$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: DpyT+5f+LLI3XZ62EgpPZJOTCrkFU7nStB+M9sziZtc= Subject key identifier: 41:7D:7D:4E:E0:58:0D:DD:37:B1:C6:88:62:75:09:37:34:AE:13:90 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 1083 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 107C Signing time: Fri 22 Aug 2025 17:29:08 +0000 Manifest this update: Fri 22 Aug 2025 17:29:07 +0000 Manifest next update: Fri 29 Aug 2025 17:29:07 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: 3FT0tNuKDD/Mrj9mn1InzEn2LbPr/P5YXg0DCSUWSpw=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: Zx1NZFaobsMkPgZlMNZ8S9A1zmjC7C3D22JCgStrQxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4227 (0x1083) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Aug 22 17:29:07 2025 GMT Not After : Aug 29 17:29:07 2025 GMT Subject: CN=68a8a8e4-a62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:21:43:5d:51:ad:de:a9:5f:f1:e4:36:cc: 5b:d4:a3:e7:c8:95:ee:0f:85:64:91:07:88:5f:51: c9:f1:80:eb:a8:a0:c6:c7:3c:6f:c4:1e:8a:2a:73: 8d:05:ea:25:62:28:f1:20:a0:6d:f8:c2:2e:f8:e9: 11:bf:db:e7:21:71:3f:3b:65:7f:82:32:57:74:eb: 18:fc:3e:71:86:3f:e8:db:44:de:ed:57:1e:91:ba: 6d:9e:6c:f7:52:63:65:56:6f:ed:24:e8:23:de:c7: 8f:bf:47:b9:59:c3:2d:24:ba:f2:44:d4:ee:04:9f: 94:6a:16:d0:9c:ec:2b:e0:96:67:dd:e1:8b:5c:6f: 81:31:25:8a:5a:8a:53:b5:01:fd:34:27:60:5b:0b: 3e:28:4d:29:c4:94:81:00:69:64:d9:cc:d2:58:30: 89:4f:92:cf:c4:2f:05:07:82:b8:b9:82:c0:56:3b: d9:06:de:fe:ce:e7:27:b7:c8:ef:72:1f:88:85:14: 2c:f9:47:48:5d:1b:3e:7d:34:d7:8c:d9:98:7e:7a: 0e:25:ee:51:b3:75:ad:a8:7e:64:00:4e:d2:6b:f5: 91:74:eb:e2:02:ed:a8:ef:d6:d9:74:4f:be:3e:66: b1:c7:51:8c:29:8d:d1:05:e1:66:31:8b:aa:6a:9f: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:7D:4E:E0:58:0D:DD:37:B1:C6:88:62:75:09:37:34:AE:13:90 X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:55:ec:18:86:98:a2:8e:00:79:ad:7d:e1:32:8c:f0:d8:39: b5:c7:cf:05:b9:45:99:f7:57:27:22:5b:9a:bd:c6:57:a8:dd: c5:73:79:8d:b1:0d:c1:c8:23:b7:90:b8:07:8e:01:a6:44:94: e0:38:b2:43:43:59:46:d9:ca:b1:04:a8:9b:65:26:1c:f4:99: 02:22:91:f1:2a:5d:57:e0:a8:e5:7c:d5:54:5b:26:03:ea:fc: 3f:92:ce:42:65:1f:24:24:5b:b0:2b:57:56:dc:b5:55:b6:47: e7:1d:b4:73:50:c9:5b:20:f9:8f:92:e7:ea:c9:ef:47:a4:14: 50:0e:7b:a3:2a:4b:d8:85:ed:47:ec:a9:58:94:59:67:3b:7e: 1c:21:ca:e3:f7:b4:75:e5:a7:93:d2:d5:3c:ae:f9:6a:0f:62: 4a:40:57:eb:c7:fe:75:9b:65:a5:7d:3d:66:43:c2:9f:e1:0d: a7:4a:97:42:44:b2:22:23:7b:a6:36:43:f5:99:0e:6e:9a:1b: 77:27:22:c1:26:dd:3c:a1:cf:61:2f:1b:d4:38:a9:6f:3e:82: 10:dc:b4:28:75:40:97:34:48:59:a5:b7:04:cd:d1:b6:21:2f: 30:27:04:e6:8d:3f:99:aa:fc:e4:7f:a8:57:2c:d6:a2:ff:0e: fc:fe:c1:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjUwODIyMTcyOTA3WhcNMjUwODI5MTcyOTA3WjAYMRYwFAYD VQQDEw02OGE4YThlNC1hNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjUhQ11Rrd6pX/HkNsxb1KPnyJXuD4VkkQeIX1HJ8YDrqKDGxzxvxB6KKnON BeolYijxIKBt+MIu+OkRv9vnIXE/O2V/gjJXdOsY/D5xhj/o20Te7Vcekbptnmz3 UmNlVm/tJOgj3sePv0e5WcMtJLryRNTuBJ+UahbQnOwr4JZn3eGLXG+BMSWKWopT tQH9NCdgWws+KE0pxJSBAGlk2czSWDCJT5LPxC8FB4K4uYLAVjvZBt7+zucnt8jv ch+IhRQs+UdIXRs+fTTXjNmYfnoOJe5Rs3WtqH5kAE7Sa/WRdOviAu2o79bZdE++ Pmaxx1GMKY3RBeFmMYuqap+BvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF9fU7g WA3dN7HGiGJ1CTc0rhOQMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASVewYhpiijgB5rX3hMozw2Dm1x88FuUWZ91cnIluavcZXqN3Fc3mN sQ3ByCO3kLgHjgGmRJTgOLJDQ1lG2cqxBKibZSYc9JkCIpHxKl1X4KjlfNVUWyYD 6vw/ks5CZR8kJFuwK1dW3LVVtkfnHbRzUMlbIPmPkufqye9HpBRQDnujKkvYhe1H 7KlYlFlnO34cIcrj97R15aeT0tU8rvlqD2JKQFfrx/51m2WlfT1mQ8Kf4Q2nSpdC RLIiI3umNkP1mQ5umht3JyLBJt08oc9hLxvUOKlvPoIQ3LQodUCXNEhZpbcEzdG2 IS8wJwTmjT+Zqvzkf6hXLNai/w78/sG5 -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:09 2025 by rpki-client