$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json) Hash identifier: x85zbsl4G5QP7jiWNvufIQUyt2i91lbsfnTXN+edZak= Subject key identifier: 27:A4:E2:7B:18:28:60:12:AE:75:DC:58:82:AE:3C:3B:26:6E:5B:13 Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft Manifest number: 01E2 Signing time: Sat 23 Aug 2025 02:50:31 +0000 Manifest this update: Sat 23 Aug 2025 02:50:30 +0000 Manifest next update: Sat 30 Aug 2025 02:50:30 +0000 Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: uIMx0soXRkG0qc5ZnCW/ofCO5wPSDINhgAjDfxZM5i0=) 2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: /IwIj5wHV9TZq7gyFUGmW+srgA66FnHYYQjrcF03350=) 3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: q5xwzkvJJT2cpQij23jtb331Ba1Q6ZPU5GFvae3tZEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Validity Not Before: Aug 23 02:50:30 2025 GMT Not After : Aug 30 02:50:30 2025 GMT Subject: CN=68a92c76-e7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:62:63:2a:97:a2:c9:95:38:9a:ac:76:19: 49:33:b5:ba:e6:c8:a8:a9:d4:21:9b:2e:19:12:e0: ac:46:b4:cb:52:47:f5:cf:68:8f:1b:fc:e5:a8:a5: b2:ce:18:0b:ab:f7:fb:fb:3e:78:a0:56:ce:fe:30: 9e:e6:ef:93:7e:cb:1d:1b:bc:d4:f9:c4:09:ff:a2: c8:bd:27:fa:85:ba:21:5e:9a:68:24:89:9e:c6:a2: 01:38:7e:e8:c9:9b:f6:0e:02:36:82:d3:81:04:a6: 2c:45:ed:9b:93:20:a1:d9:04:b7:57:e7:a2:e3:95: 65:62:5a:de:0b:21:11:7b:db:1b:18:d9:9f:21:c3: b5:53:a0:83:4a:1a:c1:03:65:a8:f5:d3:44:60:6e: af:40:73:74:72:e4:ad:78:bc:10:8d:96:a9:97:97: 27:14:36:dd:f3:a9:97:36:6f:60:b6:6a:76:40:7b: 17:09:97:9c:d1:46:8c:aa:f3:08:95:c8:4d:fd:bd: 94:a2:46:41:21:2f:be:1a:b4:ac:85:f4:85:be:89: 50:ee:1c:5d:16:6a:53:01:5a:01:b3:8f:8d:ab:59: 03:18:47:df:e1:ec:f0:08:44:4a:33:63:8d:71:1b: 0b:c4:8d:78:01:03:dc:97:5b:62:68:85:4b:fe:7b: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A4:E2:7B:18:28:60:12:AE:75:DC:58:82:AE:3C:3B:26:6E:5B:13 X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:e7:98:76:0f:13:59:64:dc:a2:12:c8:b3:b6:fe:e9:3a:4a: 12:2c:86:6a:52:2d:c0:ef:c6:7b:ae:fa:5e:24:8f:c4:8b:dd: 85:97:2b:2f:e1:6a:9f:e6:d5:59:b0:b3:29:aa:41:4e:7b:26: 6d:89:2e:fa:f5:09:72:0c:f4:78:01:1e:81:d7:07:a1:76:9e: f5:80:51:29:51:1b:5d:09:42:e9:55:c5:2a:12:e7:b3:8e:4f: e8:26:45:70:04:af:56:d4:f1:8a:42:fa:3e:3f:dd:49:b0:1d: 5e:b1:58:da:94:b1:65:24:16:1c:a7:3f:06:75:84:d7:ec:63: de:72:2e:23:31:24:e3:6f:ee:4e:1e:88:82:e1:a6:33:e6:b6: 9d:bf:e2:36:e7:88:55:95:00:04:3a:50:82:b0:09:96:e6:fd: b0:28:f2:1c:58:6e:68:4c:d5:de:9a:32:83:5a:86:5c:93:6d: 2d:31:80:69:4a:5a:d0:1b:61:a1:46:f8:eb:3b:43:a7:2b:7e: d0:6a:8b:af:a0:2a:af:e2:80:ac:19:8a:41:e8:06:5f:79:d6: d7:19:22:e2:60:f1:b6:af:b2:0b:18:f0:eb:50:f8:07:1f:d6: 96:10:fd:82:1c:ab:00:21:2d:0c:59:55:31:f2:12:7c:33:89: d6:1e:1f:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjUwODIzMDI1MDMwWhcNMjUwODMwMDI1MDMwWjAYMRYwFAYD VQQDEw02OGE5MmM3Ni1lN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9diYyqXosmVOJqsdhlJM7W65sioqdQhmy4ZEuCsRrTLUkf1z2iPG/zlqKWy zhgLq/f7+z54oFbO/jCe5u+TfssdG7zU+cQJ/6LIvSf6hbohXppoJImexqIBOH7o yZv2DgI2gtOBBKYsRe2bkyCh2QS3V+ei45VlYlreCyERe9sbGNmfIcO1U6CDShrB A2Wo9dNEYG6vQHN0cuSteLwQjZapl5cnFDbd86mXNm9gtmp2QHsXCZec0UaMqvMI lchN/b2UokZBIS++GrSshfSFvolQ7hxdFmpTAVoBs4+Nq1kDGEff4ezwCERKM2ON cRsLxI14AQPcl1tiaIVL/nulawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCek4nsY KGASrnXcWIKuPDsmblsTMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL V2xBYlYxQnZyazVjRWFIWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB55h2DxNZZNyiEsiztv7pOkoSLIZqUi3A78Z7rvpeJI/Ei92Flysv 4Wqf5tVZsLMpqkFOeyZtiS769QlyDPR4AR6B1wehdp71gFEpURtdCULpVcUqEuez jk/oJkVwBK9W1PGKQvo+P91JsB1esVjalLFlJBYcpz8GdYTX7GPeci4jMSTjb+5O HoiC4aYz5radv+I254hVlQAEOlCCsAmW5v2wKPIcWG5oTNXemjKDWoZck20tMYBp SlrQG2GhRvjrO0OnK37QaouvoCqv4oCsGYpB6AZfedbXGSLiYPG2r7ILGPDrUPgH H9aWEP2CHKsAIS0MWVUx8hJ8M4nWHh/q -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:42 2025 by rpki-client