$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json) Hash identifier: Li46lU9DUMYN6Wuc1WPpNg6f8ikjRyGcXzwTRYKTFo0= Subject key identifier: 8A:71:1D:EE:16:E8:2D:CA:C1:35:97:4A:C3:DD:A2:0C:53:BB:6B:7E Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft Manifest number: 29 Signing time: Sat 19 Jul 2025 08:00:33 +0000 Manifest this update: Sat 19 Jul 2025 08:00:33 +0000 Manifest next update: Sat 26 Jul 2025 08:00:33 +0000 Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: q/QGSXm5DRa7aew4nZ3QHOD8FAk1Kv6AEuQBpoCkGjQ=) 2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: SpbPHZ/krAG/WpD65rr9pmBtHMuwVfhmB9bAKCP8oRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Validity Not Before: Jul 19 08:00:33 2025 GMT Not After : Jul 26 08:00:33 2025 GMT Subject: CN=687b50a1-c99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:b4:37:e4:e4:62:c3:84:dc:b7:ef:03:35: ce:c9:53:8e:f3:7f:41:6a:d6:42:7c:5a:cf:25:b6: fd:b5:0f:1c:25:09:55:87:1a:03:da:7d:ec:c9:52: 17:03:97:f3:ed:2e:ca:36:71:4d:1a:04:a3:61:54: 81:70:82:91:f0:8d:b4:70:00:33:a5:7f:de:bd:99: a2:b5:e8:eb:94:d3:91:9b:2c:f0:c1:23:05:f8:65: 90:21:9b:f1:51:1f:b3:37:10:07:be:aa:73:99:b8: 67:8b:02:0e:c9:e1:51:d3:9f:3c:a5:c7:e1:3c:1a: 8f:5d:7f:49:81:d4:2d:c6:59:49:99:21:e0:c7:e2: da:a2:47:de:df:9b:5d:24:13:12:6f:52:84:2a:d4: 32:7d:68:0a:74:84:5b:53:91:a6:fb:e5:95:5e:ab: dd:71:5d:1a:c4:31:40:1e:6d:81:96:97:d4:c8:57: ab:24:17:26:c4:3f:e1:fe:20:13:eb:ca:d0:d8:21: 8a:0f:ba:35:3c:5c:64:09:7d:7b:ee:bb:57:b4:4b: 77:24:19:4c:04:97:32:e6:93:b3:56:71:85:d6:8d: 24:26:ab:3c:d1:49:d8:a5:1a:56:19:01:31:86:dc: 1b:20:f1:92:f4:fb:02:b9:13:88:ca:a2:cb:30:d7: b7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:71:1D:EE:16:E8:2D:CA:C1:35:97:4A:C3:DD:A2:0C:53:BB:6B:7E X509v3 Authority Key Identifier: keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:0a:37:66:ff:30:ed:13:f9:c0:97:08:dc:3a:c7:4f:47:ef: 29:b7:20:3a:fe:24:3d:72:8c:7d:af:e5:df:71:c8:2e:0d:6d: 43:31:58:79:65:0f:b3:23:b7:24:8d:4d:99:cb:7e:89:4f:be: 49:75:93:f6:de:c4:ec:7a:82:6f:53:48:92:81:c3:e5:b3:85: 19:34:b9:d8:a7:5b:96:bb:d3:bd:7f:f0:5d:e1:d5:c2:0d:81: 76:b4:a2:6e:39:87:a2:a9:ba:d6:9e:fa:82:35:7f:e0:ec:56: 8a:bd:9e:f9:f2:1b:b8:93:ea:54:12:22:86:17:8d:cd:e4:86: 28:d7:66:bb:3b:a0:a9:af:55:ff:5e:72:33:7b:6a:bb:4a:8a: 6d:86:65:02:43:c0:08:30:a9:88:33:d2:b3:dd:b3:25:8b:46: 78:b1:ad:6c:75:40:aa:73:9e:fd:fc:d6:8f:8d:0a:ad:e4:19: ee:a1:c0:ee:ae:39:45:20:f8:d7:3b:fb:66:61:57:00:76:d0: 09:56:8d:a6:b3:74:ae:81:95:fc:00:8a:1b:d8:47:fb:fc:83: 8a:83:c5:30:60:62:8e:8e:fd:44:9b:9b:e3:7c:37:08:39:fd: 00:98:c6:45:84:d8:4b:f7:71:ba:29:5c:4c:5c:6e:b7:83:ac: 4b:65:f2:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoMkEwMEZENUQ1RUFFRjgxRjMyQjAwQjJFNUM4MkM1RUNE QUMxMjY5MzAeFw0yNTA3MTkwODAwMzNaFw0yNTA3MjYwODAwMzNaMBgxFjAUBgNV BAMTDTY4N2I1MGExLWM5OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1JLQ35ORiw4Tct+8DNc7JU47zf0Fq1kJ8Ws8ltv21DxwlCVWHGgPafezJUhcD l/PtLso2cU0aBKNhVIFwgpHwjbRwADOlf969maK16OuU05GbLPDBIwX4ZZAhm/FR H7M3EAe+qnOZuGeLAg7J4VHTnzylx+E8Go9df0mB1C3GWUmZIeDH4tqiR97fm10k ExJvUoQq1DJ9aAp0hFtTkab75ZVeq91xXRrEMUAebYGWl9TIV6skFybEP+H+IBPr ytDYIYoPujU8XGQJfXvuu1e0S3ckGUwElzLmk7NWcYXWjSQmqzzRSdilGlYZATGG 3Bsg8ZL0+wK5E4jKossw17dRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUinEd7hbo LcrBNZdKw92iDFO7a34wHwYDVR0jBBgwFoAUKgD9XV6u+B8ysAsuXILF7NrBJpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0JCNDJDMURFMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2dEOVhWNnUtQjh5c0FzdVhJTEY3TnJCSnBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0JCNDJDMURFMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4 eXNBc3VYSUxGN05yQkpwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMwKN2b/MO0T+cCXCNw6x09H7ym3IDr+JD1yjH2v5d9xyC4NbUMxWHll D7MjtySNTZnLfolPvkl1k/bexOx6gm9TSJKBw+WzhRk0udinW5a7071/8F3h1cIN gXa0om45h6Kputae+oI1f+DsVoq9nvnyG7iT6lQSIoYXjc3khijXZrs7oKmvVf9e cjN7artKim2GZQJDwAgwqYgz0rPdsyWLRnixrWx1QKpznv381o+NCq3kGe6hwO6u OUUg+Nc7+2ZhVwB20AlWjaazdK6BlfwAihvYR/v8g4qDxTBgYo6O/USbm+N8Nwg5 /QCYxkWE2Ev3cbopXExcbreDrEtl8uM= -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:19 2025 by rpki-client