$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json) Hash identifier: to15pIm13HDj76sexTjBNPSH0cJzyZvYhM40xQokqn4= Subject key identifier: 98:D5:DD:69:C6:C3:86:1F:6E:2C:0B:13:3F:38:3B:C2:0B:18:76:E7 Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft Manifest number: 015B Signing time: Thu 03 Jul 2025 04:14:22 +0000 Manifest this update: Thu 03 Jul 2025 04:14:22 +0000 Manifest next update: Thu 10 Jul 2025 04:14:22 +0000 Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: NFNNgQoEQHj42S69Av0dgzKsJeuLT6GFQWuDEMicCPw=) 2: 3AB9E692C0D211EEB7BBBE4FC4F9AE02.roa (hash: A0mC9X2UnmVuFudZOyuXLKDdp8UzNcimAQJMyA4hcow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Validity Not Before: Jul 3 04:14:22 2025 GMT Not After : Jul 10 04:14:22 2025 GMT Subject: CN=6866039e-216c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:e2:58:ae:9e:88:53:a4:80:84:3d:4d:f4: 8e:b9:33:e5:f8:1b:e6:b0:9f:64:a1:ac:62:81:2e: d1:ea:9b:c6:2a:61:a8:a3:d8:35:79:b2:c3:da:8f: 2c:26:6a:18:6e:d7:d3:1d:fc:70:8b:64:73:8a:e3: 43:e8:86:1f:2b:11:44:fd:90:df:a6:f0:cb:1c:ff: bd:82:f8:e0:33:dd:27:4e:77:f5:aa:7f:88:88:af: d4:90:eb:aa:16:1e:14:54:fe:84:d8:85:4d:29:35: 34:38:57:64:59:63:f0:4a:0a:0c:1c:72:f0:6e:e5: b1:b2:66:ab:1e:95:19:bd:f9:a6:b7:3c:ac:15:c1: 0e:76:90:ed:6b:b6:2d:cd:2c:f4:53:74:ec:47:83: 55:ae:79:78:cf:a5:fd:0d:20:1b:bb:bb:e5:ba:2d: 5a:3f:12:f2:50:cd:7c:08:3f:24:5e:f1:7b:0e:b6: 9e:2c:cd:ee:62:78:dd:17:a0:e6:10:da:8c:a2:e2: e0:a1:aa:a0:eb:9f:3e:fa:f7:bb:80:b2:8a:a1:1c: 8b:88:d8:f2:35:9b:01:60:53:f5:fd:7a:55:0b:58: 4b:95:aa:41:8e:e4:a7:be:f9:45:8b:23:f3:e5:e3: dd:d3:3b:61:b2:19:22:ff:22:4b:60:cf:3b:b9:44: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D5:DD:69:C6:C3:86:1F:6E:2C:0B:13:3F:38:3B:C2:0B:18:76:E7 X509v3 Authority Key Identifier: keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d8:68:fe:3f:14:6d:a0:29:2c:71:45:81:d9:4a:ed:d8:fb: 04:60:c4:32:fd:f3:0f:9e:91:55:54:7e:fb:25:fb:fb:8e:2a: 4e:2e:25:26:86:32:eb:40:1b:36:4c:60:17:e0:b2:0c:4e:8d: c6:3f:96:91:3f:23:61:e1:71:d2:3a:40:41:83:05:2c:da:b8: c3:58:41:3c:20:cf:0e:1e:20:bc:fb:34:c4:8a:a7:3e:b3:24: ce:23:29:f6:17:2c:92:b4:c7:59:0f:07:7a:00:69:30:a1:8c: af:44:4b:61:52:e0:c7:92:62:16:a1:1c:b3:d8:38:a4:13:bc: 5e:8e:80:5d:1d:87:88:00:d4:50:86:d3:e8:43:0d:c3:4e:9d: c5:21:bc:b4:33:d0:69:22:4f:95:d2:ab:eb:d3:2f:fd:48:f0: 9c:85:f6:2c:2b:86:db:b0:69:f5:95:bf:94:e7:5e:1a:74:c2: 1b:85:ce:45:a5:be:80:38:76:46:3c:3f:f2:65:9e:ed:d9:85: 77:b3:48:81:1a:c5:78:99:54:17:b1:ea:aa:6c:fb:f2:06:a1: 57:7e:e5:53:04:bb:d1:35:d8:ba:47:df:9c:b8:07:90:13:56: 9a:17:c9:66:4c:db:51:f2:3d:af:a5:58:3b:ca:c6:04:c6:20: 89:78:d1:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzMjMxMTAvBgNVBAUTKDkzMDQyMzRFNzM5MDQ5MTQzQTg1OTFBMzc0NUE1M0U0 QjkyQUQ4RDgwHhcNMjUwNzAzMDQxNDIyWhcNMjUwNzEwMDQxNDIyWjAYMRYwFAYD VQQDEw02ODY2MDM5ZS0yMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLziWK6eiFOkgIQ9TfSOuTPl+BvmsJ9koaxigS7R6pvGKmGoo9g1ebLD2o8s JmoYbtfTHfxwi2RziuND6IYfKxFE/ZDfpvDLHP+9gvjgM90nTnf1qn+IiK/UkOuq Fh4UVP6E2IVNKTU0OFdkWWPwSgoMHHLwbuWxsmarHpUZvfmmtzysFcEOdpDta7Yt zSz0U3TsR4NVrnl4z6X9DSAbu7vlui1aPxLyUM18CD8kXvF7DraeLM3uYnjdF6Dm ENqMouLgoaqg658++ve7gLKKoRyLiNjyNZsBYFP1/XpVC1hLlapBjuSnvvlFiyPz 5ePd0zthshki/yJLYM87uURL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjV3WnG w4YfbiwLEz84O8ILGHbnMB8GA1UdIwQYMBaAFJMEI05zkEkUOoWRo3RaU+S5KtjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMyMy85RTYxRTQyNDUy NUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNSUTZoWkdqZEZwVDVMa3Ey TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t3UWpUbk9RU1JRNmhaR2pkRnBUNUxrcTJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTMyMy85RTYxRTQyNDUyNUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNS UTZoWkdqZEZwVDVMa3EyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL2Gj+PxRtoCkscUWB2Urt2PsEYMQy/fMPnpFVVH77Jfv7jipOLiUm hjLrQBs2TGAX4LIMTo3GP5aRPyNh4XHSOkBBgwUs2rjDWEE8IM8OHiC8+zTEiqc+ syTOIyn2FyyStMdZDwd6AGkwoYyvREthUuDHkmIWoRyz2DikE7xejoBdHYeIANRQ htPoQw3DTp3FIby0M9BpIk+V0qvr0y/9SPCchfYsK4bbsGn1lb+U514adMIbhc5F pb6AOHZGPD/yZZ7t2YV3s0iBGsV4mVQXseqqbPvyBqFXfuVTBLvRNdi6R9+cuAeQ E1aaF8lmTNtR8j2vpVg7ysYExiCJeNG4 -----END CERTIFICATE-----Generated at Thu Jul 3 15:22:34 2025 by rpki-client