$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft File: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft (raw, json) Hash identifier: bvPb5jiCbusR6/TPqLJYz2oApdtXzAb/MFzL/xB405o= Subject key identifier: 90:5D:00:CF:0F:BF:DE:AC:4B:50:49:A0:0F:F3:9F:51:49:6C:05:85 Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 Certificate issuer: /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft Manifest number: 073C Signing time: Fri 18 Jul 2025 22:04:08 +0000 Manifest this update: Fri 18 Jul 2025 22:04:07 +0000 Manifest next update: Fri 25 Jul 2025 22:04:07 +0000 Files and hashes: 1: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl (hash: WpxjTvrvaBGwJVScWsMWFpCrIJCFiEpelGWs/n9O1T4=) 2: C42CEC7ECC3611EF9C79665CC4F9AE02.roa (hash: +9I46oBmobqbn5rox7c5LlYsiP1+hncBa8w/SO0pYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5021, serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Validity Not Before: Jul 18 22:04:07 2025 GMT Not After : Jul 25 22:04:07 2025 GMT Subject: CN=687ac4d7-bd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:e4:dc:63:46:5c:c4:f6:0c:95:04:85:4e: a7:9b:48:2a:33:96:40:1b:a9:d9:bd:42:02:2f:8f: 93:25:7c:a9:ab:02:c8:a7:ba:af:18:a6:09:23:e2: 47:39:59:33:cc:69:96:9f:ad:18:61:67:80:3b:ac: 2f:a1:6a:47:dd:66:b1:39:36:84:5e:90:b3:49:1d: 0d:52:b6:e2:6c:a9:9f:0e:b6:76:4d:a7:5c:76:55: f9:0d:66:8a:07:cf:a6:86:42:cd:ca:3e:89:d2:98: 38:ed:52:e2:95:46:c5:0b:0f:9a:82:dd:0e:50:a9: af:9d:d7:5c:d3:8d:12:52:7f:2e:f1:f2:ec:9c:c3: 7d:c8:19:ee:e2:5c:3e:cd:89:07:c4:c9:2b:25:00: 17:26:5f:85:18:c3:1b:88:5e:aa:c0:57:cc:3f:28: 59:03:9a:32:0f:83:7a:f6:49:de:0b:cf:c3:b8:95: b8:92:ed:41:05:d0:94:13:06:43:9c:43:5e:1b:42: 42:e2:cb:c3:fb:da:de:46:4b:0d:fa:97:03:09:4a: 3c:e3:3e:b2:91:78:d9:e3:b3:af:fc:22:1f:2e:58: a0:57:a3:5f:63:39:6a:20:3b:78:a4:6c:9a:76:87: 14:b0:dc:dd:70:a9:5e:25:b4:8f:b1:3e:b1:03:bd: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:00:CF:0F:BF:DE:AC:4B:50:49:A0:0F:F3:9F:51:49:6C:05:85 X509v3 Authority Key Identifier: keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:80:c8:65:c4:9a:26:d1:64:01:10:21:0e:de:87:2d:84:1c: c6:ee:a3:0d:74:bc:61:8d:35:ac:45:3e:a3:cb:65:cc:25:8d: 41:94:99:8c:75:08:0e:70:13:5a:b6:76:e1:04:6d:0a:e8:d2: 2d:d2:a5:87:e9:60:fc:b9:63:0a:8f:15:60:48:dc:7c:11:ad: 50:16:c8:fd:0f:c3:2f:49:7b:68:72:69:d6:53:bd:0a:a8:06: 56:53:fc:84:d9:b3:f3:bc:1c:4b:8f:c6:bc:27:7f:da:fe:10: a9:1c:68:4e:b7:56:d8:2c:6c:ed:8a:f5:fa:64:a4:fc:95:02: 30:88:dc:20:09:a1:18:e7:10:8f:05:b8:b2:16:60:cf:7d:51: 7e:ef:d7:6d:6e:15:c2:cb:1c:7c:10:bb:17:00:d7:d9:a2:cb: d8:48:28:e7:06:8f:4d:88:f5:1c:5c:13:c1:05:2b:5b:78:9a: 4f:ab:54:98:c2:72:a1:0b:fa:99:7b:55:8b:6e:74:a3:b3:c5: 10:ec:08:2d:89:d4:c5:4b:0f:75:28:a9:58:78:35:ed:a5:fa: a6:6b:8d:a6:be:58:5e:2b:1c:77:ce:f7:fc:2f:2f:fb:f1:46: 48:b7:f4:be:ec:e7:4a:57:f4:86:b0:97:44:89:fa:53:d8:7c: 8c:7b:84:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUwMjExMTAvBgNVBAUTKDI4RjA3MTEwRTQzNTg0QTNCQTZBM0E0QTg3RDY4RTlF QjdEM0U5MDIwHhcNMjUwNzE4MjIwNDA3WhcNMjUwNzI1MjIwNDA3WjAYMRYwFAYD VQQDEw02ODdhYzRkNy1iZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMbk3GNGXMT2DJUEhU6nm0gqM5ZAG6nZvUICL4+TJXypqwLIp7qvGKYJI+JH OVkzzGmWn60YYWeAO6wvoWpH3WaxOTaEXpCzSR0NUrbibKmfDrZ2TadcdlX5DWaK B8+mhkLNyj6J0pg47VLilUbFCw+agt0OUKmvnddc040SUn8u8fLsnMN9yBnu4lw+ zYkHxMkrJQAXJl+FGMMbiF6qwFfMPyhZA5oyD4N69kneC8/DuJW4ku1BBdCUEwZD nENeG0JC4svD+9reRksN+pcDCUo84z6ykXjZ47Ov/CIfLligV6NfYzlqIDt4pGya docUsNzdcKleJbSPsT6xA724gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBdAM8P v96sS1BJoA/zn1FJbAWFMB8GA1UdIwQYMBaAFCjwcRDkNYSjumo6SofWjp630+kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTAyMS85QUZENDg2QzNC QkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhLTzZhanBLaDlhT25yZlQ2 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQQnhFT1ExaEtPNmFqcEtoOWFPbnJmVDZRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTAyMS85QUZENDg2QzNCQkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhL TzZhanBLaDlhT25yZlQ2UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATgMhlxJom0WQBECEO3octhBzG7qMNdLxhjTWsRT6jy2XMJY1BlJmM dQgOcBNatnbhBG0K6NIt0qWH6WD8uWMKjxVgSNx8Ea1QFsj9D8MvSXtocmnWU70K qAZWU/yE2bPzvBxLj8a8J3/a/hCpHGhOt1bYLGztivX6ZKT8lQIwiNwgCaEY5xCP BbiyFmDPfVF+79dtbhXCyxx8ELsXANfZosvYSCjnBo9NiPUcXBPBBStbeJpPq1SY wnKhC/qZe1WLbnSjs8UQ7AgtidTFSw91KKlYeDXtpfqma42mvlheKxx3zvf8Ly/7 8UZIt/S+7OdKV/SGsJdEifpT2HyMe4QM -----END CERTIFICATE-----Generated at Sun Jul 20 03:19:12 2025 by rpki-client