$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json) Hash identifier: /iQzzCkDX79g4w17OtJV9c5eZVDbKqgGd6zNpRmSfw8= Subject key identifier: A2:AF:10:D1:49:88:A1:23:1A:06:16:3F:48:D7:E5:0A:C2:53:80:25 Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft Manifest number: 01C8 Signing time: Thu 03 Jul 2025 03:05:23 +0000 Manifest this update: Thu 03 Jul 2025 03:05:22 +0000 Manifest next update: Thu 10 Jul 2025 03:05:22 +0000 Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: kT4po9b+yIkOwVaEYucpjoOtZfVoUBiQwCfAqOeQcXA=) 2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: /IwIj5wHV9TZq7gyFUGmW+srgA66FnHYYQjrcF03350=) 3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: q5xwzkvJJT2cpQij23jtb331Ba1Q6ZPU5GFvae3tZEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Validity Not Before: Jul 3 03:05:22 2025 GMT Not After : Jul 10 03:05:22 2025 GMT Subject: CN=6865f372-dd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:39:c5:cc:a5:1c:50:80:10:23:af:af:58: 92:3e:18:9d:fe:ae:77:d9:5c:25:3b:0e:b1:c7:34: cf:eb:98:19:56:69:23:60:61:42:93:58:e1:a4:99: eb:31:86:e9:a9:0e:ee:ba:a4:a6:f0:2d:3e:c1:6d: c2:72:4e:1c:c8:4f:23:71:0c:e9:6d:aa:01:ad:62: cd:2b:e7:9c:f7:01:cb:c2:db:64:67:5e:46:b2:b5: e2:a2:64:9e:a4:9c:1a:72:e0:75:83:b6:c4:b2:f7: 9a:d0:e8:5d:7e:66:27:d0:6e:4b:43:18:72:5c:7c: 3d:5d:83:1f:e5:73:61:78:86:8d:a2:4a:1c:1f:75: 79:a8:03:0d:45:cf:0f:d0:16:ab:9d:e6:77:2b:11: 4e:0c:5c:b2:77:e5:ab:9d:c4:35:23:41:07:36:a0: 4c:6b:55:51:63:b1:30:48:f2:54:06:b9:e9:14:2a: 7e:93:bb:67:78:9c:86:93:39:b1:48:d1:3d:91:81: 2b:ff:7a:30:27:1b:a8:dc:ad:ec:7c:23:37:54:4e: b9:12:15:c2:12:94:30:95:00:8b:e7:35:4a:ac:b3: bd:2f:78:0b:e5:7b:1b:04:e7:9e:c7:3f:1a:17:f2: 15:ed:bc:8f:9d:4f:96:25:b3:9d:01:89:af:ee:c0: 78:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AF:10:D1:49:88:A1:23:1A:06:16:3F:48:D7:E5:0A:C2:53:80:25 X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:92:27:ec:eb:71:2d:2a:00:aa:11:f7:7f:5c:9e:78:22:e3: 4f:49:66:b4:a1:5a:2e:55:00:1f:34:d6:32:dc:a8:90:80:23: 62:90:9b:bb:88:9a:cf:8f:5e:ab:5c:77:8c:95:ad:75:29:a4: af:aa:ee:7d:c6:d1:98:6a:77:13:7c:1a:d7:b8:fd:5c:d5:9b: e4:67:48:1a:66:d5:2d:29:0a:c0:f0:31:13:62:d4:dc:b2:6c: 2b:f7:48:39:0f:c4:e4:14:b0:39:53:80:2d:d3:59:a9:bc:14: 1d:d8:4e:38:30:a1:49:2d:b8:8b:b4:6a:7e:c9:eb:a4:af:a4: 41:85:b9:9e:b0:0c:af:1e:8b:51:25:45:30:8d:20:31:b3:cb: 75:c2:85:e6:07:27:dc:61:22:b9:1c:1b:a6:e7:77:96:6d:68: 63:c7:5b:51:80:20:ba:5d:17:12:7d:01:27:ee:d2:39:58:88: 1d:f7:22:26:92:66:54:60:c5:53:e0:0a:53:0e:e1:97:f7:e7: fa:c8:c3:66:a4:6c:f0:93:6d:7e:1b:5c:9a:00:e0:6d:de:f5: 71:b4:08:75:2e:94:40:15:65:f5:9a:4f:56:e4:a6:e0:f1:61: 27:b1:a8:81:78:63:9c:21:e8:a5:35:1c:c0:9e:7d:fd:b3:46: 15:40:6f:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjUwNzAzMDMwNTIyWhcNMjUwNzEwMDMwNTIyWjAYMRYwFAYD VQQDEw02ODY1ZjM3Mi1kZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbA5xcylHFCAECOvr1iSPhid/q532VwlOw6xxzTP65gZVmkjYGFCk1jhpJnr MYbpqQ7uuqSm8C0+wW3Cck4cyE8jcQzpbaoBrWLNK+ec9wHLwttkZ15GsrXiomSe pJwacuB1g7bEsvea0OhdfmYn0G5LQxhyXHw9XYMf5XNheIaNokocH3V5qAMNRc8P 0BarneZ3KxFODFyyd+WrncQ1I0EHNqBMa1VRY7EwSPJUBrnpFCp+k7tneJyGkzmx SNE9kYEr/3owJxuo3K3sfCM3VE65EhXCEpQwlQCL5zVKrLO9L3gL5XsbBOeexz8a F/IV7byPnU+WJbOdAYmv7sB4/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKvENFJ iKEjGgYWP0jX5QrCU4AlMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL V2xBYlYxQnZyazVjRWFIWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtkifs63EtKgCqEfd/XJ54IuNPSWa0oVouVQAfNNYy3KiQgCNikJu7 iJrPj16rXHeMla11KaSvqu59xtGYancTfBrXuP1c1ZvkZ0gaZtUtKQrA8DETYtTc smwr90g5D8TkFLA5U4At01mpvBQd2E44MKFJLbiLtGp+yeukr6RBhbmesAyvHotR JUUwjSAxs8t1woXmByfcYSK5HBum53eWbWhjx1tRgCC6XRcSfQEn7tI5WIgd9yIm kmZUYMVT4ApTDuGX9+f6yMNmpGzwk21+G1yaAOBt3vVxtAh1LpRAFWX1mk9W5Kbg 8WEnsaiBeGOcIeilNRzAnn39s0YVQG8S -----END CERTIFICATE-----Generated at Thu Jul 3 07:54:04 2025 by rpki-client