$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: pNeDff6ASZkAWheFIiGPsshzrBkdW4RJPcaBRzkP9gU= Subject key identifier: 31:76:61:6F:BD:2F:09:58:6F:22:75:CB:C7:3D:7A:78:4E:51:77:9D Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0A67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0A55 Signing time: Wed 02 Jul 2025 19:56:12 +0000 Manifest this update: Wed 02 Jul 2025 19:56:12 +0000 Manifest next update: Wed 09 Jul 2025 19:56:12 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: H3FdqUrdbFxmZFJV/P4S2ol08nIGUtCgHaRpF2cTSS4=) 2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=) 3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2663 (0xa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Jul 2 19:56:12 2025 GMT Not After : Jul 9 19:56:12 2025 GMT Subject: CN=68658edc-5f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:da:98:d7:e4:7c:75:59:02:85:62:08:c6: 22:de:83:08:51:8b:2e:98:7e:e9:f2:24:78:f7:9b: 9b:01:53:d1:f9:15:62:4a:8f:0a:60:65:1f:1a:df: c8:b6:9c:60:66:fe:e5:93:12:e0:cd:97:8d:e4:1d: e3:38:f2:aa:02:ed:39:6d:cb:b2:68:24:49:40:72: c8:95:a5:d8:dc:57:5a:e3:81:42:52:28:02:0d:a3: c1:fb:13:58:9f:99:19:cb:57:81:f5:92:a1:f3:c5: 79:62:ee:20:41:c6:ad:db:58:b7:1e:ce:10:de:04: 31:2a:e4:37:dd:8f:0c:34:21:5d:a3:af:00:46:51: 6d:98:90:4c:bf:bb:08:2e:11:0c:15:99:f8:0f:14: 5d:da:2c:8d:17:50:de:87:43:cb:65:e3:aa:f0:e6: c8:a2:a8:7c:ab:e1:c4:ae:de:ea:86:aa:a1:2e:d6: 28:bf:ff:1e:2c:bc:cd:81:55:0e:9a:72:0b:61:04: 75:29:28:25:62:3c:fa:ce:22:85:91:a9:36:18:88: 5f:f9:5c:32:c1:01:57:7e:b4:4b:47:95:43:7c:b0: 62:6a:62:73:20:9d:d1:7a:e3:ea:eb:05:58:6e:e9: 7b:fe:f5:96:dc:89:62:9c:1c:22:26:21:dd:5a:0f: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:76:61:6F:BD:2F:09:58:6F:22:75:CB:C7:3D:7A:78:4E:51:77:9D X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1c:6c:46:98:20:a5:86:3a:91:64:a6:96:f5:db:16:c7:4b: ed:0c:51:c1:cf:79:5e:0d:cc:7b:1a:bd:bc:c5:10:82:81:c2: 10:b3:d9:5a:45:b0:69:f7:f8:62:2d:ed:02:34:b2:86:17:70: b9:36:0e:f6:cd:8c:ee:a4:c8:8c:85:92:ca:d6:84:fe:a5:f0: 11:42:1b:3b:71:f2:aa:bd:aa:ef:d6:ed:03:37:c2:c6:5f:90: 6e:c5:ad:9a:89:f5:03:58:53:10:0f:70:7e:2f:9c:04:12:bc: 68:6c:e1:8f:e3:f9:67:57:ee:2c:cf:af:b3:09:f3:81:b5:39: 5b:c1:f4:6c:5a:90:f8:5a:2c:94:b5:c7:c2:0d:12:d3:c3:8d: 24:82:36:2b:0a:9f:80:a5:5c:d5:84:7b:e1:33:c5:fa:96:64: d2:29:98:ba:dd:14:79:01:62:cf:60:56:cf:9d:ec:6b:f9:d2: b8:5c:61:98:31:50:6c:de:bd:7e:a7:6f:85:b8:da:3a:59:a4: 9c:1f:6a:7d:f5:58:4a:31:97:b9:f4:83:17:11:26:cc:72:d5: bd:1b:ba:cb:d4:30:40:2f:81:42:d3:d9:d5:f3:ab:be:ba:05: 98:e8:53:df:01:b9:c4:0d:47:d4:70:9d:a2:3a:e8:97:14:df: 98:68:a5:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjUwNzAyMTk1NjEyWhcNMjUwNzA5MTk1NjEyWjAYMRYwFAYD VQQDEw02ODY1OGVkYy01ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iXamNfkfHVZAoViCMYi3oMIUYsumH7p8iR495ubAVPR+RViSo8KYGUfGt/I tpxgZv7lkxLgzZeN5B3jOPKqAu05bcuyaCRJQHLIlaXY3Fda44FCUigCDaPB+xNY n5kZy1eB9ZKh88V5Yu4gQcat21i3Hs4Q3gQxKuQ33Y8MNCFdo68ARlFtmJBMv7sI LhEMFZn4DxRd2iyNF1Deh0PLZeOq8ObIoqh8q+HErt7qhqqhLtYov/8eLLzNgVUO mnILYQR1KSglYjz6ziKFkak2GIhf+VwywQFXfrRLR5VDfLBiamJzIJ3ReuPq6wVY bul7/vWW3IlinBwiJiHdWg9fswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDF2YW+9 LwlYbyJ1y8c9enhOUXedMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQHGxGmCClhjqRZKaW9dsWx0vtDFHBz3leDcx7Gr28xRCCgcIQs9la RbBp9/hiLe0CNLKGF3C5Ng72zYzupMiMhZLK1oT+pfARQhs7cfKqvarv1u0DN8LG X5Buxa2aifUDWFMQD3B+L5wEErxobOGP4/lnV+4sz6+zCfOBtTlbwfRsWpD4WiyU tcfCDRLTw40kgjYrCp+ApVzVhHvhM8X6lmTSKZi63RR5AWLPYFbPnexr+dK4XGGY MVBs3r1+p2+FuNo6WaScH2p99VhKMZe59IMXESbMctW9G7rL1DBAL4FC09nV86u+ ugWY6FPfAbnEDUfUcJ2iOuiXFN+YaKXi -----END CERTIFICATE-----Generated at Thu Jul 3 06:18:21 2025 by rpki-client