$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: dZagJ43I+f4Sv5a7LJQbxLzX/P25d+NP+gkKg5qD+As= Subject key identifier: B7:11:9D:F5:04:3D:A9:81:76:F7:8C:1C:23:A8:D8:33:70:17:69:EB Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 34B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 34AD Signing time: Fri 18 Jul 2025 14:59:11 +0000 Manifest this update: Fri 18 Jul 2025 14:59:10 +0000 Manifest next update: Fri 25 Jul 2025 14:59:10 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: ZZOIKT7jwgauuM9926HJ4hDvAg9eUCYV4i6KWhBg2YE=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 8wn1BShCqNm3QYIhzMCvnBkRSH1pV/AljqzDWjCUBxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13496 (0x34b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: Jul 18 14:59:10 2025 GMT Not After : Jul 25 14:59:10 2025 GMT Subject: CN=687a613e-73da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:61:f9:9c:48:25:72:4b:73:23:da:29:43: 36:10:91:43:5a:23:b0:74:71:f5:84:94:eb:ba:9a: a4:bc:cd:1d:95:a0:e2:88:20:07:b1:ec:0a:61:de: be:38:2d:60:e2:da:fa:e2:ab:ac:c3:18:c8:9e:27: 44:c6:45:2b:2c:1e:c3:11:72:7c:86:f1:0f:83:f5: 02:9b:1c:e8:c8:a8:e4:75:c5:e8:14:0b:25:30:25: 78:c4:4b:e9:a0:29:63:d7:aa:0b:17:df:43:2e:e2: 29:5d:aa:ee:4a:2a:b2:e3:c5:39:bf:8b:c6:26:6c: 2f:e2:46:7a:e8:83:f9:44:c1:23:fb:02:66:de:3e: a2:de:70:2d:ed:ef:16:51:3f:b2:b5:77:c7:5e:0e: b3:d2:c0:18:25:65:78:1e:2d:72:6e:98:e5:50:41: 77:3f:d7:e0:4b:c6:db:b1:1e:bc:2c:d6:81:39:84: 21:65:b0:7d:77:04:db:00:c4:a1:87:3a:9a:50:40: 30:4e:96:ec:f2:68:c4:32:18:94:df:4e:3a:c4:e4: 3a:ab:32:45:fb:21:ea:f8:66:e2:f7:8b:48:22:98: 10:24:46:00:ae:a6:2b:6b:da:f9:66:f7:e5:7b:f0: 7f:5d:df:dd:0f:40:71:f5:22:3a:f9:02:3a:d5:2c: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:9D:F5:04:3D:A9:81:76:F7:8C:1C:23:A8:D8:33:70:17:69:EB X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:0f:b1:4e:48:26:dc:dd:f8:c3:08:66:a0:ed:98:46:90:34: ad:85:32:49:98:0f:89:df:0d:d9:96:c9:d6:19:9b:9e:d3:1f: 3f:58:cf:63:80:0f:6b:ba:a4:95:88:35:ed:c5:e1:a0:ee:b9: c7:74:66:50:80:18:d4:32:52:9a:5c:d5:c6:d0:e1:16:4f:c9: 6a:3a:e7:57:f0:99:d2:eb:d2:db:01:5b:72:cd:1f:77:6c:ca: 18:b8:71:0a:59:54:51:df:3b:f2:98:14:b7:94:a9:ab:50:4f: 53:bc:f7:8c:af:b4:61:dc:91:94:df:1a:2f:f0:e8:04:ab:fc: cb:9b:2c:cc:43:0d:2d:87:0b:28:2f:4f:74:4e:b6:9d:e1:7c: 85:fd:bf:bf:d0:0e:97:f9:87:4d:43:b5:f2:5c:61:75:12:37: 5e:21:14:9b:47:0e:b7:b2:0b:28:b4:cd:a3:71:4f:c8:87:80: a5:af:14:40:38:b6:75:b8:41:dc:16:8f:14:ed:f9:dd:59:0f: 5c:d2:13:3d:52:52:5d:32:ec:7b:60:cb:12:0f:e4:eb:9b:cf: 44:69:29:0d:21:f9:18:1f:e3:a4:85:77:14:27:4b:83:0e:93: 0a:41:58:a9:ba:43:67:60:3a:ca:df:90:53:8a:8c:1c:e1:8a: 63:d1:39:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUwNzE4MTQ1OTEwWhcNMjUwNzI1MTQ1OTEwWjAYMRYwFAYD VQQDEw02ODdhNjEzZS03M2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RFh+ZxIJXJLcyPaKUM2EJFDWiOwdHH1hJTrupqkvM0dlaDiiCAHsewKYd6+ OC1g4tr64quswxjInidExkUrLB7DEXJ8hvEPg/UCmxzoyKjkdcXoFAslMCV4xEvp oClj16oLF99DLuIpXaruSiqy48U5v4vGJmwv4kZ66IP5RMEj+wJm3j6i3nAt7e8W UT+ytXfHXg6z0sAYJWV4Hi1ybpjlUEF3P9fgS8bbsR68LNaBOYQhZbB9dwTbAMSh hzqaUEAwTpbs8mjEMhiU3046xOQ6qzJF+yHq+Gbi94tIIpgQJEYArqYra9r5Zvfl e/B/Xd/dD0Bx9SI6+QI61SxATQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcRnfUE PamBdveMHCOo2DNwF2nrMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6D7FOSCbc3fjDCGag7ZhGkDSthTJJmA+J3w3ZlsnWGZue0x8/WM9j gA9ruqSViDXtxeGg7rnHdGZQgBjUMlKaXNXG0OEWT8lqOudX8JnS69LbAVtyzR93 bMoYuHEKWVRR3zvymBS3lKmrUE9TvPeMr7Rh3JGU3xov8OgEq/zLmyzMQw0thwso L090Trad4XyF/b+/0A6X+YdNQ7XyXGF1EjdeIRSbRw63sgsotM2jcU/Ih4ClrxRA OLZ1uEHcFo8U7fndWQ9c0hM9UlJdMux7YMsSD+Trm89EaSkNIfkYH+OkhXcUJ0uD DpMKQVipukNnYDrK35BTiowc4Ypj0TkH -----END CERTIFICATE-----Generated at Sun Jul 20 11:39:01 2025 by rpki-client