$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: JGb+xW7qUf9Sn1wm7ogsjOEmXYhI0AfGthXVjn5n8UU= Subject key identifier: 16:6A:EE:9D:32:7E:9A:98:D3:AD:5E:BD:C1:28:E8:EA:42:72:CC:CE Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 0580 Signing time: Fri 22 Aug 2025 14:18:16 +0000 Manifest this update: Fri 22 Aug 2025 14:18:16 +0000 Manifest next update: Fri 29 Aug 2025 14:18:16 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: dpldw6PvOX0EWTof3p9YUWKCFzld2d1tfsKNYCHyBUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: Aug 22 14:18:16 2025 GMT Not After : Aug 29 14:18:16 2025 GMT Subject: CN=68a87c28-6e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:58:36:a0:42:d3:09:81:ae:fe:53:5c:11: dc:a3:34:a8:d1:74:9d:b7:95:1d:2d:5b:44:55:e2: a3:a7:3c:1a:a9:fd:26:8f:3a:9a:cb:f8:fb:05:f2: e5:47:c0:ad:ca:84:0a:56:63:3e:13:a5:21:1a:25: 6d:34:d9:34:19:82:c7:5a:de:4e:56:b2:78:30:9b: 9c:db:a6:29:0a:95:98:08:91:77:08:26:f0:c9:be: 41:4c:dd:ec:d9:53:a0:4e:45:49:0c:5b:a4:dd:a7: 00:da:d0:72:e5:46:2e:ac:5b:79:34:30:af:dd:6e: fd:9d:34:f1:41:2e:25:6a:02:ff:1c:77:d0:a5:7c: 01:01:e1:da:3e:a6:bf:c3:58:d2:03:aa:c3:62:44: 5d:fd:9b:1b:7d:a7:58:47:dc:93:ec:9c:b8:b6:40: c4:e8:f8:4c:be:ba:6c:92:b1:42:87:b2:38:61:76: d3:4f:29:2c:b8:bb:27:9a:71:b9:6d:69:0b:e4:91: 85:89:d7:0b:ad:99:54:a1:21:bc:2f:0e:c0:3a:23: 3c:bb:36:30:a5:00:2b:aa:64:f5:53:ec:de:3d:a0: a8:eb:45:55:9c:23:91:af:05:a2:80:2e:6c:31:7f: a9:5c:ab:94:79:f5:87:c4:28:5c:6e:2b:15:0b:90: 7e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6A:EE:9D:32:7E:9A:98:D3:AD:5E:BD:C1:28:E8:EA:42:72:CC:CE X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:12:48:80:f3:5c:5f:e8:62:12:0e:2a:ea:42:d8:ba:fd:8f: 86:24:23:94:7a:94:13:4a:18:32:bd:2e:3e:87:9c:32:ed:b0: d5:bc:d6:1a:39:46:9d:5c:87:cc:37:f5:64:fb:92:b9:19:e7: 86:a7:98:8e:d1:11:0f:56:d3:8c:41:43:dd:ab:9d:ec:83:03: f4:58:68:ff:24:46:8d:4b:7b:1e:8d:0f:3e:c7:96:3a:6e:55: 57:cf:f0:34:41:6a:0b:72:12:e1:1b:a8:68:98:8f:7a:70:2a: 53:0b:50:5b:5f:1b:80:a7:a8:a7:3e:29:c0:cd:be:e6:77:3f: 6e:77:84:be:1b:18:6f:43:e6:f0:33:d2:bc:c0:98:84:87:31: 27:87:1e:b3:bf:d4:19:3b:47:ef:57:71:25:c2:29:cc:09:25: 07:b9:b5:74:a7:f1:77:e0:a3:8c:b2:75:45:a1:11:b5:c9:d0: 33:79:6e:63:b5:b6:f1:08:e5:ce:8a:62:da:e9:d0:d7:3d:4f: f4:f4:cd:8e:94:aa:0d:1b:a8:78:37:ea:7a:a0:e9:cc:52:69: c7:1f:65:c0:7d:b7:92:e6:e5:95:b2:9c:27:23:12:ba:24:41: 51:c7:f0:57:d3:88:ac:a3:2f:21:26:07:1b:7a:4c:8a:dd:30: 03:79:b0:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjUwODIyMTQxODE2WhcNMjUwODI5MTQxODE2WjAYMRYwFAYD VQQDEw02OGE4N2MyOC02ZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05pYNqBC0wmBrv5TXBHcozSo0XSdt5UdLVtEVeKjpzwaqf0mjzqay/j7BfLl R8CtyoQKVmM+E6UhGiVtNNk0GYLHWt5OVrJ4MJuc26YpCpWYCJF3CCbwyb5BTN3s 2VOgTkVJDFuk3acA2tBy5UYurFt5NDCv3W79nTTxQS4lagL/HHfQpXwBAeHaPqa/ w1jSA6rDYkRd/ZsbfadYR9yT7Jy4tkDE6PhMvrpskrFCh7I4YXbTTyksuLsnmnG5 bWkL5JGFidcLrZlUoSG8Lw7AOiM8uzYwpQArqmT1U+zePaCo60VVnCORrwWigC5s MX+pXKuUefWHxChcbisVC5B+DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZq7p0y fpqY061evcEo6OpCcszOMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgEkiA81xf6GISDirqQti6/Y+GJCOUepQTShgyvS4+h5wy7bDVvNYa OUadXIfMN/Vk+5K5GeeGp5iO0REPVtOMQUPdq53sgwP0WGj/JEaNS3sejQ8+x5Y6 blVXz/A0QWoLchLhG6homI96cCpTC1BbXxuAp6inPinAzb7mdz9ud4S+GxhvQ+bw M9K8wJiEhzEnhx6zv9QZO0fvV3ElwinMCSUHubV0p/F34KOMsnVFoRG1ydAzeW5j tbbxCOXOimLa6dDXPU/09M2OlKoNG6h4N+p6oOnMUmnHH2XAfbeS5uWVspwnIxK6 JEFRx/BX04isoy8hJgcbekyK3TADebB6 -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:24 2025 by rpki-client