$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json) Hash identifier: /BTvMJb8KTaQyITAUbqBKPmjadQoeydpeT0bnFseb0s= Subject key identifier: 97:6C:57:57:B8:77:12:31:D5:13:C4:BC:0A:E2:9C:36:A4:14:0C:72 Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:24:27 +0000 Manifest this update: Thu 03 Jul 2025 06:24:27 +0000 Manifest next update: Thu 10 Jul 2025 06:24:27 +0000 Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: kc6cZCriFaG6YPW35bLZg+6xr45hn+EqH76x0CA+V4s=) 2: AC7759D2135511F092D0090CC4F9AE02.roa (hash: onYsR/Z0zfQbFj+mcD8abagulwJaECFH59WKOVFKUeE=) 3: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=) 4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: swi4PXSK/F+KN97GlDzhN7O3Kmz0645WUAiVa8gtnyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Validity Not Before: Jul 3 06:24:27 2025 GMT Not After : Jul 10 06:24:27 2025 GMT Subject: CN=6866221b-68c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:f1:db:cf:e9:f1:99:32:2e:c7:aa:69:17: 49:4b:6d:53:99:c0:fa:13:ea:56:02:93:85:da:7d: e4:78:bb:02:0a:67:d1:0a:f8:07:9a:ef:7a:d5:89: af:4d:15:c3:95:12:d2:63:c2:6d:6d:82:b9:a5:fd: d7:1f:8d:e7:c7:de:d9:a1:6f:0d:ee:42:9d:ec:4c: ec:9a:f5:16:73:50:50:36:69:d8:71:cc:05:fb:3f: 99:b3:09:4f:a9:ca:17:c5:b2:19:4c:41:3d:b7:2b: 0b:84:ca:6b:a8:20:3c:20:1f:c2:12:2e:47:7c:d1: 34:13:ef:7f:f7:e0:ac:22:26:73:2d:51:9d:b1:28: 27:5f:49:11:a9:df:59:d7:18:b6:ac:03:d8:73:14: c3:e0:8b:88:38:18:e3:92:6a:e3:32:69:95:74:8e: 5c:2d:6d:5a:9d:b1:dd:09:46:91:7b:b3:23:c9:32: 58:53:e9:12:54:70:e1:5e:9a:84:02:65:9c:9c:26: 84:09:06:e6:aa:ae:2f:74:0e:86:cb:c7:cd:0f:4a: 7d:58:e7:a0:66:aa:5d:6e:24:21:31:dd:39:b4:a8: ca:af:d8:a1:c7:23:aa:8d:85:24:20:5d:86:3e:87: 5e:52:45:9f:28:a5:6b:90:1c:f3:76:c8:3f:27:3b: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6C:57:57:B8:77:12:31:D5:13:C4:BC:0A:E2:9C:36:A4:14:0C:72 X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c9:ed:44:a2:cd:1a:fa:75:b8:9b:bf:f7:68:57:01:dd:1a: 3f:68:b9:a3:45:b5:d2:1d:5d:f5:31:59:be:b7:08:70:ab:1e: 91:dc:44:49:cb:25:79:5b:f5:dc:de:b7:aa:90:bb:ec:92:e2: 25:50:8f:31:c1:6f:29:57:56:c3:c2:3d:1d:45:3e:5e:79:2b: e4:e3:5f:be:1e:67:af:ce:a6:58:95:48:e7:ae:fb:9f:f8:f6: be:3c:6a:f6:8d:0d:64:35:3b:e7:15:71:fd:29:8b:95:d0:2e: a7:52:0f:39:a6:43:d0:b0:7c:e0:63:f1:78:4e:cd:ba:63:ed: 88:61:14:d0:b3:02:58:16:36:25:84:65:ad:ff:d1:45:c1:68: e1:ac:88:1a:c3:37:15:db:71:6b:d5:b6:c4:d5:66:e6:93:e0: c2:87:cd:9d:42:58:87:a1:63:01:e1:cc:2a:b7:3a:12:7d:9b: ae:05:42:5c:33:a8:42:6d:49:8a:81:e7:45:7e:9e:28:d1:e0: f9:37:c9:7f:a9:64:51:4a:76:73:3a:67:52:eb:1d:24:f1:33: bc:fa:7e:df:66:99:70:c5:a9:96:54:68:46:30:1e:ca:8e:f4: 24:2e:d1:06:fb:1c:ca:9e:49:a0:0e:0c:37:ad:a9:c4:82:dc: e6:7f:76:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0 MUZCM0VFQUIwHhcNMjUwNzAzMDYyNDI3WhcNMjUwNzEwMDYyNDI3WjAYMRYwFAYD VQQDEw02ODY2MjIxYi02OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVLx28/p8ZkyLseqaRdJS21TmcD6E+pWApOF2n3keLsCCmfRCvgHmu961Ymv TRXDlRLSY8JtbYK5pf3XH43nx97ZoW8N7kKd7EzsmvUWc1BQNmnYccwF+z+ZswlP qcoXxbIZTEE9tysLhMprqCA8IB/CEi5HfNE0E+9/9+CsIiZzLVGdsSgnX0kRqd9Z 1xi2rAPYcxTD4IuIOBjjkmrjMmmVdI5cLW1anbHdCUaRe7MjyTJYU+kSVHDhXpqE AmWcnCaECQbmqq4vdA6Gy8fND0p9WOegZqpdbiQhMd05tKjKr9ihxyOqjYUkIF2G PodeUkWfKKVrkBzzdsg/JzsJeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdsV1e4 dxIx1RPEvArinDakFAxyMB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3 cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTY3Mi9FNUY0NUFEMDVGNTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VC bURqRXFSeVJ4ZzFCLXo3cXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALye1Eos0a+nW4m7/3aFcB3Ro/aLmjRbXSHV31MVm+twhwqx6R3ERJ yyV5W/Xc3reqkLvskuIlUI8xwW8pV1bDwj0dRT5eeSvk41++HmevzqZYlUjnrvuf +Pa+PGr2jQ1kNTvnFXH9KYuV0C6nUg85pkPQsHzgY/F4Ts26Y+2IYRTQswJYFjYl hGWt/9FFwWjhrIgawzcV23Fr1bbE1Wbmk+DCh82dQliHoWMB4cwqtzoSfZuuBUJc M6hCbUmKgedFfp4o0eD5N8l/qWRRSnZzOmdS6x0k8TO8+n7fZplwxamWVGhGMB7K jvQkLtEG+xzKnkmgDgw3ranEgtzmf3Yh -----END CERTIFICATE-----Generated at Thu Jul 3 17:31:41 2025 by rpki-client