$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft File: KtUm39nH6QyjDDH8pOGCUBtwB1M.mft (raw, json) Hash identifier: gExvKIKTcDg4/9jzH1ttzqPD6ioGTti6734FGBGRq4A= Subject key identifier: 52:E6:49:FA:FD:6C:FE:19:81:49:B5:A5:AC:17:B3:10:75:6D:21:6F Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 Certificate issuer: /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Certificate serial: 0673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft Manifest number: 0657 Signing time: Fri 18 Jul 2025 22:55:32 +0000 Manifest this update: Fri 18 Jul 2025 22:55:32 +0000 Manifest next update: Fri 25 Jul 2025 22:55:32 +0000 Files and hashes: 1: KtUm39nH6QyjDDH8pOGCUBtwB1M.crl (hash: mdYFNLo14jYv7KL0V6A9HUkDwTmZYzTvXRQG+kuwYA8=) 2: 4092F17AE64811EFA0F37560C4F9AE02.roa (hash: MuDOs+UNP3qWV7q9sz+FoRMoZ33SC0+8rektpH4Ht5s=) 3: 698130FEE60411EFA2DC3057C4F9AE02.roa (hash: Vt5tMPro7Yd+AkFJe3Cnn+BsDTWCkJWM0XoIlmggi2I=) 4: 5C75E87C95F511EBA6D31767C4F9AE02.roa (hash: lfQZb+Cu5k1P9aIBAVZr1VIcUuyX72bxEGl/rtrTc0A=) 5: 176E1D3E961411EB80BD4E1DC4F9AE02.roa (hash: guMsQztHXJe0nHYo+3sRzxnbrPq9rNiGro7Edp8V/SQ=) 6: 6CFB0FFCF65711EB8988A924C4F9AE02.roa (hash: 0e9NIIe4Eh6DQ3FvIOOg4nTVMnHbYlzq1N/yU/4pzQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AAA0, serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Validity Not Before: Jul 18 22:55:32 2025 GMT Not After : Jul 25 22:55:32 2025 GMT Subject: CN=687ad0e4-d612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:ba:98:73:3b:9a:ca:53:33:5b:b1:d8:0e: c4:c5:ee:e2:c9:96:88:16:6f:35:2e:e7:e9:d6:0a: 47:c4:e4:75:4b:9d:36:08:62:d8:04:af:f2:dc:30: 79:91:6c:e8:01:d3:07:05:77:8b:95:2c:0c:f2:4c: fa:21:b8:e4:54:2f:ad:1b:c9:c9:e8:d1:dd:19:8b: a3:38:e2:6f:57:13:ac:4c:f6:3a:d0:a0:71:09:b7: 7b:55:94:e9:1d:d9:28:7f:a8:1a:ba:22:ab:39:77: 5d:d5:82:01:32:74:e8:27:0e:c1:d8:a9:92:ea:2a: 8b:23:1b:cd:78:ae:fb:9a:db:81:18:50:d6:d8:cd: 8b:da:5a:47:ce:25:fe:b7:fd:90:e4:22:62:80:e9: bd:2c:e3:dc:98:85:71:57:fb:1c:79:33:34:df:5d: 1b:b2:31:cb:d6:b0:6c:01:08:e5:88:fb:0c:e4:17: f0:93:8a:7c:30:a5:5d:6e:b7:72:04:10:1f:22:67: 59:b3:a9:d0:84:43:37:e6:3a:c3:0a:ba:a2:de:31: 2e:ab:30:e2:33:8e:8b:4d:e8:d8:49:cc:27:09:b5: bb:65:9d:28:74:6f:6e:35:aa:af:22:1c:fa:99:07: 79:ef:4d:c5:d2:46:11:c1:f0:4a:df:43:8d:0b:cc: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E6:49:FA:FD:6C:FE:19:81:49:B5:A5:AC:17:B3:10:75:6D:21:6F X509v3 Authority Key Identifier: keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d4:48:90:19:22:7b:a6:f0:ad:d1:59:ca:39:1e:f0:e3:c9: 3a:cd:c5:2d:21:e8:d7:aa:c3:0b:b5:02:a2:1b:5d:64:16:75: c5:9a:bf:ec:e7:81:c6:9d:63:47:89:de:f8:bc:fe:37:a7:e6: 39:e1:50:dd:88:0d:15:1f:47:82:d7:fc:e6:f0:0a:3e:23:8b: 52:70:19:94:cb:30:2c:bc:d8:44:7d:2d:75:94:a2:79:f8:94: b9:ab:98:2c:e6:d2:40:58:7d:ab:5b:bf:e8:46:ce:51:2b:af: 4c:d0:b2:02:7a:ce:e3:df:23:32:83:a3:88:4e:c7:0a:9c:c6: 0e:51:55:4b:08:2c:37:21:cc:d2:1f:60:40:a3:0a:32:74:5c: ec:49:75:69:39:9d:7b:be:58:38:b0:9e:5a:af:9c:1b:5c:4f: 1a:7a:50:80:24:42:78:72:7e:ce:56:b7:bf:dd:bd:fe:37:b4: da:99:4a:29:2f:5f:e2:ba:29:d7:e2:02:04:f4:d5:4b:09:e1: 51:58:d0:52:b7:5a:b8:5d:ec:d7:4e:a9:ff:2c:2e:e4:4e:bf: 8d:58:11:f0:f4:b4:24:58:f1:60:61:7e:20:ac:f8:e7:ee:cc: e6:d0:ce:95:e6:af:9c:98:0b:2c:7e:74:87:bd:4c:b1:97:98: 3a:78:fe:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFBQTAxMTAvBgNVBAUTKDJBRDUyNkRGRDlDN0U5MENBMzBDMzFGQ0E0RTE4MjUw MUI3MDA3NTMwHhcNMjUwNzE4MjI1NTMyWhcNMjUwNzI1MjI1NTMyWjAYMRYwFAYD VQQDEw02ODdhZDBlNC1kNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBK6mHM7mspTM1ux2A7Exe7iyZaIFm81Lufp1gpHxOR1S502CGLYBK/y3DB5 kWzoAdMHBXeLlSwM8kz6IbjkVC+tG8nJ6NHdGYujOOJvVxOsTPY60KBxCbd7VZTp Hdkof6gauiKrOXdd1YIBMnToJw7B2KmS6iqLIxvNeK77mtuBGFDW2M2L2lpHziX+ t/2Q5CJigOm9LOPcmIVxV/sceTM0310bsjHL1rBsAQjliPsM5Bfwk4p8MKVdbrdy BBAfImdZs6nQhEM35jrDCrqi3jEuqzDiM46LTejYScwnCbW7ZZ0odG9uNaqvIhz6 mQd5703F0kYRwfBK30ONC8yr8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLmSfr9 bP4ZgUm1pawXsxB1bSFvMB8GA1UdIwQYMBaAFCrVJt/Zx+kMowwx/KThglAbcAdT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUFBMC8yMjgzOTZCQTk1 RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZReWpEREg4cE9HQ1VCdHdC MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0VW0zOW5INlF5akRESDhwT0dDVUJ0d0IxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUFBMC8yMjgzOTZCQTk1RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZR eWpEREg4cE9HQ1VCdHdCMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo1EiQGSJ7pvCt0VnKOR7w48k6zcUtIejXqsMLtQKiG11kFnXFmr/s 54HGnWNHid74vP43p+Y54VDdiA0VH0eC1/zm8Ao+I4tScBmUyzAsvNhEfS11lKJ5 +JS5q5gs5tJAWH2rW7/oRs5RK69M0LICes7j3yMyg6OITscKnMYOUVVLCCw3IczS H2BAowoydFzsSXVpOZ17vlg4sJ5ar5wbXE8aelCAJEJ4cn7OVre/3b3+N7TamUop L1/iuinX4gIE9NVLCeFRWNBSt1q4XezXTqn/LC7kTr+NWBHw9LQkWPFgYX4grPjn 7szm0M6V5q+cmAssfnSHvUyxl5g6eP6C -----END CERTIFICATE-----Generated at Sun Jul 20 10:05:35 2025 by rpki-client