$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: x46FJzOlJZO07NgH6mQbXcOhSNiCp6HvBfyyGUqeKeo= Subject key identifier: 63:76:DA:04:88:C5:8A:BA:45:CB:FA:56:65:47:29:16:6D:56:B4:40 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: F0 Signing time: Sat 19 Jul 2025 05:38:23 +0000 Manifest this update: Sat 19 Jul 2025 05:38:22 +0000 Manifest next update: Sat 26 Jul 2025 05:38:22 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: Q+nxF2iQtHX3iA7c8053IVn1Lt75ozxpuL2/hpEsBlQ=) 2: 62B87A26895B11EFBA2A3B22C4F9AE02.roa (hash: GkfnFa85sf2ihLyLByQY01IPDXpueRzZ4fB3mmtkqLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Jul 19 05:38:22 2025 GMT Not After : Jul 26 05:38:22 2025 GMT Subject: CN=687b2f4e-fa31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:b2:28:ac:4e:db:a1:6c:a2:06:75:9f:a9: 96:7b:4c:12:31:47:bd:16:28:af:5b:a5:63:57:2d: 8b:f6:b8:e5:da:43:3a:b9:7f:4e:2f:30:91:90:4a: 25:bf:bd:66:b2:d9:e3:57:c0:cd:5a:a1:b7:cf:14: 76:e4:f3:e9:6f:5e:29:b2:1f:48:1c:3b:3d:6e:8f: ab:28:24:f8:a8:0e:b0:c1:d5:7e:7e:6c:94:c3:e2: 6f:45:8a:36:6e:56:6b:1c:f9:0a:bd:cc:63:83:6c: 30:89:c5:5e:b8:81:89:c1:71:df:fc:b1:55:26:3b: 24:56:27:a1:22:73:b3:3e:9e:a3:f3:8c:54:ea:6a: 40:bb:8a:0d:56:b8:8e:1a:02:c9:b4:ab:a3:a6:fb: 26:30:cb:87:f3:4e:5e:3b:8a:c8:1e:80:1f:e7:9f: 5c:ce:a0:e6:5a:b0:e3:62:d4:1b:ee:9a:8b:d8:a3: ea:6c:0c:b5:6c:f0:6b:1a:4a:64:ef:9e:1a:c5:a0: d3:6f:72:f4:2b:c4:ef:3c:94:be:76:af:c0:d3:0f: dc:5c:9c:f1:10:f9:6f:90:96:85:7a:59:0e:81:77: 18:60:71:58:6c:73:ef:d6:6b:1e:a0:cb:32:f0:6c: b3:7f:5d:10:e6:82:44:b5:0f:ad:fc:80:cc:33:65: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:76:DA:04:88:C5:8A:BA:45:CB:FA:56:65:47:29:16:6D:56:B4:40 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:7f:86:6d:26:22:bc:69:18:e1:5f:bb:70:e4:e9:a0:7a:94: 44:40:56:95:01:c1:c1:2d:88:f2:37:d9:93:ee:2b:1a:d4:bf: 87:e1:14:7a:ee:be:dc:db:a0:2b:1b:9f:20:94:1e:79:cf:df: 29:88:eb:5b:07:c9:7a:31:2c:83:08:20:c8:d9:a6:18:d1:de: 9d:50:2c:eb:ae:d3:c0:7a:20:aa:e5:74:b6:06:d9:d6:bd:e9: a3:1e:f6:ba:8f:59:99:a6:b3:99:7a:ff:af:01:c3:1d:44:c6: 43:b8:5b:e4:4e:25:bb:91:de:e0:a6:c7:3f:d5:af:b2:98:c5: 42:9d:b5:c4:09:19:ef:8e:1c:b4:b9:b3:18:bf:87:58:16:0d: 46:56:2a:b4:af:9d:06:1d:59:50:c1:e6:07:92:d0:90:5d:c1: cc:56:e0:86:7c:26:d5:cd:62:b1:65:96:2a:55:f0:a2:2f:e6: 31:d3:f9:ee:cf:17:6c:dc:2b:51:c9:67:e5:74:2c:f0:5b:77: 89:05:65:07:10:d3:10:a9:f6:e2:79:9b:04:5d:b1:90:6a:da: 36:aa:c6:2e:5e:5f:4d:a7:67:28:29:ee:7f:b0:d5:18:6a:50: 94:f9:7a:fb:d8:f2:08:98:40:32:56:00:08:bb:19:25:2b:a7: 48:7c:36:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjUwNzE5MDUzODIyWhcNMjUwNzI2MDUzODIyWjAYMRYwFAYD VQQDEw02ODdiMmY0ZS1mYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPiyKKxO26FsogZ1n6mWe0wSMUe9FiivW6VjVy2L9rjl2kM6uX9OLzCRkEol v71mstnjV8DNWqG3zxR25PPpb14psh9IHDs9bo+rKCT4qA6wwdV+fmyUw+JvRYo2 blZrHPkKvcxjg2wwicVeuIGJwXHf/LFVJjskViehInOzPp6j84xU6mpAu4oNVriO GgLJtKujpvsmMMuH805eO4rIHoAf559czqDmWrDjYtQb7pqL2KPqbAy1bPBrGkpk 754axaDTb3L0K8TvPJS+dq/A0w/cXJzxEPlvkJaFelkOgXcYYHFYbHPv1mseoMsy 8Gyzf10Q5oJEtQ+t/IDMM2W1IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN22gSI xYq6Rcv6VmVHKRZtVrRAMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEf4ZtJiK8aRjhX7tw5OmgepREQFaVAcHBLYjyN9mT7isa1L+H4RR6 7r7c26ArG58glB55z98piOtbB8l6MSyDCCDI2aYY0d6dUCzrrtPAeiCq5XS2BtnW vemjHva6j1mZprOZev+vAcMdRMZDuFvkTiW7kd7gpsc/1a+ymMVCnbXECRnvjhy0 ubMYv4dYFg1GViq0r50GHVlQweYHktCQXcHMVuCGfCbVzWKxZZYqVfCiL+Yx0/nu zxds3CtRyWfldCzwW3eJBWUHENMQqfbieZsEXbGQato2qsYuXl9Np2coKe5/sNUY alCU+Xr72PIImEAyVgAIuxklK6dIfDYC -----END CERTIFICATE-----Generated at Sun Jul 20 20:37:37 2025 by rpki-client