$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json) Hash identifier: wVOLL+9C6HlNI13Kuh7VpZtinYwg9YHGTYGwR66doTg= Subject key identifier: C8:8A:05:CD:20:F2:B4:89:46:D0:12:A2:F3:4F:77:83:87:44:1B:D5 Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft Manifest number: 01DB Signing time: Sat 09 Aug 2025 03:09:45 +0000 Manifest this update: Sat 09 Aug 2025 03:09:45 +0000 Manifest next update: Sat 16 Aug 2025 03:09:45 +0000 Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: jUkEDHymemuEJNdgRG0PRjhupy/XNRBK/419wfdPtoE=) 2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: /IwIj5wHV9TZq7gyFUGmW+srgA66FnHYYQjrcF03350=) 3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: q5xwzkvJJT2cpQij23jtb331Ba1Q6ZPU5GFvae3tZEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Validity Not Before: Aug 9 03:09:45 2025 GMT Not After : Aug 16 03:09:45 2025 GMT Subject: CN=6896bbf9-8a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:09:4e:14:e4:2d:b6:fb:e1:b6:5f:1d:38: a1:43:e2:77:d5:9b:0e:93:3d:64:01:c4:a5:06:54: 0a:30:c3:60:f2:5c:38:d7:46:83:f7:f8:15:a2:4e: d2:6b:cd:7a:0f:90:40:0f:df:09:0d:63:fe:36:3d: 4e:76:32:9a:cf:0a:ea:d3:7f:a9:6c:7e:8e:dc:42: 74:09:ba:4f:06:68:cb:a2:be:88:a2:58:ec:20:7a: 92:6c:b5:a2:dc:32:a3:71:08:d3:4e:d0:57:3b:6b: 60:3e:a1:7e:fd:62:7a:bd:ca:a8:90:2f:24:11:13: 1a:01:6c:f6:c6:d9:44:f4:c6:75:c6:00:0a:e9:18: de:d9:37:78:e6:02:5a:6b:03:4a:dc:d6:d5:a1:7c: 18:dd:5b:3f:4b:50:9a:b2:35:7a:cf:ba:7b:aa:d4: 39:b4:df:5a:a7:0d:a4:3d:75:0d:5b:93:54:0a:14: 40:22:fa:0c:0e:ed:da:d1:ab:be:0e:aa:92:49:59: 78:f3:15:4c:50:7c:63:fc:e8:49:e0:d7:bc:77:c9: d4:00:e1:dc:df:fb:c2:2b:bb:17:23:44:e4:61:e0: 0b:b5:39:cc:e5:b0:0b:bd:be:77:c1:2c:6e:bb:49: db:d8:96:ac:51:e7:5d:02:78:7b:0a:12:60:aa:ca: 9f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8A:05:CD:20:F2:B4:89:46:D0:12:A2:F3:4F:77:83:87:44:1B:D5 X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ea:6b:94:1d:53:86:1a:91:18:42:53:c2:e6:0b:bf:94:df: 60:d8:85:82:b6:09:fc:7d:cd:01:40:aa:20:f9:a0:39:8b:5d: 19:9a:f8:9f:6a:46:93:33:fe:06:f4:d6:df:91:0c:c5:76:b7: 7d:9d:3b:e5:2e:56:fd:49:78:86:6e:a1:c6:3c:4f:6f:9d:22: e6:d5:94:05:a4:88:71:f8:d6:41:8b:1c:24:0b:b6:e9:bf:f9: b7:fe:a9:5c:6a:65:31:f3:b7:5d:60:18:4b:5d:e3:fc:5c:a8: 80:f5:ab:50:5a:bb:75:e9:3f:14:e8:f8:67:b5:58:24:9c:f3: cf:76:76:45:f4:00:4b:23:d1:1d:63:b9:76:85:d5:f3:a4:0d: ef:3a:99:e3:1c:64:45:11:df:a5:7a:61:a7:b3:ef:1e:64:6b: 19:6f:06:7a:0c:5b:7f:46:d3:b7:57:bd:59:4e:ad:67:80:56: 1e:38:88:88:77:64:f1:4b:96:d6:b3:f0:74:6e:e9:d8:3f:58: 3a:d6:9a:0f:97:54:65:ca:64:0c:22:13:0f:7c:13:2d:9d:ab: c4:8e:55:96:4d:22:b1:f0:a8:30:0f:ba:d8:16:60:e8:a3:5a: dd:f0:d5:2d:0a:77:13:56:b4:9c:00:83:b9:f7:4f:79:d6:63: ff:f9:5c:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjUwODA5MDMwOTQ1WhcNMjUwODE2MDMwOTQ1WjAYMRYwFAYD VQQDEw02ODk2YmJmOS04YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA138JThTkLbb74bZfHTihQ+J31ZsOkz1kAcSlBlQKMMNg8lw410aD9/gVok7S a816D5BAD98JDWP+Nj1OdjKazwrq03+pbH6O3EJ0CbpPBmjLor6IoljsIHqSbLWi 3DKjcQjTTtBXO2tgPqF+/WJ6vcqokC8kERMaAWz2xtlE9MZ1xgAK6Rje2Td45gJa awNK3NbVoXwY3Vs/S1CasjV6z7p7qtQ5tN9apw2kPXUNW5NUChRAIvoMDu3a0au+ DqqSSVl48xVMUHxj/OhJ4Ne8d8nUAOHc3/vCK7sXI0TkYeALtTnM5bALvb53wSxu u0nb2JasUeddAnh7ChJgqsqfCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiKBc0g 8rSJRtASovNPd4OHRBvVMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL V2xBYlYxQnZyazVjRWFIWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV6muUHVOGGpEYQlPC5gu/lN9g2IWCtgn8fc0BQKog+aA5i10Zmvif akaTM/4G9NbfkQzFdrd9nTvlLlb9SXiGbqHGPE9vnSLm1ZQFpIhx+NZBixwkC7bp v/m3/qlcamUx87ddYBhLXeP8XKiA9atQWrt16T8U6PhntVgknPPPdnZF9ABLI9Ed Y7l2hdXzpA3vOpnjHGRFEd+lemGns+8eZGsZbwZ6DFt/RtO3V71ZTq1ngFYeOIiI d2TxS5bWs/B0bunYP1g61poPl1RlymQMIhMPfBMtnavEjlWWTSKx8KgwD7rYFmDo o1rd8NUtCncTVrScAIO590951mP/+VxH -----END CERTIFICATE-----Generated at Sun Aug 10 13:53:59 2025 by rpki-client