$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json) Hash identifier: CpGJAQyO8Wbr2yQW1ZHMh1xfoemBPfiERx/XwA9Eqvk= Subject key identifier: A9:32:96:69:08:45:B4:C8:58:2D:4A:D0:86:12:60:53:C2:13:DD:DC Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft Manifest number: 01EB Signing time: Tue 09 Sep 2025 02:41:15 +0000 Manifest this update: Tue 09 Sep 2025 02:41:14 +0000 Manifest next update: Tue 16 Sep 2025 02:41:14 +0000 Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: hbAvBALV8tgn1lTOiJRSshYiLFdcGbOhoWb3EevtMxA=) 2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: /IwIj5wHV9TZq7gyFUGmW+srgA66FnHYYQjrcF03350=) 3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: q5xwzkvJJT2cpQij23jtb331Ba1Q6ZPU5GFvae3tZEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Validity Not Before: Sep 9 02:41:14 2025 GMT Not After : Sep 16 02:41:14 2025 GMT Subject: CN=68bf93cb-aba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:4f:8d:79:bb:70:11:71:c0:0e:e4:18:e1: 06:df:78:7c:0a:76:9e:28:52:16:94:03:3e:26:8d: 14:e9:fa:dc:94:70:14:34:6a:3a:07:77:86:f8:2d: 66:96:c4:28:fa:8c:89:f9:ae:55:13:15:e9:6c:ca: 5c:7e:c4:63:0d:86:b8:80:cb:45:89:08:36:2c:bc: d2:5a:2c:07:4c:eb:dc:b5:3f:34:09:d3:b6:66:fd: e8:01:1c:0a:d4:ba:3d:64:75:64:5a:ad:24:80:c4: 99:06:9d:fd:b0:8e:31:59:89:8e:f5:6f:a5:a0:d7: b0:02:cd:62:75:c7:f2:5c:7b:38:ff:ed:9f:5b:4b: 9c:a9:f5:4e:e8:a9:7e:b3:95:19:95:96:e2:85:8d: 0a:ff:93:88:52:02:5e:4f:63:b7:7b:74:e3:03:fb: 23:1b:84:00:ce:f2:82:e1:95:25:a4:26:ad:09:cf: ac:7f:2a:e9:a6:d4:21:59:56:a1:c8:e5:9e:3a:29: 0e:30:5b:07:fe:0b:79:0a:9e:d5:0a:f2:58:f3:08: 30:16:9a:1e:9a:66:96:4c:1d:b6:fb:61:71:39:83: c1:eb:13:0c:f6:74:3a:65:1b:59:c5:ce:e5:06:41: cd:bc:c5:57:46:ca:30:3a:64:44:b6:33:73:ab:45: 1e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:32:96:69:08:45:B4:C8:58:2D:4A:D0:86:12:60:53:C2:13:DD:DC X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f9:46:72:5a:e2:11:ba:a2:35:24:a2:c9:d7:ba:c2:56:24: 90:49:f4:da:b7:f5:b4:4d:19:90:86:21:c8:f3:e1:d4:54:30: 63:9b:46:f6:b8:79:04:4a:63:35:38:53:41:9b:dd:7c:2f:7a: a9:f0:02:30:86:3d:a1:e5:92:ae:cd:12:cb:c5:ed:76:18:94: b4:11:e6:08:aa:be:1c:0b:85:56:eb:bd:c6:d8:88:e0:9c:95: a2:01:47:8b:9b:a5:f8:77:a1:fe:f1:ca:61:b5:bb:76:ab:8e: 1f:48:4a:35:94:2f:ce:95:8f:68:15:79:31:52:86:61:36:b7: 17:01:2e:32:b3:b2:16:47:73:bf:52:d0:7b:58:2b:9d:de:ca: 5b:63:52:65:a1:ae:71:8f:1e:58:58:bf:a9:1b:3e:f8:f8:f9: c4:47:76:9c:ff:c6:58:62:32:80:2f:67:fa:a1:6a:79:35:28: a8:2b:e8:44:e0:df:d5:0f:06:40:e8:98:26:e6:7a:33:7b:aa: a9:99:9e:fd:ab:b2:40:9c:3a:3e:88:47:4b:5f:89:32:f5:f0: 58:25:fd:ac:3d:89:c3:2c:91:df:74:04:07:72:cf:9e:4d:0c: 67:f6:61:b4:6f:c0:dd:91:a6:7b:de:0b:df:51:eb:db:ff:11: 81:f5:59:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjUwOTA5MDI0MTE0WhcNMjUwOTE2MDI0MTE0WjAYMRYwFAYD VQQDEw02OGJmOTNjYi1hYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfNPjXm7cBFxwA7kGOEG33h8CnaeKFIWlAM+Jo0U6frclHAUNGo6B3eG+C1m lsQo+oyJ+a5VExXpbMpcfsRjDYa4gMtFiQg2LLzSWiwHTOvctT80CdO2Zv3oARwK 1Lo9ZHVkWq0kgMSZBp39sI4xWYmO9W+loNewAs1idcfyXHs4/+2fW0ucqfVO6Kl+ s5UZlZbihY0K/5OIUgJeT2O3e3TjA/sjG4QAzvKC4ZUlpCatCc+sfyrpptQhWVah yOWeOikOMFsH/gt5Cp7VCvJY8wgwFpoemmaWTB22+2FxOYPB6xMM9nQ6ZRtZxc7l BkHNvMVXRsowOmREtjNzq0UeVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkylmkI RbTIWC1K0IYSYFPCE93cMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL V2xBYlYxQnZyazVjRWFIWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL+UZyWuIRuqI1JKLJ17rCViSQSfTat/W0TRmQhiHI8+HUVDBjm0b2 uHkESmM1OFNBm918L3qp8AIwhj2h5ZKuzRLLxe12GJS0EeYIqr4cC4VW673G2Ijg nJWiAUeLm6X4d6H+8cphtbt2q44fSEo1lC/OlY9oFXkxUoZhNrcXAS4ys7IWR3O/ UtB7WCud3spbY1Jloa5xjx5YWL+pGz74+PnER3ac/8ZYYjKAL2f6oWp5NSioK+hE 4N/VDwZA6Jgm5noze6qpmZ79q7JAnDo+iEdLX4ky9fBYJf2sPYnDLJHfdAQHcs+e TQxn9mG0b8DdkaZ73gvfUevb/xGB9Vmm -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:35 2025 by rpki-client