$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json) Hash identifier: DFXjJVwRW/8MWSGtN0X5oIcM2/fUXZmjNN257izgvZk= Subject key identifier: E8:89:0D:9A:AC:4D:D1:0B:8E:E8:B4:70:35:45:33:D7:74:22:36:9E Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Certificate serial: 05F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft Manifest number: 05F2 Signing time: Fri 18 Jul 2025 23:14:57 +0000 Manifest this update: Fri 18 Jul 2025 23:14:57 +0000 Manifest next update: Fri 25 Jul 2025 23:14:57 +0000 Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: ve2AQ5ZA2mwKdGwvOjdTavJTN0xQBVA1vTZV5rdhve4=) 2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: Zin5Bd4weOB/NhOZcniDknZ2HAO8m6tl6cWhzqt6SiQ=) 3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: 7ouwwfgk28NyLw1cYRcaWcwCb0VnFZR8rpTez7FwTos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Validity Not Before: Jul 18 23:14:57 2025 GMT Not After : Jul 25 23:14:57 2025 GMT Subject: CN=687ad571-aa1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:cf:72:64:40:47:40:93:23:18:2e:0d:b6: a2:a0:8c:5e:a8:40:9c:72:9b:98:34:fd:c9:78:7d: cc:48:ca:6e:c2:71:86:67:61:5c:ea:cd:5a:e5:5f: c7:9a:35:f3:f7:a0:be:1a:84:76:f8:6d:45:99:87: a5:69:ca:d7:a9:1d:9c:4f:1f:2a:53:6f:5c:05:f8: 46:0f:81:80:c1:f2:ef:b5:5b:e6:38:5b:41:14:03: 03:8f:f7:b2:5a:cd:60:6c:37:79:9a:bf:ff:ec:b5: 2d:28:fe:95:c3:14:73:0a:ed:68:60:bb:57:d7:95: c6:d3:6a:01:65:4c:68:63:fe:13:64:26:5a:6c:73: 38:1f:5b:dc:10:4a:41:53:84:4c:60:e5:ac:6f:f5: 11:3a:9e:7c:ac:b1:c0:58:20:6c:7c:6c:19:19:5e: 6f:b6:93:0a:00:b5:fa:c5:67:ee:67:87:69:62:fb: bb:aa:ee:dc:dc:d6:d4:89:15:b2:48:5a:ee:a4:3f: 29:ea:3e:e8:04:54:17:22:d9:c3:38:d3:36:d7:e1: 6d:3b:3e:17:3a:15:d1:fc:ce:53:5e:a0:c9:28:de: 65:fc:ef:aa:02:44:ab:bd:7f:6e:fe:20:30:4d:aa: fd:5e:97:8c:ed:eb:be:a3:3e:c1:8b:e5:47:c7:20: 92:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:89:0D:9A:AC:4D:D1:0B:8E:E8:B4:70:35:45:33:D7:74:22:36:9E X509v3 Authority Key Identifier: keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:34:86:a5:8b:35:5d:8f:b0:64:95:fb:58:96:8d:c6:55:f1: 8c:f0:90:cf:f8:70:db:67:c6:34:b7:16:b4:f2:74:bb:df:b7: aa:99:9e:5f:92:d2:1e:c2:83:e1:db:82:cb:4f:41:9e:5d:08: a7:28:15:6d:da:90:fb:38:d5:3c:c1:29:b9:dc:b7:39:2f:da: fc:af:92:86:96:0d:13:94:9b:04:9a:98:bc:d7:4e:20:30:2f: 19:c4:80:29:27:a7:c5:cc:6f:6f:cf:87:d1:67:40:22:b8:87: 09:86:89:da:56:c8:c1:fb:93:91:50:d0:76:63:73:26:05:6a: 28:55:4e:d9:14:16:31:30:a9:c5:15:84:eb:c1:77:98:d2:1a: 4f:c4:68:25:84:84:15:40:4a:22:36:af:0e:8f:a6:8d:bf:dd: 73:98:4c:bb:a9:88:9f:62:14:62:23:84:66:7d:29:57:7c:37: 7e:4b:64:20:29:98:2b:53:80:f5:8e:a2:3e:62:ca:51:48:8f: e9:ba:55:49:76:da:33:18:21:9a:0b:b1:84:1f:50:ab:62:b3: 8c:12:fc:04:27:a3:bc:a5:f9:12:e0:64:56:ad:0c:1c:9c:8c: 6f:3a:27:fe:bc:56:3a:83:4f:52:c1:e3:24:c8:8c:6d:45:eb: f1:c8:2c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF NzA5OTRGMDMwHhcNMjUwNzE4MjMxNDU3WhcNMjUwNzI1MjMxNDU3WjAYMRYwFAYD VQQDEw02ODdhZDU3MS1hYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAHPcmRAR0CTIxguDbaioIxeqECccpuYNP3JeH3MSMpuwnGGZ2Fc6s1a5V/H mjXz96C+GoR2+G1FmYelacrXqR2cTx8qU29cBfhGD4GAwfLvtVvmOFtBFAMDj/ey Ws1gbDd5mr//7LUtKP6VwxRzCu1oYLtX15XG02oBZUxoY/4TZCZabHM4H1vcEEpB U4RMYOWsb/UROp58rLHAWCBsfGwZGV5vtpMKALX6xWfuZ4dpYvu7qu7c3NbUiRWy SFrupD8p6j7oBFQXItnDONM21+FtOz4XOhXR/M5TXqDJKN5l/O+qAkSrvX9u/iAw Tar9XpeM7eu+oz7Bi+VHxyCS1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiJDZqs TdELjui0cDVFM9d0IjaeMB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5 QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFNC8yNzUwNTg4MkI5QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZS MnpteU4wTmJGMDNuQ1pUd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtNIalizVdj7BklftYlo3GVfGM8JDP+HDbZ8Y0txa08nS737eqmZ5f ktIewoPh24LLT0GeXQinKBVt2pD7ONU8wSm53Lc5L9r8r5KGlg0TlJsEmpi8104g MC8ZxIApJ6fFzG9vz4fRZ0AiuIcJhonaVsjB+5ORUNB2Y3MmBWooVU7ZFBYxMKnF FYTrwXeY0hpPxGglhIQVQEoiNq8Oj6aNv91zmEy7qYifYhRiI4RmfSlXfDd+S2Qg KZgrU4D1jqI+YspRSI/pulVJdtozGCGaC7GEH1CrYrOMEvwEJ6O8pfkS4GRWrQwc nIxvOif+vFY6g09SweMkyIxtRevxyCxo -----END CERTIFICATE-----Generated at Sun Jul 20 07:57:59 2025 by rpki-client