$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft File: kKmEULnak4EYotWtU02IKPS5RjQ.mft (raw, json) Hash identifier: sPcXvrBd3fWk+VFw619GC/4+nm4TLKYRaYThrFYcN1E= Subject key identifier: 60:95:4A:C0:88:7B:EF:67:8A:46:7A:11:0C:91:F2:EA:19:5B:FC:4B Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Certificate serial: 0C37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft Manifest number: 0C25 Signing time: Sun 20 Jul 2025 18:46:30 +0000 Manifest this update: Sun 20 Jul 2025 18:46:30 +0000 Manifest next update: Sun 27 Jul 2025 18:46:30 +0000 Files and hashes: 1: kKmEULnak4EYotWtU02IKPS5RjQ.crl (hash: KavPBVyJGKTOfROHMjaCw2VueQPIxPoglTfpU/4eVac=) 2: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (hash: G+U7uQFgAb2U+N/txdaeFUXvdA97Z5VnhrdZ+BD6M4c=) 3: E6144BC6F52011EFB886A255C4F9AE02.roa (hash: aEMS3M29hCCeByUCXZ+uvfYFpf4/VBfRmYpl07QvYhY=) 4: C9989D9EF52011EF88416555C4F9AE02.roa (hash: 5ttWZpUai22oFSUg02AkUKazNYGpWMAvqC2hReQsDD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3127 (0xc37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA2CC, serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Validity Not Before: Jul 20 18:46:30 2025 GMT Not After : Jul 27 18:46:30 2025 GMT Subject: CN=687d3986-99c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:ab:69:06:01:2e:26:f6:1d:13:dc:75:d2: 65:12:41:7d:e2:54:13:42:8b:25:78:f4:4f:70:fd: 49:73:84:d8:16:96:0b:75:11:b0:0e:c2:21:d0:9f: b9:13:a0:17:31:e2:c0:74:ce:d4:3b:e1:d2:ca:29: d4:67:81:d7:6d:48:af:43:c8:61:7b:9e:2e:0c:76: 5d:de:c0:4e:de:75:fb:83:97:d5:25:3c:00:2e:da: 96:7a:81:97:54:6c:7a:82:06:e5:42:0b:27:c2:5b: bd:89:8f:4f:6d:fe:ab:e3:47:21:12:ee:c1:2c:37: d4:ca:8d:da:25:95:51:39:5b:09:81:1d:e2:21:18: 15:4b:3b:64:87:ec:78:f8:d2:5c:34:c0:d7:bc:d8: da:71:2c:92:00:3c:d3:77:90:e7:d2:10:ee:63:95: 09:5c:fe:19:6a:06:24:6c:3d:c0:eb:91:89:c3:07: ee:e7:5e:c7:b1:07:cd:7e:3d:ee:32:83:7f:0a:7e: 31:4f:21:ca:1b:0c:8d:3b:a5:b3:c5:48:de:45:d8: a0:bd:d5:31:ec:f8:f8:d6:94:b6:69:09:03:49:43: ff:e1:0b:56:4c:05:52:58:ff:7d:f9:28:47:e2:e2: 3a:2d:09:5c:b5:be:cb:4c:2e:33:df:77:20:eb:a4: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:95:4A:C0:88:7B:EF:67:8A:46:7A:11:0C:91:F2:EA:19:5B:FC:4B X509v3 Authority Key Identifier: keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:a5:ce:6d:8b:44:f3:db:42:a5:1c:c9:46:d4:e7:d9:8a:91: 31:0c:e2:c5:bb:a3:d2:93:16:68:8e:ce:4a:a4:8b:5b:67:f6: ac:f8:e0:03:51:8e:20:ea:90:5a:aa:a8:5b:be:43:5b:97:f7: ee:23:e7:88:d5:1d:e1:a9:2d:ed:17:3a:1d:15:cb:5f:02:f5: 2a:f5:95:fa:6a:49:81:1c:32:7f:b6:6c:29:e9:b2:c5:3e:5e: 5f:79:43:98:38:c7:e8:2d:2e:7a:ef:94:fd:38:1c:7e:57:68: 6f:d6:a5:ae:f0:1e:6d:67:3f:6b:d1:28:d9:50:00:1f:a1:41: 49:9e:1f:43:8e:31:f8:a9:6c:c3:d4:ae:fb:1e:f9:b1:89:ec: 5a:9f:f5:45:9a:b7:44:db:38:83:90:35:df:1e:30:9e:ca:22: 1f:6c:a0:f9:ad:21:b1:4c:d5:ff:62:24:d8:b6:85:65:78:a7: 72:d5:d4:8f:98:32:bc:61:c9:28:56:fb:56:bc:79:c7:65:23: 50:1f:c7:7f:ef:f0:e8:eb:4e:42:ee:ca:9b:a6:6a:fc:d8:7e: a0:6a:de:b4:1d:a8:cf:58:ff:f1:0b:38:de:71:bf:6d:4c:e9: 7b:4b:d0:a6:b7:0f:6e:86:48:0a:88:12:20:2a:ff:f8:b9:f4: 85:ab:75:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4 RjRCOTQ2MzQwHhcNMjUwNzIwMTg0NjMwWhcNMjUwNzI3MTg0NjMwWjAYMRYwFAYD VQQDEw02ODdkMzk4Ni05OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10uraQYBLib2HRPcddJlEkF94lQTQoslePRPcP1Jc4TYFpYLdRGwDsIh0J+5 E6AXMeLAdM7UO+HSyinUZ4HXbUivQ8hhe54uDHZd3sBO3nX7g5fVJTwALtqWeoGX VGx6ggblQgsnwlu9iY9Pbf6r40chEu7BLDfUyo3aJZVROVsJgR3iIRgVSztkh+x4 +NJcNMDXvNjacSySADzTd5Dn0hDuY5UJXP4ZagYkbD3A65GJwwfu517HsQfNfj3u MoN/Cn4xTyHKGwyNO6WzxUjeRdigvdUx7Pj41pS2aQkDSUP/4QtWTAVSWP99+ShH 4uI6LQlctb7LTC4z33cg66S4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCVSsCI e+9nikZ6EQyR8uoZW/xLMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTJDQy9GMjZFMDZDRTExRjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0 RVlvdFd0VTAySUtQUzVSalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCipc5ti0Tz20KlHMlG1OfZipExDOLFu6PSkxZojs5KpItbZ/as+OAD UY4g6pBaqqhbvkNbl/fuI+eI1R3hqS3tFzodFctfAvUq9ZX6akmBHDJ/tmwp6bLF Pl5feUOYOMfoLS5675T9OBx+V2hv1qWu8B5tZz9r0SjZUAAfoUFJnh9DjjH4qWzD 1K77Hvmxiexan/VFmrdE2ziDkDXfHjCeyiIfbKD5rSGxTNX/YiTYtoVleKdy1dSP mDK8YckoVvtWvHnHZSNQH8d/7/Do605C7sqbpmr82H6gat60HajPWP/xCzjecb9t TOl7S9Cmtw9uhkgKiBIgKv/4ufSFq3Um -----END CERTIFICATE-----Generated at Mon Jul 21 07:21:39 2025 by rpki-client