$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: 5BS1CfwIPgKB2bT6o9j8YXR/RN22+w199tP29vdja3Y= Subject key identifier: 87:DF:B6:07:79:AA:87:7E:5A:90:05:E9:F4:77:11:4E:E9:95:07:C4 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 0146 Signing time: Sat 19 Jul 2025 04:29:15 +0000 Manifest this update: Sat 19 Jul 2025 04:29:14 +0000 Manifest next update: Sat 26 Jul 2025 04:29:14 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: hvXr2559GZHxAYeLMq1IIaS9Yvh5VpGve5dQm7t5Mas=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: fKu+QnI9JJSs0/0qC7wtQtv1o9IdD9KvcLGhg+7rRMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Jul 19 04:29:14 2025 GMT Not After : Jul 26 04:29:14 2025 GMT Subject: CN=687b1f1a-9ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:65:c5:85:fb:23:74:63:6f:06:55:b3:c5: 47:d0:36:8e:8b:ce:c1:20:5b:b6:b2:d0:71:14:76: ee:3c:4d:00:4d:5b:e4:0e:22:69:94:6a:44:36:d3: 8d:31:79:69:7a:61:08:93:1c:c6:35:be:6b:62:28: 83:05:f2:b7:aa:1f:6e:6f:31:5a:16:a1:f6:ce:80: 18:11:f3:df:1f:5d:76:f2:b3:fc:0a:ac:dc:7f:22: a5:cb:8e:0d:26:b6:d2:2b:1f:ef:19:22:39:f6:61: 29:dd:37:71:4c:8f:5d:9b:d5:06:df:c2:6c:38:22: b7:58:90:05:91:48:e0:63:7a:ed:e9:00:25:eb:a0: e8:b5:5c:a1:07:3f:5c:d2:c8:cb:ec:ba:66:42:dd: 72:64:43:a4:05:99:15:b1:8e:3d:35:4b:c3:6c:a4: 90:49:e9:18:fd:f9:0a:55:98:cd:6c:70:cb:6b:10: cf:fc:27:67:1d:65:77:4b:67:32:77:d5:51:ac:dc: 35:d3:5b:c7:5d:ae:41:13:2b:b2:d4:92:a5:4a:68: 46:f0:2e:a8:cc:2d:61:83:7f:9d:d1:e7:df:cf:f9: 7b:eb:f7:f5:02:60:87:c3:47:f3:1d:1d:a9:fb:4a: f6:34:25:45:1c:a1:5b:af:22:2e:d3:7a:eb:32:05: 80:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:B6:07:79:AA:87:7E:5A:90:05:E9:F4:77:11:4E:E9:95:07:C4 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:45:42:c4:2d:45:e4:b7:76:b0:08:88:1b:d2:a1:1f:52:1c: 44:b9:80:3d:d4:c1:94:f3:72:19:43:94:af:57:56:19:cb:8d: 87:a7:ec:1e:16:ae:fb:eb:ae:e3:fc:87:e0:6e:86:c0:3b:38: 56:25:cd:3e:06:13:2e:2f:a1:cc:17:02:0c:18:1c:60:1d:06: 17:18:32:bd:4d:b1:78:53:41:e4:e4:1d:2d:b5:7e:b0:9c:3a: 8a:ba:3f:3f:7a:7a:0e:eb:d3:b5:d0:3b:8d:f0:c4:45:43:cd: 3a:91:62:d9:f1:6d:97:95:70:17:6c:38:9d:e7:b3:e3:5e:b7: c5:e7:76:88:a4:10:92:50:6e:52:f2:d0:c2:6c:be:00:cd:41: d9:04:cd:23:da:4f:79:fe:05:62:e5:b9:af:4d:8e:49:84:92: 89:d7:03:d9:52:d1:08:f3:a5:7a:0b:fa:34:9b:9b:32:0d:e0: 7e:fb:b9:63:3e:c5:a1:3d:b3:b6:f6:6b:df:b2:6c:ef:30:fe: 28:90:40:33:bd:f2:85:c4:4e:30:5b:25:a4:3e:0f:4a:f1:c4: cc:87:b6:ca:af:7a:4b:08:dd:5e:5e:93:e7:d1:d2:4c:f8:50: 52:67:bd:06:d5:6f:7c:cf:25:49:a6:7c:5c:04:02:44:b3:a9: cc:85:07:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjUwNzE5MDQyOTE0WhcNMjUwNzI2MDQyOTE0WjAYMRYwFAYD VQQDEw02ODdiMWYxYS05ZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkUxlxYX7I3RjbwZVs8VH0DaOi87BIFu2stBxFHbuPE0ATVvkDiJplGpENtON MXlpemEIkxzGNb5rYiiDBfK3qh9ubzFaFqH2zoAYEfPfH1128rP8CqzcfyKly44N JrbSKx/vGSI59mEp3TdxTI9dm9UG38JsOCK3WJAFkUjgY3rt6QAl66DotVyhBz9c 0sjL7LpmQt1yZEOkBZkVsY49NUvDbKSQSekY/fkKVZjNbHDLaxDP/CdnHWV3S2cy d9VRrNw101vHXa5BEyuy1JKlSmhG8C6ozC1hg3+d0effz/l76/f1AmCHw0fzHR2p +0r2NCVFHKFbryIu03rrMgWAswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfftgd5 qod+WpAF6fR3EU7plQfEMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDRULELUXkt3awCIgb0qEfUhxEuYA91MGU83IZQ5SvV1YZy42Hp+we Fq77667j/IfgbobAOzhWJc0+BhMuL6HMFwIMGBxgHQYXGDK9TbF4U0Hk5B0ttX6w nDqKuj8/enoO69O10DuN8MRFQ806kWLZ8W2XlXAXbDid57PjXrfF53aIpBCSUG5S 8tDCbL4AzUHZBM0j2k95/gVi5bmvTY5JhJKJ1wPZUtEI86V6C/o0m5syDeB++7lj PsWhPbO29mvfsmzvMP4okEAzvfKFxE4wWyWkPg9K8cTMh7bKr3pLCN1eXpPn0dJM +FBSZ70G1W98zyVJpnxcBAJEs6nMhQep -----END CERTIFICATE-----Generated at Sun Jul 20 07:38:30 2025 by rpki-client