$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json) Hash identifier: 6McBcjP5CxAHKqirtGLKabF5jaXU539JDT9HotnwEtI= Subject key identifier: E4:33:B6:A9:8E:25:B6:CD:48:2A:55:89:BC:0F:D0:0B:AD:59:01:44 Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 1021 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft Manifest number: 1005 Signing time: Fri 22 Aug 2025 17:35:13 +0000 Manifest this update: Fri 22 Aug 2025 17:35:13 +0000 Manifest next update: Fri 29 Aug 2025 17:35:13 +0000 Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: LmwbxShG/XdyKBUYIB/ko+r3zUK7TFG7wlkrzTM6JwQ=) 2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 91GhAMmVYDOKIaPlZtLbS9DCeqxqN11XLz4AvQ01ZCY=) 3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: aCjyEapN5RNEdBx43BF8hSE5Js6g7kyTOXpzPyF+n3k=) 4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fOkeLT2T9sGexymAbtOvzE9kd8mH2xk9Q29zH8sz1Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4129 (0x1021) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Aug 22 17:35:13 2025 GMT Not After : Aug 29 17:35:13 2025 GMT Subject: CN=68a8aa51-a372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:22:eb:f8:b6:da:18:76:d9:f4:05:94:48: 98:8e:f1:7e:48:0b:21:00:c7:3a:6e:9e:a0:cc:89: dc:b2:d9:a2:ce:11:75:ec:b3:bf:3b:7a:ba:f0:cf: d8:06:44:3d:82:f8:a6:f6:c5:e2:f2:99:74:4a:c5: e1:06:4d:36:4b:b2:ed:51:70:1b:e0:d8:e4:72:8b: 09:78:75:c2:f0:6e:7c:eb:7e:7f:6d:11:39:e0:ae: af:15:ff:87:ab:f2:37:da:07:e2:a5:6d:5e:67:cf: cc:78:fc:ac:da:83:f3:c6:56:46:6e:1b:5f:7a:89: 04:04:57:75:3e:79:1b:44:68:a6:e4:1c:6a:48:3c: 11:e7:0f:de:e1:78:27:e1:d0:e5:af:73:6a:82:ab: c4:76:2b:63:58:37:87:6e:35:cf:6b:1a:69:b5:5a: c6:af:10:02:4d:fa:74:ed:48:04:94:6f:37:c5:ed: 34:18:9b:39:1f:e2:40:2d:0f:2a:2a:25:b2:91:41: 8a:75:21:a4:32:ae:46:13:3a:c6:11:52:97:d8:0e: 46:23:47:0a:dc:af:ba:72:b4:55:4d:a1:a2:ea:7e: b2:58:60:8c:f9:ce:2c:33:d1:85:0a:46:da:ad:ef: 0c:42:dc:9b:86:34:35:5b:5c:5c:83:9c:9e:51:81: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:B6:A9:8E:25:B6:CD:48:2A:55:89:BC:0F:D0:0B:AD:59:01:44 X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f2:ce:5a:c2:01:29:f2:53:5f:0f:3c:e6:ae:06:76:38:7e: ab:31:3f:a0:78:04:78:43:42:37:3e:be:8b:28:66:73:bb:ee: 3f:64:4a:42:c9:8c:31:e6:74:07:9d:c6:f5:a1:0c:2b:8f:e3: bc:39:96:a6:d3:ce:93:fa:e0:98:08:be:e4:d3:1a:e5:99:de: 0c:95:2c:eb:8f:90:8e:39:2c:0b:89:e0:55:54:83:7c:71:25: 42:da:0f:4c:d7:08:cc:3c:ac:f1:40:99:94:1c:a0:94:28:8f: e1:dd:a7:bf:66:c4:3e:8e:74:a9:ea:72:fa:4b:50:22:b5:d5: 9c:77:8d:f9:0f:b4:3c:5a:25:88:86:3e:b7:93:a2:10:52:a4: 7e:f9:87:ee:d0:d7:96:02:2c:56:84:db:8b:57:cc:c2:73:8b: a4:4b:af:d7:4a:d5:51:ad:b5:a2:b5:26:8c:59:07:3d:95:59: d3:c8:91:c4:11:7b:cd:89:d2:65:f1:1b:05:77:ce:e1:39:5f: 8c:3d:65:0a:46:39:f4:fc:98:8d:28:e9:55:42:d0:6c:94:5f: 13:4a:c4:74:ea:22:1b:ad:12:47:ce:a9:7a:2b:bc:5c:6c:93: 5c:a1:d1:d0:65:cd:2b:31:ba:c9:86:70:68:ba:9b:24:32:ef: 1a:62:02:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjUwODIyMTczNTEzWhcNMjUwODI5MTczNTEzWjAYMRYwFAYD VQQDEw02OGE4YWE1MS1hMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLki6/i22hh22fQFlEiYjvF+SAshAMc6bp6gzIncstmizhF17LO/O3q68M/Y BkQ9gvim9sXi8pl0SsXhBk02S7LtUXAb4NjkcosJeHXC8G58635/bRE54K6vFf+H q/I32gfipW1eZ8/MePys2oPzxlZGbhtfeokEBFd1PnkbRGim5BxqSDwR5w/e4Xgn 4dDlr3NqgqvEditjWDeHbjXPaxpptVrGrxACTfp07UgElG83xe00GJs5H+JALQ8q KiWykUGKdSGkMq5GEzrGEVKX2A5GI0cK3K+6crRVTaGi6n6yWGCM+c4sM9GFCkba re8MQtybhjQ1W1xcg5yeUYFczQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQztqmO JbbNSCpVibwP0AutWQFEMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI8s5awgEp8lNfDzzmrgZ2OH6rMT+geAR4Q0I3Pr6LKGZzu+4/ZEpC yYwx5nQHncb1oQwrj+O8OZam086T+uCYCL7k0xrlmd4MlSzrj5COOSwLieBVVIN8 cSVC2g9M1wjMPKzxQJmUHKCUKI/h3ae/ZsQ+jnSp6nL6S1AitdWcd435D7Q8WiWI hj63k6IQUqR++Yfu0NeWAixWhNuLV8zCc4ukS6/XStVRrbWitSaMWQc9lVnTyJHE EXvNidJl8RsFd87hOV+MPWUKRjn0/JiNKOlVQtBslF8TSsR06iIbrRJHzql6K7xc bJNcodHQZc0rMbrJhnBoupskMu8aYgIQ -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:22 2025 by rpki-client