$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft File: KdzyaXujSl1MV_LtlnGNAxu8VjA.mft (raw, json) Hash identifier: ACK/n671IJONxBfcy8+XjttHK6N222UuOaUhmZgxeiA= Subject key identifier: F1:57:0A:30:26:54:34:98:9F:E4:53:6E:EF:B7:F5:D8:9C:3D:C3:0A Authority key identifier: 29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 Certificate issuer: /CN=A91A1103/serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Certificate serial: 1630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft Manifest number: 1626 Signing time: Fri 08 Aug 2025 16:55:17 +0000 Manifest this update: Fri 08 Aug 2025 16:55:16 +0000 Manifest next update: Fri 15 Aug 2025 16:55:16 +0000 Files and hashes: 1: KdzyaXujSl1MV_LtlnGNAxu8VjA.crl (hash: 53tLKJIDLGy1rG2aqYR2DBD8BY8cIA6CtbmZ4xVn0hA=) 2: 1C85059C1EB911E88533FA4EC4F9AE02.roa (hash: RqHN2PwZe21iOjQw65O1dXW58VJkxhmOGxQkFQUXslk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5680 (0x1630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1103, serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Validity Not Before: Aug 8 16:55:16 2025 GMT Not After : Aug 15 16:55:16 2025 GMT Subject: CN=68962bf5-0de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:48:9e:3c:a6:0f:50:50:2f:86:21:c3:c1: 91:99:ba:97:56:53:a2:34:af:73:8a:00:bb:8c:25: b1:9e:e8:9b:5d:7a:7b:f6:c1:b9:83:ed:d6:18:14: 58:24:f5:4e:fd:1b:78:d2:fe:a0:97:3d:a3:b6:a1: 18:52:69:a9:cf:41:03:0a:f9:58:4b:72:69:87:11: 89:e5:1e:1f:d5:e9:cf:71:18:8c:f3:54:7a:5d:51: 9c:2e:ed:1c:0e:f3:5a:8a:05:69:b6:87:f8:3f:cf: 73:b2:68:fd:ae:17:ea:89:29:46:6d:09:5c:5a:8a: 51:7b:8b:d2:c5:1d:21:8c:96:ef:85:d8:3b:44:e4: a9:a1:f4:bd:c0:ff:ce:ad:b9:7f:f9:8e:b4:0a:a7: 56:75:87:cf:1f:58:f9:83:a4:a3:cc:64:a6:db:50: f1:e6:8e:5f:fb:5f:bb:08:b4:f6:be:25:2d:bc:54: d3:88:18:53:9c:5d:3d:99:34:34:9e:7c:06:70:27: a4:a2:97:4e:3a:c7:f1:bb:c5:6f:03:6f:98:64:ee: f6:78:5c:52:a1:04:9e:29:ff:e0:b9:ff:1f:b8:9f: 4d:ef:03:93:37:9a:d2:55:ec:56:bd:e6:87:1d:9e: d2:88:a1:63:46:06:0e:df:13:79:24:59:fd:c9:19: 3c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:57:0A:30:26:54:34:98:9F:E4:53:6E:EF:B7:F5:D8:9C:3D:C3:0A X509v3 Authority Key Identifier: keyid:29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d8:e3:38:a4:17:65:dd:b2:fe:57:db:68:53:00:d7:ee:21: d2:8c:49:95:78:db:fa:aa:d8:cd:51:fb:c7:6a:08:72:1d:0e: ac:58:47:b8:3e:d8:80:1d:c5:fc:ec:04:3c:ea:22:27:a8:34: 59:87:1d:90:e0:bf:7e:2c:18:a9:fb:06:00:69:33:75:3e:78: 3c:cc:71:dc:47:40:15:84:50:8c:18:70:c1:b8:3c:f2:dd:5f: 29:ea:5d:60:a3:6f:b9:34:0b:6c:7e:e2:b7:69:fb:bb:51:ea: 00:c6:a3:66:0a:c3:6b:8a:2a:48:44:d4:ca:bb:e0:80:01:56: 33:80:8d:5d:aa:64:02:31:dd:4b:e8:a2:e7:c7:4b:9a:e7:0d: 19:4f:fa:02:03:cc:50:c0:00:e1:37:5b:59:81:21:87:03:b4: 3d:f1:76:a6:57:97:b1:34:86:e7:94:b7:a2:3e:ed:45:89:97: 7b:cf:85:ed:b0:72:75:1d:68:e7:d2:3c:53:77:fc:df:a3:04: 78:1e:52:68:ed:de:92:ec:bf:2b:1c:57:d5:7c:27:8f:b5:1e: 7b:d1:8e:0f:f1:6d:26:3c:fa:c3:21:bf:e0:33:71:d9:0e:f7: 1b:9f:90:81:16:4b:dc:7b:cb:0e:2a:32:c4:1e:ad:78:71:87: 61:7c:b8:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExMDMxMTAvBgNVBAUTKDI5RENGMjY5N0JBMzRBNUQ0QzU3RjJFRDk2NzE4RDAz MUJCQzU2MzAwHhcNMjUwODA4MTY1NTE2WhcNMjUwODE1MTY1NTE2WjAYMRYwFAYD VQQDEw02ODk2MmJmNS0wZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NhInjymD1BQL4Yhw8GRmbqXVlOiNK9zigC7jCWxnuibXXp79sG5g+3WGBRY JPVO/Rt40v6glz2jtqEYUmmpz0EDCvlYS3JphxGJ5R4f1enPcRiM81R6XVGcLu0c DvNaigVptof4P89zsmj9rhfqiSlGbQlcWopRe4vSxR0hjJbvhdg7ROSpofS9wP/O rbl/+Y60CqdWdYfPH1j5g6SjzGSm21Dx5o5f+1+7CLT2viUtvFTTiBhTnF09mTQ0 nnwGcCekopdOOsfxu8VvA2+YZO72eFxSoQSeKf/guf8fuJ9N7wOTN5rSVexWveaH HZ7SiKFjRgYO3xN5JFn9yRk8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFXCjAm VDSYn+RTbu+39dicPcMKMB8GA1UdIwQYMBaAFCnc8ml7o0pdTFfy7ZZxjQMbvFYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTEwMy8yMDk1QUE2MjFB MDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNsMU1WX0x0bG5HTkF4dThW akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tkenlhWHVqU2wxTVZfTHRsbkdOQXh1OFZqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTEwMy8yMDk1QUE2MjFBMDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNs MU1WX0x0bG5HTkF4dThWakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs2OM4pBdl3bL+V9toUwDX7iHSjEmVeNv6qtjNUfvHaghyHQ6sWEe4 PtiAHcX87AQ86iInqDRZhx2Q4L9+LBip+wYAaTN1Png8zHHcR0AVhFCMGHDBuDzy 3V8p6l1go2+5NAtsfuK3afu7UeoAxqNmCsNriipIRNTKu+CAAVYzgI1dqmQCMd1L 6KLnx0ua5w0ZT/oCA8xQwADhN1tZgSGHA7Q98XamV5exNIbnlLeiPu1FiZd7z4Xt sHJ1HWjn0jxTd/zfowR4HlJo7d6S7L8rHFfVfCePtR570Y4P8W0mPPrDIb/gM3HZ Dvcbn5CBFkvce8sOKjLEHq14cYdhfLhD -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:38 2025 by rpki-client