$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: hS21FTdxpIMX0nb72su9iJglR6pPERAcAiQ7/EfwfNk= Subject key identifier: D3:A1:D9:DA:3A:65:85:C9:D7:99:5E:40:B8:29:F4:FC:97:E2:55:02 Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: 1D Signing time: Sat 09 Aug 2025 08:25:20 +0000 Manifest this update: Sat 09 Aug 2025 08:25:19 +0000 Manifest next update: Sat 16 Aug 2025 08:25:19 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: qYGGgPorUGpIDlDMTkIisJqvhBgrl7p/p2PpgL4SM7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Aug 9 08:25:19 2025 GMT Not After : Aug 16 08:25:19 2025 GMT Subject: CN=689705ef-e7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:36:32:e0:28:a5:4c:a2:2c:2e:84:fd:c6:6d: 77:36:a1:d8:52:09:4a:e5:dc:1f:b4:93:09:3e:e7: 53:70:34:5e:5c:6e:4d:2a:11:cf:4e:64:71:d4:a5: 69:61:33:8a:2f:3f:70:eb:da:0f:86:ec:87:35:65: a0:49:36:38:31:1c:32:83:49:e3:74:00:45:02:1b: c9:f6:16:82:4e:29:c0:b0:8e:fb:0d:9f:04:72:9b: 58:d6:0b:0d:91:04:9b:f3:17:0d:6a:35:9a:9c:92: 02:47:85:f7:3d:d8:0e:30:ca:ca:6d:1f:c1:9e:56: c6:1a:a8:0d:da:5b:53:65:8e:67:4b:bf:e5:95:62: a6:bc:ee:f8:3e:20:88:93:d0:13:03:99:eb:0f:43: 96:14:09:7f:66:e7:23:79:89:61:02:52:c8:ae:47: 6e:de:bd:a6:b8:d9:10:3e:e1:35:07:93:91:76:fa: 0d:01:50:bd:69:32:52:0b:38:c3:a1:c8:c3:01:72: 90:b3:88:95:05:2f:a4:23:b8:b0:57:e4:7e:7b:ab: 24:02:37:ff:59:91:db:7a:e2:27:62:a8:11:9e:43: 2a:56:d3:3d:23:85:a2:a4:b6:52:58:d9:6e:dc:3d: 7b:b5:f8:c6:61:0b:11:64:19:41:5b:3f:13:39:64: d5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A1:D9:DA:3A:65:85:C9:D7:99:5E:40:B8:29:F4:FC:97:E2:55:02 X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:7d:3c:de:6e:7e:e0:8d:a5:10:2f:50:c7:99:65:8e:97:ee: 8d:80:03:1e:7e:3f:22:b2:5b:72:4d:ed:fe:9b:8d:66:07:ee: 5a:ab:34:2b:ce:ee:53:7d:92:20:53:90:c8:15:c0:8a:3c:23: a1:5d:31:e9:1c:d9:b3:8e:7a:8f:de:cb:2b:36:10:88:81:1d: c6:99:4d:62:26:f7:5f:35:d7:3b:de:49:34:2c:fc:ee:36:3b: 51:44:1f:36:b4:0e:f7:a6:07:74:f5:77:8c:ba:9f:35:57:f5: d5:b3:4c:d8:52:7c:f2:62:48:5f:6f:7d:fa:da:64:ae:ba:4b: 54:ab:42:86:21:f1:12:e0:92:38:f4:d7:ec:ee:ae:dd:bc:18: ea:d9:98:03:b0:8e:dc:f1:80:39:89:02:19:59:ec:e7:75:92: 08:1e:d2:2a:39:0a:9e:b8:5a:55:09:ef:77:3d:60:16:d5:3c: 38:7e:46:38:d1:d4:d4:a0:6c:6c:ba:9e:f8:54:f9:b3:d2:24: 22:b0:b6:7f:96:23:10:32:cf:71:a0:ed:72:9a:5a:4f:2d:11: 46:51:58:36:dd:d4:25:f7:ea:7f:1f:fb:fd:24:5f:1b:e5:60: 00:95:b6:b2:01:99:99:53:b3:7f:22:33:fb:0a:5a:3f:8a:92: 32:2d:97:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTNBNTExMC8GA1UEBRMoOTAyMUJFRkYzQjYzRUU3MjQ4QjkwRERBQTVEREJGQTdF MzEyMUNEOTAeFw0yNTA4MDkwODI1MTlaFw0yNTA4MTYwODI1MTlaMBgxFjAUBgNV BAMTDTY4OTcwNWVmLWU3ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqNjLgKKVMoiwuhP3GbXc2odhSCUrl3B+0kwk+51NwNF5cbk0qEc9OZHHUpWlh M4ovP3Dr2g+G7Ic1ZaBJNjgxHDKDSeN0AEUCG8n2FoJOKcCwjvsNnwRym1jWCw2R BJvzFw1qNZqckgJHhfc92A4wysptH8GeVsYaqA3aW1NljmdLv+WVYqa87vg+IIiT 0BMDmesPQ5YUCX9m5yN5iWECUsiuR27evaa42RA+4TUHk5F2+g0BUL1pMlILOMOh yMMBcpCziJUFL6QjuLBX5H57qyQCN/9Zkdt64idiqBGeQypW0z0jhaKktlJY2W7c PXu1+MZhCxFkGUFbPxM5ZNUxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU06HZ2jpl hcnXmV5AuCn0/JfiVQIwHwYDVR0jBBgwFoAUkCG+/ztj7nJIuQ3apd2/p+MSHNkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExM0E1L0U1N0YzNTkyNEI3 NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hO ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0NHLV96dGo3bkpJdVEzYXBkMl9wLU1TSE5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx M0E1L0U1N0YzNTkyNEI3NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25K SXVRM2FwZDJfcC1NU0hOay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZ9PN5ufuCNpRAvUMeZZY6X7o2AAx5+PyKyW3JN7f6bjWYH7lqrNCvO 7lN9kiBTkMgVwIo8I6FdMekc2bOOeo/eyys2EIiBHcaZTWIm91811zveSTQs/O42 O1FEHza0DvemB3T1d4y6nzVX9dWzTNhSfPJiSF9vffraZK66S1SrQoYh8RLgkjj0 1+zurt28GOrZmAOwjtzxgDmJAhlZ7Od1kgge0io5Cp64WlUJ73c9YBbVPDh+RjjR 1NSgbGy6nvhU+bPSJCKwtn+WIxAyz3Gg7XKaWk8tEUZRWDbd1CX36n8f+/0kXxvl YACVtrIBmZlTs38iM/sKWj+KkjItl78= -----END CERTIFICATE-----Generated at Sun Aug 10 18:53:07 2025 by rpki-client