$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json) Hash identifier: daQ3IkVOydNdpMELarAt9/jypOFc+pVlF6p3hC/dOlY= Subject key identifier: E4:14:07:C0:C3:F7:A5:69:3D:85:03:1D:73:08:5D:1E:5C:0C:CF:46 Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft Manifest number: 01BF Signing time: Sun 15 Jun 2025 02:21:29 +0000 Manifest this update: Sun 15 Jun 2025 02:21:29 +0000 Manifest next update: Sun 22 Jun 2025 02:21:29 +0000 Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: EInVmOPQsktljPJQrRgQepzmETeo+Uh/YNA2xa80LSE=) 2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: /IwIj5wHV9TZq7gyFUGmW+srgA66FnHYYQjrcF03350=) 3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: q5xwzkvJJT2cpQij23jtb331Ba1Q6ZPU5GFvae3tZEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Validity Not Before: Jun 15 02:21:29 2025 GMT Not After : Jun 22 02:21:29 2025 GMT Subject: CN=684e2e29-ec88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:00:d1:44:1e:3e:23:33:f6:72:cf:1b:b9: 1c:fe:46:64:bc:0c:38:2e:5f:8a:f6:6c:e1:bd:1b: 64:a7:e4:16:4a:6b:a5:09:8f:40:c8:63:ed:86:cf: 2d:5b:f0:f2:42:fc:3a:a3:7b:5d:e1:a7:8d:a2:7a: 98:cc:a1:e6:a7:cd:31:f4:be:ed:90:ad:f1:22:c1: 5c:dd:54:c6:e4:01:53:6c:f6:20:b3:e0:76:17:8f: 5b:33:e2:79:1a:ef:e4:b2:f2:3d:57:25:75:0f:c0: 73:f2:54:af:18:b9:4a:79:70:bb:d6:51:1c:1c:90: e6:63:c4:b1:13:4b:31:6c:20:47:67:50:d7:4b:0e: 7c:9f:7c:8d:f5:71:6d:98:92:a8:fd:4b:d7:7e:82: 46:77:be:98:bf:4a:4b:fd:0a:d7:6a:a4:aa:c9:94: 7e:56:2e:d0:fa:69:d4:02:e1:6e:ac:42:f2:88:32: e3:53:28:ad:48:18:c6:49:56:43:95:52:ac:39:2e: bf:44:14:48:74:23:eb:ee:fe:36:fb:ea:00:2d:59: 34:55:34:17:62:85:e4:37:a5:e1:ff:74:ea:b6:e4: 01:52:81:fc:d7:32:23:fc:b6:60:0f:c2:59:ad:b0: 12:52:18:8e:66:8b:73:5a:9d:56:1f:3d:ed:8b:0d: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:14:07:C0:C3:F7:A5:69:3D:85:03:1D:73:08:5D:1E:5C:0C:CF:46 X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:7e:5a:5a:58:bb:c5:c2:29:35:d8:bb:82:c4:d9:3b:3d:a4: 01:f2:8d:ec:b3:9e:d9:cd:dd:98:25:cf:61:c3:f7:39:79:d2: 6e:17:fa:37:ad:ba:46:35:0b:15:86:72:90:e8:76:d5:54:38: 69:b3:fa:5e:ef:49:28:e9:95:fc:69:58:57:13:3f:c0:8f:76: 93:34:1d:41:05:e7:07:fa:e1:6a:b5:a0:be:49:59:13:a6:dc: 53:5f:bc:b4:8b:1e:6b:48:e8:3f:fc:e3:43:72:60:36:a4:85: cf:cb:6c:79:b0:85:39:da:8f:0f:c4:2d:d5:70:ba:20:30:ed: 35:a7:a4:9c:77:4e:87:f6:fc:cc:3b:cd:91:94:dc:1c:93:63: 6b:53:7b:c2:94:f0:96:92:1f:75:2d:27:66:1f:64:bb:59:37: f8:ae:8e:d9:7d:09:ff:5e:3f:68:da:a3:7c:bf:fe:79:88:d4: 81:d3:0f:5f:99:26:d3:fe:a4:6f:59:af:29:cb:fd:2b:fb:b0: b1:ed:58:ce:78:b3:b6:8e:fe:b2:19:00:84:4c:43:8d:e7:0b: ca:6a:64:de:a9:a6:3d:4d:df:0d:08:b8:90:ed:e5:7c:5e:6c: fd:06:89:e8:94:1d:f0:b6:df:da:63:bc:90:fe:44:c6:9b:c2: a5:2e:75:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjUwNjE1MDIyMTI5WhcNMjUwNjIyMDIyMTI5WjAYMRYwFAYD VQQDEw02ODRlMmUyOS1lYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/4A0UQePiMz9nLPG7kc/kZkvAw4Ll+K9mzhvRtkp+QWSmulCY9AyGPths8t W/DyQvw6o3td4aeNonqYzKHmp80x9L7tkK3xIsFc3VTG5AFTbPYgs+B2F49bM+J5 Gu/ksvI9VyV1D8Bz8lSvGLlKeXC71lEcHJDmY8SxE0sxbCBHZ1DXSw58n3yN9XFt mJKo/UvXfoJGd76Yv0pL/QrXaqSqyZR+Vi7Q+mnUAuFurELyiDLjUyitSBjGSVZD lVKsOS6/RBRIdCPr7v42++oALVk0VTQXYoXkN6Xh/3TqtuQBUoH81zIj/LZgD8JZ rbASUhiOZotzWp1WHz3tiw3OgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQUB8DD 96VpPYUDHXMIXR5cDM9GMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL V2xBYlYxQnZyazVjRWFIWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMflpaWLvFwik12LuCxNk7PaQB8o3ss57Zzd2YJc9hw/c5edJuF/o3 rbpGNQsVhnKQ6HbVVDhps/pe70ko6ZX8aVhXEz/Aj3aTNB1BBecH+uFqtaC+SVkT ptxTX7y0ix5rSOg//ONDcmA2pIXPy2x5sIU52o8PxC3VcLogMO01p6Scd06H9vzM O82RlNwck2NrU3vClPCWkh91LSdmH2S7WTf4ro7ZfQn/Xj9o2qN8v/55iNSB0w9f mSbT/qRvWa8py/0r+7Cx7VjOeLO2jv6yGQCETEON5wvKamTeqaY9Td8NCLiQ7eV8 Xmz9BonolB3wtt/aY7yQ/kTGm8KlLnWU -----END CERTIFICATE-----Generated at Sun Jun 15 08:43:48 2025 by rpki-client