$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: 6KrJacnqhJF9OwnXRfO/PBesCl+sEuBjcJooGN209YU= Subject key identifier: 37:B9:41:E9:B0:B7:D2:86:BC:7C:5C:CB:92:5A:8B:8C:35:64:4F:63 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: DF Signing time: Mon 21 Jul 2025 05:38:20 +0000 Manifest this update: Mon 21 Jul 2025 05:38:19 +0000 Manifest next update: Mon 28 Jul 2025 05:38:19 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: 7TbsMdTzZ/XlcvDZWwN6aaO2/jaPluw/rFIREtQ9QJU=) 2: 57FBE074370111F094BF7862C4F9AE02.roa (hash: NzrXfR/7zniLvrCXQlmVGg2isIi5LfwP1ubwC3yxm7E=) 3: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: /GfdIIe6m1dYDx7Tm/mUgCqzxCNCLDFcedZ67s1StUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Jul 21 05:38:19 2025 GMT Not After : Jul 28 05:38:19 2025 GMT Subject: CN=687dd24c-6bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:70:d2:7e:29:07:a7:c6:93:76:71:92:51:fb: 19:14:ca:5b:f5:b4:47:ec:dd:eb:b1:73:33:1b:12: b2:e7:8f:a8:f6:88:64:13:02:2f:c1:a2:54:34:da: 78:af:c9:91:e0:05:dd:40:d8:21:3a:60:40:bf:f6: e9:c4:39:b8:8c:bc:88:48:15:11:25:ae:95:0f:8a: e4:f5:bd:91:d6:5f:cd:ec:b3:ab:72:8a:6c:b7:84: fa:73:51:62:b4:5e:dd:4e:fe:2e:85:dc:b2:dd:35: a9:14:79:69:fa:86:40:bf:e1:7c:37:f2:1b:c9:4e: 82:55:49:34:a6:b6:ac:ad:33:79:64:77:cb:8a:f7: bd:03:55:9f:54:87:75:b4:b2:5a:dc:ba:d4:81:67: ef:46:60:ff:5d:84:68:b2:a2:4c:ec:a2:79:e0:90: 7e:8f:26:0a:26:68:8b:dd:08:a1:a3:3e:59:9d:56: 51:a8:0b:b2:56:09:20:4d:30:6d:e8:54:b3:7f:ba: 2a:9b:f0:43:70:1e:ed:19:08:bf:b0:d3:73:9f:5c: 59:22:b5:60:8c:ff:6e:95:23:1f:ca:ea:8a:16:ab: d0:ef:27:91:58:e8:ca:31:9f:2a:9d:66:78:df:ba: e6:97:ce:97:8a:df:8f:45:6d:c1:cd:3a:5c:49:78: 96:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B9:41:E9:B0:B7:D2:86:BC:7C:5C:CB:92:5A:8B:8C:35:64:4F:63 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:27:30:26:b1:11:51:e9:26:3e:7c:65:56:57:53:56:79:19: 63:58:06:8e:ed:05:42:ad:e2:05:cc:fe:68:48:58:23:ca:d3: a1:49:97:4b:cc:88:ed:dd:21:00:d3:07:af:30:60:b5:47:ce: a6:77:f8:29:33:06:c2:9b:72:5a:9a:6a:f2:ce:78:4e:62:07: e9:a6:61:07:0c:a0:53:bd:b3:a1:b4:f7:bb:86:98:12:f7:d6: 4a:a4:d9:57:58:ee:0a:0c:cd:6b:db:55:19:ee:38:7b:dc:d8: 1b:57:9b:9c:d1:12:8c:d0:33:c5:d0:2e:61:93:c6:41:4a:36: 37:14:08:03:78:bf:ed:e9:d9:a2:0d:b3:f1:e0:93:c1:99:95: 8e:c4:f4:a9:77:4f:ed:9c:72:72:f1:07:f0:ae:b4:55:1c:e4: c8:06:09:38:be:4c:5b:8f:9e:bb:e7:a6:eb:da:85:70:40:4b: 16:a2:99:a2:53:a6:19:4d:06:c1:b5:84:f0:89:94:5e:eb:28: 6b:95:dd:7d:ec:05:55:96:d2:7c:57:4c:8a:26:88:ec:dc:e0: d3:da:a2:74:b5:b7:96:e2:a8:7b:96:dd:25:9e:90:61:9f:5d: c1:2b:1d:70:bf:63:0f:ce:e9:bd:0c:8d:ba:50:a5:81:18:f0: c9:21:5d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwNzIxMDUzODE5WhcNMjUwNzI4MDUzODE5WjAYMRYwFAYD VQQDEw02ODdkZDI0Yy02YmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XDSfikHp8aTdnGSUfsZFMpb9bRH7N3rsXMzGxKy54+o9ohkEwIvwaJUNNp4 r8mR4AXdQNghOmBAv/bpxDm4jLyISBURJa6VD4rk9b2R1l/N7LOrcopst4T6c1Fi tF7dTv4uhdyy3TWpFHlp+oZAv+F8N/IbyU6CVUk0prasrTN5ZHfLive9A1WfVId1 tLJa3LrUgWfvRmD/XYRosqJM7KJ54JB+jyYKJmiL3Qihoz5ZnVZRqAuyVgkgTTBt 6FSzf7oqm/BDcB7tGQi/sNNzn1xZIrVgjP9ulSMfyuqKFqvQ7yeRWOjKMZ8qnWZ4 37rml86Xit+PRW3BzTpcSXiWTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe5Qemw t9KGvHxcy5Jai4w1ZE9jMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSJzAmsRFR6SY+fGVWV1NWeRljWAaO7QVCreIFzP5oSFgjytOhSZdL zIjt3SEA0wevMGC1R86md/gpMwbCm3JammryznhOYgfppmEHDKBTvbOhtPe7hpgS 99ZKpNlXWO4KDM1r21UZ7jh73NgbV5uc0RKM0DPF0C5hk8ZBSjY3FAgDeL/t6dmi DbPx4JPBmZWOxPSpd0/tnHJy8QfwrrRVHOTIBgk4vkxbj56756br2oVwQEsWopmi U6YZTQbBtYTwiZRe6yhrld197AVVltJ8V0yKJojs3ODT2qJ0tbeW4qh7lt0lnpBh n13BKx1wv2MPzum9DI26UKWBGPDJIV1t -----END CERTIFICATE-----Generated at Wed Jul 23 02:33:19 2025 by rpki-client