$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: M7u9Fn83tVJW/PWr/Bl0nA1Np6qBqsxT/ctbKwAbFdE= Subject key identifier: 7A:1C:D2:F9:53:27:92:A3:ED:A0:F2:91:74:6B:EA:14:67:FD:61:E5 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: D6 Signing time: Thu 03 Jul 2025 05:46:42 +0000 Manifest this update: Thu 03 Jul 2025 05:46:42 +0000 Manifest next update: Thu 10 Jul 2025 05:46:42 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: NIsXhP1rvprA5W2BE/uP7ne0WRU3xbEXN/G7XO1XYU8=) 2: 57FBE074370111F094BF7862C4F9AE02.roa (hash: NzrXfR/7zniLvrCXQlmVGg2isIi5LfwP1ubwC3yxm7E=) 3: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: /GfdIIe6m1dYDx7Tm/mUgCqzxCNCLDFcedZ67s1StUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Jul 3 05:46:42 2025 GMT Not After : Jul 10 05:46:42 2025 GMT Subject: CN=68661942-03ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:52:3e:ad:48:89:20:24:4b:85:42:29:df: 6f:57:4b:87:f8:f2:81:a0:e2:6b:4b:64:a2:0c:46: c2:92:c9:a6:c3:da:9d:31:6c:ff:df:ce:78:7e:39: bc:3c:f9:c1:b2:8d:ba:39:12:c6:e7:df:05:39:d2: 92:0d:1c:a5:57:6d:67:8a:87:a3:36:4e:14:41:ff: 4c:fd:de:23:37:95:ae:2f:d6:c6:0d:41:83:3c:7c: 2f:57:aa:cc:52:74:0c:1e:07:de:83:a8:c2:f0:a9: ed:8e:8b:6f:71:10:fa:c0:c6:3a:6e:c5:83:ba:04: 6b:1a:d3:62:8d:e3:39:2f:50:fc:d9:ff:0d:b8:06: 8d:72:2f:3d:ad:ca:3a:39:3f:a8:89:fe:4d:eb:a6: af:94:b9:98:25:bf:0a:f6:eb:28:e4:5e:ee:9c:97: e5:22:93:fc:93:c8:90:a1:a8:a6:99:4a:ae:49:1a: 3f:8c:b0:79:e1:82:59:53:0e:1a:ea:99:c1:d0:78: 22:61:07:9b:fa:4e:1e:e7:61:d5:2a:0f:93:a5:7b: 27:47:08:3e:c4:0e:ea:40:e5:51:ea:04:57:97:5c: 71:3b:6e:66:4d:ad:92:6a:c3:4f:e8:62:3f:d8:29: 61:2b:3d:d7:4b:0f:ed:ca:68:d2:f9:ad:ee:4b:c8: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1C:D2:F9:53:27:92:A3:ED:A0:F2:91:74:6B:EA:14:67:FD:61:E5 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:80:30:d9:83:f2:de:8f:54:ce:f9:32:2d:5a:90:1f:45:b8: 50:7f:17:17:4a:96:a0:c4:00:7d:63:ea:a8:83:41:a1:00:db: 0c:b7:c1:68:2b:c3:e4:72:78:fa:c8:7d:6d:fc:bf:e1:b8:e0: 98:3f:45:7b:fe:0f:4c:e6:99:01:0f:32:52:24:a2:3e:fe:98: dc:b3:1f:07:c0:03:f0:1c:e0:b8:3b:63:4a:bc:ff:1c:56:00: 44:8b:b8:ef:86:74:b5:2b:fe:1c:86:25:76:db:21:12:81:66: 1e:ba:23:97:ce:1d:ca:fd:49:e9:f8:0f:c9:9c:0f:1b:b3:d7: 46:84:23:1c:3b:65:5c:36:bb:81:54:0e:70:02:6a:06:ad:2d: c9:93:e3:e1:a9:ae:b8:2c:1b:8c:40:9b:39:5b:3d:2a:f0:83: 3a:4a:98:45:a9:52:89:b8:10:ce:4c:71:c7:77:78:8b:c8:94: 25:35:88:d6:17:a3:46:b4:03:0a:62:15:74:29:22:f0:e1:d0: 6b:14:43:2e:2d:43:e1:45:37:2d:2a:8f:73:32:d7:9c:89:7b: 8a:6a:38:e1:37:a3:56:40:e1:a0:19:6e:12:d5:3d:5a:87:0c: 0e:1e:5a:c0:92:3c:78:f1:e9:4e:c9:b3:87:81:64:a2:e8:3f: 72:50:2b:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwNzAzMDU0NjQyWhcNMjUwNzEwMDU0NjQyWjAYMRYwFAYD VQQDEw02ODY2MTk0Mi0wM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/VSPq1IiSAkS4VCKd9vV0uH+PKBoOJrS2SiDEbCksmmw9qdMWz/3854fjm8 PPnBso26ORLG598FOdKSDRylV21nioejNk4UQf9M/d4jN5WuL9bGDUGDPHwvV6rM UnQMHgfeg6jC8KntjotvcRD6wMY6bsWDugRrGtNijeM5L1D82f8NuAaNci89rco6 OT+oif5N66avlLmYJb8K9uso5F7unJflIpP8k8iQoaimmUquSRo/jLB54YJZUw4a 6pnB0HgiYQeb+k4e52HVKg+TpXsnRwg+xA7qQOVR6gRXl1xxO25mTa2SasNP6GI/ 2ClhKz3XSw/tymjS+a3uS8il1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoc0vlT J5Kj7aDykXRr6hRn/WHlMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIgDDZg/Lej1TO+TItWpAfRbhQfxcXSpagxAB9Y+qog0GhANsMt8Fo K8Pkcnj6yH1t/L/huOCYP0V7/g9M5pkBDzJSJKI+/pjcsx8HwAPwHOC4O2NKvP8c VgBEi7jvhnS1K/4chiV22yESgWYeuiOXzh3K/Unp+A/JnA8bs9dGhCMcO2VcNruB VA5wAmoGrS3Jk+Phqa64LBuMQJs5Wz0q8IM6SphFqVKJuBDOTHHHd3iLyJQlNYjW F6NGtAMKYhV0KSLw4dBrFEMuLUPhRTctKo9zMteciXuKajjhN6NWQOGgGW4S1T1a hwwOHlrAkjx48elOybOHgWSi6D9yUCtW -----END CERTIFICATE-----Generated at Fri Jul 4 08:22:37 2025 by rpki-client