$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: Ful6oy8ztIQJEG7a4j08iwDGZ+tMvhkr0tIPARUN+dg= Subject key identifier: 07:9B:1D:A2:54:B9:E6:C2:AC:F1:70:25:5B:08:1C:79:E9:75:59:05 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: E1 Signing time: Fri 25 Jul 2025 05:44:40 +0000 Manifest this update: Fri 25 Jul 2025 05:44:40 +0000 Manifest next update: Fri 01 Aug 2025 05:44:40 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: OtPSui3sdytOdYvjOvWHz2P+de9hLuH29CaRcmbiQtA=) 2: 57FBE074370111F094BF7862C4F9AE02.roa (hash: NzrXfR/7zniLvrCXQlmVGg2isIi5LfwP1ubwC3yxm7E=) 3: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: /GfdIIe6m1dYDx7Tm/mUgCqzxCNCLDFcedZ67s1StUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 05:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Jul 25 05:44:40 2025 GMT Not After : Aug 1 05:44:40 2025 GMT Subject: CN=688319c8-3c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:ac:4e:43:f6:ed:32:1c:d2:f2:50:f3:cf: 05:07:14:07:05:76:c3:b7:b0:26:d7:26:9c:a8:4f: 2f:25:cb:b9:0d:a2:e2:68:01:67:af:67:0c:42:42: c9:4e:a2:3b:0f:44:c2:a9:ab:dc:7b:1c:d4:c9:53: 42:df:49:87:76:e9:2c:11:a0:d7:23:01:ca:0a:6e: 51:3e:57:33:64:32:71:5e:c5:70:7e:6c:f5:47:c9: 32:50:ff:b8:79:00:b8:57:51:29:61:df:39:5b:9b: ee:39:4a:c4:d2:ee:2e:88:fa:02:4e:24:ca:c4:bf: 84:f4:3f:95:1e:7b:ad:3b:2e:64:70:37:29:33:82: 37:7d:62:39:45:82:68:73:8e:c7:bb:16:14:1b:c5: 1c:b9:7f:75:09:f8:46:1d:4c:cb:80:37:07:6f:36: 2b:ac:20:bc:a2:cb:06:2e:9b:0c:7c:78:06:f4:33: ae:ca:aa:22:16:85:1c:45:7f:74:68:fb:37:62:2c: 3b:07:57:a0:35:76:f3:2c:9a:5c:3a:7d:75:5a:24: 22:f6:16:f8:12:77:f3:0d:df:b7:f5:11:73:4c:e6: c7:eb:99:67:cb:b5:a1:e0:24:f5:af:99:1f:5e:39: 57:ea:0c:7d:a3:1e:46:e0:1f:52:7d:54:5d:7f:c7: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9B:1D:A2:54:B9:E6:C2:AC:F1:70:25:5B:08:1C:79:E9:75:59:05 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3e:1f:a3:cb:5e:42:0b:33:9e:1a:f9:95:d3:58:51:58:c8: 37:b1:a6:e7:0b:19:45:b1:4e:2a:78:6f:4e:24:f7:65:d6:12: 4a:3c:b3:33:2e:07:e2:1c:a3:bc:0e:9a:3e:97:dd:e5:b7:7a: f5:a7:2f:05:4e:d1:06:00:35:f6:c9:ed:d7:97:a0:7c:e1:dc: d6:f8:04:17:e6:00:5f:d1:e7:22:62:8c:ab:b3:4c:95:45:db: f1:aa:0f:1c:b8:b7:23:90:63:25:5d:39:d6:e3:11:8b:14:a6: 96:de:e6:71:4a:38:63:a9:cf:24:f9:40:cf:3e:ed:d5:b5:c9: 4e:d1:73:79:f2:8d:c0:7f:33:21:36:28:00:e6:eb:7d:e4:6a: c0:0a:26:b2:8b:1b:fd:37:7d:35:1e:5e:61:7c:37:a4:5f:f6: 01:72:c3:49:16:da:b0:7b:52:ee:c0:da:5e:36:4e:0d:24:ef: c1:49:e4:ca:64:42:10:e7:75:ba:33:20:41:55:f8:2c:4f:fb: 3c:08:bd:20:a8:2b:47:3d:eb:b7:3e:a6:93:0c:55:90:3a:c8: 35:41:b2:d5:b8:36:ee:76:70:a2:fc:be:36:36:c1:74:f1:42: fb:e0:af:b3:99:42:8f:e7:a9:08:31:f3:e7:fa:ec:6f:f9:fd: 3a:d8:3b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwNzI1MDU0NDQwWhcNMjUwODAxMDU0NDQwWjAYMRYwFAYD VQQDEw02ODgzMTljOC0zYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hWsTkP27TIc0vJQ888FBxQHBXbDt7Am1yacqE8vJcu5DaLiaAFnr2cMQkLJ TqI7D0TCqavcexzUyVNC30mHduksEaDXIwHKCm5RPlczZDJxXsVwfmz1R8kyUP+4 eQC4V1EpYd85W5vuOUrE0u4uiPoCTiTKxL+E9D+VHnutOy5kcDcpM4I3fWI5RYJo c47HuxYUG8UcuX91CfhGHUzLgDcHbzYrrCC8ossGLpsMfHgG9DOuyqoiFoUcRX90 aPs3Yiw7B1egNXbzLJpcOn11WiQi9hb4EnfzDd+39RFzTObH65lny7Wh4CT1r5kf XjlX6gx9ox5G4B9SfVRdf8eLYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAebHaJU uebCrPFwJVsIHHnpdVkFMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Ph+jy15CCzOeGvmV01hRWMg3sabnCxlFsU4qeG9OJPdl1hJKPLMz LgfiHKO8Dpo+l93lt3r1py8FTtEGADX2ye3Xl6B84dzW+AQX5gBf0eciYoyrs0yV Rdvxqg8cuLcjkGMlXTnW4xGLFKaW3uZxSjhjqc8k+UDPPu3VtclO0XN58o3AfzMh NigA5ut95GrACiayixv9N301Hl5hfDekX/YBcsNJFtqwe1LuwNpeNk4NJO/BSeTK ZEIQ53W6MyBBVfgsT/s8CL0gqCtHPeu3PqaTDFWQOsg1QbLVuDbudnCi/L42NsF0 8UL74K+zmUKP56kIMfPn+uxv+f062DtP -----END CERTIFICATE-----Generated at Sat Jul 26 02:02:48 2025 by rpki-client