$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json) Hash identifier: fhh/bP3pOg6yHHLNPaKwLPVkUTRwCYQy+p1CJbynlBs= Subject key identifier: 0A:B8:64:33:EC:6E:AC:69:4D:27:4C:D0:88:6F:16:7D:BC:2C:CC:01 Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Certificate serial: 0E6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft Manifest number: 0E62 Signing time: Wed 02 Jul 2025 17:55:50 +0000 Manifest this update: Wed 02 Jul 2025 17:55:49 +0000 Manifest next update: Wed 09 Jul 2025 17:55:49 +0000 Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: CqvlQlzeX8T6rJmZjUJMOdQKyvGWfvTpfagQuANU71c=) 2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: ZyYqi6bXWhaxHbfmn8t7NJwcl5ydCuydY4LMtE+EeW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3690 (0xe6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Validity Not Before: Jul 2 17:55:49 2025 GMT Not After : Jul 9 17:55:49 2025 GMT Subject: CN=686572a6-4a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:70:1b:74:6a:d0:20:e8:8b:09:d4:08:f0: 39:cd:fa:75:00:7e:38:ac:de:10:d8:88:a5:7a:8c: 3f:54:bb:b0:ce:c7:7b:6e:a0:04:67:1d:c8:c2:8b: d3:6d:81:5e:84:cb:53:10:33:99:95:b0:cf:d5:f5: 7d:e4:b7:eb:04:dc:95:2d:17:79:89:cd:d5:3b:53: 83:14:38:b9:d4:bc:31:95:0e:cc:9d:6c:c6:02:e3: 61:77:f7:7a:66:48:8f:6e:31:06:57:4c:12:8f:ff: ad:1f:23:29:a7:fe:9a:1d:da:99:7c:2d:43:52:8d: 0d:64:6a:85:a4:4c:0a:43:7c:75:d8:57:94:e7:fa: e4:25:55:53:d3:32:fc:7a:9b:74:b5:5c:4c:7c:02: 7b:fe:5f:16:6a:93:03:c9:a9:f6:4f:73:d5:2d:1b: 61:82:d0:e1:d1:53:64:1b:5a:de:e5:4a:5d:5b:e6: 1c:ca:a3:2e:29:6e:a7:39:12:1a:16:6e:a1:5c:46: 82:8a:2a:02:07:d8:b9:4f:1b:78:9f:99:e6:87:de: 4c:c9:4a:3b:78:f0:41:08:cf:84:d0:15:a6:4d:ba: 76:41:da:b8:2c:cb:1b:4a:f6:19:4f:fb:84:27:15: 6b:f5:de:2c:80:60:a8:44:98:2a:38:5f:03:5e:89: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B8:64:33:EC:6E:AC:69:4D:27:4C:D0:88:6F:16:7D:BC:2C:CC:01 X509v3 Authority Key Identifier: keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7f:21:88:4b:6a:e2:dd:75:27:d2:87:27:a6:5b:37:89:83: 2a:29:45:93:7f:e1:ec:80:7d:52:98:ed:e1:2b:50:1f:b5:7b: 0b:31:e5:d2:c8:e5:85:d4:a0:87:2c:c5:6f:81:64:8d:0f:7c: 22:ea:5e:e6:d5:61:63:d9:28:65:96:2f:3c:10:76:90:6d:2e: df:85:e3:66:13:7b:ba:9b:0d:b3:a1:cc:6e:65:60:f2:c3:7a: 9f:6b:44:b8:2a:f0:17:9b:a6:54:26:10:81:8d:11:f4:ad:76: 16:ef:8e:ca:ce:8e:d6:5b:0c:1b:c0:3e:08:52:61:e9:9f:e4: e6:92:7a:99:7f:dd:1a:87:de:4b:de:ea:89:10:0c:14:37:21: ff:ad:df:ef:d5:74:66:00:2e:7d:d6:97:50:9f:43:a3:74:b0: f2:f9:34:7d:67:ab:60:a5:e6:e2:62:54:1f:0f:78:96:b7:40: 1d:15:08:75:7d:6c:4a:fc:7d:2b:b2:6a:9f:af:fc:f9:f5:55: 3e:dd:97:ec:7c:42:7a:09:58:2e:23:f4:4e:b9:1a:e0:da:7a: 7a:1f:c3:a8:33:4d:19:3e:cf:05:2e:fd:91:80:07:5d:18:c2: 3d:2c:ec:12:d0:16:17:5c:1a:7d:ee:3f:63:8a:df:bb:ef:ae: d8:71:3c:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4QzMxMTAvBgNVBAUTKDkxMkFCMzlGQzdCQkNCRUYxQ0YyNjdFOUQzRjcxOUM5 QTRGMEExMTQwHhcNMjUwNzAyMTc1NTQ5WhcNMjUwNzA5MTc1NTQ5WjAYMRYwFAYD VQQDEw02ODY1NzJhNi00YTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIhwG3Rq0CDoiwnUCPA5zfp1AH44rN4Q2Iileow/VLuwzsd7bqAEZx3IwovT bYFehMtTEDOZlbDP1fV95LfrBNyVLRd5ic3VO1ODFDi51LwxlQ7MnWzGAuNhd/d6 ZkiPbjEGV0wSj/+tHyMpp/6aHdqZfC1DUo0NZGqFpEwKQ3x12FeU5/rkJVVT0zL8 ept0tVxMfAJ7/l8WapMDyan2T3PVLRthgtDh0VNkG1re5UpdW+YcyqMuKW6nORIa Fm6hXEaCiioCB9i5Txt4n5nmh95MyUo7ePBBCM+E0BWmTbp2Qdq4LMsbSvYZT/uE JxVr9d4sgGCoRJgqOF8DXom3qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAq4ZDPs bqxpTSdM0IhvFn28LMwBMB8GA1UdIwQYMBaAFJEqs5/Hu8vvHPJn6dP3Gcmk8KEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhDMy9FM0Q5MTk0QzlE MkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3ktOGM4bWZwMF9jWnlhVHdv UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTcXpuOGU3eS04YzhtZnAwX2NaeWFUd29SUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhDMy9FM0Q5MTk0QzlEMkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3kt OGM4bWZwMF9jWnlhVHdvUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbfyGIS2ri3XUn0ocnpls3iYMqKUWTf+HsgH1SmO3hK1AftXsLMeXS yOWF1KCHLMVvgWSND3wi6l7m1WFj2Shlli88EHaQbS7fheNmE3u6mw2zocxuZWDy w3qfa0S4KvAXm6ZUJhCBjRH0rXYW747Kzo7WWwwbwD4IUmHpn+TmknqZf90ah95L 3uqJEAwUNyH/rd/v1XRmAC591pdQn0OjdLDy+TR9Z6tgpebiYlQfD3iWt0AdFQh1 fWxK/H0rsmqfr/z59VU+3ZfsfEJ6CVguI/ROuRrg2np6H8OoM00ZPs8FLv2RgAdd GMI9LOwS0BYXXBp97j9jit+7767YcTy0 -----END CERTIFICATE-----Generated at Thu Jul 3 06:33:18 2025 by rpki-client