$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json) Hash identifier: XVcIsP0bos5YNQR0IXTJm6KdlQaGmhC3gQKGjdncQOw= Subject key identifier: 82:84:30:0E:76:D0:53:5E:E5:BB:B7:73:F9:E8:1C:36:FE:F8:DB:14 Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft Manifest number: 0827 Signing time: Wed 02 Jul 2025 21:03:37 +0000 Manifest this update: Wed 02 Jul 2025 21:03:37 +0000 Manifest next update: Wed 09 Jul 2025 21:03:37 +0000 Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: P9VdwabjDh4z94AQ5nvV+IMBmUsHPNPqN0fR/chEhW4=) 2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Validity Not Before: Jul 2 21:03:37 2025 GMT Not After : Jul 9 21:03:37 2025 GMT Subject: CN=68659ea9-0314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a4:5e:ff:0d:9a:af:2e:1f:ad:a0:00:a1:ae: 7e:45:2d:02:16:b8:a1:5f:3d:0c:86:65:c5:9f:d1: 41:7c:c9:2c:72:48:d9:0b:dd:7c:12:6f:5b:4a:eb: b2:4a:5e:d8:b9:54:ac:1b:7e:fa:a4:9f:59:f3:75: 11:79:a7:54:cf:05:6a:e0:55:8e:3a:66:44:5f:29: bc:0a:e7:e0:28:d4:82:84:59:75:29:7e:78:a0:52: 9d:c5:a9:6e:0a:84:7d:06:90:cc:e6:d8:a6:2d:82: 87:d5:8e:af:db:96:b0:f2:86:c7:4b:83:5d:1e:6e: 76:c4:fa:7e:4d:df:e2:bb:ba:5d:20:9d:55:43:0c: 80:2e:28:f2:28:1b:83:1f:e1:bc:a1:f5:32:07:ad: cc:e7:37:3c:22:38:3b:48:23:a9:3e:83:24:d1:d0: b7:64:c3:39:4d:05:da:c0:40:ac:bc:3f:57:7c:78: 9a:6d:f1:e8:ae:46:74:5d:16:2d:84:6b:03:2b:ab: c2:76:8d:c6:08:5a:ee:8c:f1:64:15:7f:b0:23:f3: 2c:03:fe:d7:5f:c0:28:d8:c7:97:85:d9:60:90:d2: e2:c0:e9:95:64:fe:11:fb:84:0c:ec:b5:39:06:1d: 18:be:71:33:c7:03:ae:fe:5d:27:65:44:be:2c:d1: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:84:30:0E:76:D0:53:5E:E5:BB:B7:73:F9:E8:1C:36:FE:F8:DB:14 X509v3 Authority Key Identifier: keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bd:1f:bd:18:cf:91:20:d3:63:c9:a7:a7:c9:59:e1:4d:7b: ed:1b:b5:29:90:4b:73:6a:8e:cc:d1:1d:56:9e:78:55:84:33: 9e:64:75:2c:c8:06:ce:20:e9:0b:05:cb:35:08:a0:ae:d1:79: 2b:30:49:12:d2:da:f8:35:47:1a:78:01:c5:e5:43:51:35:d7: 71:68:3d:c8:c3:8b:4e:2e:f9:86:c4:f3:ca:7e:d1:f7:6d:01: 8d:f0:cd:22:a8:4f:ff:98:9e:ba:7c:dc:4f:c3:dd:95:e6:66: 68:e7:21:c9:09:e5:d1:f5:cb:27:e1:f0:43:21:78:58:78:2a: 0d:97:2a:78:a5:cf:3b:cb:b4:cc:86:16:ea:51:ef:ad:cf:f8: 9e:d0:0f:65:d8:c8:7e:3c:64:c3:29:1c:60:f8:e5:e1:12:c6: 7b:a5:6b:0e:03:7e:ea:23:57:d0:9e:77:1f:1c:e4:77:ce:28: a2:76:bf:fc:60:11:8e:86:7a:57:28:ba:78:46:59:80:56:18: f4:e8:a4:a9:6c:14:6f:af:64:26:ef:77:07:86:0f:8b:6d:9d: 48:22:de:1f:5e:99:ff:af:c6:dd:d5:10:12:2f:03:02:3c:45: f0:72:dc:53:8b:bd:04:2a:a0:e3:a8:a2:27:9d:6b:18:12:5d: a6:20:22:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3 RDcxNjQyNEIwHhcNMjUwNzAyMjEwMzM3WhcNMjUwNzA5MjEwMzM3WjAYMRYwFAYD VQQDEw02ODY1OWVhOS0wMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KRe/w2ary4fraAAoa5+RS0CFrihXz0MhmXFn9FBfMksckjZC918Em9bSuuy Sl7YuVSsG376pJ9Z83UReadUzwVq4FWOOmZEXym8CufgKNSChFl1KX54oFKdxalu CoR9BpDM5timLYKH1Y6v25aw8obHS4NdHm52xPp+Td/iu7pdIJ1VQwyALijyKBuD H+G8ofUyB63M5zc8Ijg7SCOpPoMk0dC3ZMM5TQXawECsvD9XfHiabfHorkZ0XRYt hGsDK6vCdo3GCFrujPFkFX+wI/MsA/7XX8Ao2MeXhdlgkNLiwOmVZP4R+4QM7LU5 Bh0YvnEzxwOu/l0nZUS+LNHTBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKEMA52 0FNe5bu3c/noHDb++NsUMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3 ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3 V0NtSl9NdHlfSko5Y1dRa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPvR+9GM+RINNjyaenyVnhTXvtG7UpkEtzao7M0R1WnnhVhDOeZHUs yAbOIOkLBcs1CKCu0XkrMEkS0tr4NUcaeAHF5UNRNddxaD3Iw4tOLvmGxPPKftH3 bQGN8M0iqE//mJ66fNxPw92V5mZo5yHJCeXR9csn4fBDIXhYeCoNlyp4pc87y7TM hhbqUe+tz/ie0A9l2Mh+PGTDKRxg+OXhEsZ7pWsOA37qI1fQnncfHOR3ziiidr/8 YBGOhnpXKLp4RlmAVhj06KSpbBRvr2Qm73cHhg+LbZ1IIt4fXpn/r8bd1RASLwMC PEXwctxTi70EKqDjqKInnWsYEl2mICL4 -----END CERTIFICATE-----Generated at Fri Jul 4 01:13:20 2025 by rpki-client