$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: mXQoq8Kavpk4DFyIRZazyGk+IokPGFz+7W6cighdZ8Q= Subject key identifier: 81:F5:16:1A:4B:7F:69:90:E8:28:53:0C:8B:D1:F7:AC:03:2A:70:B8 Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0A3E Signing time: Tue 22 Jul 2025 19:59:05 +0000 Manifest this update: Tue 22 Jul 2025 19:59:05 +0000 Manifest next update: Tue 29 Jul 2025 19:59:05 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: aUcDIhsuTB5mXTlsQ5AGOI4t5yyp4seGAZNCJrWDTRI=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: MlTCpmNvZBXbaN3j5f/1p2NogI1xqgj2n12XSV4tPcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Jul 22 19:59:05 2025 GMT Not After : Jul 29 19:59:05 2025 GMT Subject: CN=687fed89-d423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:7c:13:92:fc:68:06:d6:6b:3a:1c:3b:6c: c6:cf:67:cc:c7:72:73:e5:32:29:95:c3:45:8d:10: 3b:87:bb:1b:51:24:a2:19:98:23:38:63:2f:a2:78: 2d:c9:0a:6d:21:7a:32:fc:6c:07:e5:2a:c1:59:fa: 08:1e:b2:dc:d7:ff:ed:85:8e:89:f9:61:2d:15:06: c8:37:52:d0:ca:2a:0c:bd:06:79:f4:95:d6:bc:1f: fc:61:cc:01:31:ac:53:09:d2:91:f8:47:bb:26:3a: d9:6f:00:78:e5:8e:ea:94:5b:5e:cb:80:7e:c3:89: 24:60:b4:14:32:c1:72:3a:29:27:e6:cb:c5:72:d3: 60:65:78:7f:08:6e:e4:9f:9c:51:41:75:b3:b7:0e: 1c:00:c7:3a:7b:fb:f2:f3:83:59:a8:a3:e6:7a:f9: aa:e0:99:5a:33:e6:f0:bb:36:95:d2:53:32:01:ec: dc:9c:e7:71:48:fe:32:a9:4f:e5:56:a9:ae:82:6c: b8:2c:78:09:87:c2:29:3d:72:1e:b0:b4:3b:1d:32: 2e:c8:17:1c:d3:70:60:79:f6:e0:10:8d:0c:f7:e0: bb:29:09:82:70:f5:22:d6:0c:35:f2:31:c4:52:97: b3:ce:d0:94:9e:cf:4e:87:ff:30:43:1e:18:a6:64: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F5:16:1A:4B:7F:69:90:E8:28:53:0C:8B:D1:F7:AC:03:2A:70:B8 X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:22:63:03:19:7a:4c:b6:a8:11:92:df:43:c1:d2:73:02:bd: be:9c:d3:83:9c:68:7b:4c:2d:ce:df:d8:af:48:83:98:e4:19: e8:3c:ce:93:f7:36:58:f3:6a:4a:e2:cd:c6:7f:74:bb:2a:57: 68:94:60:d4:1f:45:d1:3d:df:42:55:46:db:ee:bd:2a:22:82: 64:b4:5c:1c:93:f3:e2:66:56:c1:28:54:52:7c:f8:8c:48:88: 40:25:68:58:30:f4:ba:dc:52:fb:cc:df:0d:4d:d7:78:10:39: a8:bb:b1:e5:12:5a:e2:a0:7b:c4:b5:84:49:d7:10:76:bb:80: f8:1a:9e:a7:d5:89:1f:ca:a2:69:a9:c6:3e:1a:cc:d4:5c:cc: 28:7f:b6:d8:00:5e:21:3b:18:3f:9a:72:69:7b:e4:17:b9:3d: b4:33:28:c4:5c:4c:61:d5:9e:03:d2:d6:68:57:b7:52:f7:fc: d0:18:ba:73:2a:91:c1:96:2c:84:ba:1d:33:04:2d:d9:aa:b9: 6d:1d:2a:6c:a7:73:80:31:bd:1a:65:ad:59:42:40:c5:a2:66: 49:84:c1:11:e9:9f:d3:40:38:a6:11:82:9c:42:96:77:80:5d: 96:6e:8c:79:b6:dd:cd:a6:51:a8:c0:da:6a:24:66:f3:bf:7e: 37:8a:56:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjUwNzIyMTk1OTA1WhcNMjUwNzI5MTk1OTA1WjAYMRYwFAYD VQQDEw02ODdmZWQ4OS1kNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFB8E5L8aAbWazocO2zGz2fMx3Jz5TIplcNFjRA7h7sbUSSiGZgjOGMvongt yQptIXoy/GwH5SrBWfoIHrLc1//thY6J+WEtFQbIN1LQyioMvQZ59JXWvB/8YcwB MaxTCdKR+Ee7JjrZbwB45Y7qlFtey4B+w4kkYLQUMsFyOikn5svFctNgZXh/CG7k n5xRQXWztw4cAMc6e/vy84NZqKPmevmq4JlaM+bwuzaV0lMyAezcnOdxSP4yqU/l Vqmugmy4LHgJh8IpPXIesLQ7HTIuyBcc03BgefbgEI0M9+C7KQmCcPUi1gw18jHE UpezztCUns9Oh/8wQx4YpmRCXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH1FhpL f2mQ6ChTDIvR96wDKnC4MB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIImMDGXpMtqgRkt9DwdJzAr2+nNODnGh7TC3O39ivSIOY5BnoPM6T 9zZY82pK4s3Gf3S7KldolGDUH0XRPd9CVUbb7r0qIoJktFwck/PiZlbBKFRSfPiM SIhAJWhYMPS63FL7zN8NTdd4EDmou7HlElrioHvEtYRJ1xB2u4D4Gp6n1YkfyqJp qcY+GszUXMwof7bYAF4hOxg/mnJpe+QXuT20MyjEXExh1Z4D0tZoV7dS9/zQGLpz KpHBliyEuh0zBC3ZqrltHSpsp3OAMb0aZa1ZQkDFomZJhMER6Z/TQDimEYKcQpZ3 gF2Wbox5tt3NplGowNpqJGbzv343ilbF -----END CERTIFICATE-----Generated at Thu Jul 24 12:10:07 2025 by rpki-client