$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft File: rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json) Hash identifier: i21rIZ0uVpTd92jx5m93z1sQGRknvZPL/lq9lojRPt0= Subject key identifier: 84:A2:6B:44:22:BB:97:D6:A9:E2:12:1C:6B:1F:1B:98:34:42:22:A0 Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1 Certificate issuer: /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft Manifest number: 07E7 Signing time: Fri 22 Aug 2025 21:09:16 +0000 Manifest this update: Fri 22 Aug 2025 21:09:15 +0000 Manifest next update: Fri 29 Aug 2025 21:09:15 +0000 Files and hashes: 1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: qBQwjtfgC017CAEkOGjS7tfAfFcmjl4ZGyTMxZl7Wqk=) 2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: KyOkY9VA3J/3sBokvUHuRFKP5fmOGmjv1+iHz+yAeU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1 Validity Not Before: Aug 22 21:09:15 2025 GMT Not After : Aug 29 21:09:15 2025 GMT Subject: CN=68a8dc7b-1002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:5c:8e:32:16:71:f8:9a:ee:ba:e3:20:ba: ca:b3:eb:67:e9:8f:da:0e:2a:04:a7:e5:c2:e2:8a: 83:d2:82:88:94:5a:e0:31:f4:4b:b0:48:81:55:10: 55:7a:78:09:ee:55:c5:1c:8f:4e:a6:27:a4:4e:de: 5e:d6:69:6f:92:1e:6a:99:8f:a1:4e:45:46:04:02: 2e:be:2d:c0:95:2c:c4:a5:cd:10:0d:c6:89:37:63: 74:4b:1f:d3:7c:49:fa:17:fb:24:4d:3f:1e:08:da: 73:85:9a:11:f0:4a:36:e0:6a:1f:5f:bb:48:da:95: 42:dc:82:51:13:b6:2d:20:35:cf:e5:97:09:e4:66: 18:9d:d5:e2:20:eb:06:0d:dd:2e:a6:c3:b8:d9:b9: af:2c:2e:cc:e0:cb:41:40:fa:36:8d:7b:17:08:66: ba:05:b1:ea:22:e4:ca:f6:38:b4:5b:b5:31:4f:fd: d1:89:54:ab:52:f3:a5:3c:63:43:f1:e9:36:ae:ad: 11:40:f8:38:d4:5e:65:fd:3e:66:c3:03:b8:6d:c1: 5e:3f:fa:32:99:ff:94:28:c5:62:8b:c0:ee:cc:d8: 23:e6:27:44:8d:ce:3e:54:cb:87:e3:77:a9:c7:c4: b7:c3:b0:b0:b0:6b:d6:50:a6:87:ae:86:bb:d5:a4: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:6B:44:22:BB:97:D6:A9:E2:12:1C:6B:1F:1B:98:34:42:22:A0 X509v3 Authority Key Identifier: keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:5d:ad:c9:fe:20:44:d3:1b:93:45:e6:17:ed:5d:b2:dd:5f: 5d:bf:84:a2:9c:c6:fd:bd:16:a4:5f:d6:91:fe:df:08:28:16: 9a:56:ec:0f:52:54:fd:ad:93:b6:79:bc:fb:73:25:b6:fb:06: 85:28:42:a6:f2:e3:07:88:88:63:22:88:86:fc:92:d5:ed:48: 30:b6:94:34:23:b7:59:83:ce:e7:7b:0c:9a:cd:fd:4b:a1:47: 36:f9:af:0d:ef:ff:89:26:d7:f7:51:cd:ea:ba:58:47:ce:9f: a2:6d:4e:a7:99:60:40:cc:f8:f4:69:11:2d:96:75:44:fb:ce: 7b:d5:e3:6e:0b:11:c3:39:03:57:e9:91:53:0c:76:92:db:90: 4b:63:6c:5e:45:54:a6:78:5e:13:bc:86:47:0b:ef:96:41:3e: 31:26:5d:4e:b4:ce:a7:5e:30:ae:d2:0e:6b:02:ea:37:9f:2f: 58:df:15:c9:43:d5:ab:62:ea:05:f9:27:10:6e:bb:eb:bd:97: 7d:0c:9c:9d:8c:0a:66:31:f2:4d:fd:56:4f:34:8f:39:32:41: 09:71:7f:a7:2c:84:61:8a:ec:e9:3e:5c:01:75:18:c4:cf:72: b4:f2:b3:68:1b:6a:c6:24:c4:3f:88:8b:b5:86:79:e6:1a:b0: e9:11:67:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0RDExMTAvBgNVBAUTKEFDQTEyRkQ3REJCMjgzRjMyQ0RENzNDRkNFQ0YwNUQz Q0I5QTg4QTEwHhcNMjUwODIyMjEwOTE1WhcNMjUwODI5MjEwOTE1WjAYMRYwFAYD VQQDEw02OGE4ZGM3Yi0xMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQBcjjIWcfia7rrjILrKs+tn6Y/aDioEp+XC4oqD0oKIlFrgMfRLsEiBVRBV engJ7lXFHI9OpiekTt5e1mlvkh5qmY+hTkVGBAIuvi3AlSzEpc0QDcaJN2N0Sx/T fEn6F/skTT8eCNpzhZoR8Eo24GofX7tI2pVC3IJRE7YtIDXP5ZcJ5GYYndXiIOsG Dd0upsO42bmvLC7M4MtBQPo2jXsXCGa6BbHqIuTK9ji0W7UxT/3RiVSrUvOlPGND 8ek2rq0RQPg41F5l/T5mwwO4bcFeP/oymf+UKMVii8DuzNgj5idEjc4+VMuH43ep x8S3w7CwsGvWUKaHroa71aSKkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISia0Qi u5fWqeISHGsfG5g0QiKgMB8GA1UdIwQYMBaAFKyhL9fbsoPzLN1zz87PBdPLmoih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTREMS83QkQyMUFGRUY5 N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdfTXMzWFBQenM4RjA4dWFp S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLRXYxOXV5Z19NczNYUFB6czhGMDh1YWlLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTREMS83QkQyMUFGRUY5N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdf TXMzWFBQenM4RjA4dWFpS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Xa3J/iBE0xuTReYX7V2y3V9dv4SinMb9vRakX9aR/t8IKBaaVuwP UlT9rZO2ebz7cyW2+waFKEKm8uMHiIhjIoiG/JLV7UgwtpQ0I7dZg87newyazf1L oUc2+a8N7/+JJtf3Uc3qulhHzp+ibU6nmWBAzPj0aREtlnVE+8571eNuCxHDOQNX 6ZFTDHaS25BLY2xeRVSmeF4TvIZHC++WQT4xJl1OtM6nXjCu0g5rAuo3ny9Y3xXJ Q9WrYuoF+ScQbrvrvZd9DJydjApmMfJN/VZPNI85MkEJcX+nLIRhiuzpPlwBdRjE z3K08rNoG2rGJMQ/iIu1hnnmGrDpEWdY -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:51 2025 by rpki-client