$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json) Hash identifier: XP1Fk/ftZI17ylFPyai5CRDreTRej26PhF73EJovc6k= Subject key identifier: 03:43:FC:39:67:60:68:A9:34:5E:48:17:92:67:7B:AA:2C:35:68:8A Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft Manifest number: 0120 Signing time: Fri 25 Jul 2025 04:55:38 +0000 Manifest this update: Fri 25 Jul 2025 04:55:38 +0000 Manifest next update: Fri 01 Aug 2025 04:55:38 +0000 Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: BOgIW0w4FQhIKPn/fSA9vknS3bEYuCeN1xHWAoJIgog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 04:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Validity Not Before: Jul 25 04:55:38 2025 GMT Not After : Aug 1 04:55:38 2025 GMT Subject: CN=68830e4a-e995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:79:ed:f9:46:dc:f2:f8:3a:c1:26:71:dc: cc:b5:21:2a:af:12:62:61:09:14:78:09:c0:87:68: ec:dd:99:36:0a:38:1a:6a:02:27:1b:eb:c7:e1:db: fb:81:2d:05:a3:64:a2:4f:80:05:45:1a:39:26:29: e7:b0:d6:51:a6:a4:19:84:51:00:c3:04:1b:ce:24: 77:a6:39:07:4c:85:50:c6:09:03:c6:7b:b5:fd:25: 28:38:0c:3d:2c:d8:3a:7a:58:29:0c:92:9d:0a:83: bc:b9:3a:4f:50:6f:c0:ed:e1:0a:59:c4:43:e0:24: 0c:c6:f5:81:82:30:c4:2b:ac:2e:8b:cb:fd:00:2b: ce:35:94:26:de:5a:dd:12:d4:15:24:80:52:6c:c9: fa:19:c4:93:83:9f:ef:c5:fd:f2:ec:bf:c3:ed:86: 42:29:3a:9a:07:5b:73:99:52:e6:b4:ef:5e:cc:8c: 99:55:17:80:7c:1f:89:a5:37:16:2c:bb:06:18:e6: 9c:df:8f:40:db:bf:1f:37:62:85:ae:eb:ce:a8:9e: e1:df:d6:ad:43:c9:11:b5:bf:38:81:eb:1a:c2:d1: 3a:69:e4:c4:67:2f:f7:6d:66:39:d8:01:ed:0e:96: 51:c5:ba:f1:4a:09:75:4c:f7:1a:7b:59:5c:d4:8f: b3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:43:FC:39:67:60:68:A9:34:5E:48:17:92:67:7B:AA:2C:35:68:8A X509v3 Authority Key Identifier: keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:94:e5:b5:6d:8e:ea:07:fa:5d:20:94:7a:2a:fd:47:32:11: 4d:a4:f3:f7:25:00:61:6a:83:4c:f2:3a:b3:79:51:04:b2:69: c2:9e:64:fd:1a:e4:50:f1:7b:0e:08:2f:93:10:3d:af:e0:34: 8f:41:99:25:4f:35:ed:71:5c:27:16:0c:31:24:0e:b3:2d:4f: 50:82:97:c8:2a:ea:fc:19:26:7c:70:16:11:4e:d6:10:ff:84: 47:9d:90:00:50:45:bc:d6:28:48:18:d8:09:f5:9d:11:7e:66: 88:a3:bc:cb:af:c6:9a:a8:a3:c2:45:cc:b3:6b:28:d4:b4:2e: 20:f3:f6:70:71:eb:f0:15:6a:6b:39:43:0c:1d:9c:03:08:73: 1e:7f:dd:d6:d5:eb:92:6f:97:54:78:25:d9:ba:3a:a8:10:1c: d7:55:29:18:c9:72:fd:bc:dd:e8:f3:3b:c7:49:80:42:ba:fc: 1a:23:b8:ba:d2:75:15:11:76:bd:ba:50:ac:52:15:ba:7f:c4: da:97:e7:d9:16:5b:11:be:9c:0c:49:a9:76:62:0a:5e:96:84: f2:c5:5b:1a:2b:ed:9a:93:eb:74:91:0b:10:b0:e6:4a:dd:02: b5:d5:fb:03:b0:1d:3f:d5:09:3f:eb:98:7d:0c:f8:26:6f:06: 26:e2:30:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4 RTUwNzNCQzQwHhcNMjUwNzI1MDQ1NTM4WhcNMjUwODAxMDQ1NTM4WjAYMRYwFAYD VQQDEw02ODgzMGU0YS1lOTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BF57flG3PL4OsEmcdzMtSEqrxJiYQkUeAnAh2js3Zk2CjgaagInG+vH4dv7 gS0Fo2SiT4AFRRo5JinnsNZRpqQZhFEAwwQbziR3pjkHTIVQxgkDxnu1/SUoOAw9 LNg6elgpDJKdCoO8uTpPUG/A7eEKWcRD4CQMxvWBgjDEK6wui8v9ACvONZQm3lrd EtQVJIBSbMn6GcSTg5/vxf3y7L/D7YZCKTqaB1tzmVLmtO9ezIyZVReAfB+JpTcW LLsGGOac349A278fN2KFruvOqJ7h39atQ8kRtb84gesawtE6aeTEZy/3bWY52AHt DpZRxbrxSgl1TPcae1lc1I+zQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAND/Dln YGipNF5IF5Jne6osNWiKMB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF TXBRXzNsZktNOUtPVUhPOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOlOW1bY7qB/pdIJR6Kv1HMhFNpPP3JQBhaoNM8jqzeVEEsmnCnmT9 GuRQ8XsOCC+TED2v4DSPQZklTzXtcVwnFgwxJA6zLU9QgpfIKur8GSZ8cBYRTtYQ /4RHnZAAUEW81ihIGNgJ9Z0RfmaIo7zLr8aaqKPCRcyzayjUtC4g8/ZwcevwFWpr OUMMHZwDCHMef93W1euSb5dUeCXZujqoEBzXVSkYyXL9vN3o8zvHSYBCuvwaI7i6 0nUVEXa9ulCsUhW6f8Tal+fZFlsRvpwMSal2YgpeloTyxVsaK+2ak+t0kQsQsOZK 3QK11fsDsB0/1Qk/65h9DPgmbwYm4jBE -----END CERTIFICATE-----Generated at Sat Jul 26 02:04:30 2025 by rpki-client