$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json) Hash identifier: SyOPEBRBe90gZVy18SlWr9kau5QscHZu2dDAmBG6lXY= Subject key identifier: 2E:1E:25:E2:F0:31:28:D3:A1:B1:59:94:16:8B:13:42:BD:18:CA:D5 Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft Manifest number: 037F Signing time: Sat 09 Aug 2025 01:23:22 +0000 Manifest this update: Sat 09 Aug 2025 01:23:21 +0000 Manifest next update: Sat 16 Aug 2025 01:23:21 +0000 Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: troPfYzdNhuT+jqmoPYipPJVPPKygsXligvWFR9E+us=) 2: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: xHLevAzZuis8NnrBHZLDJf2yx7IF05dGBA1riYkWutY=) 3: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: /NRpEcDAXrkS/YDBwDOng+rHtIrpT7sCWxlP3Tbbtb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Validity Not Before: Aug 9 01:23:21 2025 GMT Not After : Aug 16 01:23:21 2025 GMT Subject: CN=6896a309-5913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:cd:cc:57:58:be:3a:ad:f1:c6:7e:42:2d: 46:27:f5:7f:82:eb:34:81:31:78:ed:a2:7b:5b:32: 84:8e:80:f4:f8:9d:91:fd:13:a5:0c:bb:13:78:05: f7:38:50:6b:56:3d:e9:2a:04:45:1f:90:a1:4a:b3: a0:ab:a5:12:f5:c7:e7:f2:90:7b:f2:65:4e:13:07: d2:24:3d:fa:94:7f:22:f2:b6:90:2b:f4:51:ba:51: 52:d9:57:80:93:59:48:48:f9:bc:c8:e9:9d:d1:f1: b7:e3:17:aa:77:70:0c:48:e9:a5:7a:71:fd:4c:b4: da:09:81:d5:cf:4e:06:4e:9e:60:df:5f:ef:cc:96: 7c:59:50:0e:90:67:7d:d1:3d:a9:05:c7:bd:7e:ef: b9:39:f4:96:06:63:27:04:f3:d4:f9:12:a1:25:6f: 4e:88:9c:89:a7:94:5a:d8:79:44:90:3d:52:7c:f4: 6a:ad:8f:03:27:cd:8b:f7:f4:f1:e6:87:4a:f4:25: 8c:48:27:79:36:d5:e9:45:6d:9a:ac:f5:a6:11:1b: 2d:97:77:ba:1a:45:94:dc:a0:8d:0a:7e:1e:3c:d5: 4d:21:10:99:2a:d1:58:e5:29:44:9c:19:83:ff:d0: a2:1e:0c:d5:b9:ea:71:35:50:d8:06:22:c7:d6:13: 56:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1E:25:E2:F0:31:28:D3:A1:B1:59:94:16:8B:13:42:BD:18:CA:D5 X509v3 Authority Key Identifier: keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:80:5a:3c:5a:69:ac:41:84:5e:8f:63:3f:8e:e5:69:a5:8e: 71:9c:13:d3:c4:a1:70:76:aa:a9:b0:b6:ab:24:af:dd:75:28: 15:3f:d3:a0:41:be:1a:05:f1:7f:a4:da:20:9e:01:94:d2:3c: 58:b8:c3:45:bb:71:a9:74:2f:79:26:03:3b:69:71:70:96:2b: 6b:10:ee:6c:d8:54:f0:48:19:f3:9e:2a:e7:81:18:3f:e9:a0: 65:f7:a3:e8:2b:3e:60:33:81:8b:1d:73:65:da:19:e0:6f:f7: 92:b1:65:8a:61:bb:31:39:88:07:f1:6f:61:9c:14:c5:c1:a3: 20:d2:2d:39:3e:eb:b7:f5:f8:4a:79:71:2d:55:14:be:1c:26: 2d:13:e0:1f:16:be:6d:72:88:57:c7:19:cd:e6:c5:e0:5b:e7: 15:c3:29:b0:7e:b7:2f:09:ad:63:c8:7e:ae:49:f9:a2:50:6e: c6:26:16:9a:68:b0:92:90:08:34:d9:e9:8a:1a:ae:ba:dc:b0: 64:34:1e:9c:cc:60:d1:f5:6c:48:01:e2:90:2e:fe:fc:ad:8d: 8d:1e:5c:cb:1f:c2:a2:a1:c2:af:83:d0:81:de:35:95:f0:d2: 71:44:7b:8e:d3:68:f0:a8:e5:47:68:41:9f:91:86:7b:14:52: e8:e0:84:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz N0JBMUNEMjgwHhcNMjUwODA5MDEyMzIxWhcNMjUwODE2MDEyMzIxWjAYMRYwFAYD VQQDEw02ODk2YTMwOS01OTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGjNzFdYvjqt8cZ+Qi1GJ/V/gus0gTF47aJ7WzKEjoD0+J2R/ROlDLsTeAX3 OFBrVj3pKgRFH5ChSrOgq6US9cfn8pB78mVOEwfSJD36lH8i8raQK/RRulFS2VeA k1lISPm8yOmd0fG34xeqd3AMSOmlenH9TLTaCYHVz04GTp5g31/vzJZ8WVAOkGd9 0T2pBce9fu+5OfSWBmMnBPPU+RKhJW9OiJyJp5Ra2HlEkD1SfPRqrY8DJ82L9/Tx 5odK9CWMSCd5NtXpRW2arPWmERstl3e6GkWU3KCNCn4ePNVNIRCZKtFY5SlEnBmD /9CiHgzVuepxNVDYBiLH1hNWBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4eJeLw MSjTobFZlBaLE0K9GMrVMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0 RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/gFo8WmmsQYRej2M/juVppY5xnBPTxKFwdqqpsLarJK/ddSgVP9Og Qb4aBfF/pNogngGU0jxYuMNFu3GpdC95JgM7aXFwlitrEO5s2FTwSBnznirngRg/ 6aBl96PoKz5gM4GLHXNl2hngb/eSsWWKYbsxOYgH8W9hnBTFwaMg0i05Puu39fhK eXEtVRS+HCYtE+AfFr5tcohXxxnN5sXgW+cVwymwfrcvCa1jyH6uSfmiUG7GJhaa aLCSkAg02emKGq663LBkNB6czGDR9WxIAeKQLv78rY2NHlzLH8KiocKvg9CB3jWV 8NJxRHuO02jwqOVHaEGfkYZ7FFLo4IT5 -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:37 2025 by rpki-client