$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft File: kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json) Hash identifier: a56Z8X8fl2KCWWn3kWAEw/Hh0ZeM1BR7/CWGMcy3epY= Subject key identifier: 4E:66:B7:6C:B1:56:3A:A9:90:6E:19:9E:AA:9D:52:62:75:11:B1:70 Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft Manifest number: 0B61 Signing time: Wed 02 Jul 2025 19:19:22 +0000 Manifest this update: Wed 02 Jul 2025 19:19:22 +0000 Manifest next update: Wed 09 Jul 2025 19:19:22 +0000 Files and hashes: 1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: 5efq38ebtuz8nZh45+ng1JskdpQqCgwGLZw92n1VlqE=) 2: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: oSpkSCsA04Q17DFF5eVNueRlK2Db/VTCz7pIw4eHGUE=) 3: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: akcNDk8y+ODsfpu3oKFQYxPcSwPpaVaD8Gu1z5j+dkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: Jul 2 19:19:22 2025 GMT Not After : Jul 9 19:19:22 2025 GMT Subject: CN=6865863a-95db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:0e:63:52:70:3f:c2:5c:15:e4:3c:12:a4: ff:2a:13:41:01:6b:48:e2:63:ac:a4:63:0f:b5:94: c5:98:8d:6f:93:a2:f6:75:92:b7:fa:6e:b5:7a:4a: a4:00:20:8e:37:0a:b5:80:c3:71:cb:fd:d4:3e:2a: 08:91:44:b0:67:46:f2:ed:a1:57:85:92:cc:89:7a: 7d:1a:68:fd:b4:de:6a:48:f7:f5:d8:d3:ee:ef:2b: 21:d3:6d:f9:c3:ba:8b:88:c2:fc:3a:5e:95:e4:ec: 99:99:b0:bd:69:2e:90:a3:a8:03:71:08:b5:f7:e5: bb:98:79:ef:dd:01:27:bf:ec:74:3c:4c:2c:ec:95: 4b:e5:3c:21:41:c6:9b:97:ae:51:f2:c4:73:fe:d9: 32:c7:74:f3:6c:34:1d:56:ee:3a:8d:47:0e:cb:f3: f4:e6:df:0e:0a:9e:d7:b8:42:30:bb:d3:85:b9:5c: 2d:26:af:13:bd:62:0c:4b:b0:44:7b:03:b4:9a:70: 8e:76:f6:88:d6:7a:84:9f:0c:18:76:c2:c0:6f:e8: 6f:af:15:e4:86:ce:b1:d1:18:89:c2:01:12:19:fb: 99:b6:a6:22:7e:3f:55:30:0c:67:e8:eb:dc:3e:83: 5e:d9:67:ed:88:12:ad:f6:59:0d:5c:69:5b:97:18: 36:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:66:B7:6C:B1:56:3A:A9:90:6E:19:9E:AA:9D:52:62:75:11:B1:70 X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:14:22:b2:a7:82:74:ee:f7:a0:27:f6:c5:13:52:86:14:59: 4b:c0:6f:69:6d:1d:e5:98:25:58:4b:d8:3e:44:bc:5d:9f:28: 44:db:40:3c:79:5f:1c:12:63:30:45:00:ab:85:83:15:2b:73: 4c:b3:3b:c6:fc:f9:af:a7:5a:c5:a4:67:29:c3:31:c5:c6:22: b5:8f:88:60:79:c2:09:6f:e0:fe:09:ef:57:ff:a7:dd:cf:bd: 96:dc:51:f3:f8:f2:55:40:04:3c:ff:1f:4b:42:96:65:35:41: 5c:b4:23:96:bd:64:60:94:b1:ba:36:ae:58:64:94:c9:08:f3: bf:95:eb:46:72:ea:92:16:bb:9f:de:f9:56:08:a6:85:6d:4a: 27:4f:89:ff:fd:87:6f:47:f0:78:aa:5a:a6:2f:6a:1f:ce:6f: 1d:62:65:9b:ba:41:5f:68:03:db:e5:5d:90:5a:6e:58:0b:86: f0:d6:7d:38:e1:ce:4e:09:5c:c8:8e:78:c0:db:38:4d:28:a2: 90:07:46:84:4a:65:0a:71:2c:65:62:d0:88:9f:c8:0c:f8:61: f9:1f:55:85:cf:8d:a7:42:56:4e:58:3a:71:f2:33:1b:65:86: 4b:00:57:2e:7d:69:a6:62:a5:a6:48:d4:b4:d6:0d:a6:75:b1: eb:fb:b9:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjUwNzAyMTkxOTIyWhcNMjUwNzA5MTkxOTIyWjAYMRYwFAYD VQQDEw02ODY1ODYzYS05NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz64OY1JwP8JcFeQ8EqT/KhNBAWtI4mOspGMPtZTFmI1vk6L2dZK3+m61ekqk ACCONwq1gMNxy/3UPioIkUSwZ0by7aFXhZLMiXp9Gmj9tN5qSPf12NPu7ysh0235 w7qLiML8Ol6V5OyZmbC9aS6Qo6gDcQi19+W7mHnv3QEnv+x0PEws7JVL5TwhQcab l65R8sRz/tkyx3TzbDQdVu46jUcOy/P05t8OCp7XuEIwu9OFuVwtJq8TvWIMS7BE ewO0mnCOdvaI1nqEnwwYdsLAb+hvrxXkhs6x0RiJwgESGfuZtqYifj9VMAxn6Ovc PoNe2WftiBKt9lkNXGlblxg2SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5mt2yx VjqpkG4ZnqqdUmJ1EbFwMB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc4Ni9CMEQ3MjNFRTM1REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFS X0ZOUUlkaGZXdWVfdXRwWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+FCKyp4J07vegJ/bFE1KGFFlLwG9pbR3lmCVYS9g+RLxdnyhE20A8 eV8cEmMwRQCrhYMVK3NMszvG/Pmvp1rFpGcpwzHFxiK1j4hgecIJb+D+Ce9X/6fd z72W3FHz+PJVQAQ8/x9LQpZlNUFctCOWvWRglLG6Nq5YZJTJCPO/letGcuqSFruf 3vlWCKaFbUonT4n//YdvR/B4qlqmL2ofzm8dYmWbukFfaAPb5V2QWm5YC4bw1n04 4c5OCVzIjnjA2zhNKKKQB0aESmUKcSxlYtCIn8gM+GH5H1WFz42nQlZOWDpx8jMb ZYZLAFcufWmmYqWmSNS01g2mdbHr+7kq -----END CERTIFICATE-----Generated at Fri Jul 4 14:18:12 2025 by rpki-client