$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json) Hash identifier: JXVy1ghKXpjXw6d0TtaJuvQRNsLfTB/jeRd0XcyX2Kk= Subject key identifier: 15:6D:D1:33:9B:1D:C8:46:63:C4:28:5C:42:DF:8B:54:F0:C8:23:67 Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft Manifest number: FB Signing time: Mon 21 Jul 2025 05:17:17 +0000 Manifest this update: Mon 21 Jul 2025 05:17:16 +0000 Manifest next update: Mon 28 Jul 2025 05:17:16 +0000 Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: NYwhG3IjKWOPCUo2Nzs2kLXCoyAYzyB2wyID1EEgJeg=) 2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Jul 21 05:17:16 2025 GMT Not After : Jul 28 05:17:16 2025 GMT Subject: CN=687dcd5d-0ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:c8:c1:cc:73:f4:18:36:25:a0:48:9c:4c: 58:ff:6e:1b:8e:a3:a3:c4:20:70:8b:86:44:65:b6: 41:9a:eb:de:68:df:f5:e6:6f:78:dd:a7:1d:23:63: 37:0b:31:eb:7a:90:5c:07:a4:a8:13:83:a4:46:d9: 41:8d:65:8f:a1:99:7d:e4:2f:41:16:89:e1:73:54: 36:75:13:f6:67:02:51:1a:27:09:45:c4:dd:19:de: 34:f3:11:31:8c:53:67:0a:43:fc:b8:18:30:e9:6e: 9a:dc:22:c2:07:04:b0:48:5e:58:3d:0f:eb:33:b5: 54:a1:da:e9:52:0a:f8:59:99:cd:ae:f5:59:aa:be: 29:bb:e8:6b:16:bc:1f:89:1b:33:00:3b:25:57:30: ef:dc:71:61:c4:b2:fb:14:b3:46:b7:31:fb:93:38: 2b:b0:6f:40:27:89:28:f0:68:43:c2:fa:b6:49:b6: 39:f8:75:35:26:48:c5:a9:55:c3:c2:c0:bd:bf:46: 25:bf:ec:ad:57:f7:ae:5b:66:c3:64:8a:d3:30:d6: 03:7c:29:7a:aa:97:17:18:c6:5d:c1:89:86:7d:4f: e5:4a:d7:3f:4c:57:fa:18:33:3e:61:8b:14:da:8b: ce:b8:38:2a:c2:75:31:4b:7d:e9:00:da:55:95:1a: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6D:D1:33:9B:1D:C8:46:63:C4:28:5C:42:DF:8B:54:F0:C8:23:67 X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:3e:58:f4:db:57:14:51:98:70:74:8b:fa:78:98:a8:6d:19: 13:f5:83:a8:85:c9:3d:d6:f5:03:df:c6:cc:f3:33:2d:1c:df: df:c3:31:30:6d:1a:a2:30:92:ff:93:4c:85:da:e3:b2:b9:db: c0:81:68:38:f3:30:ab:07:4c:dd:d7:6a:17:38:ba:e4:c0:87: 13:ac:60:6b:85:66:f2:e1:ec:91:b0:0d:01:b1:f3:0a:7c:fb: 99:ab:d8:c2:d8:15:fb:d5:cd:f0:ea:b1:ac:91:9f:5d:d3:23: 18:bb:ff:1c:8f:c1:38:be:68:3b:71:d0:33:b9:bb:5b:f7:b7: 1d:ff:b3:78:98:8d:3d:32:9f:7f:f0:92:5b:3f:1e:9e:a4:f4: b7:90:58:0b:45:cf:c0:11:0b:29:44:98:f4:f7:36:85:23:ca: c4:e1:ac:74:c2:db:9b:f4:08:06:2e:78:82:56:9c:25:02:80: d8:32:ea:98:61:ef:f8:89:d1:c7:37:1f:c0:fa:78:03:7a:db: 9c:fe:1d:18:ba:4c:69:70:98:44:98:ca:a8:40:e6:fb:26:0d: 84:0d:e4:6b:f3:9c:06:59:24:50:70:b7:bd:9e:c2:d1:a5:83: 45:ae:cc:f2:25:a3:82:f2:15:81:41:c4:2e:e9:20:6e:43:e1: c5:c1:b9:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjUwNzIxMDUxNzE2WhcNMjUwNzI4MDUxNzE2WjAYMRYwFAYD VQQDEw02ODdkY2Q1ZC0wZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbfIwcxz9Bg2JaBInExY/24bjqOjxCBwi4ZEZbZBmuveaN/15m943acdI2M3 CzHrepBcB6SoE4OkRtlBjWWPoZl95C9BFonhc1Q2dRP2ZwJRGicJRcTdGd408xEx jFNnCkP8uBgw6W6a3CLCBwSwSF5YPQ/rM7VUodrpUgr4WZnNrvVZqr4pu+hrFrwf iRszADslVzDv3HFhxLL7FLNGtzH7kzgrsG9AJ4ko8GhDwvq2SbY5+HU1JkjFqVXD wsC9v0Ylv+ytV/euW2bDZIrTMNYDfCl6qpcXGMZdwYmGfU/lStc/TFf6GDM+YYsU 2ovOuDgqwnUxS33pANpVlRrIYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVt0TOb HchGY8QoXELfi1TwyCNnMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z LTVaMFVmN3RyMG54U09Ham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvPlj021cUUZhwdIv6eJiobRkT9YOohck91vUD38bM8zMtHN/fwzEw bRqiMJL/k0yF2uOyudvAgWg48zCrB0zd12oXOLrkwIcTrGBrhWby4eyRsA0BsfMK fPuZq9jC2BX71c3w6rGskZ9d0yMYu/8cj8E4vmg7cdAzubtb97cd/7N4mI09Mp9/ 8JJbPx6epPS3kFgLRc/AEQspRJj09zaFI8rE4ax0wtub9AgGLniCVpwlAoDYMuqY Ye/4idHHNx/A+ngDetuc/h0YukxpcJhEmMqoQOb7Jg2EDeRr85wGWSRQcLe9nsLR pYNFrszyJaOC8hWBQcQu6SBuQ+HFwbkH -----END CERTIFICATE-----Generated at Mon Jul 21 07:23:39 2025 by rpki-client