$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: otMSn0X1f23gY2g8gT+UmHPXOW6HH1MRU675Qjcd0tM= Subject key identifier: 40:57:05:23:C5:CC:A6:EE:81:89:58:92:B5:43:89:F7:5B:73:90:39 Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 03A4 Signing time: Sat 19 Jul 2025 01:12:44 +0000 Manifest this update: Sat 19 Jul 2025 01:12:44 +0000 Manifest next update: Sat 26 Jul 2025 01:12:44 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: Dkbs13YZgNY6p1OXKcYrc5huRuxJUxOCUEIaN7sbEmY=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 8U+UsiCXDKifnoegufsPJKGalX6CUXoFX96X70pYMYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Jul 19 01:12:44 2025 GMT Not After : Jul 26 01:12:44 2025 GMT Subject: CN=687af10c-a426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:81:82:68:14:b3:5f:76:52:a6:ba:cc:2c:8c: 2e:21:2f:da:7a:12:51:c0:b3:8a:64:43:93:13:77: 98:c7:3a:2a:92:be:d7:37:12:ef:e8:e1:cb:9a:5a: a2:7e:b0:4e:f0:1f:0f:5b:36:87:6c:05:26:1f:62: d9:cd:3f:0f:53:29:fc:a5:b9:c9:8d:af:10:da:16: 89:5b:4e:41:e1:45:54:8a:98:9e:05:b9:7b:df:f8: 7d:a7:0e:7d:59:c9:15:28:b1:ae:89:d9:a3:74:11: 17:24:8d:e6:43:4e:e8:f0:71:a3:7f:ee:d2:c4:34: d9:7d:34:9a:30:4d:ef:80:e5:cd:6a:d5:b3:31:f4: ab:b4:f2:a5:8a:ed:b3:51:51:80:7e:5d:f0:06:b1: 38:2e:4f:79:0e:63:d1:d9:bb:69:da:f5:01:25:5d: e1:8d:ab:ee:2d:9a:96:2e:e9:e9:9c:94:9b:f0:01: 5d:9a:19:37:13:e6:98:c5:55:18:a9:79:56:8f:ae: a7:25:6e:59:65:ab:b3:48:e9:18:d3:0e:83:a1:a8: 85:e1:04:3a:00:12:6b:ca:27:b7:a7:ab:bf:87:87: ac:9d:56:46:36:c1:7a:09:83:fd:a3:ac:09:bd:af: d2:e4:88:21:ad:fc:76:6e:6a:3c:e6:8c:3e:2b:3b: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:57:05:23:C5:CC:A6:EE:81:89:58:92:B5:43:89:F7:5B:73:90:39 X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:70:10:f1:c3:f2:89:0f:8f:f1:8c:66:0f:40:7c:ad:2b:7c: d2:85:71:44:de:ab:26:e9:ce:bc:f1:08:29:67:11:57:41:cb: 25:a9:fc:ea:6e:3c:2e:53:54:65:cc:66:2e:42:65:12:1b:2e: 22:80:bd:30:42:a9:e3:15:13:97:3b:5e:55:93:a1:2b:ac:d3: 37:66:bd:c7:9f:2c:e8:9b:11:c2:93:79:24:0d:93:66:5e:a2: 79:a7:4e:1a:e2:9b:02:33:92:64:ea:c3:ae:9e:13:a9:2b:7d: ac:40:9b:79:a3:3d:95:d9:88:fe:e0:06:14:e6:56:0e:34:7e: c7:44:a5:a6:eb:34:65:63:a0:db:78:3c:38:d6:ee:dc:d6:66: 31:19:97:43:05:1e:27:5e:9b:ce:6f:b1:3b:d5:8f:99:7d:49: 57:06:86:bd:b8:57:44:f1:9f:17:bc:d5:d2:6f:5c:9b:6b:ca: 4a:f1:3f:ab:95:0a:b5:a7:df:0c:4c:0b:3e:96:3d:ae:da:a4: 5b:d1:7d:2f:c8:e4:5e:9d:5a:e1:51:45:7a:54:5e:fe:52:41: a1:9f:7f:f7:62:b3:ac:c9:52:59:bc:3c:3f:ed:42:90:68:70: 29:69:9f:bb:3b:e7:2f:86:f3:cc:1b:29:9b:fe:08:78:66:a2: 38:2d:6e:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjUwNzE5MDExMjQ0WhcNMjUwNzI2MDExMjQ0WjAYMRYwFAYD VQQDEw02ODdhZjEwYy1hNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oGCaBSzX3ZSprrMLIwuIS/aehJRwLOKZEOTE3eYxzoqkr7XNxLv6OHLmlqi frBO8B8PWzaHbAUmH2LZzT8PUyn8pbnJja8Q2haJW05B4UVUipieBbl73/h9pw59 WckVKLGuidmjdBEXJI3mQ07o8HGjf+7SxDTZfTSaME3vgOXNatWzMfSrtPKliu2z UVGAfl3wBrE4Lk95DmPR2btp2vUBJV3hjavuLZqWLunpnJSb8AFdmhk3E+aYxVUY qXlWj66nJW5ZZauzSOkY0w6DoaiF4QQ6ABJryie3p6u/h4esnVZGNsF6CYP9o6wJ va/S5Ighrfx2bmo85ow+KzvWiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBXBSPF zKbugYlYkrVDifdbc5A5MB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPcBDxw/KJD4/xjGYPQHytK3zShXFE3qsm6c688QgpZxFXQcslqfzq bjwuU1RlzGYuQmUSGy4igL0wQqnjFROXO15Vk6ErrNM3Zr3HnyzomxHCk3kkDZNm XqJ5p04a4psCM5Jk6sOunhOpK32sQJt5oz2V2Yj+4AYU5lYONH7HRKWm6zRlY6Db eDw41u7c1mYxGZdDBR4nXpvOb7E71Y+ZfUlXBoa9uFdE8Z8XvNXSb1yba8pK8T+r lQq1p98MTAs+lj2u2qRb0X0vyORenVrhUUV6VF7+UkGhn3/3YrOsyVJZvDw/7UKQ aHApaZ+7O+cvhvPMGymb/gh4ZqI4LW7u -----END CERTIFICATE-----Generated at Sun Jul 20 07:56:44 2025 by rpki-client