$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: emADjF6QqIajLEuXNWblnT90yjUvTr5Hsx1rzn7da0o= Subject key identifier: 98:E6:45:5C:5C:C8:50:C6:C6:D7:D6:7C:B0:44:6C:4E:7E:EC:CE:A0 Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 1167 Signing time: Wed 02 Jul 2025 19:49:38 +0000 Manifest this update: Wed 02 Jul 2025 19:49:37 +0000 Manifest next update: Wed 09 Jul 2025 19:49:37 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: 9UvYcz9N8zl+aDLFJDD7NojTHusRx8EDynoL91gewCM=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: kG/awft1YnlMUcGo/TLCAbm8s2p3POH5kub747SVbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: Jul 2 19:49:37 2025 GMT Not After : Jul 9 19:49:37 2025 GMT Subject: CN=68658d51-75da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:45:24:8d:28:44:9c:6a:70:e6:7c:2b:94: 6c:e7:a6:69:c3:18:39:b6:a2:e1:55:ee:b7:05:27: 03:51:86:a2:16:fe:3c:83:ed:63:99:44:e1:32:13: d4:ec:35:93:8c:15:39:78:c1:b1:3e:c4:ab:19:ea: df:59:5e:22:82:41:84:1a:e5:26:b9:b9:31:fc:f8: b8:d5:df:e0:11:2a:b9:84:18:69:d1:ac:6a:74:35: e7:f7:2e:f9:64:89:42:b4:f0:2b:6c:95:93:65:a9: c7:77:ae:4c:96:55:37:fa:68:89:94:18:2d:6e:54: 06:f7:37:da:b7:da:77:ad:37:5f:56:80:75:13:76: 68:f2:c7:22:2a:95:ff:be:45:f3:ed:b2:28:c3:0d: d6:1a:0c:ed:24:29:0c:6b:c2:d3:fb:3d:d6:75:50: 64:fd:ef:ea:9a:24:59:61:ff:93:16:c4:00:0d:a1: e7:af:62:01:97:4e:e1:d5:e9:e7:3f:f7:82:a6:49: 50:ec:eb:25:a6:5a:46:28:32:fb:2c:63:ba:61:56: 6c:d8:05:e3:e4:67:fe:97:99:62:8f:f1:88:e2:36: 8a:92:5a:eb:d2:0e:2d:fd:45:60:61:51:e4:39:fa: f1:e9:62:50:de:2b:61:93:92:28:61:55:cd:aa:ff: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E6:45:5C:5C:C8:50:C6:C6:D7:D6:7C:B0:44:6C:4E:7E:EC:CE:A0 X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:31:0e:79:4b:d0:32:60:ce:14:0d:48:ce:fe:c7:48:03:c1: 81:11:2f:45:ff:e7:59:7c:5a:38:15:d1:6c:21:bb:9d:9e:ae: f4:de:d2:f1:39:1f:ef:68:ef:04:c6:73:df:95:26:ed:0c:0b: 88:a2:18:2e:a2:39:59:e4:56:9a:63:9a:18:5f:00:99:e7:96: 56:16:79:9c:24:7e:9a:dd:f3:f1:cd:fd:51:89:8c:75:e8:ad: bd:6b:b0:b2:ff:cf:5f:a2:c3:b7:d6:e8:c7:b0:9a:dc:de:a7: ff:10:cb:3c:1e:94:b7:48:96:86:60:fb:25:d3:a4:25:ed:d8: a2:00:df:a9:5e:b1:4c:1b:34:2c:96:17:0a:d0:ec:9f:db:3a: 85:d6:e9:49:bf:d3:82:14:a2:aa:99:14:0a:57:18:7a:ce:2e: 81:9b:94:0c:eb:cf:b9:24:5d:dd:76:75:3f:56:5a:de:ac:09: ea:3f:bd:5d:7c:eb:d3:b1:e4:55:ec:35:29:46:4d:67:4d:46: b9:1e:37:28:66:2c:1f:58:bf:47:ed:74:e1:7f:21:6e:09:a8: 76:77:81:24:8f:ec:1a:72:07:75:19:b7:3c:b9:aa:fa:83:7f: 84:1f:b1:4c:b8:e0:4b:8d:10:46:37:83:68:50:3a:f1:6c:0a: ea:ce:2b:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjUwNzAyMTk0OTM3WhcNMjUwNzA5MTk0OTM3WjAYMRYwFAYD VQQDEw02ODY1OGQ1MS03NWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwI5FJI0oRJxqcOZ8K5Rs56Zpwxg5tqLhVe63BScDUYaiFv48g+1jmUThMhPU 7DWTjBU5eMGxPsSrGerfWV4igkGEGuUmubkx/Pi41d/gESq5hBhp0axqdDXn9y75 ZIlCtPArbJWTZanHd65MllU3+miJlBgtblQG9zfat9p3rTdfVoB1E3Zo8sciKpX/ vkXz7bIoww3WGgztJCkMa8LT+z3WdVBk/e/qmiRZYf+TFsQADaHnr2IBl07h1enn P/eCpklQ7OslplpGKDL7LGO6YVZs2AXj5Gf+l5lij/GI4jaKklrr0g4t/UVgYVHk Ofrx6WJQ3ithk5IoYVXNqv+XSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjmRVxc yFDGxtfWfLBEbE5+7M6gMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByMQ55S9AyYM4UDUjO/sdIA8GBES9F/+dZfFo4FdFsIbudnq703tLx OR/vaO8ExnPflSbtDAuIohguojlZ5FaaY5oYXwCZ55ZWFnmcJH6a3fPxzf1RiYx1 6K29a7Cy/89fosO31ujHsJrc3qf/EMs8HpS3SJaGYPsl06Ql7diiAN+pXrFMGzQs lhcK0Oyf2zqF1ulJv9OCFKKqmRQKVxh6zi6Bm5QM68+5JF3ddnU/VlrerAnqP71d fOvTseRV7DUpRk1nTUa5HjcoZiwfWL9H7XThfyFuCah2d4Ekj+wacgd1Gbc8uar6 g3+EH7FMuOBLjRBGN4NoUDrxbArqzivV -----END CERTIFICATE-----Generated at Thu Jul 3 08:20:20 2025 by rpki-client