$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: 5/o9alo+737ynu8ogE2IwngmGw0jc3tK+n0rQkInScs= Subject key identifier: 89:A3:38:58:03:82:A6:BA:2B:0F:7D:76:8A:15:11:2F:5A:E5:3E:94 Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 03B7 Signing time: Fri 25 Jul 2025 01:05:16 +0000 Manifest this update: Fri 25 Jul 2025 01:05:15 +0000 Manifest next update: Fri 01 Aug 2025 01:05:15 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: WO6xuwifG+QVJuDyFbPyXu+tTHqYDRDqDeIOBOWLg+E=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 01:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Jul 25 01:05:15 2025 GMT Not After : Aug 1 01:05:15 2025 GMT Subject: CN=6882d84c-14e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:45:93:60:84:e2:bb:60:2d:e4:8a:93:62: c5:41:be:72:ab:75:a2:2f:7a:f1:4e:47:c3:06:c6: 45:e3:a9:f9:1b:65:55:c5:9a:62:23:3d:b4:f7:52: 72:61:e0:81:d7:2f:3c:49:03:1e:f3:a2:98:b9:d8: 0d:3d:a8:37:e8:f4:dd:90:dd:35:dd:c0:ff:05:43: 5c:06:64:bb:88:e6:c1:3c:27:4b:71:e0:8e:bd:96: ce:26:0b:1e:c5:09:5d:45:72:4c:11:6c:d7:6b:af: 96:25:05:51:bb:0e:1e:88:0c:73:d6:61:a0:77:26: 67:45:b3:43:0e:79:c9:5a:d3:b1:4a:6f:b7:28:35: 7d:e8:75:0f:bb:86:8a:ed:6b:42:9e:ea:10:3d:02: cb:6e:46:21:2f:69:f3:b5:a6:ab:f5:48:20:fd:01: b6:62:31:5c:da:4f:60:ab:f0:20:b5:71:52:58:6c: dd:af:cc:71:13:d1:72:b7:58:74:13:e3:1e:c5:5b: 0d:61:03:e2:bf:96:c5:91:fd:0d:08:4a:41:d4:d6: 01:a1:9e:6a:04:7a:20:50:ca:66:4f:78:75:04:1a: b2:7e:27:4d:e2:d8:30:34:ed:d2:ba:de:76:59:e8: 3c:cb:ee:22:e1:bc:91:7b:7f:21:6c:62:8d:fc:d0: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:38:58:03:82:A6:BA:2B:0F:7D:76:8A:15:11:2F:5A:E5:3E:94 X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:7a:d5:a6:41:68:a4:f2:bc:b5:1b:9a:75:e7:ed:a9:17:f0: 4e:4e:76:ec:15:4c:e5:cd:1b:72:9e:76:6e:2a:6a:1a:69:ba: 5a:a4:be:f2:72:67:7c:74:27:e5:f8:fa:82:7d:4b:45:74:30: 96:0d:b7:04:8a:92:74:9d:c5:a8:21:d9:8d:d2:e3:37:3c:47: 7f:e6:6e:4e:6d:91:ec:5e:89:63:5b:b5:54:04:e0:0b:96:16: 4f:eb:84:73:e4:fe:ac:64:2f:be:5e:ef:db:a2:a0:ca:8c:9d: 36:dc:6e:74:0b:17:54:28:e9:5e:be:26:c1:8c:69:72:dd:16: f6:dd:0e:70:0b:e8:e2:49:b4:fb:07:17:1b:36:3e:ba:ac:9d: c0:6b:92:9f:b8:19:5e:eb:1f:a7:71:e3:9d:2c:f8:36:aa:b3: b0:1a:33:8e:83:cd:bc:0a:a8:9d:d2:a4:2c:c4:c2:7d:ab:ce: ba:1a:ef:58:a9:df:ff:66:3f:0a:f4:d5:1f:50:85:28:bf:3e: 10:1e:2c:ef:c5:b7:0f:43:9d:ea:13:13:8d:06:c2:e2:9b:44: 4d:62:f2:66:a8:64:57:56:5a:d4:19:2f:c8:65:38:ad:6f:96: cb:59:e9:3c:cc:c4:d7:c9:fc:b6:ab:00:86:da:15:18:73:6f: 93:9b:70:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUwNzI1MDEwNTE1WhcNMjUwODAxMDEwNTE1WjAYMRYwFAYD VQQDEw02ODgyZDg0Yy0xNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoFFk2CE4rtgLeSKk2LFQb5yq3WiL3rxTkfDBsZF46n5G2VVxZpiIz2091Jy YeCB1y88SQMe86KYudgNPag36PTdkN013cD/BUNcBmS7iObBPCdLceCOvZbOJgse xQldRXJMEWzXa6+WJQVRuw4eiAxz1mGgdyZnRbNDDnnJWtOxSm+3KDV96HUPu4aK 7WtCnuoQPQLLbkYhL2nztaar9Ugg/QG2YjFc2k9gq/AgtXFSWGzdr8xxE9Fyt1h0 E+MexVsNYQPiv5bFkf0NCEpB1NYBoZ5qBHogUMpmT3h1BBqyfidN4tgwNO3Sut52 Weg8y+4i4byRe38hbGKN/NB49wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImjOFgD gqa6Kw99dooVES9a5T6UMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVetWmQWik8ry1G5p15+2pF/BOTnbsFUzlzRtynnZuKmoaabpapL7y cmd8dCfl+PqCfUtFdDCWDbcEipJ0ncWoIdmN0uM3PEd/5m5ObZHsXoljW7VUBOAL lhZP64Rz5P6sZC++Xu/boqDKjJ023G50CxdUKOlevibBjGly3Rb23Q5wC+jiSbT7 BxcbNj66rJ3Aa5KfuBle6x+nceOdLPg2qrOwGjOOg828Cqid0qQsxMJ9q866Gu9Y qd//Zj8K9NUfUIUovz4QHizvxbcPQ53qExONBsLim0RNYvJmqGRXVlrUGS/IZTit b5bLWek8zMTXyfy2qwCG2hUYc2+Tm3Bk -----END CERTIFICATE-----Generated at Sat Jul 26 12:00:17 2025 by rpki-client