$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: bn3wJQ1PILYLLCjQ99UxB++W8l3SenmxDHK3TY2WJRQ= Subject key identifier: A5:BF:A2:D7:06:3A:36:DD:50:CF:B7:CE:40:F3:FE:F4:4C:29:CD:88 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 019A Signing time: Sat 19 Jul 2025 03:45:31 +0000 Manifest this update: Sat 19 Jul 2025 03:45:31 +0000 Manifest next update: Sat 26 Jul 2025 03:45:31 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: 6E7yOFjZGWSKQ5+4JiaWsxwY+0MNDKesdEXg93fEctU=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: 3V/ibErrTNJ9w1YW/LwCYcNNPjpkRJOqZOAkX5zvOXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Jul 19 03:45:31 2025 GMT Not After : Jul 26 03:45:31 2025 GMT Subject: CN=687b14db-1a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:a2:17:1a:72:cd:09:0e:61:8f:f2:12:d6: 0f:51:63:e6:9b:2e:69:8e:fa:38:80:25:18:2f:24: b3:e3:a3:6d:e7:e6:78:3a:d8:d2:5c:d3:48:8d:2b: e1:d4:ff:29:9f:34:e2:e5:25:a3:ae:90:4f:04:f8: 2b:4b:14:ce:4d:67:6a:c4:d2:bc:ed:4d:6d:b8:f7: 1d:50:fc:f8:bf:c1:c8:4d:e0:06:61:8a:1c:f6:09: d7:f7:96:f6:1e:4e:2d:ab:9c:bb:69:e4:0f:dd:fb: 65:85:71:f4:69:f6:de:f6:49:fc:31:ae:d6:dc:44: 6a:5f:b2:69:e7:20:57:b8:18:3b:8d:d6:a2:94:c3: 3a:0c:da:a8:24:80:07:5d:f8:b3:f0:87:72:a6:24: 1c:6d:9f:88:4f:b8:89:4d:1a:08:45:b8:3a:c7:69: 61:c2:0e:b3:5a:62:e4:69:e6:4b:fb:38:69:1c:2e: 23:15:dd:0d:20:cf:95:03:a1:31:c7:7d:29:ca:40: 2f:64:41:53:44:22:b7:93:a0:a7:bc:35:a9:99:23: b2:8b:6c:50:a9:7a:10:3e:b8:c8:d2:e4:8e:4f:eb: f5:2c:20:55:98:a3:ab:55:82:a4:21:3c:16:62:b2: 4f:fc:08:bf:39:70:9d:4c:37:40:da:f5:71:a1:02: 51:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BF:A2:D7:06:3A:36:DD:50:CF:B7:CE:40:F3:FE:F4:4C:29:CD:88 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:41:53:c0:3b:a4:23:65:01:f5:99:fb:e6:ff:15:e6:83:cf: 1d:07:50:cd:33:56:a3:5c:6b:fb:a8:29:cb:67:f1:70:65:f2: 55:a4:8c:4e:5a:21:35:7c:6e:ee:73:be:5c:1d:2d:ca:c1:dd: fe:1f:65:37:4a:55:d5:ad:ef:6d:7c:e1:aa:54:7a:05:17:e1: 11:33:3f:bb:b2:d3:d9:f6:c4:c9:71:d5:30:69:2c:54:45:f3: cb:b2:38:4a:4c:8c:d4:5a:29:8d:12:a9:5b:ac:ea:31:77:0c: dc:d0:70:40:13:d7:87:f9:62:03:94:7a:5c:bf:1b:4f:63:e1: e7:4c:fe:30:29:13:ab:3a:c7:6f:43:2e:cf:f8:20:89:72:7e: f9:96:22:dc:c5:5b:73:e2:0a:4f:84:d5:2d:3d:6c:2c:77:3b: 90:41:dd:82:39:0f:3a:96:53:29:fb:8d:5a:89:ba:4c:bf:bd: 9f:79:ef:df:83:89:7e:ef:96:8a:84:69:f4:d8:b1:4e:6a:e4: 09:16:32:16:49:0c:68:ba:ed:24:4a:78:c7:fa:e9:16:a5:0e: 71:0b:fd:40:02:da:3a:1d:e0:81:f2:2d:04:25:98:4b:cb:43: 0f:6c:0e:1b:fa:de:f8:25:3a:73:45:63:49:e3:29:80:6c:67: 4b:9f:f8:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjUwNzE5MDM0NTMxWhcNMjUwNzI2MDM0NTMxWjAYMRYwFAYD VQQDEw02ODdiMTRkYi0xYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQaiFxpyzQkOYY/yEtYPUWPmmy5pjvo4gCUYLySz46Nt5+Z4OtjSXNNIjSvh 1P8pnzTi5SWjrpBPBPgrSxTOTWdqxNK87U1tuPcdUPz4v8HITeAGYYoc9gnX95b2 Hk4tq5y7aeQP3ftlhXH0afbe9kn8Ma7W3ERqX7Jp5yBXuBg7jdailMM6DNqoJIAH Xfiz8IdypiQcbZ+IT7iJTRoIRbg6x2lhwg6zWmLkaeZL+zhpHC4jFd0NIM+VA6Ex x30pykAvZEFTRCK3k6CnvDWpmSOyi2xQqXoQPrjI0uSOT+v1LCBVmKOrVYKkITwW YrJP/Ai/OXCdTDdA2vVxoQJRjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKW/otcG OjbdUM+3zkDz/vRMKc2IMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiQVPAO6QjZQH1mfvm/xXmg88dB1DNM1ajXGv7qCnLZ/FwZfJVpIxO WiE1fG7uc75cHS3Kwd3+H2U3SlXVre9tfOGqVHoFF+ERMz+7stPZ9sTJcdUwaSxU RfPLsjhKTIzUWimNEqlbrOoxdwzc0HBAE9eH+WIDlHpcvxtPY+HnTP4wKROrOsdv Qy7P+CCJcn75liLcxVtz4gpPhNUtPWwsdzuQQd2COQ86llMp+41aibpMv72fee/f g4l+75aKhGn02LFOauQJFjIWSQxouu0kSnjH+ukWpQ5xC/1AAto6HeCB8i0EJZhL y0MPbA4b+t74JTpzRWNJ4ymAbGdLn/g3 -----END CERTIFICATE-----Generated at Sun Jul 20 06:45:35 2025 by rpki-client