$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft File: KdzyaXujSl1MV_LtlnGNAxu8VjA.mft (raw, json) Hash identifier: G3p4LfWg9asPys86volZEnkeTQ+7FL90nXNEp1Q30Vk= Subject key identifier: 58:EE:83:D6:E8:C3:1F:D5:7E:4A:53:17:69:8A:AA:2E:E7:EB:1A:EC Authority key identifier: 29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 Certificate issuer: /CN=A91A1103/serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Certificate serial: 161D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft Manifest number: 1613 Signing time: Wed 02 Jul 2025 16:53:46 +0000 Manifest this update: Wed 02 Jul 2025 16:53:45 +0000 Manifest next update: Wed 09 Jul 2025 16:53:45 +0000 Files and hashes: 1: KdzyaXujSl1MV_LtlnGNAxu8VjA.crl (hash: im/ePlNehwcp8hHE0Fj7vXC53LC39BNwpgkp11KRUFk=) 2: 1C85059C1EB911E88533FA4EC4F9AE02.roa (hash: RqHN2PwZe21iOjQw65O1dXW58VJkxhmOGxQkFQUXslk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5661 (0x161d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1103, serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Validity Not Before: Jul 2 16:53:45 2025 GMT Not After : Jul 9 16:53:45 2025 GMT Subject: CN=68656419-bcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:ef:45:20:27:11:e2:d5:19:cd:00:f5:a7: dd:4b:83:11:8b:1b:a3:98:7a:c6:86:35:df:c0:34: 94:c0:21:f6:23:5c:37:40:4e:cd:8f:e0:c0:82:cb: 79:c7:4a:07:82:82:16:d7:13:c1:45:06:ed:eb:b6: c7:29:c0:36:94:a1:26:cc:1d:97:0f:d9:cf:a0:0b: 31:06:32:b1:87:55:14:43:64:c5:68:9a:db:f5:75: 88:4f:bc:8b:94:dc:76:9e:2d:18:5d:b9:23:ad:b3: a1:7d:e5:73:57:77:e4:5e:1e:46:26:53:a0:82:be: 61:da:30:d0:7e:37:96:4c:6e:1a:f7:16:99:a0:e1: ca:4b:c4:a1:ea:13:9d:3d:fa:d3:f7:f3:e5:be:6b: 2b:7b:42:e7:23:1a:23:ea:d7:88:f2:7d:e8:d0:6c: 9c:cb:89:93:b6:48:7d:a5:c8:1f:51:bc:12:71:5a: b6:6f:83:15:80:49:4e:97:ed:ec:af:99:0a:56:d7: dd:6b:f1:4d:63:5f:1d:82:a2:24:26:65:c1:e8:e7: 53:fe:28:f9:c0:03:9c:80:3e:88:9c:5c:ae:20:93: d3:35:7f:7e:37:a3:b3:a1:2e:df:e6:a4:77:3a:d7: 71:a2:4d:e5:f4:ab:61:93:97:7b:91:f4:8e:a1:ef: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EE:83:D6:E8:C3:1F:D5:7E:4A:53:17:69:8A:AA:2E:E7:EB:1A:EC X509v3 Authority Key Identifier: keyid:29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:50:f1:3f:50:32:72:32:32:f8:ea:2d:92:59:0e:9f:0d:fd: 55:96:23:f1:25:99:9f:03:ca:84:62:be:0a:f4:68:7b:e0:95: b5:3f:fa:a8:a6:43:60:58:3e:cf:9b:80:3c:bb:44:ce:80:07: f8:1f:0c:62:9e:f8:03:a7:4e:34:51:62:2a:41:4d:33:4c:2f: 81:60:a6:17:1c:f1:e5:88:49:4f:db:d2:1b:a3:5d:7a:a8:1b: 24:b9:b0:66:96:ee:2d:5c:80:ce:13:21:75:dd:d1:71:06:2d: d8:9d:a6:be:b2:b4:fa:4f:f5:81:4f:cf:a0:71:db:a0:a8:fc: 07:94:9f:01:75:24:74:65:a8:5b:e9:95:69:36:0c:21:ff:c8: f0:80:e1:f5:b7:c2:5f:ce:64:ff:fc:23:d0:a0:6c:8f:d2:31: c8:1b:3f:34:68:79:f6:3e:b9:b8:b8:e5:c3:85:56:ea:aa:5b: 91:0e:ce:98:a7:fb:ac:4f:3d:42:29:84:a9:40:fb:f4:c1:af: c9:40:7b:e7:4b:d2:ab:b0:9e:c1:c5:4e:2e:be:ee:4a:e5:27: e7:a9:2c:e7:c1:93:3b:17:29:a8:7e:d0:07:6f:cf:a8:38:b1: c5:b6:91:f0:3b:71:af:de:97:cb:75:08:40:1b:2a:4c:d8:1b: 77:02:a7:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExMDMxMTAvBgNVBAUTKDI5RENGMjY5N0JBMzRBNUQ0QzU3RjJFRDk2NzE4RDAz MUJCQzU2MzAwHhcNMjUwNzAyMTY1MzQ1WhcNMjUwNzA5MTY1MzQ1WjAYMRYwFAYD VQQDEw02ODY1NjQxOS1iY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxe3vRSAnEeLVGc0A9afdS4MRixujmHrGhjXfwDSUwCH2I1w3QE7Nj+DAgst5 x0oHgoIW1xPBRQbt67bHKcA2lKEmzB2XD9nPoAsxBjKxh1UUQ2TFaJrb9XWIT7yL lNx2ni0YXbkjrbOhfeVzV3fkXh5GJlOggr5h2jDQfjeWTG4a9xaZoOHKS8Sh6hOd PfrT9/Plvmsre0LnIxoj6teI8n3o0Gycy4mTtkh9pcgfUbwScVq2b4MVgElOl+3s r5kKVtfda/FNY18dgqIkJmXB6OdT/ij5wAOcgD6InFyuIJPTNX9+N6OzoS7f5qR3 Otdxok3l9Kthk5d7kfSOoe/QLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjug9bo wx/VfkpTF2mKqi7n6xrsMB8GA1UdIwQYMBaAFCnc8ml7o0pdTFfy7ZZxjQMbvFYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTEwMy8yMDk1QUE2MjFB MDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNsMU1WX0x0bG5HTkF4dThW akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tkenlhWHVqU2wxTVZfTHRsbkdOQXh1OFZqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTEwMy8yMDk1QUE2MjFBMDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNs MU1WX0x0bG5HTkF4dThWakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOUPE/UDJyMjL46i2SWQ6fDf1VliPxJZmfA8qEYr4K9Gh74JW1P/qo pkNgWD7Pm4A8u0TOgAf4HwxinvgDp040UWIqQU0zTC+BYKYXHPHliElP29Ibo116 qBskubBmlu4tXIDOEyF13dFxBi3Ynaa+srT6T/WBT8+gcdugqPwHlJ8BdSR0Zahb 6ZVpNgwh/8jwgOH1t8JfzmT//CPQoGyP0jHIGz80aHn2Prm4uOXDhVbqqluRDs6Y p/usTz1CKYSpQPv0wa/JQHvnS9KrsJ7BxU4uvu5K5SfnqSznwZM7FymoftAHb8+o OLHFtpHwO3Gv3pfLdQhAGypM2Bt3AqdD -----END CERTIFICATE-----Generated at Fri Jul 4 10:47:12 2025 by rpki-client