$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft File: kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json) Hash identifier: n2SH5pt4Bj29WOykxPP+Nfkgs2y3Pg9otckcosGpuec= Subject key identifier: B6:1F:75:09:96:3E:D0:F8:C4:D2:0A:D6:BC:07:98:BE:D0:15:84:92 Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft Manifest number: 044E Signing time: Sat 19 Jul 2025 00:42:15 +0000 Manifest this update: Sat 19 Jul 2025 00:42:15 +0000 Manifest next update: Sat 26 Jul 2025 00:42:15 +0000 Files and hashes: 1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: RQ0Wm7bfmQFhsSZjnl5k/bDJEI3SQGU7FXm+6/XAWvM=) 2: E7DBA61CA1FA11EF9696DF59C4F9AE02.roa (hash: 346r3b4w4VthONfD4bZWfxOP9wmeXPFHqji5dvclr0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F Validity Not Before: Jul 19 00:42:15 2025 GMT Not After : Jul 26 00:42:15 2025 GMT Subject: CN=687ae9e7-9a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:0d:54:88:0f:6a:f8:09:3c:90:f7:d6:59: 3b:8e:d9:f4:fb:1b:fe:43:3d:29:cb:d6:67:93:94: 62:7d:57:ad:6f:9d:53:1b:41:13:cd:66:09:aa:79: 8a:c1:8a:75:1a:e0:39:9e:07:c6:c3:f5:a6:12:10: 9d:06:61:fc:67:a3:e7:41:d7:28:31:05:d2:9d:48: a9:62:55:2e:7b:79:b5:0c:bc:95:46:30:85:88:d8: e2:5c:02:fe:9e:29:42:04:82:f7:63:59:72:10:73: 32:db:cf:ee:db:11:af:44:69:69:f7:b3:86:d4:eb: 56:71:18:76:94:3f:69:9d:5b:3d:3a:ce:6e:c2:0e: 64:8b:ab:60:fc:37:df:ac:d1:b0:a0:25:32:23:31: a6:66:f2:46:69:5c:14:89:c7:83:23:f1:98:a2:35: 2a:b3:97:4d:e6:32:2b:ed:5d:b1:af:09:8e:d3:6d: ce:de:82:34:d1:c1:7b:70:75:19:6e:74:74:f0:00: 29:a8:43:86:6f:b7:2a:91:80:03:4e:fa:c1:c6:02: c0:48:f7:c4:4f:20:97:ab:43:6f:1f:aa:ac:ab:5e: 49:a9:f9:f3:23:36:f7:1d:04:7f:ae:c3:dd:ef:b0: 88:4b:b9:20:0f:d7:7f:d0:60:3b:1a:27:10:36:17: 33:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1F:75:09:96:3E:D0:F8:C4:D2:0A:D6:BC:07:98:BE:D0:15:84:92 X509v3 Authority Key Identifier: keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:11:5a:f5:a6:52:bb:60:ce:8b:01:94:0c:0c:96:45:32:dc: ae:aa:4f:d1:c0:e1:23:37:75:f1:92:eb:67:93:c9:a2:a5:c9: 3f:9c:b1:75:93:2e:15:c6:3a:56:1a:21:9e:b4:f0:e4:3c:c8: ce:65:50:07:e8:0f:a7:86:e9:7d:12:59:fa:46:4d:4b:5f:8b: a4:65:66:f4:bd:50:ea:88:f2:b7:be:70:a4:9f:38:5e:37:6c: 4f:ac:50:94:c5:8b:0d:eb:fa:2b:0a:d7:df:ea:7d:3f:53:67: 64:96:e6:c4:3c:f7:8c:4b:4f:09:58:ab:2f:8e:82:97:85:e6: de:dd:14:3b:41:7f:9e:bb:69:3a:eb:e2:3b:ce:28:43:2b:73: d0:87:b8:df:c7:c0:23:c3:b6:07:45:50:94:2b:c5:5b:55:84: 5b:06:3e:cd:16:fd:e8:37:f0:d6:5b:80:32:03:26:dc:46:93: 44:3d:6a:9d:e5:50:09:d5:62:e2:4a:73:dd:0b:f2:78:9b:24: 6b:fb:0e:6b:57:1b:0e:b7:11:c5:c4:d8:d7:1d:ab:e0:cb:81: 46:7c:81:0e:9e:89:c2:9f:e6:3b:65:e1:88:fb:75:32:19:c6: 6b:94:1a:9a:62:e9:d3:b7:11:dd:20:a0:56:2a:b6:fd:fe:29: 8c:7b:68:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwNUIxMTAvBgNVBAUTKDkxMzM4NjkwREVCQTU3OENFNzM4MjE4QTlFMjIwODU0 RDFCNTI3NUYwHhcNMjUwNzE5MDA0MjE1WhcNMjUwNzI2MDA0MjE1WjAYMRYwFAYD VQQDEw02ODdhZTllNy05YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4ENVIgPavgJPJD31lk7jtn0+xv+Qz0py9Znk5RifVetb51TG0ETzWYJqnmK wYp1GuA5ngfGw/WmEhCdBmH8Z6PnQdcoMQXSnUipYlUue3m1DLyVRjCFiNjiXAL+ nilCBIL3Y1lyEHMy28/u2xGvRGlp97OG1OtWcRh2lD9pnVs9Os5uwg5ki6tg/Dff rNGwoCUyIzGmZvJGaVwUiceDI/GYojUqs5dN5jIr7V2xrwmO023O3oI00cF7cHUZ bnR08AApqEOGb7cqkYADTvrBxgLASPfETyCXq0NvH6qsq15JqfnzIzb3HQR/rsPd 77CIS7kgD9d/0GA7GicQNhczrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYfdQmW PtD4xNIK1rwHmL7QFYSSMB8GA1UdIwQYMBaAFJEzhpDeuleM5zghip4iCFTRtSdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA1Qi85ODE3RDI3MjY0 Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0em5PQ0dLbmlJSVZORzFK MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tUT0drTjY2VjR6bk9DR0tuaUlJVk5HMUoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA1Qi85ODE3RDI3MjY0Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0 em5PQ0dLbmlJSVZORzFKMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaEVr1plK7YM6LAZQMDJZFMtyuqk/RwOEjN3Xxkutnk8mipck/nLF1 ky4VxjpWGiGetPDkPMjOZVAH6A+nhul9Eln6Rk1LX4ukZWb0vVDqiPK3vnCknzhe N2xPrFCUxYsN6/orCtff6n0/U2dklubEPPeMS08JWKsvjoKXhebe3RQ7QX+eu2k6 6+I7zihDK3PQh7jfx8Ajw7YHRVCUK8VbVYRbBj7NFv3oN/DWW4AyAybcRpNEPWqd 5VAJ1WLiSnPdC/J4myRr+w5rVxsOtxHFxNjXHavgy4FGfIEOnonCn+Y7ZeGI+3Uy GcZrlBqaYunTtxHdIKBWKrb9/imMe2hm -----END CERTIFICATE-----Generated at Sun Jul 20 16:29:20 2025 by rpki-client