$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json) Hash identifier: r69BYJVs1bA5Ya3Y+hwbuCmyJmOhvCyHCguM2Zs8Htw= Subject key identifier: D6:04:7E:79:4D:B2:6B:DA:3C:E2:F9:1F:DF:3B:8E:34:73:E4:12:25 Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft Manifest number: 5B Signing time: Thu 03 Jul 2025 07:25:24 +0000 Manifest this update: Thu 03 Jul 2025 07:25:23 +0000 Manifest next update: Thu 10 Jul 2025 07:25:23 +0000 Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: h9TV7aSwf3Sma1ANbGZSygNgTeLXvCW25SXWbYVSTWc=) 2: 5042D03ED2EF11EFBA610425C4F9AE02.roa (hash: Td45KF7s5KJjDmYTPbjMG6cwXZMtoTfhOtwsLcRRVB4=) 3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gzNobaLbEvK3FJ3mC0CiPYdWO820L9Sv8IKQdUKftFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Jul 3 07:25:23 2025 GMT Not After : Jul 10 07:25:23 2025 GMT Subject: CN=68663063-6596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:01:30:70:6a:84:d5:43:5c:0d:4c:4f:27: 24:f2:cf:b7:bb:18:60:50:ea:d7:da:43:a4:4f:a4: 3f:1a:8d:89:b7:ef:8b:46:7e:e9:17:d5:a6:4e:14: 17:42:bc:df:46:03:54:ee:7c:26:0b:9c:d6:cb:46: cd:9c:a2:43:9a:5d:35:7e:69:15:d7:4a:cb:97:e9: ce:31:ad:8d:f2:6b:75:e7:26:fb:4f:b4:f9:45:4b: 7a:58:5f:c4:66:79:16:6b:ea:2b:c4:8e:ed:33:fe: 96:b2:d4:b9:89:16:78:f8:ad:1c:63:67:54:da:26: fc:e3:f1:94:8b:cc:fa:8b:71:13:f3:a9:60:f7:a8: bc:e1:69:bd:ec:d7:e6:ba:01:04:0b:10:e4:4b:fc: 9b:d0:30:5f:a7:2d:9b:56:d6:fa:46:81:96:ac:61: b5:6f:35:ee:95:83:ce:95:7b:13:6a:e0:8d:be:16: 2d:75:6b:c0:78:97:70:87:30:0e:aa:b1:f8:1f:6d: 26:00:41:6e:b6:3a:cc:d2:04:58:1d:6f:05:4b:a3: fd:ad:b0:ac:c4:91:9d:bc:1a:50:ea:b8:ef:08:db: b0:72:38:a5:a9:8b:8b:cd:7a:4f:96:02:18:bd:ae: 5b:0b:68:93:d9:d5:de:ea:23:f2:63:11:5d:69:b2: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:04:7E:79:4D:B2:6B:DA:3C:E2:F9:1F:DF:3B:8E:34:73:E4:12:25 X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:89:8c:a8:fd:42:98:25:48:b2:ae:3f:cd:9f:fc:f1:a9:15: d5:49:1e:25:57:cc:6b:38:d4:3a:66:b0:cb:05:d2:df:2a:c7: 09:71:5a:fb:b9:54:65:ad:ec:89:b6:58:5a:bf:9b:04:84:98: ee:4c:39:c7:62:e3:52:68:45:1d:84:2c:f6:47:96:1d:8c:ce: 14:0f:ec:77:9c:2d:c3:9a:5a:1c:56:ba:50:f8:0d:94:f7:d7: dc:9e:ca:2a:8e:48:1a:73:3f:87:e9:dc:14:27:9b:df:fa:18: 7d:00:83:ff:49:e9:30:ea:c2:89:d0:e6:b8:e2:85:94:5c:9e: 9f:55:e3:79:df:72:49:34:93:10:6b:c7:de:89:5f:38:e1:61: ab:e5:2b:70:85:1e:5e:7b:18:d6:0a:80:60:ea:67:47:25:e5: b3:67:88:38:f0:c5:b9:42:55:84:ab:63:98:51:8c:fe:a4:5e: a6:90:29:b0:82:cc:32:0e:d1:5f:3b:ff:80:e9:5a:b7:bf:be: ba:79:91:0c:79:83:c4:04:db:e0:b1:9c:55:9f:2c:48:81:52: 7b:37:eb:44:69:63:b1:2a:96:60:70:17:c8:47:a7:86:85:2c: 21:48:bc:5b:e0:77:6c:ca:ad:24:94:f0:e7:4c:9a:d8:31:dc: 59:03:5e:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODU1MzExMC8GA1UEBRMoOTMwRERGNDEwMTA2OTAzQkVCOTkxOUM5OUJERTAxNjM4 NzA2NTVBRTAeFw0yNTA3MDMwNzI1MjNaFw0yNTA3MTAwNzI1MjNaMBgxFjAUBgNV BAMTDTY4NjYzMDYzLTY1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCd9AEwcGqE1UNcDUxPJyTyz7e7GGBQ6tfaQ6RPpD8ajYm374tGfukX1aZOFBdC vN9GA1TufCYLnNbLRs2cokOaXTV+aRXXSsuX6c4xrY3ya3XnJvtPtPlFS3pYX8Rm eRZr6ivEju0z/pay1LmJFnj4rRxjZ1TaJvzj8ZSLzPqLcRPzqWD3qLzhab3s1+a6 AQQLEORL/JvQMF+nLZtW1vpGgZasYbVvNe6Vg86VexNq4I2+Fi11a8B4l3CHMA6q sfgfbSYAQW62OszSBFgdbwVLo/2tsKzEkZ28GlDquO8I27ByOKWpi4vNek+WAhi9 rlsLaJPZ1d7qI/JjEV1pslBLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1gR+eU2y a9o84vkf3zuONHPkEiUwHwYDVR0jBBgwFoAUkw3fQQEGkDvrmRnJm94BY4cGVa4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTUzL0E1OUJGRkU0RDJF RDExRUY4REVFNTEyMEM0RjlBRTAyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1Zh NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva3czZlFRRUdrRHZybVJuSm05NEJZNGNHVmE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NTUzL0E1OUJGRkU0RDJFRDExRUY4REVFNTEyMEM0RjlBRTAyL2t3M2ZRUUVHa0R2 cm1SbkptOTRCWTRjR1ZhNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSJjKj9QpglSLKuP82f/PGpFdVJHiVXzGs41DpmsMsF0t8qxwlxWvu5 VGWt7Im2WFq/mwSEmO5MOcdi41JoRR2ELPZHlh2MzhQP7HecLcOaWhxWulD4DZT3 19yeyiqOSBpzP4fp3BQnm9/6GH0Ag/9J6TDqwonQ5rjihZRcnp9V43nfckk0kxBr x96JXzjhYavlK3CFHl57GNYKgGDqZ0cl5bNniDjwxblCVYSrY5hRjP6kXqaQKbCC zDIO0V87/4DpWre/vrp5kQx5g8QE2+CxnFWfLEiBUns360RpY7EqlmBwF8hHp4aF LCFIvFvgd2zKrSSU8OdMmtgx3FkDXlI= -----END CERTIFICATE-----Generated at Fri Jul 4 14:57:46 2025 by rpki-client