$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json) Hash identifier: 4aNLltolMvThluSf6OHzHW7Sv8v8BCH/OFZzC35klC0= Subject key identifier: BC:80:5F:5A:DF:77:FD:E0:97:26:28:F7:A7:C6:E1:4C:A9:08:54:1D Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft Manifest number: 010C Signing time: Sat 23 Aug 2025 05:06:13 +0000 Manifest this update: Sat 23 Aug 2025 05:06:12 +0000 Manifest next update: Sat 30 Aug 2025 05:06:12 +0000 Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: xrdtaaEXmtPcBgyk9TvjHF73kdWWroK6QW2/s6wwlfg=) 2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Aug 23 05:06:12 2025 GMT Not After : Aug 30 05:06:12 2025 GMT Subject: CN=68a94c44-cee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:2e:3c:c4:3c:62:b4:a5:6a:a9:b4:de:07: db:a3:6a:2f:e9:4f:9e:2d:f7:22:bc:32:57:a4:93: eb:73:86:1d:82:9b:6d:ec:13:f1:6c:67:d1:f6:4c: 01:3f:97:73:4c:94:b1:67:fd:b1:a2:39:76:7e:55: 21:82:a3:c6:e9:ce:62:ec:24:29:89:cd:64:97:80: b4:ca:6a:4e:60:23:c1:d0:f1:fc:2d:b0:d1:59:0a: 50:11:62:d5:25:f7:a3:97:8c:05:8a:98:a1:a0:69: 1d:a7:bc:d8:14:97:d3:f8:cb:b9:07:80:45:ea:ae: ed:d6:77:96:65:5f:e6:b4:b1:08:4c:1e:10:97:81: 14:86:e7:16:16:32:30:c8:5d:cd:03:14:56:1b:7d: c3:2a:4a:ff:7f:0f:31:57:e4:0c:19:87:a1:27:96: e4:9d:30:ac:e6:4b:11:8b:fe:2e:4b:f5:c1:89:bb: e8:92:c6:42:e5:96:19:dd:10:8f:17:45:ea:56:f8: bd:e8:ef:c5:c1:ad:cb:f3:31:f9:08:23:0d:8a:78: bb:e7:45:71:b1:e1:0e:69:4f:5f:ba:aa:7d:6f:a5: 3e:16:77:20:a2:be:df:78:7e:1c:bd:41:b1:7b:91: 5d:d2:63:c8:c9:79:1b:c3:b4:87:98:64:b9:a9:fc: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:80:5F:5A:DF:77:FD:E0:97:26:28:F7:A7:C6:E1:4C:A9:08:54:1D X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:1f:6f:31:5d:83:2f:de:79:e6:e7:75:e3:64:3c:92:d3:bc: e5:ba:a0:55:d2:bf:e7:fb:c6:01:fc:c8:2e:03:b1:88:e6:26: 66:ae:9a:43:c3:fb:7b:1f:f4:03:e4:75:b2:df:93:e7:ad:0c: fb:65:ee:2c:a3:e8:9a:61:58:cb:34:3a:3b:48:4d:a1:97:e5: 94:4b:89:dc:8c:8a:22:a6:c5:a3:4f:e3:5a:e2:28:00:9e:d3: ff:30:b5:49:20:78:bc:79:22:a1:12:f4:97:8e:af:ef:2c:53: d4:46:43:a6:47:dc:ce:f4:39:eb:cf:ee:a6:c6:c3:7c:50:43: ea:d9:b1:52:77:5f:2e:65:f6:02:b5:ba:d1:21:23:9e:76:3f: 7e:eb:0a:fc:ee:71:44:ff:64:68:40:b9:c6:f6:dd:a1:15:19: 2d:08:c6:9e:46:8e:c0:b5:36:db:9f:e0:4d:ba:da:d0:83:81: 44:ab:ef:7b:7f:3e:a3:45:a9:82:8e:c3:13:13:6c:bf:2a:03: 0e:66:5b:56:ad:e0:57:79:06:e8:cf:14:da:9c:c7:57:28:5a: 0a:4b:cf:f6:2d:35:1c:52:f0:37:50:d5:85:50:83:90:1c:cb: c5:9f:72:4d:24:cd:88:33:cd:76:0f:af:5a:c1:0d:36:25:91: 96:8f:d5:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjUwODIzMDUwNjEyWhcNMjUwODMwMDUwNjEyWjAYMRYwFAYD VQQDEw02OGE5NGM0NC1jZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrEuPMQ8YrSlaqm03gfbo2ov6U+eLfcivDJXpJPrc4Ydgptt7BPxbGfR9kwB P5dzTJSxZ/2xojl2flUhgqPG6c5i7CQpic1kl4C0ympOYCPB0PH8LbDRWQpQEWLV Jfejl4wFipihoGkdp7zYFJfT+Mu5B4BF6q7t1neWZV/mtLEITB4Ql4EUhucWFjIw yF3NAxRWG33DKkr/fw8xV+QMGYehJ5bknTCs5ksRi/4uS/XBibvoksZC5ZYZ3RCP F0XqVvi96O/Fwa3L8zH5CCMNini750VxseEOaU9fuqp9b6U+Fncgor7feH4cvUGx e5Fd0mPIyXkbw7SHmGS5qfyhBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyAX1rf d/3glyYo96fG4UypCFQdMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z LTVaMFVmN3RyMG54U09Ham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFH28xXYMv3nnm53XjZDyS07zluqBV0r/n+8YB/MguA7GI5iZmrppD w/t7H/QD5HWy35PnrQz7Ze4so+iaYVjLNDo7SE2hl+WUS4ncjIoipsWjT+Na4igA ntP/MLVJIHi8eSKhEvSXjq/vLFPURkOmR9zO9Dnrz+6mxsN8UEPq2bFSd18uZfYC tbrRISOedj9+6wr87nFE/2RoQLnG9t2hFRktCMaeRo7AtTbbn+BNutrQg4FEq+97 fz6jRamCjsMTE2y/KgMOZltWreBXeQbozxTanMdXKFoKS8/2LTUcUvA3UNWFUIOQ HMvFn3JNJM2IM812D69awQ02JZGWj9X1 -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:48 2025 by rpki-client