$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json) Hash identifier: Kna9ba1NqfmRpqsamG15KZU3AogSah3un+2ca0qeCUA= Subject key identifier: 57:2A:32:B7:10:00:10:47:86:74:BA:37:2D:DA:D4:06:E9:21:9E:07 Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Certificate serial: 0E84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft Manifest number: 0E7C Signing time: Fri 22 Aug 2025 17:49:04 +0000 Manifest this update: Fri 22 Aug 2025 17:49:04 +0000 Manifest next update: Fri 29 Aug 2025 17:49:04 +0000 Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: px7Np65nwVPwbX3MsLTgzdwdiEP0yAq89NcoDBjqGHw=) 2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: ZyYqi6bXWhaxHbfmn8t7NJwcl5ydCuydY4LMtE+EeW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3716 (0xe84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Validity Not Before: Aug 22 17:49:04 2025 GMT Not After : Aug 29 17:49:04 2025 GMT Subject: CN=68a8ad90-e847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:36:1c:1e:7f:e2:86:9d:87:e7:bd:ec:e3: 43:1c:16:95:3b:05:c8:97:c1:6a:f6:ad:a0:2a:86: 3b:bd:e8:57:3a:ae:15:32:2a:7a:68:0b:95:51:c5: 6d:05:ae:54:fd:0b:11:9c:81:70:2c:1e:ac:71:cd: 84:20:76:c6:2c:56:01:28:8e:29:4f:46:ab:fb:23: 93:7a:f8:a5:78:4e:bc:2e:42:92:86:d8:76:78:ea: 8f:8d:9d:38:89:2a:c1:87:12:c1:9b:f5:56:2d:b1: 2d:36:e8:47:9d:59:f8:12:41:1c:92:b3:4c:ca:52: d2:f6:e7:3d:1c:cc:9f:ca:19:4a:7e:e0:fd:46:e5: 99:87:13:85:5a:e8:ca:6b:ce:67:dc:fb:99:da:be: 81:0a:73:da:8e:56:38:7a:6f:fa:5d:88:2d:a9:83: 8d:fa:c3:31:c5:e2:6c:2c:24:ec:16:87:5b:f5:84: 8e:11:87:4b:e9:74:75:5c:da:ef:e7:72:35:77:96: 50:46:e4:90:d7:60:da:15:02:16:9d:91:fa:1f:ec: 80:a5:23:6e:d4:69:13:bd:cd:d8:9b:1b:64:ee:b4: 7a:a9:6b:22:20:1d:9a:cc:7e:3d:1c:5b:3d:69:f2: 53:e8:46:91:d4:65:a4:db:6d:d5:08:eb:bd:ea:bf: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:32:B7:10:00:10:47:86:74:BA:37:2D:DA:D4:06:E9:21:9E:07 X509v3 Authority Key Identifier: keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a4:9f:8b:cc:c6:52:ea:8c:79:28:e4:f8:62:0a:df:91:e1: 1e:f4:4f:9d:4f:80:14:88:1a:b3:a9:7b:ac:af:1f:fd:6f:cf: 56:f4:ee:ef:38:8d:a0:70:73:5a:4b:3b:54:4a:d7:5d:dd:94: 63:64:d3:6f:e7:11:52:dc:9a:50:dd:7a:91:a0:96:69:15:62: ba:f2:37:12:c4:34:42:5f:26:1e:8c:4a:bf:a3:8d:7d:1a:a3: d9:5b:3a:a0:a1:53:e0:1f:81:75:61:dd:f1:12:52:54:b0:2d: 80:82:10:4c:db:eb:c9:65:a1:e0:92:38:3e:59:35:00:ac:a8: b6:d1:96:e0:a5:4a:61:b6:67:14:45:81:b0:a2:be:4c:3b:2e: b5:57:31:6b:eb:3a:3e:55:a3:e3:c7:5f:56:b1:fc:9b:66:19: b3:18:60:b1:0d:c3:9b:c6:15:a5:d9:bd:15:1b:96:ef:c3:d1: 2b:84:43:eb:dd:ce:cc:7b:1d:5d:ce:c3:f5:c3:6d:b6:04:03: 5c:57:cd:46:36:96:44:23:f4:43:7e:4c:da:71:43:be:a9:89: 2a:ee:27:ed:72:c6:71:25:37:f3:ca:a3:bb:23:af:38:f0:40: 01:94:99:0d:67:f1:55:92:54:8a:0d:6c:ab:de:89:e7:7f:56: 09:72:f3:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4QzMxMTAvBgNVBAUTKDkxMkFCMzlGQzdCQkNCRUYxQ0YyNjdFOUQzRjcxOUM5 QTRGMEExMTQwHhcNMjUwODIyMTc0OTA0WhcNMjUwODI5MTc0OTA0WjAYMRYwFAYD VQQDEw02OGE4YWQ5MC1lODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx42HB5/4oadh+e97ONDHBaVOwXIl8Fq9q2gKoY7vehXOq4VMip6aAuVUcVt Ba5U/QsRnIFwLB6scc2EIHbGLFYBKI4pT0ar+yOTevileE68LkKShth2eOqPjZ04 iSrBhxLBm/VWLbEtNuhHnVn4EkEckrNMylLS9uc9HMyfyhlKfuD9RuWZhxOFWujK a85n3PuZ2r6BCnPajlY4em/6XYgtqYON+sMxxeJsLCTsFodb9YSOEYdL6XR1XNrv 53I1d5ZQRuSQ12DaFQIWnZH6H+yApSNu1GkTvc3Ymxtk7rR6qWsiIB2azH49HFs9 afJT6EaR1GWk223VCOu96r/BmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcqMrcQ ABBHhnS6Ny3a1AbpIZ4HMB8GA1UdIwQYMBaAFJEqs5/Hu8vvHPJn6dP3Gcmk8KEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhDMy9FM0Q5MTk0QzlE MkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3ktOGM4bWZwMF9jWnlhVHdv UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTcXpuOGU3eS04YzhtZnAwX2NaeWFUd29SUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhDMy9FM0Q5MTk0QzlEMkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3kt OGM4bWZwMF9jWnlhVHdvUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzpJ+LzMZS6ox5KOT4YgrfkeEe9E+dT4AUiBqzqXusrx/9b89W9O7v OI2gcHNaSztUStdd3ZRjZNNv5xFS3JpQ3XqRoJZpFWK68jcSxDRCXyYejEq/o419 GqPZWzqgoVPgH4F1Yd3xElJUsC2AghBM2+vJZaHgkjg+WTUArKi20ZbgpUphtmcU RYGwor5MOy61VzFr6zo+VaPjx19WsfybZhmzGGCxDcObxhWl2b0VG5bvw9ErhEPr 3c7Mex1dzsP1w222BANcV81GNpZEI/RDfkzacUO+qYkq7iftcsZxJTfzyqO7I684 8EABlJkNZ/FVklSKDWyr3onnf1YJcvPK -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:55 2025 by rpki-client