$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json) Hash identifier: jyhIkRve5B7t8Y4cWfYE5LzR4dbfjcLj3r+DTJBV0+c= Subject key identifier: 36:7E:B9:03:D7:42:47:41:03:C0:94:52:FB:F3:12:B8:07:65:64:CC Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft Manifest number: 08BF Signing time: Fri 18 Jul 2025 20:42:50 +0000 Manifest this update: Fri 18 Jul 2025 20:42:50 +0000 Manifest next update: Fri 25 Jul 2025 20:42:50 +0000 Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: nN7/qWiNM8DHPdEiDXm+hwg5GBEKsrnPOVWcYT005L8=) 2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: Pjk7KOVj7H3BoAMc7NRiJiAFk/4ChSG9JZtPBtMlKPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Validity Not Before: Jul 18 20:42:50 2025 GMT Not After : Jul 25 20:42:50 2025 GMT Subject: CN=687ab1ca-4472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:a2:ba:fe:bf:5e:e7:b1:98:f2:25:f3:23: 5c:29:18:77:61:eb:05:6d:68:ef:37:2c:d5:da:3a: 02:e6:0b:c6:6a:80:07:1d:7a:97:6d:e8:6d:81:4d: d9:2c:eb:27:48:9b:44:ae:3d:84:53:a3:ec:0c:ab: b2:21:76:5e:5e:2f:26:bd:01:00:2a:fe:2a:42:b8: ca:c0:7a:24:67:63:b1:10:cd:f5:b8:1c:44:77:12: f0:a4:ef:ea:de:76:88:39:81:a4:7b:48:60:7f:36: f8:83:4c:37:95:37:6a:0d:a4:15:ab:82:1f:ef:60: 34:83:55:98:56:c2:c0:dd:9a:fb:cf:b4:c4:57:21: 61:c7:25:24:32:8f:9c:a5:f1:3d:b3:12:1e:a3:a6: 3a:f0:5d:9f:29:51:67:28:72:5c:1a:9a:2b:5e:2d: 94:5d:dc:8f:ec:d1:51:3b:96:ee:8d:01:a8:62:33: 8c:11:54:c8:9c:c3:64:9b:2a:b3:d8:9c:91:ad:c1: 1b:e1:ac:55:e0:55:5c:28:68:de:ff:dc:66:38:8a: b3:b2:ae:24:79:bb:d7:61:9b:f6:41:b6:e2:b3:2d: ec:e5:fc:d0:b1:9c:40:c4:ce:f6:91:7e:46:01:93: 60:80:fa:71:2d:7e:48:3b:01:5f:39:96:5a:58:1a: 6b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7E:B9:03:D7:42:47:41:03:C0:94:52:FB:F3:12:B8:07:65:64:CC X509v3 Authority Key Identifier: keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b0:ef:b6:1e:38:f1:86:0b:9d:b5:5c:9a:83:c5:69:dc:22: 2e:6f:9c:e9:a2:46:15:e1:3e:7c:08:23:78:f3:c7:49:f7:eb: 32:bd:e0:2e:a0:4e:76:c3:c8:fd:13:8c:2d:b8:29:81:32:3e: 00:56:48:13:ab:5f:c9:d8:4b:34:ae:a5:21:16:dc:36:22:be: ed:0e:0d:2f:27:02:c4:59:91:24:03:39:8d:bf:1c:77:1e:a7: e8:a8:1d:15:30:4e:54:0d:6a:19:b9:68:bd:6d:ff:5b:ec:59: 7e:41:df:9c:95:94:0e:d0:a5:01:23:77:8d:e0:8b:50:26:61: ff:00:8a:69:03:cf:2d:64:1d:69:20:d7:aa:5e:3b:95:59:ab: c3:67:42:cd:80:cb:f5:0e:09:f3:1c:cb:07:a8:d2:8c:6c:87: 2d:36:54:a9:f1:0e:ae:fd:c7:da:ae:ba:56:ec:bc:33:97:f1: 16:c4:df:76:fe:78:a0:50:49:d7:50:57:6c:e8:aa:a8:55:40: ca:34:d4:9d:37:27:51:55:9b:49:c4:09:50:e2:c0:3e:86:28: 5d:85:c6:90:aa:14:6e:86:b2:52:aa:cd:68:2e:05:ae:68:31: e9:5f:61:91:1d:fb:4c:66:c4:ae:5f:06:3b:46:48:32:74:23: f1:95:23:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDkyMkQ2MEVBMTkzOTY3MTc3QkM2QzM5QTQwNjg1OThB M0I3NUE2RDMwHhcNMjUwNzE4MjA0MjUwWhcNMjUwNzI1MjA0MjUwWjAYMRYwFAYD VQQDEw02ODdhYjFjYS00NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZKiuv6/XuexmPIl8yNcKRh3YesFbWjvNyzV2joC5gvGaoAHHXqXbehtgU3Z LOsnSJtErj2EU6PsDKuyIXZeXi8mvQEAKv4qQrjKwHokZ2OxEM31uBxEdxLwpO/q 3naIOYGke0hgfzb4g0w3lTdqDaQVq4If72A0g1WYVsLA3Zr7z7TEVyFhxyUkMo+c pfE9sxIeo6Y68F2fKVFnKHJcGporXi2UXdyP7NFRO5bujQGoYjOMEVTInMNkmyqz 2JyRrcEb4axV4FVcKGje/9xmOIqzsq4kebvXYZv2Qbbisy3s5fzQsZxAxM72kX5G AZNggPpxLX5IOwFfOZZaWBprRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZ+uQPX QkdBA8CUUvvzErgHZWTMMB8GA1UdIwQYMBaAFJItYOoZOWcXe8bDmkBoWYo7dabT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8zMjA5MDFDNEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4ZDd4c09hUUdoWmlqdDFw dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpMWc2aGs1WnhkN3hzT2FRR2haaWp0MXB0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8zMjA5MDFDNEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4 ZDd4c09hUUdoWmlqdDFwdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADsO+2HjjxhgudtVyag8Vp3CIub5zpokYV4T58CCN488dJ9+syveAu oE52w8j9E4wtuCmBMj4AVkgTq1/J2Es0rqUhFtw2Ir7tDg0vJwLEWZEkAzmNvxx3 HqfoqB0VME5UDWoZuWi9bf9b7Fl+Qd+clZQO0KUBI3eN4ItQJmH/AIppA88tZB1p INeqXjuVWavDZ0LNgMv1DgnzHMsHqNKMbIctNlSp8Q6u/cfarrpW7Lwzl/EWxN92 /nigUEnXUFds6KqoVUDKNNSdNydRVZtJxAlQ4sA+hihdhcaQqhRuhrJSqs1oLgWu aDHpX2GRHftMZsSuXwY7RkgydCPxlSNx -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:00 2025 by rpki-client