$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json) Hash identifier: gZo74AunzSVrVOjLPB3zYx5r72YfvdxZlgjWMGnB1ko= Subject key identifier: 53:FB:82:19:8D:F0:CA:E9:D3:1F:3E:61:E4:DA:FD:16:E8:0A:7C:04 Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Certificate serial: 0AC2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft Manifest number: 0ABA Signing time: Fri 18 Jul 2025 19:45:52 +0000 Manifest this update: Fri 18 Jul 2025 19:45:51 +0000 Manifest next update: Fri 25 Jul 2025 19:45:51 +0000 Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: rtWBUoeMJVpuPLOPO+gIubeeMRwe3TfqV1dT1wUy4h4=) 2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: 3V95dG8EwbjGC7EMndTVlVAHQWvt90W2HKQwUZ++P/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2754 (0xac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Validity Not Before: Jul 18 19:45:51 2025 GMT Not After : Jul 25 19:45:51 2025 GMT Subject: CN=687aa470-676a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:45:40:72:57:a5:ec:bd:0b:fa:7b:88:51: 60:2e:3c:66:54:0c:7c:f0:71:e6:17:66:2f:d0:39: 6a:e0:c4:59:ec:28:35:f9:e2:14:48:dc:ab:c5:41: b4:e2:97:0f:60:05:0d:a7:83:b6:7a:a6:c5:60:06: ba:86:41:b6:43:8d:7b:d1:19:e5:41:9c:39:5f:d6: e7:a6:c3:4c:b0:35:85:f2:4a:76:0f:3c:25:cb:05: e2:53:69:ef:35:f5:4e:c4:5f:a7:4e:17:fc:bb:5e: b5:7a:48:44:ab:98:b1:ee:14:8e:be:ad:07:2a:3e: 7e:32:4a:05:6e:6e:cf:dd:c8:06:6a:2b:e6:93:76: 20:86:7e:87:a8:43:59:7c:95:20:03:f0:0a:8e:4f: 16:23:d7:5a:00:11:a3:45:e3:de:22:85:78:25:8a: 7b:0e:1e:a8:6b:29:41:b9:12:79:c3:f0:9c:15:13: 44:10:86:dc:d7:ef:40:cf:fe:d6:9b:0b:79:41:84: 6f:a9:25:b3:46:0b:23:a9:c9:42:5d:68:a7:1d:e2: ef:ab:dc:2a:f5:86:bf:4d:e5:1b:76:2f:5d:93:10: 89:98:79:70:65:9a:fa:ac:15:2d:e9:8d:cc:4d:da: 81:d7:14:87:bf:e6:83:6c:7e:c4:b6:e3:89:44:fe: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FB:82:19:8D:F0:CA:E9:D3:1F:3E:61:E4:DA:FD:16:E8:0A:7C:04 X509v3 Authority Key Identifier: keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:da:cc:30:27:cb:6a:da:f9:77:84:2c:84:58:86:00:40:a5: c4:bf:b4:13:9a:7b:be:b9:63:f4:a6:64:df:e4:42:f2:7e:0b: 74:55:76:4e:2a:aa:93:92:b1:12:bc:51:df:51:29:74:b1:be: 3c:73:d2:57:6a:a7:12:72:a4:23:60:cb:8a:35:97:27:bd:b4: 69:cc:9e:54:84:a0:88:a7:19:ee:0f:79:16:54:f8:59:dd:ea: c0:5c:4d:e1:d0:d9:2e:f3:a2:ae:66:9d:0c:df:18:4e:94:2e: be:4a:ac:62:74:a9:9f:b3:ff:bc:33:f9:24:35:a7:39:40:52: eb:73:6c:a5:31:89:0e:50:e8:1f:ed:15:46:2a:bd:57:d6:ef: ec:11:08:aa:67:7b:95:18:08:b6:8f:14:50:02:44:f7:b4:6b: 2e:bb:3e:1f:f8:04:cd:fa:2e:24:48:d3:7e:d9:51:b7:43:69: e1:a0:89:9c:e0:26:eb:78:c5:2f:92:3a:40:b5:86:c2:44:53: 1d:ff:f5:ef:3a:b6:be:7b:b3:7b:81:a7:5b:e7:2f:50:d7:6d: 75:7d:42:10:b9:34:53:a3:5b:f1:1e:3e:af:73:4d:83:8e:1d: d1:64:82:25:c4:c5:7e:e9:0a:b7:03:c9:47:a4:c7:00:a7:b8: f8:1c:8e:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4 NjYzNEFBMDMwHhcNMjUwNzE4MTk0NTUxWhcNMjUwNzI1MTk0NTUxWjAYMRYwFAYD VQQDEw02ODdhYTQ3MC02NzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyhFQHJXpey9C/p7iFFgLjxmVAx88HHmF2Yv0Dlq4MRZ7Cg1+eIUSNyrxUG0 4pcPYAUNp4O2eqbFYAa6hkG2Q4170RnlQZw5X9bnpsNMsDWF8kp2DzwlywXiU2nv NfVOxF+nThf8u161ekhEq5ix7hSOvq0HKj5+MkoFbm7P3cgGaivmk3Yghn6HqENZ fJUgA/AKjk8WI9daABGjRePeIoV4JYp7Dh6oaylBuRJ5w/CcFRNEEIbc1+9Az/7W mwt5QYRvqSWzRgsjqclCXWinHeLvq9wq9Ya/TeUbdi9dkxCJmHlwZZr6rBUt6Y3M TdqB1xSHv+aDbH7EtuOJRP6QPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFP7ghmN 8Mrp0x8+YeTa/RboCnwEMB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9BRUQzRDM1RTU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1q el9xeFVnakFycGlHWTBxZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC12swwJ8tq2vl3hCyEWIYAQKXEv7QTmnu+uWP0pmTf5ELyfgt0VXZO KqqTkrESvFHfUSl0sb48c9JXaqcScqQjYMuKNZcnvbRpzJ5UhKCIpxnuD3kWVPhZ 3erAXE3h0Nku86KuZp0M3xhOlC6+SqxidKmfs/+8M/kkNac5QFLrc2ylMYkOUOgf 7RVGKr1X1u/sEQiqZ3uVGAi2jxRQAkT3tGsuuz4f+ATN+i4kSNN+2VG3Q2nhoImc 4CbreMUvkjpAtYbCRFMd//XvOra+e7N7gadb5y9Q1211fUIQuTRTo1vxHj6vc02D jh3RZIIlxMV+6Qq3A8lHpMcAp7j4HI7m -----END CERTIFICATE-----Generated at Sun Jul 20 18:48:59 2025 by rpki-client