$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: M+0qG+2XLFTrXmEStM8aZqAm5eNq3N8wQH/JcAs1rlc= Subject key identifier: C7:DB:83:37:FB:C9:E9:6E:10:11:79:E2:FB:61:43:4A:67:EF:18:29 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 06F0 Signing time: Thu 24 Jul 2025 22:11:07 +0000 Manifest this update: Thu 24 Jul 2025 22:11:06 +0000 Manifest next update: Thu 31 Jul 2025 22:11:06 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: 8Dwb8lfp3j81envg5+S+gZNKSkDl3y1FvQz2D1+2mU8=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Jul 24 22:11:06 2025 GMT Not After : Jul 31 22:11:06 2025 GMT Subject: CN=6882af7b-b1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:6c:0b:11:8c:11:cd:2c:93:37:7a:50:c7: b0:41:ac:de:8f:32:5d:88:1a:0e:41:c5:43:c1:2e: ce:58:21:cb:2d:a5:ad:e4:67:06:d7:39:02:bd:39: d6:d7:ce:d1:7a:b4:b4:64:2e:bb:87:a7:9f:a5:fe: f0:67:37:94:f9:31:5e:9a:1d:53:b2:e7:ee:37:57: f4:90:a2:b6:aa:ae:70:f1:90:f8:b9:9a:c8:b4:4e: 3f:9b:2a:aa:e8:8d:88:27:dc:31:ab:5b:e0:44:3f: 95:b3:10:e1:10:ee:94:a3:9f:c1:7a:47:ed:c2:8a: 61:07:25:72:86:8e:36:52:ff:00:0e:08:72:6f:5d: 44:d7:ca:9c:71:8e:d2:10:90:ba:41:8d:52:cf:a4: c0:aa:4c:aa:30:28:24:dd:07:6b:18:d9:bb:d0:d7: 5d:4e:67:0c:6e:79:df:5b:c2:80:15:d5:f4:25:78: 8f:52:b3:aa:ba:6a:2a:41:fa:e8:5b:54:12:ed:6b: d4:cc:fc:38:a4:b6:64:bd:a1:ac:10:55:e8:b2:94: c0:3e:a5:35:b9:d7:34:f9:70:d3:17:02:3f:13:9a: e3:a7:04:e7:21:e1:df:14:c0:88:a9:71:d3:92:26: 3c:59:a7:72:12:78:2f:19:07:b3:71:87:ed:e6:08: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DB:83:37:FB:C9:E9:6E:10:11:79:E2:FB:61:43:4A:67:EF:18:29 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:18:3e:15:74:07:e9:e5:0a:16:3d:19:08:6e:fe:4b:65:81: 22:44:2a:37:81:15:f9:af:1b:bd:a1:67:6b:a3:9b:17:14:2d: ca:aa:18:66:aa:44:5e:38:73:9e:05:01:ef:44:27:45:9e:c7: 41:fa:a9:d5:21:99:d3:07:e4:55:8e:1a:fd:bb:c1:84:db:c6: 03:df:c8:d2:fa:b2:72:77:bb:ce:4d:86:ca:5b:38:ce:96:a7: c7:d3:e5:eb:83:db:81:59:10:6b:15:8f:e7:69:5d:ab:54:d7: e3:e7:16:3b:b3:1f:02:69:1a:cc:4b:ce:da:5b:97:86:ce:02: fb:12:3d:5b:2d:17:f4:9f:8b:2b:04:f1:b7:78:57:d1:82:57: ff:d5:66:f1:25:76:6b:a4:73:c2:5e:85:84:b6:b9:97:1f:ee: 42:50:5d:45:af:c6:84:90:ad:88:83:9a:33:e7:27:8b:22:6e: 39:e8:52:94:b4:b4:62:f2:fb:8a:f1:82:0a:0a:8b:e0:6a:f0: ab:a2:0e:ed:8d:cd:3c:e3:57:54:2f:ee:7d:a8:aa:d9:f5:18: 7d:bf:37:78:c8:f1:b7:2b:f2:4a:9f:8b:e1:d7:80:5a:05:c2: 93:59:52:3e:b3:ee:83:af:03:25:ee:b0:85:db:4c:d0:70:9d: bf:fa:c2:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjUwNzI0MjIxMTA2WhcNMjUwNzMxMjIxMTA2WjAYMRYwFAYD VQQDEw02ODgyYWY3Yi1iMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YNsCxGMEc0skzd6UMewQazejzJdiBoOQcVDwS7OWCHLLaWt5GcG1zkCvTnW 187RerS0ZC67h6efpf7wZzeU+TFemh1TsufuN1f0kKK2qq5w8ZD4uZrItE4/myqq 6I2IJ9wxq1vgRD+VsxDhEO6Uo5/BekftwophByVyho42Uv8ADghyb11E18qccY7S EJC6QY1Sz6TAqkyqMCgk3QdrGNm70NddTmcMbnnfW8KAFdX0JXiPUrOqumoqQfro W1QS7WvUzPw4pLZkvaGsEFXospTAPqU1udc0+XDTFwI/E5rjpwTnIeHfFMCIqXHT kiY8WadyEngvGQezcYft5giHZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfbgzf7 yeluEBF54vthQ0pn7xgpMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKGD4VdAfp5QoWPRkIbv5LZYEiRCo3gRX5rxu9oWdro5sXFC3Kqhhm qkReOHOeBQHvRCdFnsdB+qnVIZnTB+RVjhr9u8GE28YD38jS+rJyd7vOTYbKWzjO lqfH0+Xrg9uBWRBrFY/naV2rVNfj5xY7sx8CaRrMS87aW5eGzgL7Ej1bLRf0n4sr BPG3eFfRglf/1WbxJXZrpHPCXoWEtrmXH+5CUF1Fr8aEkK2Ig5oz5yeLIm456FKU tLRi8vuK8YIKCovgavCrog7tjc0841dUL+59qKrZ9Rh9vzd4yPG3K/JKn4vh14Ba BcKTWVI+s+6DrwMl7rCF20zQcJ2/+sJt -----END CERTIFICATE-----Generated at Fri Jul 25 05:24:13 2025 by rpki-client