$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: 58FLGZ/mZPTIzRztuSQqV3LAwPG0Cho1/vPZVwcxNrw= Subject key identifier: 45:7E:84:66:08:63:62:19:EE:96:11:3C:C6:24:48:4A:5A:C4:F6:01 Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 055F Signing time: Fri 18 Jul 2025 23:41:57 +0000 Manifest this update: Fri 18 Jul 2025 23:41:57 +0000 Manifest next update: Fri 25 Jul 2025 23:41:57 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: SwVQDIQottOyFkzdviCNmWoM88X91bYsc6LQQXQkjUI=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: li3UtGYjrBf3C8NwlkMmtocNy8KFUcDjCj/BKLVAeWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Validity Not Before: Jul 18 23:41:57 2025 GMT Not After : Jul 25 23:41:57 2025 GMT Subject: CN=687adbc5-b542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:2e:86:54:cb:20:5b:87:ad:fb:90:a1:9d: 91:64:44:3e:82:83:21:63:5b:1c:c7:94:52:ea:64: d1:b6:8b:14:36:cf:2f:5c:9c:fd:20:f2:4c:62:71: 1d:dd:73:11:80:27:f4:59:a9:e6:f3:28:77:2e:3e: a2:e5:ee:de:f1:a4:7f:3d:46:1e:25:46:27:d2:56: 55:9d:3f:43:0c:d9:c9:e3:0a:a9:37:31:0e:07:7e: 21:ab:a0:b6:96:c4:c2:3f:38:f6:dc:35:bd:7a:07: da:ef:ac:fa:f6:b6:b6:a9:98:16:b9:16:60:62:fa: 98:84:5b:af:46:1d:af:9b:99:d4:57:24:1f:a3:79: 97:b7:55:11:68:82:8e:8e:92:bd:39:5a:7f:a0:f2: 72:80:85:30:0b:38:fb:9d:01:34:96:1e:cb:17:b5: 12:dc:2b:e0:69:5b:c2:78:a2:53:4e:69:20:cb:26: 74:c1:b5:33:e8:fb:b2:6d:e3:f1:ce:d4:f6:b2:10: 97:aa:ef:c3:47:de:9a:e0:e0:48:3d:6f:1f:83:c7: 70:48:7e:82:d6:ce:ac:f4:9d:63:48:4d:ad:4c:08: 9d:e5:32:ef:7d:f0:77:75:74:29:55:65:cb:55:48: 6b:7c:60:33:80:51:bf:20:f4:1a:73:e5:fc:ca:e6: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7E:84:66:08:63:62:19:EE:96:11:3C:C6:24:48:4A:5A:C4:F6:01 X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b8:1d:99:d4:9e:50:f4:c6:dc:ca:71:bc:3d:df:f2:a5:b2: ff:3a:62:45:18:37:7e:4b:f7:5c:39:54:01:55:1a:4b:dd:ad: ab:69:8b:85:50:12:a5:04:8e:18:9e:dd:3c:38:85:e2:db:b9: b6:e0:b8:61:3d:6f:71:2d:65:da:7f:17:cd:f4:2a:78:2e:21: e6:a0:29:67:08:bc:61:93:1d:94:bd:37:16:a6:50:75:f6:e8: 57:0b:d4:21:09:c8:48:67:24:f3:6d:f4:06:89:70:a5:24:f4: ba:e6:98:74:4d:a2:f2:e9:32:04:3c:6f:85:d9:71:de:25:89: c8:ba:c8:6c:92:7b:5e:75:68:8a:74:a4:39:83:a7:a9:26:af: 99:16:62:61:cc:09:8b:74:88:34:2f:8e:c5:60:79:15:19:e0: 26:3a:07:4f:3f:78:d2:b0:78:3f:09:dc:e6:d8:7c:ac:43:18: 3b:2e:c5:fe:81:57:74:6c:94:81:4e:56:4d:f9:30:6d:b3:2c: 38:b2:09:52:2a:ef:3f:d5:9a:7a:c5:e7:ef:87:54:aa:31:75: ba:a1:e9:3f:77:f9:c9:5a:f9:69:7a:08:91:9b:7a:e9:82:85: 62:72:b9:52:bb:bc:43:b2:1b:ac:39:45:8d:35:9e:4f:8f:61: 36:1c:81:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjUwNzE4MjM0MTU3WhcNMjUwNzI1MjM0MTU3WjAYMRYwFAYD VQQDEw02ODdhZGJjNS1iNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukIuhlTLIFuHrfuQoZ2RZEQ+goMhY1scx5RS6mTRtosUNs8vXJz9IPJMYnEd 3XMRgCf0Wanm8yh3Lj6i5e7e8aR/PUYeJUYn0lZVnT9DDNnJ4wqpNzEOB34hq6C2 lsTCPzj23DW9egfa76z69ra2qZgWuRZgYvqYhFuvRh2vm5nUVyQfo3mXt1URaIKO jpK9OVp/oPJygIUwCzj7nQE0lh7LF7US3CvgaVvCeKJTTmkgyyZ0wbUz6PuybePx ztT2shCXqu/DR96a4OBIPW8fg8dwSH6C1s6s9J1jSE2tTAid5TLvffB3dXQpVWXL VUhrfGAzgFG/IPQac+X8yuYIuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV+hGYI Y2IZ7pYRPMYkSEpaxPYBMB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNuB2Z1J5Q9MbcynG8Pd/ypbL/OmJFGDd+S/dcOVQBVRpL3a2raYuF UBKlBI4Ynt08OIXi27m24LhhPW9xLWXafxfN9Cp4LiHmoClnCLxhkx2UvTcWplB1 9uhXC9QhCchIZyTzbfQGiXClJPS65ph0TaLy6TIEPG+F2XHeJYnIushskntedWiK dKQ5g6epJq+ZFmJhzAmLdIg0L47FYHkVGeAmOgdPP3jSsHg/Cdzm2HysQxg7LsX+ gVd0bJSBTlZN+TBtsyw4sglSKu8/1Zp6xefvh1SqMXW6oek/d/nJWvlpegiRm3rp goVicrlSu7xDshusOUWNNZ5Pj2E2HIEi -----END CERTIFICATE-----Generated at Sun Jul 20 06:27:24 2025 by rpki-client