$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json) Hash identifier: gUkQKN5HXhjYBUdHQ282QFW+f/NtXFszkG/hXjyQ6Qg= Subject key identifier: 4B:E9:15:E5:E1:1B:D7:86:03:8F:33:D4:A8:2C:1C:52:7D:8F:A4:5E Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft Manifest number: 01F4 Signing time: Tue 05 Aug 2025 02:56:37 +0000 Manifest this update: Tue 05 Aug 2025 02:56:37 +0000 Manifest next update: Tue 12 Aug 2025 02:56:37 +0000 Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: doHRTmWGzbf43WkzDZUG87U28412t5JL02stKMDs3OI=) 2: 203FA37E750611ED95126872C4F9AE02.roa (hash: dipdNfnJaJs6s5CVnvO1Wlubse6AOUfgpacGaixKSoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Validity Not Before: Aug 5 02:56:37 2025 GMT Not After : Aug 12 02:56:37 2025 GMT Subject: CN=689172e5-fab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:f4:a0:e3:39:c6:3f:f7:4e:e3:31:c5:11: 26:b9:18:44:67:54:98:a7:4f:da:57:f7:a8:eb:9e: 3b:71:ee:b2:7e:d7:c8:30:a1:8d:3f:7d:9e:43:fd: 50:9f:ba:cf:3e:e0:13:92:b0:eb:ba:c1:09:b0:f0: 25:77:1b:17:93:99:d4:0d:61:9b:bc:f5:2d:8c:b6: cd:be:8b:f8:45:7e:0f:4a:0a:6c:f1:bf:03:a2:25: c1:ea:8f:4c:dd:b2:32:d9:ce:03:31:c0:d1:a4:df: 80:2b:17:44:98:35:b7:72:d7:6c:7d:b1:0b:38:d4: af:89:d1:2d:b2:92:63:3d:f2:a2:08:9d:d8:d5:5b: 68:77:fd:dc:ee:92:3f:e0:8f:f2:69:25:7f:a8:4d: 56:98:30:9e:49:74:a7:eb:cb:89:b0:82:16:a5:cb: 79:51:7d:2d:ee:69:d8:9f:de:62:71:4b:68:4f:7f: db:df:41:17:80:a7:ca:9f:1f:9b:a9:14:0f:81:9c: 96:ff:7a:ff:b5:ea:f6:9d:90:d9:72:de:fa:b6:d2: 1a:1b:59:a1:99:50:a0:50:4c:36:25:da:40:d6:9b: 00:11:c8:b3:9d:e5:2b:b0:94:e2:8c:26:c9:83:8d: a8:11:a5:66:8a:00:85:01:3f:f1:c3:df:1c:42:09: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E9:15:E5:E1:1B:D7:86:03:8F:33:D4:A8:2C:1C:52:7D:8F:A4:5E X509v3 Authority Key Identifier: keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:a1:09:db:c7:5f:f5:5e:93:28:e5:93:c0:c9:37:df:c4:20: 20:53:02:3b:7a:25:10:0a:31:b2:d5:fe:d4:65:31:cf:eb:4c: 79:79:6e:c8:d5:8a:8d:e7:4d:45:63:df:4c:fc:53:6e:ca:0d: 49:c2:12:53:9a:bd:df:0e:23:73:47:e7:79:8d:d8:5f:c5:5f: 2e:8a:75:6e:43:b5:60:80:93:65:bd:b4:c5:72:da:aa:d0:2f: 69:10:2b:00:a8:47:05:f6:f5:c0:d5:4b:13:e1:30:fd:65:25: 4c:de:40:37:8b:ba:c3:32:cf:44:70:bd:1f:0e:33:ed:69:87: 46:04:f1:99:50:9e:0f:b7:61:aa:c2:16:02:82:c5:99:36:40: da:a5:b6:57:bb:6c:4c:1c:0e:0f:c8:02:dc:6b:ed:de:a2:4c: 72:4f:3f:9c:1a:3b:5b:b9:5d:a4:3e:74:41:88:0d:d9:8d:1f: 85:e2:2a:b5:66:75:d7:03:8f:ee:89:6b:12:71:36:99:0e:ee: d9:ca:0a:8f:e8:6f:01:7c:bb:e8:64:01:b4:6d:55:b6:dc:7f: 44:af:a7:7d:9d:42:66:7b:a3:08:2e:ae:a1:36:ab:d0:d1:f0: 4f:8d:3f:fc:99:4f:19:54:a8:b6:84:b3:eb:09:8c:cf:1a:4d: 04:66:be:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAxNEExMTAvBgNVBAUTKDkwQkQxREYxM0E5OTFDMzFGMTE4NEQ1MTFBRjMwMzE2 RkMwMDIxMDIwHhcNMjUwODA1MDI1NjM3WhcNMjUwODEyMDI1NjM3WjAYMRYwFAYD VQQDEw02ODkxNzJlNS1mYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzG/0oOM5xj/3TuMxxREmuRhEZ1SYp0/aV/eo6547ce6yftfIMKGNP32eQ/1Q n7rPPuATkrDrusEJsPAldxsXk5nUDWGbvPUtjLbNvov4RX4PSgps8b8DoiXB6o9M 3bIy2c4DMcDRpN+AKxdEmDW3ctdsfbELONSvidEtspJjPfKiCJ3Y1Vtod/3c7pI/ 4I/yaSV/qE1WmDCeSXSn68uJsIIWpct5UX0t7mnYn95icUtoT3/b30EXgKfKnx+b qRQPgZyW/3r/ter2nZDZct76ttIaG1mhmVCgUEw2JdpA1psAEcizneUrsJTijCbJ g42oEaVmigCFAT/xw98cQgkB7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvpFeXh G9eGA48z1KgsHFJ9j6ReMB8GA1UdIwQYMBaAFJC9HfE6mRwx8RhNURrzAxb8ACEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDE0QS9DQzA3REFCNjc0 RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhESHhHRTFSR3ZNREZ2d0FJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMMGQ4VHFaSERIeEdFMVJHdk1ERnZ3QUlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDE0QS9DQzA3REFCNjc0RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhE SHhHRTFSR3ZNREZ2d0FJUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUoQnbx1/1XpMo5ZPAyTffxCAgUwI7eiUQCjGy1f7UZTHP60x5eW7I 1YqN501FY99M/FNuyg1JwhJTmr3fDiNzR+d5jdhfxV8uinVuQ7VggJNlvbTFctqq 0C9pECsAqEcF9vXA1UsT4TD9ZSVM3kA3i7rDMs9EcL0fDjPtaYdGBPGZUJ4Pt2Gq whYCgsWZNkDapbZXu2xMHA4PyALca+3eokxyTz+cGjtbuV2kPnRBiA3ZjR+F4iq1 ZnXXA4/uiWsScTaZDu7ZygqP6G8BfLvoZAG0bVW23H9Er6d9nUJme6MILq6hNqvQ 0fBPjT/8mU8ZVKi2hLPrCYzPGk0EZr7s -----END CERTIFICATE-----Generated at Wed Aug 6 00:36:09 2025 by rpki-client