$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json) Hash identifier: C5YSwk3D+lWQGMUO85z+lHtuPvtMI0ifEMgnbJuliE4= Subject key identifier: 10:AD:CC:58:58:9E:0B:9B:10:E7:41:F1:23:3C:8A:8B:C8:A2:32:7B Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft Manifest number: 5E Signing time: Sat 19 Jul 2025 07:20:33 +0000 Manifest this update: Sat 19 Jul 2025 07:20:32 +0000 Manifest next update: Sat 26 Jul 2025 07:20:32 +0000 Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: F9BzgR0+SokhwTfL9M5/wLGfX3ME1Oa9b8jdZsKYXGo=) 2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Validity Not Before: Jul 19 07:20:32 2025 GMT Not After : Jul 26 07:20:32 2025 GMT Subject: CN=687b4741-389e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:d1:63:51:6d:28:d2:71:bf:b1:e9:00:89: b5:ea:88:9b:55:44:d7:83:f8:17:86:d7:66:37:4a: ea:86:ac:3f:78:9a:c2:c5:3a:7a:9a:54:f0:d5:21: 0b:37:c8:8a:72:43:01:c7:1e:bb:06:20:f0:0d:ef: 9b:71:32:30:25:48:b1:d0:f9:b7:f7:54:a2:37:40: 86:a8:90:b4:88:72:09:49:87:10:78:1e:b8:2b:63: ae:f6:d0:5c:43:d8:5c:e1:f7:c1:43:dc:6d:7c:c1: 4d:1c:0d:f7:53:72:c6:d7:f5:6e:23:64:bd:10:3a: d0:25:89:17:8a:2d:56:7b:be:58:84:f5:ae:64:2d: a7:aa:7a:57:19:fe:e8:60:8e:af:b9:02:58:87:cb: 38:cb:df:3a:73:3a:95:9f:7c:35:27:94:fc:da:61: 63:ba:4a:aa:0e:95:e2:77:2b:4c:7d:94:b3:e7:75: 0e:6d:a2:4b:34:ca:44:a5:4d:88:6c:45:85:3b:78: 4a:9b:26:e9:2d:f5:4e:94:71:d6:6a:0e:ac:c1:22: dd:11:bc:3f:0b:03:38:be:23:c4:97:bc:1f:60:e5: 0a:46:bf:3c:16:ad:da:65:10:f3:19:95:c3:d6:16: a5:13:f1:30:03:2b:9b:61:30:ec:69:0e:35:7c:fe: da:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AD:CC:58:58:9E:0B:9B:10:E7:41:F1:23:3C:8A:8B:C8:A2:32:7B X509v3 Authority Key Identifier: keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:bf:7b:f1:f1:89:38:e0:3b:50:6b:78:1b:a0:e2:01:1a:f4: 21:ef:5a:14:f5:44:c9:fb:25:4a:94:3c:4c:15:38:e7:bc:69: 92:d3:5c:12:91:df:30:69:fc:34:eb:25:30:62:15:9e:f7:3c: 19:ec:23:42:87:19:05:0e:d6:17:e2:a1:59:84:8d:54:be:6f: 9f:fa:1c:b4:0b:b6:62:50:1e:5b:24:de:d4:30:e7:9a:5e:9e: 5c:65:c6:87:a3:3e:65:04:b5:ef:55:de:65:b5:6e:96:45:f6: 55:79:31:b5:d0:92:10:ca:20:8d:e0:71:27:d6:34:a5:90:56: ec:db:30:c2:72:c0:fd:eb:94:e6:d8:df:68:72:ea:47:94:ca: bc:9b:12:e8:44:eb:1d:ec:47:4a:7a:57:3d:fd:ac:55:89:39: 2b:2f:a7:98:97:4f:8e:86:33:9d:1b:23:cb:69:23:d4:8f:9a: 82:82:06:55:35:c0:3c:29:a7:b0:d9:14:20:17:94:b7:be:34: d3:52:17:96:4a:86:23:76:6a:7a:ba:c6:e4:48:25:1e:38:e2: 99:d1:59:d3:67:d5:cf:e9:31:9b:9a:30:7c:b6:e7:b1:73:72: 74:3d:aa:1f:fe:42:a5:26:93:83:22:3d:76:87:40:df:87:ea: 8e:1a:ae:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoOTI0ODY2QjQwQzMwNDQyRDY5NkYyNDc3MDE1NDc1QzVG MDcwMkFDODAeFw0yNTA3MTkwNzIwMzJaFw0yNTA3MjYwNzIwMzJaMBgxFjAUBgNV BAMTDTY4N2I0NzQxLTM4OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9u9FjUW0o0nG/sekAibXqiJtVRNeD+BeG12Y3SuqGrD94msLFOnqaVPDVIQs3 yIpyQwHHHrsGIPAN75txMjAlSLHQ+bf3VKI3QIaokLSIcglJhxB4HrgrY6720FxD 2Fzh98FD3G18wU0cDfdTcsbX9W4jZL0QOtAliReKLVZ7vliE9a5kLaeqelcZ/uhg jq+5AliHyzjL3zpzOpWffDUnlPzaYWO6SqoOleJ3K0x9lLPndQ5toks0ykSlTYhs RYU7eEqbJukt9U6UcdZqDqzBIt0RvD8LAzi+I8SXvB9g5QpGvzwWrdplEPMZlcPW FqUT8TADK5thMOxpDjV8/trFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEK3MWFie C5sQ50HxIzyKi8iiMnswHwYDVR0jBBgwFoAUkkhmtAwwRC1pbyR3AVR1xfBwKsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1Lzk5Mjc3ODQ2RDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tobXRBd3dSQzFwYnlSM0FWUjF4ZkJ3S3NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1Lzk5Mjc3ODQ2RDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMx cGJ5UjNBVlIxeGZCd0tzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIO/e/HxiTjgO1BreBug4gEa9CHvWhT1RMn7JUqUPEwVOOe8aZLTXBKR 3zBp/DTrJTBiFZ73PBnsI0KHGQUO1hfioVmEjVS+b5/6HLQLtmJQHlsk3tQw55pe nlxlxoejPmUEte9V3mW1bpZF9lV5MbXQkhDKII3gcSfWNKWQVuzbMMJywP3rlObY 32hy6keUyrybEuhE6x3sR0p6Vz39rFWJOSsvp5iXT46GM50bI8tpI9SPmoKCBlU1 wDwpp7DZFCAXlLe+NNNSF5ZKhiN2anq6xuRIJR444pnRWdNn1c/pMZuaMHy257Fz cnQ9qh/+QqUmk4MiPXaHQN+H6o4aris= -----END CERTIFICATE-----Generated at Sun Jul 20 03:29:51 2025 by rpki-client