$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: lV4TPDZqHzvKiOsdMUvkNkIJjM7QIabrwA5SQqZyOSM= Subject key identifier: 70:59:4C:37:EF:F6:DD:A1:01:34:47:2B:04:2D:C0:7D:8B:64:AE:9D Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 0579 Signing time: Fri 08 Aug 2025 14:18:14 +0000 Manifest this update: Fri 08 Aug 2025 14:18:13 +0000 Manifest next update: Fri 15 Aug 2025 14:18:13 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: lDeFyoC7H5JJfK0e4uMORmAbXiLPUyEqqRix2LsjPEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: Aug 8 14:18:13 2025 GMT Not After : Aug 15 14:18:13 2025 GMT Subject: CN=68960725-5326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:18:5d:58:a4:de:ef:35:ab:96:83:07:d3: 92:37:c9:69:c9:ec:4d:16:8d:c4:0a:98:e2:d1:59: 1e:47:2d:22:1f:a7:45:f3:14:fe:89:ec:a5:b2:50: 3a:2d:d0:ff:36:f4:f2:76:4d:32:f5:21:2f:b8:3b: 3d:44:eb:d0:24:72:c7:61:e7:dc:e8:7f:cd:16:2e: 27:fb:41:a0:ff:8c:e3:1b:d8:25:cd:b2:c3:3a:0d: 40:f8:f2:4c:07:dc:55:b2:47:f0:32:4c:5c:ab:d4: e4:40:3c:f0:1f:de:95:72:b9:86:f0:3f:e0:4e:47: 6b:a5:61:b5:0c:0b:35:ac:db:2c:c1:a4:88:49:45: 4b:3c:3c:20:a7:66:43:37:2b:13:99:f3:7e:07:5f: e9:03:c3:09:46:d3:9e:83:c1:75:e3:f1:ca:f5:55: e9:5c:67:36:8a:db:69:39:c0:fb:3b:f8:9d:4a:67: 28:f6:fe:44:1e:31:5a:38:54:93:0d:18:a3:18:7b: 9e:a9:a6:d8:d8:46:7f:e3:f7:81:4d:bb:55:25:7e: 7e:67:d1:c0:31:b0:d5:3f:56:92:2b:12:35:1d:07: 7c:b6:72:3c:b0:d2:c5:1b:d1:cc:3b:89:5b:03:1f: cd:3c:fb:8d:1d:74:05:4b:13:92:be:0d:47:ba:19: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:4C:37:EF:F6:DD:A1:01:34:47:2B:04:2D:C0:7D:8B:64:AE:9D X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ff:ef:d8:74:ad:e4:b6:2b:e2:cf:0a:3d:46:a1:f5:8a:c2: da:d4:b3:b3:67:8e:b0:05:6f:f9:33:4b:a5:19:42:14:1b:b7: 28:f3:46:c1:31:cd:a3:af:7a:a0:a6:ea:20:cc:8e:d1:bc:95: 18:41:81:46:1d:db:01:34:86:c3:85:df:35:b5:5a:67:8b:a8: 6f:90:e6:c7:b3:fd:2c:22:80:3d:12:7d:28:ed:9d:9c:f0:9d: 2a:54:7c:87:5c:96:5a:66:74:be:1b:ec:ed:65:42:f9:21:75: e5:b6:80:31:a1:ef:83:3a:ff:fb:b5:eb:35:a2:b8:6f:83:a2: 14:f7:48:d5:f8:93:71:ef:47:0f:0a:db:f1:75:5a:98:9b:38: 03:06:09:64:a9:89:2a:68:70:f6:ec:b0:03:67:cc:b8:f5:a7: 9e:6b:22:0e:a5:82:b9:27:1c:1a:9e:76:27:14:1a:12:8a:44: 12:30:9a:2a:da:44:ba:61:8e:82:0f:31:7d:d5:62:e2:2b:aa: 13:68:57:50:cd:ec:7f:79:18:65:a1:9c:26:7f:ad:c9:77:ba: c2:1a:b5:f9:58:5c:8e:96:13:a2:63:3f:40:e9:10:d4:31:10: e0:02:e2:4e:06:f0:eb:ac:ee:ef:4a:da:e9:0a:42:61:a4:0f: 4f:0e:a7:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjUwODA4MTQxODEzWhcNMjUwODE1MTQxODEzWjAYMRYwFAYD VQQDEw02ODk2MDcyNS01MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrQYXVik3u81q5aDB9OSN8lpyexNFo3ECpji0VkeRy0iH6dF8xT+ieylslA6 LdD/NvTydk0y9SEvuDs9ROvQJHLHYefc6H/NFi4n+0Gg/4zjG9glzbLDOg1A+PJM B9xVskfwMkxcq9TkQDzwH96VcrmG8D/gTkdrpWG1DAs1rNsswaSISUVLPDwgp2ZD NysTmfN+B1/pA8MJRtOeg8F14/HK9VXpXGc2ittpOcD7O/idSmco9v5EHjFaOFST DRijGHueqabY2EZ/4/eBTbtVJX5+Z9HAMbDVP1aSKxI1HQd8tnI8sNLFG9HMO4lb Ax/NPPuNHXQFSxOSvg1HuhlqMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBZTDfv 9t2hATRHKwQtwH2LZK6dMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe/+/YdK3ktivizwo9RqH1isLa1LOzZ46wBW/5M0ulGUIUG7co80bB Mc2jr3qgpuogzI7RvJUYQYFGHdsBNIbDhd81tVpni6hvkObHs/0sIoA9En0o7Z2c 8J0qVHyHXJZaZnS+G+ztZUL5IXXltoAxoe+DOv/7tes1orhvg6IU90jV+JNx70cP CtvxdVqYmzgDBglkqYkqaHD27LADZ8y49aeeayIOpYK5JxwannYnFBoSikQSMJoq 2kS6YY6CDzF91WLiK6oTaFdQzex/eRhloZwmf63Jd7rCGrX5WFyOlhOiYz9A6RDU MRDgAuJOBvDrrO7vStrpCkJhpA9PDqd6 -----END CERTIFICATE-----Generated at Sat Aug 9 10:45:23 2025 by rpki-client