$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: 3VxkEy+kdmZFpldKsNwbVA8fp/5MTxV3FEBitfEUkbM= Subject key identifier: DA:61:9C:C7:E7:ED:B2:FE:22:9E:D4:C3:73:CE:C0:26:C2:84:E9:38 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 01A3 Signing time: Tue 05 Aug 2025 03:54:22 +0000 Manifest this update: Tue 05 Aug 2025 03:54:22 +0000 Manifest next update: Tue 12 Aug 2025 03:54:22 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: odnQ4vJTgWJoLYRCoEd28EIYshZUXvyFvwGuWyoJR6s=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: 3V/ibErrTNJ9w1YW/LwCYcNNPjpkRJOqZOAkX5zvOXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Aug 5 03:54:22 2025 GMT Not After : Aug 12 03:54:22 2025 GMT Subject: CN=6891806e-8a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:7e:46:e7:7d:c9:d0:16:5e:26:0d:47:46: 76:85:26:32:c2:18:23:3d:65:9a:9b:99:ad:a2:e9: e4:62:9e:f7:9d:68:70:ad:f8:1c:ce:25:af:78:d0: 50:48:9e:47:86:68:21:8a:d9:c4:33:8e:47:4b:91: ec:8e:d6:77:50:59:66:73:0e:ac:ea:9c:bb:11:a4: 8d:3e:c7:27:aa:bc:65:4b:63:c3:b4:63:52:43:e8: a9:39:cb:9b:27:31:31:4d:88:b7:79:9e:1f:3c:d1: 1e:7d:af:a2:df:88:d3:ac:d0:31:ee:a4:0f:16:37: a4:00:6a:8f:cf:47:3e:79:f5:b7:f4:07:41:2a:f2: 17:db:f6:3f:2d:e4:89:64:bc:60:a0:81:5f:bf:79: 0c:5d:55:2b:d2:12:c4:c2:74:16:e6:84:0a:b2:ee: 29:e8:43:a5:7c:46:55:52:f1:f3:1c:ef:bd:da:73: 94:18:74:7d:1e:f4:6c:c8:3f:12:90:bb:0e:de:32: de:70:35:f2:b0:2f:e1:17:d6:c3:1d:d1:a2:d5:15: 47:d2:f0:19:56:fb:0e:28:77:e0:91:47:c1:d0:e5: 36:9b:7c:9b:32:c1:76:08:41:4e:26:e6:a3:32:15: 3d:45:a9:28:45:46:db:65:54:5e:74:82:89:87:20: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:61:9C:C7:E7:ED:B2:FE:22:9E:D4:C3:73:CE:C0:26:C2:84:E9:38 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:2d:b9:e8:c0:84:4d:a7:ab:e9:e0:77:70:cd:92:26:f2:e0: e7:6e:b2:eb:63:98:51:36:01:f3:ca:b7:96:f2:49:35:e3:ed: ef:cc:fc:c1:72:11:71:aa:1b:2e:cb:58:b9:8e:46:d1:fe:1b: 21:28:01:d2:2a:1e:06:c3:a2:d5:18:74:94:85:ad:67:6f:20: 96:c3:3c:97:d9:41:b2:cd:f6:c7:d7:34:53:30:32:8d:de:86: ba:ad:99:aa:bd:07:a3:7f:92:38:ee:c9:c7:c1:4f:25:83:6e: 02:e0:80:98:62:9a:dc:c8:ad:a2:da:93:69:4e:04:a4:d8:81: b5:c5:86:a6:c1:22:b4:83:28:61:f6:eb:ee:8f:5b:91:77:11: 66:93:22:f8:36:99:a9:3f:05:5f:f0:3d:4b:84:97:3e:4c:ca: c2:03:92:97:dd:d2:6c:ab:b7:fb:25:ef:7b:f9:d9:cd:4d:25: db:44:17:b8:d7:10:c2:06:06:ed:69:e7:cd:50:84:70:10:ea: f9:26:29:9b:07:83:76:f1:36:39:e6:b1:f3:ba:cc:63:f9:8b: 15:b2:e5:c3:a0:16:be:31:6d:0e:59:87:4b:43:a8:d5:53:e7: cb:33:39:fc:0f:fa:ae:e0:c4:2d:4c:d4:3b:8a:55:d7:ab:cf: 29:9f:ea:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjUwODA1MDM1NDIyWhcNMjUwODEyMDM1NDIyWjAYMRYwFAYD VQQDEw02ODkxODA2ZS04YTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW1+Rud9ydAWXiYNR0Z2hSYywhgjPWWam5mtounkYp73nWhwrfgcziWveNBQ SJ5HhmghitnEM45HS5HsjtZ3UFlmcw6s6py7EaSNPscnqrxlS2PDtGNSQ+ipOcub JzExTYi3eZ4fPNEefa+i34jTrNAx7qQPFjekAGqPz0c+efW39AdBKvIX2/Y/LeSJ ZLxgoIFfv3kMXVUr0hLEwnQW5oQKsu4p6EOlfEZVUvHzHO+92nOUGHR9HvRsyD8S kLsO3jLecDXysC/hF9bDHdGi1RVH0vAZVvsOKHfgkUfB0OU2m3ybMsF2CEFOJuaj MhU9RakoRUbbZVRedIKJhyC6dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNphnMfn 7bL+Ip7Uw3POwCbChOk4MB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTLbnowIRNp6vp4HdwzZIm8uDnbrLrY5hRNgHzyreW8kk14+3vzPzB chFxqhsuy1i5jkbR/hshKAHSKh4Gw6LVGHSUha1nbyCWwzyX2UGyzfbH1zRTMDKN 3oa6rZmqvQejf5I47snHwU8lg24C4ICYYprcyK2i2pNpTgSk2IG1xYamwSK0gyhh 9uvuj1uRdxFmkyL4NpmpPwVf8D1LhJc+TMrCA5KX3dJsq7f7Je97+dnNTSXbRBe4 1xDCBgbtaefNUIRwEOr5JimbB4N28TY55rHzusxj+YsVsuXDoBa+MW0OWYdLQ6jV U+fLMzn8D/qu4MQtTNQ7ilXXq88pn+ry -----END CERTIFICATE-----Generated at Wed Aug 6 05:29:26 2025 by rpki-client