$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: Yp3W4ud7yIq9nEONiR+sI1b2KrMwXV0pksNZcSpMbMg= Subject key identifier: EB:47:27:2D:76:2E:53:16:4A:ED:4F:8F:E8:EC:57:28:AF:85:52:86 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1A5B Signing time: Sun 20 Jul 2025 16:23:49 +0000 Manifest this update: Sun 20 Jul 2025 16:23:49 +0000 Manifest next update: Sun 27 Jul 2025 16:23:49 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: P97EyCei4+BMHeeIaTHZm3eWUju91BmGGJvqTjp4m/o=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 1W3bZjmYo4y/faIyWLiaDn4cNEWTqd/xhoIAZdOleqM=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: TLONDMWL445NprQnaTNbCcptxCxIxQNuQM0ZkVZunuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6780 (0x1a7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Jul 20 16:23:49 2025 GMT Not After : Jul 27 16:23:49 2025 GMT Subject: CN=687d1815-6d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:3f:c9:5c:8d:40:da:96:4f:32:b9:13:e1: 56:46:d1:a9:6f:92:b2:c6:6d:0a:65:f5:07:d4:89: 92:0d:92:15:d4:a3:d3:33:1a:60:f1:89:06:59:5e: a1:df:83:f2:c9:24:c4:ad:d0:fa:7d:71:42:59:d4: d7:46:1b:68:70:0f:ed:1a:d7:a0:2b:b3:f1:f2:0c: fe:c2:5a:ff:72:8b:db:36:14:4d:f0:4c:f6:8b:df: 82:df:1d:86:17:93:be:da:a8:9c:de:1e:fd:d9:2f: 4d:cf:77:e6:2f:be:82:19:5c:ce:72:77:56:fe:fa: d1:a8:bc:f9:79:92:db:36:90:18:c6:40:40:8e:31: 9e:80:54:0d:50:d7:14:a4:6a:19:ab:1c:ae:22:82: be:2a:6d:9a:d2:b4:35:9e:01:87:ca:9f:3d:30:57: 59:d8:1e:00:60:d8:d9:30:9a:16:25:01:71:34:c8: c7:42:da:d9:c1:44:ce:8e:6a:3f:bd:e1:50:f6:6e: 50:02:e3:fe:23:e7:ab:07:a0:1b:79:90:02:79:25: 96:57:16:c2:2c:fc:ea:72:66:70:e5:de:b4:7e:b1: c2:b1:f2:8f:d5:2d:6c:b5:31:4e:55:d1:01:b7:78: 6f:f6:98:ba:f5:a3:0a:ce:c0:f3:c3:18:d3:b9:66: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:47:27:2D:76:2E:53:16:4A:ED:4F:8F:E8:EC:57:28:AF:85:52:86 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:07:8e:f9:39:ab:ba:b6:80:9b:24:7e:e6:d6:3d:ef:45:17: 79:b6:e6:e4:6a:52:de:29:83:98:57:2b:bf:a9:c0:33:bd:ce: 37:61:3e:8f:2f:f7:d3:b5:5d:2c:50:9f:29:ed:5c:f0:ea:d1: f2:6d:e3:ac:e6:3b:41:3f:cf:a4:59:bf:6b:9f:5d:da:d7:0c: 88:a7:9f:50:c5:aa:95:6c:a5:3f:8d:65:3f:c4:eb:6d:b5:39: 63:d1:b1:42:61:c1:6d:d2:e9:b0:40:1a:61:6c:d7:b9:0b:77: a2:e4:e4:94:3e:74:fd:30:06:92:4b:cf:c8:c1:4b:c1:07:98: 9d:7e:dc:b5:05:15:de:76:ad:ab:d7:f8:38:9c:fc:58:86:c2: 0d:ac:66:30:75:48:94:be:aa:86:23:a2:2b:0e:80:9a:b5:e8: e2:7c:59:79:82:4f:cb:cf:4c:9a:a5:d5:95:98:ca:a4:1f:b3: 69:89:f7:ca:d5:ea:d4:b5:74:e3:12:27:ef:a9:40:3a:be:cc: 02:28:40:e6:67:06:f3:96:20:46:ce:d2:03:09:ed:6d:7f:e6: d0:bd:ac:3e:8b:b6:57:7b:fe:34:86:33:a6:d1:5c:cd:48:33: 98:04:11:98:b5:66:a0:36:30:ad:a4:fd:0e:05:62:02:78:cb: 7d:c0:71:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUwNzIwMTYyMzQ5WhcNMjUwNzI3MTYyMzQ5WjAYMRYwFAYD VQQDEw02ODdkMTgxNS02ZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHY/yVyNQNqWTzK5E+FWRtGpb5Kyxm0KZfUH1ImSDZIV1KPTMxpg8YkGWV6h 34PyySTErdD6fXFCWdTXRhtocA/tGtegK7Px8gz+wlr/covbNhRN8Ez2i9+C3x2G F5O+2qic3h792S9Nz3fmL76CGVzOcndW/vrRqLz5eZLbNpAYxkBAjjGegFQNUNcU pGoZqxyuIoK+Km2a0rQ1ngGHyp89MFdZ2B4AYNjZMJoWJQFxNMjHQtrZwUTOjmo/ veFQ9m5QAuP+I+erB6AbeZACeSWWVxbCLPzqcmZw5d60frHCsfKP1S1stTFOVdEB t3hv9pi69aMKzsDzwxjTuWbYtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtHJy12 LlMWSu1Pj+jsVyivhVKGMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7B475Oau6toCbJH7m1j3vRRd5tubkalLeKYOYVyu/qcAzvc43YT6P L/fTtV0sUJ8p7Vzw6tHybeOs5jtBP8+kWb9rn13a1wyIp59QxaqVbKU/jWU/xOtt tTlj0bFCYcFt0umwQBphbNe5C3ei5OSUPnT9MAaSS8/IwUvBB5idfty1BRXedq2r 1/g4nPxYhsINrGYwdUiUvqqGI6IrDoCatejifFl5gk/Lz0yapdWVmMqkH7NpiffK 1erUtXTjEifvqUA6vswCKEDmZwbzliBGztIDCe1tf+bQvaw+i7ZXe/40hjOm0VzN SDOYBBGYtWagNjCtpP0OBWICeMt9wHHe -----END CERTIFICATE-----Generated at Mon Jul 21 05:56:43 2025 by rpki-client