$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: 5pXqzHPwKyRnmikWbrIWGYDQBIAU0iAhOBwxm4yiTR4= Subject key identifier: 60:16:48:31:B6:FE:DA:FE:7F:7D:69:BC:EA:31:A2:FF:88:A8:DD:84 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 107C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 1075 Signing time: Fri 08 Aug 2025 17:33:30 +0000 Manifest this update: Fri 08 Aug 2025 17:33:29 +0000 Manifest next update: Fri 15 Aug 2025 17:33:29 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: 7fjbEjBByGOnOUgI7vxwg82gn6z3gKInnLFs9Uuv8MQ=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: Zx1NZFaobsMkPgZlMNZ8S9A1zmjC7C3D22JCgStrQxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4220 (0x107c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Aug 8 17:33:29 2025 GMT Not After : Aug 15 17:33:29 2025 GMT Subject: CN=689634e9-7561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:e4:8c:e0:18:44:87:2e:90:8c:e7:4a:31: 5b:d2:5d:f8:ab:59:38:16:28:b8:99:bf:f9:17:85: 62:ce:39:81:57:0f:ff:ed:48:68:8a:fd:66:e4:72: 7d:cf:af:52:d2:38:9c:63:51:d0:07:8b:63:a2:52: aa:34:a6:bc:b5:e0:9a:46:27:35:63:ab:8c:a7:bb: dc:4f:cf:34:62:d3:63:44:f8:fb:fd:46:1f:a3:75: 74:70:3c:26:33:80:3e:b3:18:1d:60:0b:66:29:96: 3c:20:ed:74:7e:2d:23:9a:39:17:d3:9c:ee:e2:58: ec:52:73:8f:13:22:a7:8c:39:82:8d:31:8a:15:83: 7e:69:97:02:f6:93:9a:66:09:3c:14:84:d7:86:4a: 64:67:20:d7:e3:3d:8f:77:46:58:2d:75:d9:2b:71: 3f:33:55:e2:0a:04:d9:94:64:54:14:ea:61:6d:44: 04:a0:00:18:20:01:1a:74:bb:07:80:ca:67:c4:60: e0:86:76:2e:a6:28:33:f7:d8:42:9b:62:80:f2:0c: af:28:19:77:26:0b:60:a0:5a:1a:f5:eb:19:a9:18: c5:e1:78:e1:05:9e:9f:fc:29:a1:df:cc:5c:72:f1: 0e:5e:45:3e:a0:89:e5:01:26:92:8b:db:31:71:91: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:48:31:B6:FE:DA:FE:7F:7D:69:BC:EA:31:A2:FF:88:A8:DD:84 X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:10:d4:c5:54:7f:41:bf:89:5f:52:07:b0:71:f2:de:23:88: d4:48:d6:bf:ac:06:fc:00:41:f2:7d:7a:e3:17:ba:d3:20:0b: 74:b9:dc:5d:b5:35:57:c3:94:c0:ef:a5:6b:38:f0:10:64:41: b1:41:9b:45:44:c3:4c:bd:3b:2b:bb:e9:78:82:63:48:0b:18: 47:e8:a8:cd:a6:9b:63:c7:8f:3f:20:4b:4b:3e:2f:ab:6a:c5: a6:23:e4:d8:0b:ce:80:56:bd:3e:e3:17:8c:8c:4a:14:3e:44: 47:4a:aa:21:93:fc:63:69:3c:a1:f7:53:bb:4b:7a:9c:4f:42: a5:30:62:df:a4:be:a2:9c:70:65:b3:e8:21:e0:cd:40:8d:20: 05:31:11:0a:f6:38:34:26:5d:cc:b6:96:e3:93:7a:cb:0f:05: 85:7a:b7:fe:95:72:46:1b:52:dd:08:72:51:31:3f:1a:fe:1a: 24:66:86:e0:34:51:79:64:d2:7c:f7:7b:6b:07:24:98:7a:a5: 01:f7:54:f8:af:c2:49:72:e5:a0:af:b7:b8:e2:24:37:09:57: f9:18:25:66:3d:7c:d4:13:6a:41:15:b3:72:02:89:a3:47:09: 1c:12:4a:9b:a7:55:64:12:df:50:45:9e:fd:08:27:e1:5b:b7: b8:2c:6b:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjUwODA4MTczMzI5WhcNMjUwODE1MTczMzI5WjAYMRYwFAYD VQQDEw02ODk2MzRlOS03NTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pnkjOAYRIcukIznSjFb0l34q1k4Fii4mb/5F4VizjmBVw//7Uhoiv1m5HJ9 z69S0jicY1HQB4tjolKqNKa8teCaRic1Y6uMp7vcT880YtNjRPj7/UYfo3V0cDwm M4A+sxgdYAtmKZY8IO10fi0jmjkX05zu4ljsUnOPEyKnjDmCjTGKFYN+aZcC9pOa Zgk8FITXhkpkZyDX4z2Pd0ZYLXXZK3E/M1XiCgTZlGRUFOphbUQEoAAYIAEadLsH gMpnxGDghnYupigz99hCm2KA8gyvKBl3JgtgoFoa9esZqRjF4XjhBZ6f/Cmh38xc cvEOXkU+oInlASaSi9sxcZHLIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAWSDG2 /tr+f31pvOoxov+IqN2EMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ENTFVH9Bv4lfUgewcfLeI4jUSNa/rAb8AEHyfXrjF7rTIAt0udxd tTVXw5TA76VrOPAQZEGxQZtFRMNMvTsru+l4gmNICxhH6KjNpptjx48/IEtLPi+r asWmI+TYC86AVr0+4xeMjEoUPkRHSqohk/xjaTyh91O7S3qcT0KlMGLfpL6inHBl s+gh4M1AjSAFMREK9jg0Jl3Mtpbjk3rLDwWFerf+lXJGG1LdCHJRMT8a/hokZobg NFF5ZNJ893trBySYeqUB91T4r8JJcuWgr7e44iQ3CVf5GCVmPXzUE2pBFbNyAomj RwkcEkqbp1VkEt9QRZ79CCfhW7e4LGt5 -----END CERTIFICATE-----Generated at Fri Aug 8 20:55:08 2025 by rpki-client