$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: qM1OwENuCVplyBWAuTHCnrcoAECnXGfpbQ3qhM/vUfg= Subject key identifier: AB:6E:97:B0:DD:09:DE:A1:24:E9:C9:96:B2:9D:E0:4D:09:8C:33:EE Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 16BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 16A9 Signing time: Wed 02 Jul 2025 16:48:26 +0000 Manifest this update: Wed 02 Jul 2025 16:48:25 +0000 Manifest next update: Wed 09 Jul 2025 16:48:25 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: IhulWAuHaOWq3QM918zi1s66Dhq83fmW5TnAGLwPptM=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5823 (0x16bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Jul 2 16:48:25 2025 GMT Not After : Jul 9 16:48:25 2025 GMT Subject: CN=686562da-e155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:6b:eb:bf:52:3e:7d:74:48:ce:fe:ce:d8: 36:a9:27:9d:dd:83:d5:cc:95:b8:e1:f1:ee:d7:9e: d3:df:28:f7:43:eb:87:d3:d2:e8:d2:1d:e6:52:0c: 2f:62:14:18:78:89:c9:70:4b:b0:ee:45:4c:e4:fb: cd:5f:0e:92:ee:5a:77:3b:5f:8a:54:68:69:73:f3: 5e:24:40:36:a6:c1:37:8f:a8:38:57:a9:20:04:99: 67:f7:0b:aa:50:f0:27:d3:a5:04:ee:97:f0:59:19: ad:2e:65:7f:3f:15:a8:49:f6:a7:27:57:9b:0c:77: 85:f6:39:cf:b8:d2:28:c2:c3:7d:a0:9d:fc:70:9d: e1:89:db:94:02:dc:b6:2b:48:f2:0a:8c:fa:16:20: ca:00:73:b1:8a:86:45:d8:2a:14:f8:ce:04:d8:29: 7f:a2:ef:f8:2f:5b:c9:01:e4:e7:9e:99:3f:0d:0e: 4c:85:14:86:8a:15:fe:93:c1:5f:6a:2f:e3:9c:d3: eb:5e:0f:71:fa:5c:a9:f4:d7:b0:56:fe:25:20:2e: 97:4a:46:77:3d:a0:58:8b:e9:d8:c6:70:07:b9:d2: 03:96:6d:ab:cb:ee:3f:db:19:af:12:8f:df:b6:ef: 36:8c:3f:6a:50:84:19:ce:3f:76:eb:a8:76:74:9e: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6E:97:B0:DD:09:DE:A1:24:E9:C9:96:B2:9D:E0:4D:09:8C:33:EE X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:81:4f:8c:4b:85:a4:c2:ed:85:a2:af:d0:ab:d8:35:fc:8c: df:cc:d2:f4:ae:3c:1f:3d:d9:92:fb:a9:44:78:22:51:42:05: 56:e6:da:56:55:38:2f:1d:7b:cc:f3:ef:d8:d2:81:a8:10:30: b1:3a:6d:dc:f2:b1:a6:71:15:bd:31:19:d0:77:04:a3:0a:4b: 3b:c0:5f:b8:4c:a8:db:ee:4f:bc:53:a6:aa:13:0c:15:a2:ea: 9b:2a:35:fb:d2:47:9e:40:1a:02:94:1f:48:bd:e4:b0:ed:e2: 63:a7:c7:5a:c3:68:f4:89:a7:2b:c4:55:e5:a7:ee:21:be:72: d0:fa:19:b0:dc:89:a0:a0:09:3b:be:54:0c:f6:b8:31:31:e1: 21:03:77:6b:23:c3:21:f5:14:c4:ee:de:4b:24:09:8f:98:4c: 73:70:ec:5d:84:b1:bd:f2:d6:69:dc:7f:83:39:9b:1b:f6:89: c7:f6:b9:a6:98:59:7c:9b:49:29:68:91:45:2b:7d:6a:bf:b1: 1b:40:fb:35:f1:5b:f0:b6:a4:41:40:eb:ba:f8:91:09:21:d7: 35:1f:7a:ec:d2:ab:fb:0a:42:94:cc:13:53:bb:1f:4c:d8:14: ae:9d:47:a6:5b:9e:42:3c:54:1a:21:24:98:ee:63:7f:90:98: 19:6e:7d:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUwNzAyMTY0ODI1WhcNMjUwNzA5MTY0ODI1WjAYMRYwFAYD VQQDEw02ODY1NjJkYS1lMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWBr679SPn10SM7+ztg2qSed3YPVzJW44fHu157T3yj3Q+uH09Lo0h3mUgwv YhQYeInJcEuw7kVM5PvNXw6S7lp3O1+KVGhpc/NeJEA2psE3j6g4V6kgBJln9wuq UPAn06UE7pfwWRmtLmV/PxWoSfanJ1ebDHeF9jnPuNIowsN9oJ38cJ3hiduUAty2 K0jyCoz6FiDKAHOxioZF2CoU+M4E2Cl/ou/4L1vJAeTnnpk/DQ5MhRSGihX+k8Ff ai/jnNPrXg9x+lyp9NewVv4lIC6XSkZ3PaBYi+nYxnAHudIDlm2ry+4/2xmvEo/f tu82jD9qUIQZzj9266h2dJ54DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtul7Dd Cd6hJOnJlrKd4E0JjDPuMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7gU+MS4Wkwu2Foq/Qq9g1/IzfzNL0rjwfPdmS+6lEeCJRQgVW5tpW VTgvHXvM8+/Y0oGoEDCxOm3c8rGmcRW9MRnQdwSjCks7wF+4TKjb7k+8U6aqEwwV ouqbKjX70keeQBoClB9IveSw7eJjp8daw2j0iacrxFXlp+4hvnLQ+hmw3ImgoAk7 vlQM9rgxMeEhA3drI8Mh9RTE7t5LJAmPmExzcOxdhLG98tZp3H+DOZsb9onH9rmm mFl8m0kpaJFFK31qv7EbQPs18VvwtqRBQOu6+JEJIdc1H3rs0qv7CkKUzBNTux9M 2BSunUemW55CPFQaISSY7mN/kJgZbn2J -----END CERTIFICATE-----Generated at Wed Jul 2 21:49:41 2025 by rpki-client