$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: ix1KP0qFHxMB8+qo64aCfSXvupz/UW0cNLCOnhJI6bA= Subject key identifier: 02:32:C7:A4:88:89:1F:1C:A0:CF:9A:64:81:7D:28:CF:04:6A:82:DE Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: E0 Signing time: Wed 23 Jul 2025 05:46:49 +0000 Manifest this update: Wed 23 Jul 2025 05:46:49 +0000 Manifest next update: Wed 30 Jul 2025 05:46:49 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: Bfxzr43g+qRGs8lWJyJHsA26k/B9SZcH82JkI/38rZU=) 2: 57FBE074370111F094BF7862C4F9AE02.roa (hash: NzrXfR/7zniLvrCXQlmVGg2isIi5LfwP1ubwC3yxm7E=) 3: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: /GfdIIe6m1dYDx7Tm/mUgCqzxCNCLDFcedZ67s1StUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Jul 23 05:46:49 2025 GMT Not After : Jul 30 05:46:49 2025 GMT Subject: CN=68807749-e045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:46:be:5d:ce:35:d2:cc:f5:e9:91:a9:cc:c6: cb:2d:a1:c3:6c:1f:30:57:bd:38:40:0b:8e:57:b0: 81:81:e3:1c:c8:e7:a0:1c:d3:e9:b7:bb:45:c5:8b: 4c:b8:f8:32:5b:64:43:6c:1d:78:ba:51:c9:69:ef: 6d:46:d2:d0:3c:87:4d:bf:13:ad:03:2a:7b:e8:06: 32:7c:70:66:cf:18:66:40:05:a5:ed:e3:60:36:33: 1e:7d:6c:dc:03:28:86:83:7a:46:cf:74:b6:19:29: 4e:c8:41:f5:db:56:24:9f:9d:d9:35:89:85:97:a6: ef:29:71:70:75:07:f3:c4:71:ad:d8:bc:4f:4a:68: 46:c3:38:b0:8a:56:0f:62:e7:66:a7:3b:91:46:45: 5e:41:85:d8:f7:74:d7:88:7d:50:b9:e3:94:82:1e: 21:68:72:a5:73:98:97:98:fd:a5:99:8a:36:c7:89: 80:ee:43:58:16:77:1e:8f:b1:ef:1b:22:7b:03:16: b1:a4:7d:1a:70:67:1e:2c:39:7e:78:0a:e3:31:71: 50:fc:39:5b:66:da:53:ce:14:8e:29:7f:48:ee:04: bb:6b:b7:de:9c:75:a8:03:02:97:31:18:ad:8d:16: ae:9b:14:ef:eb:12:ae:f9:3a:db:89:fa:6c:5d:da: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:32:C7:A4:88:89:1F:1C:A0:CF:9A:64:81:7D:28:CF:04:6A:82:DE X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:24:08:d4:78:a0:c9:8b:ea:fd:d1:12:c4:72:3a:94:fd:4e: 9f:50:9b:bb:7b:ab:3c:af:42:e0:54:31:c9:97:72:06:2f:5b: f6:fb:dc:9e:4b:08:a9:e0:67:b2:69:18:a0:9c:83:fc:80:7f: 1d:ed:be:2f:f9:f9:47:1b:f7:20:b5:68:49:1b:d8:1c:ee:54: d1:e2:d6:35:c9:ea:64:c7:da:88:d4:39:23:36:00:84:cd:26: 46:27:48:4e:29:3b:8e:2f:dc:d5:f8:e7:b2:b3:6d:3b:74:33: 71:7f:9b:ce:7c:e4:cc:33:b1:9e:e9:34:48:d8:d4:a2:41:57: 2b:d8:59:58:69:6b:8e:9e:a8:1f:09:ca:df:e1:d8:67:ea:db: 76:e4:e2:9b:56:4f:91:f5:c6:3f:c4:cf:eb:28:3f:cf:6f:e0: 73:38:8a:91:ea:70:87:0f:e1:80:ca:bb:5e:1f:58:56:68:28: 01:53:f9:fa:9a:29:71:19:be:62:aa:c3:a4:50:c8:42:93:f6: a3:7a:18:82:38:56:3e:96:54:ba:fe:10:0b:47:8e:90:5f:24: b1:0c:1b:84:ee:98:de:ca:6b:8d:3f:55:9a:bc:06:46:dd:de: bd:4d:49:05:74:01:41:4c:62:8d:71:ea:35:85:27:e6:7b:ec: 70:51:78:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwNzIzMDU0NjQ5WhcNMjUwNzMwMDU0NjQ5WjAYMRYwFAYD VQQDEw02ODgwNzc0OS1lMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ea+Xc410sz16ZGpzMbLLaHDbB8wV704QAuOV7CBgeMcyOegHNPpt7tFxYtM uPgyW2RDbB14ulHJae9tRtLQPIdNvxOtAyp76AYyfHBmzxhmQAWl7eNgNjMefWzc AyiGg3pGz3S2GSlOyEH121Ykn53ZNYmFl6bvKXFwdQfzxHGt2LxPSmhGwziwilYP YudmpzuRRkVeQYXY93TXiH1QueOUgh4haHKlc5iXmP2lmYo2x4mA7kNYFncej7Hv GyJ7AxaxpH0acGceLDl+eArjMXFQ/DlbZtpTzhSOKX9I7gS7a7fenHWoAwKXMRit jRaumxTv6xKu+TrbifpsXdo2FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIyx6SI iR8coM+aZIF9KM8EaoLeMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNJAjUeKDJi+r90RLEcjqU/U6fUJu7e6s8r0LgVDHJl3IGL1v2+9ye Swip4GeyaRignIP8gH8d7b4v+flHG/cgtWhJG9gc7lTR4tY1yepkx9qI1DkjNgCE zSZGJ0hOKTuOL9zV+Oeys207dDNxf5vOfOTMM7Ge6TRI2NSiQVcr2FlYaWuOnqgf Ccrf4dhn6tt25OKbVk+R9cY/xM/rKD/Pb+BzOIqR6nCHD+GAyrteH1hWaCgBU/n6 milxGb5iqsOkUMhCk/ajehiCOFY+llS6/hALR46QXySxDBuE7pjeymuNP1WavAZG 3d69TUkFdAFBTGKNceo1hSfme+xwUXiW -----END CERTIFICATE-----Generated at Thu Jul 24 08:32:37 2025 by rpki-client