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUwOTA5MDA0MTM3WhcNMjUwOTE2MDA0MTM3WjAYMRYwFAYD VQQDEw02OGJmNzdjMS1kYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwB3EtyKrK1wqycwGMhqKiBr8NieGSwKSlucLfvFIjrYTjw6X2jgdGd+LacB9 k5C/hLHRB0iEFfhv1+PnXY9Z17zfN2YcgQMiEbk1qXHJHDlQATThKOodT3SAtfcP U9+jdDplnOfqyVdGmqtOhYEzOt8gAe81w3lHET2IXDLH2gi6nABiB3BwRmv1RN2U ndUEfHJU2utS0akkhVcAxWl7w6VztD5oqPLKPzKaqyQJ7QkCMV7hY1oB1mfEH0bQ 5Z8tUcFCOlF1CzuCeK53K3JA44/fpVM9xbI/XdF6knbGCUdgNx2Whx7DWdKyT9bo Zc7zcYE6nKyllMt0TO6dCNC5ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCk4dDmf 5pmUCsNC/mcwjGcwYoTvMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA55/Eec0eJhCoSxzvSZ8eSP74fz87NIHYZUVO/pF7pXeOZtVpsVNVx toO1hZQ23ts86BQqFjgnmbL1RdvMh1SF/l/+0v/1y6O+MJHv4fZWBQjy6IkcybBc S6MVfAHi3QnMQ8CHyms03YQr7K5i4XbzBHBebvMywacAd1Z42IpvAITAFV3+4EVW 7pODKd49EAjAPM7ZQ+DHEuYC1hhjFVUp6XrGYh0B5KuLIAjX91SHA+jzLugyLKlI UrE/xZN3FaR8/Hl+jn8wWT7w0HJZo3ozQ5ONXKWyqa6GjwvyLVfeaBq9/w5VM0vh m80GzdbS/s+3e0ElH68VBomp1JmtMP0k -----END CERTIFICATE-----Generated at Wed Sep 10 23:30:14 2025 by rpki-client