$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: ObPeLoWsANwEUVz0dv9pKpKSP3ORHf0hZBkszFI0qTo= Subject key identifier: 65:84:09:2B:82:30:02:0C:AD:8D:E5:23:F8:57:7A:6D:43:64:60:A8 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 06E4 Signing time: Mon 30 Jun 2025 22:18:42 +0000 Manifest this update: Mon 30 Jun 2025 22:18:42 +0000 Manifest next update: Mon 07 Jul 2025 22:18:42 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: En8YfmRDhcQ6VzoBlb6SKdIXIfXDEMo64eXfXo63VqY=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Jun 30 22:18:42 2025 GMT Not After : Jul 7 22:18:42 2025 GMT Subject: CN=68630d42-edad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:22:f5:44:41:b0:0d:3c:42:59:ab:6e:90: 74:24:8c:c9:c1:67:48:19:d7:c3:dc:d9:50:22:c2: 8b:3e:75:da:8f:b9:31:87:7a:54:23:f1:6d:3e:52: a1:ca:7f:c5:0b:f1:9c:ef:43:7d:7d:f6:46:82:84: 39:18:73:84:46:21:9e:04:1a:36:bc:e2:3a:44:27: ad:5c:dc:fc:4b:3f:78:5c:1b:ee:fe:d8:10:2c:7d: b8:fa:e2:68:f0:9c:a6:e5:24:41:15:59:ae:95:d0: 70:38:e8:ec:8b:5d:a5:33:2d:fe:82:b8:7e:0f:81: a9:58:74:05:1b:22:c3:7f:72:03:45:4f:27:51:5c: 94:6e:74:d2:52:9b:27:bd:af:6e:d4:21:79:a5:e2: db:75:41:ae:6f:e2:e3:22:32:86:2c:31:e0:bc:39: 03:6f:74:fa:0a:12:38:d4:fb:f3:de:ea:fd:25:2d: 43:b8:43:3f:cd:f8:33:52:30:3f:b6:41:af:4f:13: a7:c7:30:41:7f:fb:32:a4:47:1a:c3:c5:8a:ce:c6: 2e:c8:c1:5a:1c:22:de:71:f9:b6:5f:49:93:88:aa: 56:c4:0e:7c:42:63:ae:11:9f:a7:c4:98:e6:90:dd: d8:f1:dc:ee:96:d1:ec:c1:ad:49:ba:6a:68:d3:68: b3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:84:09:2B:82:30:02:0C:AD:8D:E5:23:F8:57:7A:6D:43:64:60:A8 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2d:aa:8f:81:54:67:8d:81:b1:51:52:e8:e1:6c:1d:77:c7: 0d:84:75:db:14:e2:7d:df:35:13:c1:4d:da:3c:11:ec:36:a7: 7c:35:5b:64:e7:71:1d:7b:86:25:e8:47:9a:fb:e4:44:26:3d: 36:a2:b7:ca:8c:6a:8e:16:be:c2:b2:19:b3:ba:31:83:28:0e: a0:b8:50:d4:33:77:59:8b:4f:74:4d:7d:32:d4:9e:27:f0:68: f4:9d:91:13:ad:47:5c:9f:ff:30:8c:e5:30:c6:7f:78:67:f6: 9f:c1:31:cf:97:ed:db:c8:19:95:64:0b:39:6f:1a:78:0d:33: c5:59:84:7e:3e:a0:81:96:a7:6e:53:02:34:35:07:9b:40:c4: 60:e7:82:7a:dc:ba:16:10:05:f4:15:3e:e8:2e:5a:ed:37:f6: d7:a9:d8:49:d1:f2:c9:6b:51:6d:64:b3:74:b8:6a:42:09:7e: 64:dd:bb:75:f1:b8:b2:1b:62:c6:17:3d:2f:08:b0:59:22:69: 3f:0d:d6:34:71:e8:59:3b:fa:d3:76:e1:e8:09:94:31:39:ce: f8:e3:b2:1d:3e:b6:bd:54:e6:c7:fb:31:90:85:1c:9a:7b:f7: ac:52:19:d9:e8:0c:25:6d:24:8b:af:53:4a:86:64:89:22:d8: ad:d4:36:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjUwNjMwMjIxODQyWhcNMjUwNzA3MjIxODQyWjAYMRYwFAYD VQQDEw02ODYzMGQ0Mi1lZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxloi9URBsA08QlmrbpB0JIzJwWdIGdfD3NlQIsKLPnXaj7kxh3pUI/FtPlKh yn/FC/Gc70N9ffZGgoQ5GHOERiGeBBo2vOI6RCetXNz8Sz94XBvu/tgQLH24+uJo 8Jym5SRBFVmuldBwOOjsi12lMy3+grh+D4GpWHQFGyLDf3IDRU8nUVyUbnTSUpsn va9u1CF5peLbdUGub+LjIjKGLDHgvDkDb3T6ChI41Pvz3ur9JS1DuEM/zfgzUjA/ tkGvTxOnxzBBf/sypEcaw8WKzsYuyMFaHCLecfm2X0mTiKpWxA58QmOuEZ+nxJjm kN3Y8dzultHswa1Jumpo02izowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWECSuC MAIMrY3lI/hXem1DZGCoMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMLaqPgVRnjYGxUVLo4Wwdd8cNhHXbFOJ93zUTwU3aPBHsNqd8NVtk 53Ede4Yl6Eea++REJj02orfKjGqOFr7CshmzujGDKA6guFDUM3dZi090TX0y1J4n 8Gj0nZETrUdcn/8wjOUwxn94Z/afwTHPl+3byBmVZAs5bxp4DTPFWYR+PqCBlqdu UwI0NQebQMRg54J63LoWEAX0FT7oLlrtN/bXqdhJ0fLJa1FtZLN0uGpCCX5k3bt1 8biyG2LGFz0vCLBZImk/DdY0cehZO/rTduHoCZQxOc7447IdPra9VObH+zGQhRya e/esUhnZ6AwlbSSLr1NKhmSJItit1DbA -----END CERTIFICATE-----Generated at Wed Jul 2 16:19:04 2025 by rpki-client