$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: a2pG52auocmIEi34GSkH68DOOIkh5ce+Z4ZOLvUvV6E= Subject key identifier: 78:31:22:8D:76:C7:97:4F:D3:38:EA:A1:17:19:DC:16:F4:13:6F:2E Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 3C Signing time: Sat 19 Jul 2025 07:48:38 +0000 Manifest this update: Sat 19 Jul 2025 07:48:38 +0000 Manifest next update: Sat 26 Jul 2025 07:48:38 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: qnLAgbHy3fN7unAopHle2Am3Z05t1jfyVl/XqnEYDpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: Jul 19 07:48:38 2025 GMT Not After : Jul 26 07:48:38 2025 GMT Subject: CN=687b4dd6-8091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:41:f6:05:4e:94:7c:f3:2f:f5:2b:00:ec: 9a:2b:0c:c0:bd:53:34:9c:38:d9:4b:cf:c5:46:40: f4:a5:8f:bc:83:ed:e5:58:2b:56:53:fe:ae:a7:56: 71:8f:5c:63:59:57:cd:2a:60:2a:c0:e4:f3:9d:73: b1:e1:02:0d:eb:9e:48:3a:f2:1a:fe:84:5b:73:06: 01:ff:bd:e1:1a:2d:2a:9d:48:26:96:79:f0:1c:92: c6:fc:1e:af:10:d9:c6:f6:77:c1:f1:3a:8d:54:43: 09:8e:2d:e3:21:8a:78:7a:17:b0:50:86:8a:ea:ae: ea:b9:db:f2:5e:57:94:80:ee:23:4e:a4:09:2e:a7: db:bd:eb:e2:0e:08:fb:b3:7e:e4:d1:cf:c2:35:bb: a3:e4:10:e5:28:79:25:9c:26:f2:7c:8d:b0:42:76: 52:1b:ac:9f:16:59:ad:85:d9:83:b7:61:ee:7e:50: 8c:18:40:00:30:8e:a8:f9:95:44:55:a5:04:e8:97: b4:6f:91:5f:78:bd:3c:dc:6f:88:74:e9:46:ff:a8: a7:e9:1e:96:e2:dc:a9:5f:91:9a:dd:b4:e5:05:cf: 86:5d:63:1c:cc:dc:e6:ad:4a:85:70:5f:44:61:51: f2:97:d8:1f:41:04:82:0f:4b:9c:1d:6f:33:bf:ab: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:31:22:8D:76:C7:97:4F:D3:38:EA:A1:17:19:DC:16:F4:13:6F:2E X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4d:d7:04:7d:6f:28:5b:4b:67:06:dc:2c:72:4a:8f:9f:42: f9:58:88:6f:93:ae:8d:48:93:16:26:10:9a:e1:b9:26:e8:f2: 45:9c:12:f7:2f:d0:5f:5f:46:d4:f7:dd:53:05:51:3d:90:45: d8:00:9f:0a:a8:9e:48:4d:ea:79:eb:32:9d:bc:1a:9f:bf:4e: 28:e9:62:bb:20:5e:c7:bb:dd:c7:e9:aa:07:15:fb:97:61:5a: 59:12:52:be:c9:7f:5f:de:a0:12:50:30:a4:d8:23:e5:cd:d7: c9:1a:e3:11:df:f0:62:7f:eb:75:25:09:7d:c0:50:58:9e:cb: c0:47:21:62:a7:62:2d:1b:c7:5e:79:6c:af:d3:ed:f4:4b:ef: 07:ae:a4:bf:28:2d:9a:6f:a8:01:07:c4:2e:f0:08:09:de:80: f8:c2:0a:c1:14:37:90:43:ca:e4:d4:39:2e:7a:15:c1:1e:3a: d5:bf:b1:90:a1:99:37:ba:c2:5a:b9:81:48:30:e7:63:8b:c9: f0:17:44:ec:ad:9e:8b:a6:c9:30:3f:5a:33:66:10:17:df:ee: 74:57:3d:40:49:16:e3:be:e2:68:b2:d3:f2:ee:9b:ec:2f:9a: 9c:6b:62:53:0c:74:35:b8:ea:95:86:87:43:ca:5e:8a:15:13: 06:77:5b:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoOTIwRTdEMDkxRjE1NTY5RjJEODM0MEM2NTgyQjk1OTVF QzA2NTY4MDAeFw0yNTA3MTkwNzQ4MzhaFw0yNTA3MjYwNzQ4MzhaMBgxFjAUBgNV BAMTDTY4N2I0ZGQ2LTgwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnDUH2BU6UfPMv9SsA7JorDMC9UzScONlLz8VGQPSlj7yD7eVYK1ZT/q6nVnGP XGNZV80qYCrA5POdc7HhAg3rnkg68hr+hFtzBgH/veEaLSqdSCaWefAcksb8Hq8Q 2cb2d8HxOo1UQwmOLeMhinh6F7BQhorqruq52/JeV5SA7iNOpAkup9u96+IOCPuz fuTRz8I1u6PkEOUoeSWcJvJ8jbBCdlIbrJ8WWa2F2YO3Ye5+UIwYQAAwjqj5lURV pQTol7RvkV94vTzcb4h06Ub/qKfpHpbi3KlfkZrdtOUFz4ZdYxzM3OatSoVwX0Rh UfKX2B9BBIIPS5wdbzO/q5z/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeDEijXbH l0/TOOqhFxncFvQTby4wHwYDVR0jBBgwFoAUkg59CR8VVp8tg0DGWCuVlewGVoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0YxQzc0NDdFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1Zv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2c1OUNSOFZWcDh0ZzBER1dDdVZsZXdHVm9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0YxQzc0NDdFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4 dGcwREdXQ3VWbGV3R1ZvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK1N1wR9byhbS2cG3CxySo+fQvlYiG+Tro1IkxYmEJrhuSbo8kWcEvcv 0F9fRtT33VMFUT2QRdgAnwqonkhN6nnrMp28Gp+/TijpYrsgXse73cfpqgcV+5dh WlkSUr7Jf1/eoBJQMKTYI+XN18ka4xHf8GJ/63UlCX3AUFiey8BHIWKnYi0bx155 bK/T7fRL7weupL8oLZpvqAEHxC7wCAnegPjCCsEUN5BDyuTUOS56FcEeOtW/sZCh mTe6wlq5gUgw52OLyfAXROytnoumyTA/WjNmEBff7nRXPUBJFuO+4miy0/Lum+wv mpxrYlMMdDW46pWGh0PKXooVEwZ3W0c= -----END CERTIFICATE-----Generated at Sun Jul 20 15:10:49 2025 by rpki-client