$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json) Hash identifier: H0LJD70Q++obkGkmsIee1fE9rSc4j531UHLr9roWelI= Subject key identifier: 5E:1B:51:6D:4B:BD:23:B1:5E:CE:56:3B:59:57:0C:CF:F3:0B:42:41 Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft Manifest number: 011F Signing time: Wed 23 Jul 2025 04:57:46 +0000 Manifest this update: Wed 23 Jul 2025 04:57:45 +0000 Manifest next update: Wed 30 Jul 2025 04:57:45 +0000 Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: 7BnijJFAWMRXBTzqJm96O5BlC0lUxupobaoShiVXyvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Validity Not Before: Jul 23 04:57:45 2025 GMT Not After : Jul 30 04:57:45 2025 GMT Subject: CN=68806bc9-0275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:cb:9e:eb:41:21:fc:66:a4:91:8c:b6:48: 80:bd:dd:45:6b:6e:82:dc:29:05:53:23:15:1a:e8: 86:5c:3a:61:84:90:fd:6e:4d:02:c7:74:b7:9c:37: 27:4c:a8:c5:b6:73:48:0b:b9:33:f5:1d:cd:fd:4f: b1:c7:05:64:02:75:8e:20:c0:5c:a1:d9:1c:54:df: 05:65:c9:51:b1:1b:e8:22:45:70:3f:a9:b4:37:d2: 65:61:bc:3c:92:1c:a9:0b:37:4b:13:10:8b:1b:01: 4a:b4:e2:9b:49:44:95:0c:dc:4e:8b:11:33:fe:3b: fb:80:78:9a:e3:22:1f:80:6b:4e:18:79:3e:3b:3c: 56:f0:a6:72:35:76:ad:e0:6f:03:55:f7:68:f1:ed: 2b:17:c6:c7:ce:55:5e:9d:93:63:b7:26:da:6e:c6: b2:9a:e3:a3:c4:7b:0e:5b:6a:2f:c7:17:37:c7:b3: 6a:26:bb:4d:4c:2e:83:b3:ec:e4:a5:32:61:cb:17: 97:51:37:31:12:38:e1:96:e3:77:05:3e:3e:18:76: 9a:8c:c1:c8:64:fa:30:37:f7:9e:5e:10:89:b7:99: b1:4c:e7:0d:da:db:02:0b:a8:f6:66:38:fc:64:be: 74:5a:eb:65:53:32:d8:69:c3:63:10:3a:45:82:98: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1B:51:6D:4B:BD:23:B1:5E:CE:56:3B:59:57:0C:CF:F3:0B:42:41 X509v3 Authority Key Identifier: keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a8:27:bd:d3:51:db:5e:86:20:bc:0b:6d:46:82:2d:d3:2a: 0d:34:94:5c:77:49:25:d6:ea:5e:45:a1:64:1b:a1:ff:76:b9: e8:d8:67:3e:bf:f6:65:37:b4:2e:89:11:45:6d:67:29:dc:d7: de:c5:48:fa:c5:9e:d4:70:29:58:6e:b2:4f:05:9f:9c:67:d0: 2c:e0:34:71:43:2b:9e:25:63:90:ce:99:9b:ff:7e:7f:f8:cd: ec:04:5e:f8:d2:91:94:1f:84:10:70:a6:f4:87:fd:9c:7e:2e: a4:e3:8d:cb:dd:10:29:64:9e:0a:14:ff:f7:94:7b:ef:b4:ab: 0b:b3:36:fa:8c:80:37:eb:25:bd:08:78:f9:e4:c5:b6:aa:77: 1b:4a:49:9a:ff:69:bb:1f:70:78:cd:f5:f0:0b:d9:4d:82:57: 7c:41:51:d4:cc:67:9a:b8:77:b2:09:2b:92:ed:45:39:e5:b0: d3:f4:d6:83:ae:f3:ae:3c:ee:0e:25:7c:37:1e:78:80:14:dc: 62:31:23:2a:8c:ba:c1:0c:6f:fb:28:15:1c:88:d3:fb:4c:b2: d1:cc:5d:81:bd:de:23:f8:08:59:f1:ff:79:fc:35:01:bd:58: db:16:5c:8c:01:24:2a:37:78:9a:58:04:8d:af:5f:51:60:90: d4:50:ad:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4 RTUwNzNCQzQwHhcNMjUwNzIzMDQ1NzQ1WhcNMjUwNzMwMDQ1NzQ1WjAYMRYwFAYD VQQDEw02ODgwNmJjOS0wMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/vLnutBIfxmpJGMtkiAvd1Fa26C3CkFUyMVGuiGXDphhJD9bk0Cx3S3nDcn TKjFtnNIC7kz9R3N/U+xxwVkAnWOIMBcodkcVN8FZclRsRvoIkVwP6m0N9JlYbw8 khypCzdLExCLGwFKtOKbSUSVDNxOixEz/jv7gHia4yIfgGtOGHk+OzxW8KZyNXat 4G8DVfdo8e0rF8bHzlVenZNjtybabsaymuOjxHsOW2ovxxc3x7NqJrtNTC6Ds+zk pTJhyxeXUTcxEjjhluN3BT4+GHaajMHIZPowN/eeXhCJt5mxTOcN2tsCC6j2Zjj8 ZL50WutlUzLYacNjEDpFgpi3zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4bUW1L vSOxXs5WO1lXDM/zC0JBMB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF TXBRXzNsZktNOUtPVUhPOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoqCe901HbXoYgvAttRoIt0yoNNJRcd0kl1upeRaFkG6H/drno2Gc+ v/ZlN7QuiRFFbWcp3NfexUj6xZ7UcClYbrJPBZ+cZ9As4DRxQyueJWOQzpmb/35/ +M3sBF740pGUH4QQcKb0h/2cfi6k443L3RApZJ4KFP/3lHvvtKsLszb6jIA36yW9 CHj55MW2qncbSkma/2m7H3B4zfXwC9lNgld8QVHUzGeauHeyCSuS7UU55bDT9NaD rvOuPO4OJXw3HniAFNxiMSMqjLrBDG/7KBUciNP7TLLRzF2Bvd4j+AhZ8f95/DUB vVjbFlyMASQqN3iaWASNr19RYJDUUK0+ -----END CERTIFICATE-----Generated at Thu Jul 24 08:45:15 2025 by rpki-client