$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft File: kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json) Hash identifier: uyWFX1Vv4xfV0XvP3N6QHaHWfjjcpUcPpcbJ0viazOA= Subject key identifier: 54:96:CD:16:53:2B:E1:AB:81:7B:FE:41:3A:87:8F:D6:7B:0F:1B:E2 Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 Certificate issuer: /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft Manifest number: 08 Signing time: Sat 09 Aug 2025 08:42:12 +0000 Manifest this update: Sat 09 Aug 2025 08:42:11 +0000 Manifest next update: Sat 16 Aug 2025 08:42:11 +0000 Files and hashes: 1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: K32wk094PC7gXrFeHFEMsLsaE1S3CCHQVqx4KN+UIoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Validity Not Before: Aug 9 08:42:11 2025 GMT Not After : Aug 16 08:42:11 2025 GMT Subject: CN=689709e3-b2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:e5:28:42:1f:3a:2c:d9:b9:56:bc:4e:50: 4f:e6:be:dd:af:66:89:a6:36:26:74:ae:4f:9d:50: 81:e7:c9:fd:4a:f5:f9:3a:42:2e:aa:94:4b:c0:e2: ba:e9:6f:bf:0e:83:b6:ff:c6:51:dd:5a:cd:14:f7: ea:fa:7f:04:51:bf:8a:db:55:86:0a:5b:c4:ab:d3: 2d:95:60:22:e4:e2:fc:ea:68:20:2e:00:9c:03:69: b7:94:7b:f7:88:1a:b1:f3:b3:c3:13:17:03:41:50: 47:be:56:1a:c8:58:f3:39:75:25:95:40:ae:fa:58: 14:f2:20:51:c6:64:2a:ba:b7:db:65:8c:b1:a2:07: d2:28:1d:d8:c2:bf:6c:57:b5:58:9b:e0:4e:6e:92: 58:59:5c:26:0c:7a:38:5b:c3:73:87:58:43:6d:6b: 65:88:ea:df:4a:59:1e:8f:52:8b:62:fe:c4:71:ae: 23:82:22:c4:57:94:b5:a7:e1:97:1d:4d:d5:a0:a9: 6b:c5:8f:e1:86:86:3d:d1:f1:04:fb:3b:4c:b1:4e: c8:29:ed:28:65:0c:44:d8:02:da:f3:b6:80:58:a2: a5:cd:b1:8c:77:80:bf:50:c1:1f:81:6e:0b:30:d6: 47:28:c6:ef:f1:90:eb:b6:52:03:a7:e0:a6:ba:60: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:96:CD:16:53:2B:E1:AB:81:7B:FE:41:3A:87:8F:D6:7B:0F:1B:E2 X509v3 Authority Key Identifier: keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f7:aa:67:db:d2:3f:ff:90:e1:53:00:39:30:0c:35:41:46: 02:26:41:f9:93:1e:37:6b:dd:33:20:cc:10:12:13:c5:60:f7: dc:3c:0d:b4:98:6c:34:57:1a:3b:8f:fb:5c:5d:05:63:14:29: 8d:8e:a9:87:d0:cc:1f:84:f2:06:c4:df:2e:fb:b0:3e:f3:2e: eb:52:9d:52:52:14:0d:bd:f0:9c:d2:38:ed:99:be:ed:f9:c1: 97:5d:e5:66:84:1f:c6:41:66:1c:5f:e2:0b:a0:76:88:a7:dd: 3e:5c:b1:0c:60:ea:f8:12:9d:e4:71:ab:a6:be:5c:01:d1:67: 7f:d4:20:ec:ec:29:db:d6:66:5c:9c:e8:62:95:d1:72:a4:b2: 71:18:d8:d7:a5:5a:a4:7c:56:6b:ff:c4:ed:da:54:7c:17:22: 0b:b3:53:a7:df:ad:42:88:c0:e7:00:5f:e0:f4:d6:1c:62:b4: 86:a5:99:0b:b8:ff:30:05:93:2c:46:f4:ec:7b:37:8a:7f:cb: 36:17:1a:9c:2a:bd:f4:59:d6:88:06:a9:04:96:9f:4b:a9:e9: ae:21:2a:43:d8:47:4b:cf:70:84:1e:ca:2f:0e:62:f2:b3:e9: 8e:f5:f4:a0:ce:63:72:9c:ff:96:ed:15:54:a6:10:df:2b:b8: af:9b:77:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDdEMzExMC8GA1UEBRMoOTBDQjdGQTEzNzk2OUM0MzU2QTRDQTUyRjcwNURDQTFB QjIyNUZEMDAeFw0yNTA4MDkwODQyMTFaFw0yNTA4MTYwODQyMTFaMBgxFjAUBgNV BAMTDTY4OTcwOWUzLWIyYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfOuUoQh86LNm5VrxOUE/mvt2vZommNiZ0rk+dUIHnyf1K9fk6Qi6qlEvA4rrp b78Og7b/xlHdWs0U9+r6fwRRv4rbVYYKW8Sr0y2VYCLk4vzqaCAuAJwDabeUe/eI GrHzs8MTFwNBUEe+VhrIWPM5dSWVQK76WBTyIFHGZCq6t9tljLGiB9IoHdjCv2xX tVib4E5uklhZXCYMejhbw3OHWENta2WI6t9KWR6PUoti/sRxriOCIsRXlLWn4Zcd TdWgqWvFj+GGhj3R8QT7O0yxTsgp7ShlDETYAtrztoBYoqXNsYx3gL9QwR+Bbgsw 1kcoxu/xkOu2UgOn4Ka6YJTfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVJbNFlMr 4auBe/5BOoeP1nsPG+IwHwYDVR0jBBgwFoAUkMt/oTeWnENWpMpS9wXcoasiX9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzQxOUU3RTEyNkM1 OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVOV3BNcFM5d1hjb2FzaVg5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva010X29UZVduRU5XcE1wUzl3WGNvYXNpWDlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw N0QzLzQxOUU3RTEyNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVO V3BNcFM5d1hjb2FzaVg5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABH3qmfb0j//kOFTADkwDDVBRgImQfmTHjdr3TMgzBASE8Vg99w8DbSY bDRXGjuP+1xdBWMUKY2OqYfQzB+E8gbE3y77sD7zLutSnVJSFA298JzSOO2Zvu35 wZdd5WaEH8ZBZhxf4gugdoin3T5csQxg6vgSneRxq6a+XAHRZ3/UIOzsKdvWZlyc 6GKV0XKksnEY2NelWqR8Vmv/xO3aVHwXIguzU6ffrUKIwOcAX+D01hxitIalmQu4 /zAFkyxG9Ox7N4p/yzYXGpwqvfRZ1ogGqQSWn0up6a4hKkPYR0vPcIQeyi8OYvKz 6Y719KDOY3Kc/5btFVSmEN8ruK+bd4U= -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:23 2025 by rpki-client