$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: uTUPhnoggUXHR6kbP5fEMKi4NXUkKdHeFJtkXr1vu9k= Subject key identifier: 24:8C:49:10:C9:A7:8F:B8:99:60:70:DD:62:C7:95:EE:EB:2F:73:B8 Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 59 Signing time: Tue 09 Sep 2025 07:23:19 +0000 Manifest this update: Tue 09 Sep 2025 07:23:18 +0000 Manifest next update: Tue 16 Sep 2025 07:23:18 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: zYhoRJmYgIboivQlm/oYayWB8jKrCdaTUS86DZZriVc=) 2: DA700744185511F09304D972C4F9AE02.roa (hash: MiqFluIC5BNSTT1867bwbDdwUanVh/INLvZrWpn+wqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Sep 9 07:23:18 2025 GMT Not After : Sep 16 07:23:18 2025 GMT Subject: CN=68bfd5e6-4fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:b2:4d:f2:a7:a8:69:a9:fb:7a:dd:46:a1: 8a:d2:f2:1f:09:db:4b:0c:7f:d3:b5:94:0b:8c:bc: 97:3d:22:65:a9:36:c8:d6:94:cb:e5:7c:23:a3:88: 00:a1:11:59:77:1d:b3:13:21:c5:67:de:a6:3b:50: 03:31:9a:f6:76:40:ea:8f:38:78:91:7f:c7:38:68: fd:a4:76:16:f3:1c:87:d9:d8:68:ef:e5:bb:5e:50: 9c:2b:11:ea:0b:f9:b2:1a:41:d1:8d:b9:61:3b:dc: fa:8c:b4:a2:bd:a8:02:27:39:76:b7:47:70:88:1b: 3c:7c:4a:a8:34:78:58:cf:c5:e4:77:01:1c:f9:4e: 05:43:fa:88:2e:df:24:9e:1a:7f:47:73:44:46:9c: 4e:1e:c9:12:a1:95:81:55:30:03:2a:6e:55:01:0a: 8f:2c:63:85:0a:30:7f:0f:b7:a4:3e:3e:c0:25:a1: aa:dc:1b:06:ee:90:64:b4:03:01:ba:f4:12:31:57: 2b:34:b1:e0:71:f4:31:6a:b9:0e:42:88:9e:ed:a4: 2a:45:2c:ec:5f:8d:b2:52:6c:ee:c7:aa:24:ff:89: 2a:94:89:21:04:8d:de:9b:96:95:c8:a3:6a:ce:57: 02:34:87:b9:9f:5c:be:85:63:db:5b:5b:64:c3:c5: 2a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8C:49:10:C9:A7:8F:B8:99:60:70:DD:62:C7:95:EE:EB:2F:73:B8 X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:8a:9f:02:b8:dd:14:32:96:e4:72:ff:69:47:c2:fb:cd:68: a7:cc:f7:ee:56:52:44:4f:5f:d8:1e:19:1f:10:55:d6:a2:4a: f1:1c:76:09:2b:f6:38:77:8c:8b:d9:eb:d5:83:b8:bf:c0:56: 02:53:00:cd:b7:68:28:a5:23:44:a2:d8:e7:f2:ed:84:ef:fb: 62:01:71:bf:32:05:c5:2e:a7:ba:e5:2a:e9:5e:16:70:02:7d: 23:50:99:90:bf:76:1b:af:a9:b1:d7:fd:9e:6d:d7:4a:7d:e0: 87:cc:a9:7c:f5:3f:0c:47:f0:ba:5b:76:ae:e7:b2:14:d2:de: 03:7c:56:58:fa:54:82:32:a7:98:a1:27:85:ea:09:86:a1:cd: b7:04:96:2c:12:ea:71:6f:78:2f:8b:63:2e:9a:d3:56:ad:64: 2a:dc:30:0f:ed:ec:21:92:6f:ec:79:93:c1:02:21:b7:e9:54: 81:94:99:6b:85:2f:1d:87:60:e5:3b:1f:6f:72:31:ba:f4:d8: 2f:ee:5f:9d:c1:6f:0c:45:5a:aa:07:73:0a:01:be:dc:0a:e2: b6:c5:4e:6a:bd:ca:68:d5:ff:09:d3:1f:7b:35:94:c9:bb:22: 11:e1:c2:3f:05:89:58:b1:10:05:bc:a1:91:56:ef:80:60:e8: 1d:0c:79:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjVCOTExMC8GA1UEBRMoOTExNzZEMTY5QzQyRjAzRDk1MjgyQkJCQTIwNEM0RTQ0 RDMxRUQwOTAeFw0yNTA5MDkwNzIzMThaFw0yNTA5MTYwNzIzMThaMBgxFjAUBgNV BAMTDTY4YmZkNWU2LTRmYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoabJN8qeoaan7et1GoYrS8h8J20sMf9O1lAuMvJc9ImWpNsjWlMvlfCOjiACh EVl3HbMTIcVn3qY7UAMxmvZ2QOqPOHiRf8c4aP2kdhbzHIfZ2Gjv5bteUJwrEeoL +bIaQdGNuWE73PqMtKK9qAInOXa3R3CIGzx8Sqg0eFjPxeR3ARz5TgVD+ogu3ySe Gn9Hc0RGnE4eyRKhlYFVMAMqblUBCo8sY4UKMH8Pt6Q+PsAloarcGwbukGS0AwG6 9BIxVys0seBx9DFquQ5CiJ7tpCpFLOxfjbJSbO7HqiT/iSqUiSEEjd6blpXIo2rO VwI0h7mfXL6FY9tbW2TDxSqzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJIxJEMmn j7iZYHDdYseV7usvc7gwHwYDVR0jBBgwFoAUkRdtFpxC8D2VKCu7ogTE5E0x7Qkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGNUI5LzUyMDJEMDI4MERG OTExRjA4RTZFNzYyQUM0RjlBRTAyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1JkdEZweEM4RDJWS0N1N29nVEU1RTB4N1FrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG NUI5LzUyMDJEMDI4MERGOTExRjA4RTZFNzYyQUM0RjlBRTAyL2tSZHRGcHhDOEQy VktDdTdvZ1RFNUUweDdRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGWKnwK43RQyluRy/2lHwvvNaKfM9+5WUkRPX9geGR8QVdaiSvEcdgkr 9jh3jIvZ69WDuL/AVgJTAM23aCilI0Si2Ofy7YTv+2IBcb8yBcUup7rlKuleFnAC fSNQmZC/dhuvqbHX/Z5t10p94IfMqXz1PwxH8Lpbdq7nshTS3gN8Vlj6VIIyp5ih J4XqCYahzbcEliwS6nFveC+LYy6a01atZCrcMA/t7CGSb+x5k8ECIbfpVIGUmWuF Lx2HYOU7H29yMbr02C/uX53BbwxFWqoHcwoBvtwK4rbFTmq9ymjV/wnTH3s1lMm7 IhHhwj8FiVixEAW8oZFW74Bg6B0MeR4= -----END CERTIFICATE-----Generated at Wed Sep 10 04:47:09 2025 by rpki-client