$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json) Hash identifier: hDZy4LNFUfgfDFdd/8xX3ggssx0WLPvxU3BgmYgn3FE= Subject key identifier: 0D:09:92:CC:E1:DF:B3:CA:68:1F:3D:37:89:FD:1A:D8:0C:73:9E:EA Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 1007 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft Manifest number: 0FEB Signing time: Wed 02 Jul 2025 17:40:59 +0000 Manifest this update: Wed 02 Jul 2025 17:40:58 +0000 Manifest next update: Wed 09 Jul 2025 17:40:58 +0000 Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: fHwBSA0SRipGPwKfKaVCLwyNfUZ46CvRbF5eyWW0xiU=) 2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 91GhAMmVYDOKIaPlZtLbS9DCeqxqN11XLz4AvQ01ZCY=) 3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: aCjyEapN5RNEdBx43BF8hSE5Js6g7kyTOXpzPyF+n3k=) 4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fOkeLT2T9sGexymAbtOvzE9kd8mH2xk9Q29zH8sz1Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4103 (0x1007) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Jul 2 17:40:58 2025 GMT Not After : Jul 9 17:40:58 2025 GMT Subject: CN=68656f2b-9b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:ab:5a:d8:34:b5:a8:4c:84:33:c5:b5:18: 9d:db:44:9c:22:8b:f5:3c:15:70:9a:b7:b8:47:4f: 1c:4e:96:b8:18:7d:fe:57:f7:39:e9:2b:0c:f2:1f: a8:84:76:9a:3a:6e:10:ca:f5:8e:04:c9:89:73:75: 73:31:69:6d:9b:00:7f:d4:d0:14:68:d8:c8:be:f8: 7d:87:2d:00:fb:e1:f7:40:20:6a:ca:d7:f9:07:73: 7f:a1:01:4e:44:6d:70:99:9b:09:af:32:d8:fc:14: f6:a0:35:81:f0:eb:94:54:9f:0f:8d:ee:74:e1:f9: d6:9e:01:71:2e:53:0d:3b:13:f5:3e:64:6d:c0:d8: f2:7d:5a:c6:a0:e0:83:70:a9:5b:3e:85:50:74:37: 23:d2:e5:95:67:64:31:fc:32:5f:bc:bd:4a:73:5d: 2a:a4:57:43:42:ae:52:cf:52:b6:43:f4:06:3c:58: cb:b1:df:3e:47:77:3c:f8:f1:c7:e1:41:a4:3c:50: 4e:c9:4e:cf:ea:4f:af:94:ed:f4:c5:58:14:61:c3: 3e:e4:68:56:04:4e:16:d4:15:f3:5e:57:2f:03:b7: 91:a6:bd:b0:b6:6c:07:e0:ee:e3:62:b0:9b:9e:05: 11:33:57:10:2f:eb:29:b2:c4:de:db:6b:18:3a:f9: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:09:92:CC:E1:DF:B3:CA:68:1F:3D:37:89:FD:1A:D8:0C:73:9E:EA X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:90:53:ca:3b:73:93:4f:1b:03:fc:d5:f6:b1:5c:cd:a0:ed: 87:07:c9:92:f4:2d:33:56:f0:e1:bc:5d:a6:b1:62:43:2a:91: aa:04:ae:43:f6:e6:87:a9:eb:4a:ea:46:88:d7:51:cd:1c:1e: b3:09:0e:42:63:9a:22:32:9c:70:b6:02:28:f4:4d:7e:16:57: ae:a5:2c:77:1d:9a:95:b6:33:9b:83:3b:86:71:e5:50:6e:0d: ad:c5:a5:f5:83:71:61:f4:d3:ae:90:da:75:20:47:36:e9:eb: 6e:62:99:f2:87:29:fc:09:ff:9a:a4:be:0e:b8:66:d6:6a:64: 5b:a2:6c:73:b9:58:cc:69:bc:5f:c7:dc:3e:4d:40:fc:85:65: 1a:4d:b9:f3:5a:48:3c:3e:23:24:59:4f:b7:e1:5c:23:ee:c6: f3:7c:32:cc:0d:8f:8c:15:39:49:85:42:a2:21:46:bf:89:7e: 99:7d:30:02:42:dc:c0:f0:01:30:bd:b8:32:e7:17:b8:6d:5f: f0:eb:c1:dc:a6:91:5c:52:7c:b1:a9:cc:fe:f1:09:5f:3b:6c: 86:37:f4:be:f2:87:18:a3:be:ef:0a:29:1f:9c:06:2f:dc:1e: 3b:0e:69:dd:96:59:bc:02:04:4d:0c:bd:86:35:e8:66:1c:1d: b7:46:fc:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjUwNzAyMTc0MDU4WhcNMjUwNzA5MTc0MDU4WjAYMRYwFAYD VQQDEw02ODY1NmYyYi05YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunarWtg0tahMhDPFtRid20ScIov1PBVwmre4R08cTpa4GH3+V/c56SsM8h+o hHaaOm4QyvWOBMmJc3VzMWltmwB/1NAUaNjIvvh9hy0A++H3QCBqytf5B3N/oQFO RG1wmZsJrzLY/BT2oDWB8OuUVJ8Pje504fnWngFxLlMNOxP1PmRtwNjyfVrGoOCD cKlbPoVQdDcj0uWVZ2Qx/DJfvL1Kc10qpFdDQq5Sz1K2Q/QGPFjLsd8+R3c8+PHH 4UGkPFBOyU7P6k+vlO30xVgUYcM+5GhWBE4W1BXzXlcvA7eRpr2wtmwH4O7jYrCb ngURM1cQL+spssTe22sYOvmw5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0Jkszh 37PKaB89N4n9GtgMc57qMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8kFPKO3OTTxsD/NX2sVzNoO2HB8mS9C0zVvDhvF2msWJDKpGqBK5D 9uaHqetK6kaI11HNHB6zCQ5CY5oiMpxwtgIo9E1+FleupSx3HZqVtjObgzuGceVQ bg2txaX1g3Fh9NOukNp1IEc26etuYpnyhyn8Cf+apL4OuGbWamRbomxzuVjMabxf x9w+TUD8hWUaTbnzWkg8PiMkWU+34Vwj7sbzfDLMDY+MFTlJhUKiIUa/iX6ZfTAC QtzA8AEwvbgy5xe4bV/w68HcppFcUnyxqcz+8QlfO2yGN/S+8ocYo77vCikfnAYv 3B47Dmndllm8AgRNDL2GNehmHB23Rvw/ -----END CERTIFICATE-----Generated at Fri Jul 4 10:40:35 2025 by rpki-client