$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft File: kTOsvs_e7PTaOiIigng09bc6-qc.mft (raw, json) Hash identifier: uTS7mr+FZGxKXZd2g+iOtYvDyQZJH4AHNlqtknT63As= Subject key identifier: 03:4E:2B:DC:85:F8:36:08:61:FB:F7:B9:DB:E6:07:6D:CF:18:05:62 Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7 Certificate issuer: /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft Manifest number: E6 Signing time: Fri 05 Sep 2025 05:45:39 +0000 Manifest this update: Fri 05 Sep 2025 05:45:39 +0000 Manifest next update: Fri 12 Sep 2025 05:45:39 +0000 Files and hashes: 1: kTOsvs_e7PTaOiIigng09bc6-qc.crl (hash: 5/u/MewXcqYsd7+LyUUCe+AX5HsniwdbEmNQSBSKrno=) 2: 6B9D491C379A11F0B3AC7740C4F9AE02.roa (hash: RLph3rOI+XvGrIXc+VEb/mig9QwsOBw+jIRI25aGTLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7 Validity Not Before: Sep 5 05:45:39 2025 GMT Not After : Sep 12 05:45:39 2025 GMT Subject: CN=68ba7903-a187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:42:0a:42:f1:f9:c4:f2:dc:ed:4a:21:0c: 62:3a:e9:e3:e0:69:db:ac:b1:fc:51:2d:ad:bb:af: 60:51:4a:7a:3d:86:93:d0:86:4f:23:ac:5c:60:46: 70:c3:9a:eb:5b:16:c4:03:ee:30:20:5e:a9:0b:65: 40:75:0a:e8:3d:51:b2:fb:63:7f:80:84:fb:4c:1a: 69:bd:d0:d5:d2:dc:85:97:0d:75:39:f0:a5:2e:d1: 7f:35:93:ce:da:92:af:50:21:4d:1c:c8:e8:68:05: 24:8e:d5:ae:af:32:a1:37:94:c6:11:e2:91:ad:90: 62:d0:71:40:c1:b5:6b:45:b2:0b:26:d2:89:66:df: 88:a0:9d:ea:58:3a:81:d6:05:b2:12:e1:9e:e5:ea: 90:8c:41:32:cd:7b:fb:a3:f2:cf:f9:b1:1a:9e:61: ee:44:57:74:2c:7a:1a:5a:4d:84:18:51:a5:03:61: ff:99:11:87:30:44:10:ae:42:e5:b5:d5:6d:43:68: 62:30:b1:50:46:1a:43:c8:64:73:80:e7:ad:84:30: 2f:7d:8a:4f:7d:10:1a:8e:04:f5:bb:bb:fa:cc:05: 31:30:b7:a4:9b:98:0d:bf:d9:41:6e:42:82:2e:7d: 00:69:c0:b0:ab:60:05:57:9e:97:73:d0:5a:4b:a2: 70:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4E:2B:DC:85:F8:36:08:61:FB:F7:B9:DB:E6:07:6D:CF:18:05:62 X509v3 Authority Key Identifier: keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0c:ed:01:38:b8:ee:a1:8a:ba:f2:24:2a:92:74:76:44:3f: 71:02:54:8f:88:6e:de:7a:57:08:81:df:0e:2e:49:62:28:f6: b6:69:28:62:0a:9b:14:4c:a6:bc:6c:76:d3:f5:15:db:0f:ae: ff:be:01:cb:0c:1f:eb:02:55:10:da:ad:75:01:46:53:cf:e0: 1f:d2:9f:ef:ac:3a:0c:f3:c1:63:7a:b6:ed:c6:93:d5:05:6b: cd:d9:0c:65:70:dc:72:fa:19:a3:b9:83:d4:23:0e:03:ff:cc: 53:11:17:ec:e0:57:fb:ca:3e:7e:d2:25:36:8c:d5:aa:fd:33: 87:35:c8:3f:ff:09:ad:1e:d8:62:3e:56:2a:2f:b8:25:1e:d5: 1f:16:29:3e:8d:17:f0:b0:a4:5f:b9:a5:3e:9c:f9:e5:93:ed: 5e:10:ee:35:b9:ad:1d:a3:4a:ee:fe:36:7a:98:d8:09:e3:2b: 31:bd:f3:17:bb:bb:91:e7:44:4c:19:1a:a8:fa:22:a7:41:10: 3e:6b:b3:f4:0f:e7:c7:dc:92:f9:29:d4:ec:95:e0:86:c4:21: b5:51:d2:cf:b7:66:ba:63:bc:8d:df:d0:60:28:98:96:f8:d9: 84:54:2d:9d:e8:be:8b:7e:bb:a6:19:ec:58:a6:ff:c9:5e:0d: 8e:55:43:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5QTIxMTAvBgNVBAUTKDkxMzNBQ0JFQ0ZERUVDRjREQTNBMjIyMjgyNzgzNEY1 QjczQUZBQTcwHhcNMjUwOTA1MDU0NTM5WhcNMjUwOTEyMDU0NTM5WjAYMRYwFAYD VQQDEw02OGJhNzkwMy1hMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qtCCkLx+cTy3O1KIQxiOunj4GnbrLH8US2tu69gUUp6PYaT0IZPI6xcYEZw w5rrWxbEA+4wIF6pC2VAdQroPVGy+2N/gIT7TBppvdDV0tyFlw11OfClLtF/NZPO 2pKvUCFNHMjoaAUkjtWurzKhN5TGEeKRrZBi0HFAwbVrRbILJtKJZt+IoJ3qWDqB 1gWyEuGe5eqQjEEyzXv7o/LP+bEanmHuRFd0LHoaWk2EGFGlA2H/mRGHMEQQrkLl tdVtQ2hiMLFQRhpDyGRzgOethDAvfYpPfRAajgT1u7v6zAUxMLekm5gNv9lBbkKC Ln0AacCwq2AFV56Xc9BaS6Jw/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANOK9yF +DYIYfv3udvmB23PGAViMB8GA1UdIwQYMBaAFJEzrL7P3uz02joiIoJ4NPW3Ovqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzlBMi8xQTA1RTZFRTJE MkUxMUVGQTU0QzgwNDJDNEY5QUUwMi9rVE9zdnNfZTdQVGFPaUlpZ25nMDliYzYt cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tUT3N2c19lN1BUYU9pSWlnbmcwOWJjNi1xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzlBMi8xQTA1RTZFRTJEMkUxMUVGQTU0QzgwNDJDNEY5QUUwMi9rVE9zdnNfZTdQ VGFPaUlpZ25nMDliYzYtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLDO0BOLjuoYq68iQqknR2RD9xAlSPiG7eelcIgd8OLkliKPa2aShi CpsUTKa8bHbT9RXbD67/vgHLDB/rAlUQ2q11AUZTz+Af0p/vrDoM88FjerbtxpPV BWvN2QxlcNxy+hmjuYPUIw4D/8xTERfs4Ff7yj5+0iU2jNWq/TOHNcg//wmtHthi PlYqL7glHtUfFik+jRfwsKRfuaU+nPnlk+1eEO41ua0do0ru/jZ6mNgJ4ysxvfMX u7uR50RMGRqo+iKnQRA+a7P0D+fH3JL5KdTsleCGxCG1UdLPt2a6Y7yN39BgKJiW +NmEVC2d6L6LfrumGexYpv/JXg2OVUOh -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:23 2025 by rpki-client