$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json) Hash identifier: 8xfdmO5Y/PkyHkR4v0DZo1r0bdsrEoovhxQGrbuyDiU= Subject key identifier: E2:15:FD:72:08:FE:2B:9F:EC:FE:02:AA:C3:62:B4:DD:65:18:F3:08 Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft Manifest number: 55 Signing time: Tue 01 Jul 2025 07:58:41 +0000 Manifest this update: Tue 01 Jul 2025 07:58:41 +0000 Manifest next update: Tue 08 Jul 2025 07:58:41 +0000 Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: k3zKULu59/jYugy4hFTqgmVtwf//yiMu4D4+v3wnJME=) 2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Validity Not Before: Jul 1 07:58:41 2025 GMT Not After : Jul 8 07:58:41 2025 GMT Subject: CN=68639531-43df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:4d:45:f4:e1:8b:fb:e7:bb:0a:00:87:e9: f1:80:d9:e0:b9:4a:37:8d:fd:21:d0:12:f9:a6:80: 09:94:fe:89:df:92:e9:f5:00:8a:c4:09:b7:5d:ba: 2d:a2:ea:4c:2e:1a:7d:56:bb:02:5d:97:38:1c:14: 58:0c:4b:2a:af:f1:ee:9d:09:01:29:20:50:e7:65: 30:82:7b:3b:ee:8f:75:af:ec:3c:15:65:04:99:5c: e0:5c:70:c2:09:61:e0:09:57:b5:66:a1:ae:0e:db: 5e:b4:2d:64:c0:9c:a0:05:37:fc:74:47:90:49:a5: e4:ac:9e:ad:39:dd:38:cc:ee:50:70:d3:c1:52:d6: df:88:3e:03:6b:75:57:71:b6:98:73:70:f4:91:35: 37:16:0b:99:3f:b1:a6:cc:01:d3:17:62:6b:9e:5b: 52:33:05:3f:6f:77:56:e2:c7:a9:87:89:4d:20:96: 47:01:70:f7:a0:44:c9:33:27:12:eb:f4:e0:48:ab: 2e:c4:a1:71:2e:2e:41:8e:6a:c2:bf:e8:07:bb:7b: e2:1f:5d:ef:98:d6:3f:c9:fa:65:5f:ba:8c:46:94: 63:85:85:d0:04:8b:70:90:0e:dd:df:b7:42:51:bb: e8:99:a0:33:36:cc:f5:24:66:1e:83:13:6c:b6:1c: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:15:FD:72:08:FE:2B:9F:EC:FE:02:AA:C3:62:B4:DD:65:18:F3:08 X509v3 Authority Key Identifier: keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:8e:5a:bd:4c:30:64:5b:2f:71:23:9a:c0:ec:97:44:e7:ad: a5:e0:98:41:f0:45:87:0b:93:f1:ae:93:7c:89:24:5f:e4:e0: 30:75:60:ff:5f:ff:4d:c5:40:48:5e:da:40:2e:99:93:b6:2c: 2d:17:62:1a:dd:f4:25:31:b4:df:4b:90:e4:c3:be:4b:f0:a2: 29:ef:5c:0f:db:77:4d:3a:dc:6f:da:b5:aa:92:52:06:f3:25: a7:48:39:2a:54:c3:12:42:76:d4:6b:d9:7a:2e:df:01:50:ca: 9d:d9:65:34:6d:6d:2c:be:36:10:31:04:3f:f5:ea:c7:f8:46: f0:8d:98:92:e2:3f:5a:6e:d5:51:53:fd:f4:af:ea:18:3a:9b: 83:cb:32:a5:d8:fc:91:ce:7f:29:54:af:19:e7:5a:94:0f:4b: 79:d1:2a:da:10:77:90:f8:56:44:5f:92:2f:14:d3:7a:17:6c: fb:33:0f:10:dc:6b:85:5e:88:c1:ce:20:2b:5c:aa:59:63:d7: 07:d1:2e:cb:94:89:05:4a:fa:29:2e:c5:7b:a8:91:1b:2f:ad: db:04:d3:c4:41:c0:fc:4b:15:3c:c3:f9:e7:f0:bb:da:69:2f: e2:4f:24:4a:c5:39:e3:49:11:fd:56:9e:8d:ef:29:83:9a:5b: a4:25:a5:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoOTI0ODY2QjQwQzMwNDQyRDY5NkYyNDc3MDE1NDc1QzVG MDcwMkFDODAeFw0yNTA3MDEwNzU4NDFaFw0yNTA3MDgwNzU4NDFaMBgxFjAUBgNV BAMTDTY4NjM5NTMxLTQzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6tk1F9OGL++e7CgCH6fGA2eC5SjeN/SHQEvmmgAmU/onfkun1AIrECbddui2i 6kwuGn1WuwJdlzgcFFgMSyqv8e6dCQEpIFDnZTCCezvuj3Wv7DwVZQSZXOBccMIJ YeAJV7Vmoa4O2160LWTAnKAFN/x0R5BJpeSsnq053TjM7lBw08FS1t+IPgNrdVdx tphzcPSRNTcWC5k/sabMAdMXYmueW1IzBT9vd1bix6mHiU0glkcBcPegRMkzJxLr 9OBIqy7EoXEuLkGOasK/6Ae7e+IfXe+Y1j/J+mVfuoxGlGOFhdAEi3CQDt3ft0JR u+iZoDM2zPUkZh6DE2y2HGTBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4hX9cgj+ K5/s/gKqw2K03WUY8wgwHwYDVR0jBBgwFoAUkkhmtAwwRC1pbyR3AVR1xfBwKsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1Lzk5Mjc3ODQ2RDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tobXRBd3dSQzFwYnlSM0FWUjF4ZkJ3S3NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1Lzk5Mjc3ODQ2RDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMx cGJ5UjNBVlIxeGZCd0tzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAeOWr1MMGRbL3EjmsDsl0TnraXgmEHwRYcLk/Guk3yJJF/k4DB1YP9f /03FQEhe2kAumZO2LC0XYhrd9CUxtN9LkOTDvkvwoinvXA/bd0063G/ataqSUgbz JadIOSpUwxJCdtRr2Xou3wFQyp3ZZTRtbSy+NhAxBD/16sf4RvCNmJLiP1pu1VFT /fSv6hg6m4PLMqXY/JHOfylUrxnnWpQPS3nRKtoQd5D4VkRfki8U03oXbPszDxDc a4VeiMHOICtcqllj1wfRLsuUiQVK+ikuxXuokRsvrdsE08RBwPxLFTzD+efwu9pp L+JPJErFOeNJEf1Wno3vKYOaW6QlpSk= -----END CERTIFICATE-----Generated at Wed Jul 2 23:31:06 2025 by rpki-client