$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: /1Gyxo/IboqOUdwbenqWMM4itlH9aPZ3wuUbsLh+bWc= Subject key identifier: F5:EB:E5:47:8F:55:FA:19:48:55:00:F2:19:B9:C0:55:E7:03:B6:11 Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 34A6 Signing time: Fri 04 Jul 2025 15:04:47 +0000 Manifest this update: Fri 04 Jul 2025 15:04:47 +0000 Manifest next update: Fri 11 Jul 2025 15:04:47 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: qYRHc0ws8puGiCz+bD9dJhsTTfash2d6lT+B9guFk4s=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 8wn1BShCqNm3QYIhzMCvnBkRSH1pV/AljqzDWjCUBxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: Jul 4 15:04:47 2025 GMT Not After : Jul 11 15:04:47 2025 GMT Subject: CN=6867ed8f-7b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:ba:a0:83:15:83:bb:1c:46:dc:17:3a:d6: 6b:13:cd:f3:24:9e:89:c3:d8:14:c1:86:6b:a4:b1: 8f:0b:09:c0:7f:11:e7:12:0b:00:76:4e:c4:c6:de: d5:f0:7e:dc:ad:e6:c4:42:82:5a:31:b3:55:db:69: 68:70:be:34:22:52:30:86:70:95:dc:8a:65:fd:c1: 50:59:f4:ca:c9:36:52:e1:35:33:64:03:e5:4c:39: ff:41:b1:d0:85:67:d2:55:a8:cd:0c:ff:43:0a:ae: 03:5c:2c:8e:f9:93:00:7a:1f:df:e2:3d:08:78:76: 40:59:bf:9d:26:39:4d:75:f0:b8:63:7b:43:80:27: d3:f2:32:74:c8:a7:e6:59:c4:0c:0c:a4:23:d6:99: a7:09:76:a0:4f:16:fd:82:b9:c6:18:0f:93:a5:f1: cf:72:8e:8d:23:03:03:a1:12:c1:cd:d6:40:35:27: 84:f3:b3:a9:1e:0f:15:3c:c1:21:bc:3c:a4:a8:75: a5:31:a8:05:d4:b8:55:9b:2c:6b:4c:d8:37:d9:4b: 68:03:00:8b:b9:66:47:1f:c0:37:c9:60:1f:76:7d: b8:8f:cf:02:d8:2a:48:f0:80:a4:ba:71:e4:ff:d6: 29:b1:0f:ff:1d:54:cf:31:31:15:e8:0e:04:f9:60: 9e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EB:E5:47:8F:55:FA:19:48:55:00:F2:19:B9:C0:55:E7:03:B6:11 X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:6b:97:ea:a6:c1:29:a2:8e:36:61:59:84:3d:29:b1:bb:81: 5e:98:ef:de:49:32:6d:d8:9f:96:bc:4d:14:12:45:d4:8d:91: 88:56:ca:d3:ac:7b:f0:ad:06:1b:8e:b1:22:cb:20:b1:f5:5e: 2d:44:4e:c9:6c:97:df:19:5e:f0:d8:ca:7d:dc:ca:0c:94:b9: cb:96:be:6e:07:46:62:ea:6c:5a:72:59:e2:ab:3a:cf:89:79: ce:ac:f2:e1:f4:63:2c:28:a7:cc:7f:6d:1d:97:a3:f8:2d:dc: a2:30:38:ed:31:35:4e:08:38:89:ba:b1:21:6e:5a:77:51:9e: cb:9b:0a:2f:dc:44:3d:ba:27:f0:4d:6f:a8:e5:2e:e0:fc:7a: 72:d1:3f:5a:22:c4:6f:cf:6d:50:71:72:44:5f:76:37:4b:4b: 39:be:2f:98:33:31:15:43:14:ce:42:ff:cf:d4:c2:9e:33:f3: a9:a1:8d:fc:b3:28:3e:59:4d:2e:bf:c3:cc:f0:41:4e:75:30: 28:73:8f:0f:24:5a:cc:16:76:9e:2e:4b:d2:ce:6f:f4:cf:40: 0e:c8:65:7f:f3:29:c2:6f:1e:8f:e9:7e:4f:c8:27:95:cf:e2: ac:8f:7c:b4:ce:bb:79:10:f2:e9:3e:d2:26:57:5d:98:cd:b0: 29:31:83:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUwNzA0MTUwNDQ3WhcNMjUwNzExMTUwNDQ3WjAYMRYwFAYD VQQDEw02ODY3ZWQ4Zi03YjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9i6oIMVg7scRtwXOtZrE83zJJ6Jw9gUwYZrpLGPCwnAfxHnEgsAdk7Ext7V 8H7crebEQoJaMbNV22locL40IlIwhnCV3Ipl/cFQWfTKyTZS4TUzZAPlTDn/QbHQ hWfSVajNDP9DCq4DXCyO+ZMAeh/f4j0IeHZAWb+dJjlNdfC4Y3tDgCfT8jJ0yKfm WcQMDKQj1pmnCXagTxb9grnGGA+TpfHPco6NIwMDoRLBzdZANSeE87OpHg8VPMEh vDykqHWlMagF1LhVmyxrTNg32UtoAwCLuWZHH8A3yWAfdn24j88C2CpI8ICkunHk /9YpsQ//HVTPMTEV6A4E+WCe4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXr5UeP VfoZSFUA8hm5wFXnA7YRMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4a5fqpsEpoo42YVmEPSmxu4FemO/eSTJt2J+WvE0UEkXUjZGIVsrT rHvwrQYbjrEiyyCx9V4tRE7JbJffGV7w2Mp93MoMlLnLlr5uB0Zi6mxaclniqzrP iXnOrPLh9GMsKKfMf20dl6P4LdyiMDjtMTVOCDiJurEhblp3UZ7Lmwov3EQ9uifw TW+o5S7g/Hpy0T9aIsRvz21QcXJEX3Y3S0s5vi+YMzEVQxTOQv/P1MKeM/OpoY38 syg+WU0uv8PM8EFOdTAoc48PJFrMFnaeLkvSzm/0z0AOyGV/8ynCbx6P6X5PyCeV z+Ksj3y0zrt5EPLpPtImV12YzbApMYMo -----END CERTIFICATE-----Generated at Fri Jul 4 18:42:01 2025 by rpki-client