$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: kRQZy6/F34QRkcxEcssYQjkJaQOCrG8QnkvdmkGkUfI= Subject key identifier: 2F:47:FD:53:C2:54:8E:1A:80:23:6F:B8:D6:7C:79:3B:31:C0:2E:4B Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0A46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0A3F Signing time: Thu 24 Jul 2025 19:53:13 +0000 Manifest this update: Thu 24 Jul 2025 19:53:12 +0000 Manifest next update: Thu 31 Jul 2025 19:53:12 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: tK5I5HTQfJNpoJOfjgXJLX0wuoAtTl3dh5zrDrjPaMo=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: MlTCpmNvZBXbaN3j5f/1p2NogI1xqgj2n12XSV4tPcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 19:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Jul 24 19:53:12 2025 GMT Not After : Jul 31 19:53:12 2025 GMT Subject: CN=68828f29-e869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:20:57:02:39:19:c4:02:77:0a:6c:9a:65: b8:df:26:fb:63:23:c2:22:e8:77:ca:d4:bc:1c:4c: 54:01:95:b9:94:a6:48:7a:28:74:33:3b:24:b8:6f: da:c5:70:d9:ff:3c:56:b9:46:3a:14:e0:bf:b2:de: 05:30:b1:5e:f1:7b:4e:c0:6f:3f:ab:4c:b1:13:80: b9:d3:a6:94:a4:8b:7a:e8:d8:7a:77:9f:03:cc:04: 8f:31:20:f2:c4:7e:e5:d4:0d:0d:18:12:6b:23:24: 2e:ae:c0:a5:2f:d6:2e:fe:4e:b8:a1:6c:b7:4f:25: e7:52:23:bf:11:40:a6:d1:5f:b0:e2:ea:c7:1b:f7: 4b:fb:e0:d8:81:db:af:1d:36:85:1f:e8:a9:17:42: 80:1a:82:08:75:1c:82:68:3f:61:c4:bd:6d:ad:6e: 4e:54:ee:4d:44:91:ae:fe:44:73:f3:2f:02:bd:a1: e6:1d:28:15:63:61:9b:54:c5:34:78:1d:cb:e5:50: 9e:0e:54:d7:ca:31:ee:53:9b:38:4c:de:48:85:63: cc:b7:60:a3:45:db:a8:45:51:c3:5a:48:6a:33:70: 0d:5e:c7:71:dc:52:11:e1:9d:42:83:b0:cc:a7:2b: 5c:8a:34:32:e8:c6:41:96:d9:b3:ba:63:a5:a5:af: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:47:FD:53:C2:54:8E:1A:80:23:6F:B8:D6:7C:79:3B:31:C0:2E:4B X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c4:4f:ac:7c:4e:4f:57:9a:83:e6:c2:69:f2:8d:7e:1b:0f: ab:d6:9d:c8:0c:72:b5:ff:73:52:1a:a5:bc:3e:47:27:11:08: f2:e5:c8:db:2f:47:7a:7f:eb:a2:cd:09:6f:51:74:b3:b2:85: 37:ff:63:48:ed:5d:04:02:a3:8e:06:bd:c7:43:82:01:c4:4e: e0:70:1a:6d:1a:7f:cc:5d:62:43:dc:08:b5:79:cb:22:ea:76: aa:46:ed:74:62:4f:f7:49:14:09:82:0d:59:e6:a4:85:aa:54: 9b:9d:6c:a3:cd:0d:95:33:e9:5b:c5:8e:dd:f2:7b:d9:62:16: 14:39:2f:95:52:80:e0:a3:d5:1d:82:61:46:e5:94:45:53:1c: 07:92:06:6e:ea:71:ce:c9:66:58:b1:c5:1b:1a:57:04:93:f3: 92:82:2b:58:fb:30:d4:2b:cd:ab:16:b3:6e:4c:a7:b7:47:e6: 39:7b:00:8a:7f:1f:d4:2e:e6:93:6d:b8:d3:17:8b:29:0f:d6: f3:b7:44:f1:d6:d3:b1:90:f4:bd:72:e6:32:52:e0:15:58:6c: 3d:b5:3f:27:53:ee:2f:fa:c6:b1:25:5d:f9:c0:93:61:60:c1: da:a5:0d:ae:e9:2e:11:43:0d:aa:b1:f1:4d:d8:f0:74:5e:50: 79:f1:07:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjUwNzI0MTk1MzEyWhcNMjUwNzMxMTk1MzEyWjAYMRYwFAYD VQQDEw02ODgyOGYyOS1lODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSkgVwI5GcQCdwpsmmW43yb7YyPCIuh3ytS8HExUAZW5lKZIeih0MzskuG/a xXDZ/zxWuUY6FOC/st4FMLFe8XtOwG8/q0yxE4C506aUpIt66Nh6d58DzASPMSDy xH7l1A0NGBJrIyQursClL9Yu/k64oWy3TyXnUiO/EUCm0V+w4urHG/dL++DYgduv HTaFH+ipF0KAGoIIdRyCaD9hxL1trW5OVO5NRJGu/kRz8y8CvaHmHSgVY2GbVMU0 eB3L5VCeDlTXyjHuU5s4TN5IhWPMt2CjRduoRVHDWkhqM3ANXsdx3FIR4Z1Cg7DM pytcijQy6MZBltmzumOlpa/GZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9H/VPC VI4agCNvuNZ8eTsxwC5LMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAexE+sfE5PV5qD5sJp8o1+Gw+r1p3IDHK1/3NSGqW8PkcnEQjy5cjb L0d6f+uizQlvUXSzsoU3/2NI7V0EAqOOBr3HQ4IBxE7gcBptGn/MXWJD3Ai1ecsi 6naqRu10Yk/3SRQJgg1Z5qSFqlSbnWyjzQ2VM+lbxY7d8nvZYhYUOS+VUoDgo9Ud gmFG5ZRFUxwHkgZu6nHOyWZYscUbGlcEk/OSgitY+zDUK82rFrNuTKe3R+Y5ewCK fx/ULuaTbbjTF4spD9bzt0Tx1tOxkPS9cuYyUuAVWGw9tT8nU+4v+saxJV35wJNh YMHapQ2u6S4RQw2qsfFN2PB0XlB58Qf/ -----END CERTIFICATE-----Generated at Fri Jul 25 07:01:50 2025 by rpki-client