$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json) Hash identifier: J26udMQ2HxVF4QZG3bBqzHqPRdjkmNxlkh+IGAnMhIw= Subject key identifier: 87:1E:94:CD:4B:35:A4:16:FB:37:B7:17:FD:B5:0C:40:C9:A7:99:D3 Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft Manifest number: 0105 Signing time: Sat 09 Aug 2025 05:26:35 +0000 Manifest this update: Sat 09 Aug 2025 05:26:35 +0000 Manifest next update: Sat 16 Aug 2025 05:26:35 +0000 Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: 4eGuj4SRXbc99jcWVmV0es8GbroQqLQqxa9FAwuPMxM=) 2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Aug 9 05:26:35 2025 GMT Not After : Aug 16 05:26:35 2025 GMT Subject: CN=6896dc0b-9c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:3d:bc:33:ed:8d:24:d4:4e:f8:2c:80:53: 51:a7:8e:11:6b:4a:75:a3:0d:1f:dc:50:aa:b6:2b: 65:3c:d9:7d:66:58:82:46:88:73:d4:7e:e3:fa:a0: 50:3c:4c:f0:ad:78:ca:0e:1f:91:ac:77:ca:11:d3: c7:7a:43:44:d4:22:be:74:8d:ff:85:76:1d:8b:5f: 2e:01:db:fc:49:f1:a0:8f:1f:5f:5f:84:36:c2:2b: 2d:f3:2d:42:25:a1:5c:b5:04:05:66:a8:e5:df:a0: 6b:24:f5:41:07:e3:7f:13:19:e7:33:1e:b3:4d:df: fb:49:21:61:0b:b6:8c:ef:5b:1a:63:fd:01:5a:89: a0:3d:fb:38:fc:05:f6:36:c4:46:90:75:7c:88:b9: 1b:4b:a2:05:95:15:46:03:2c:79:10:b0:08:f4:65: fb:78:12:bb:96:2d:1b:29:3e:a7:9e:f4:ba:66:df: 41:52:bd:c9:ce:c8:c8:ed:fb:1d:58:8d:05:dd:5c: e0:09:0a:b0:f6:59:1d:c9:67:9e:8c:da:bc:49:86: 1e:aa:b8:6c:48:55:a5:8e:6b:8f:07:e2:21:92:5e: 68:f0:bf:63:2a:f8:63:e1:2f:2d:e1:49:50:80:5a: 5c:6a:49:33:0f:ad:54:93:d6:00:c5:75:51:90:01: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1E:94:CD:4B:35:A4:16:FB:37:B7:17:FD:B5:0C:40:C9:A7:99:D3 X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:02:65:f5:85:e9:54:b5:3a:2a:22:73:ef:4a:9c:9a:89:f4: e9:f0:ce:d4:2e:55:5e:63:8a:3d:9f:09:b3:61:15:8a:58:5f: ec:21:ba:64:f5:f5:88:32:19:4b:6b:07:95:88:c0:fe:db:ee: 59:cf:ea:ff:6b:42:4c:b4:97:6a:6e:82:6a:40:ce:f6:f6:b1: 0c:b4:38:7e:06:eb:83:5a:40:73:ca:da:e3:84:09:eb:3e:4e: e2:01:74:4f:58:b9:fe:2f:45:5e:d5:05:bc:63:76:0f:c0:de: 32:68:59:a9:43:e1:c0:9a:39:d1:b7:73:e5:1a:7a:f4:c4:5f: 44:52:0a:86:0f:ee:50:ab:25:d4:a5:73:b2:29:78:2e:54:f5: 38:e0:a9:d4:3e:76:5a:cc:ac:f6:4c:89:b7:c9:ee:be:b8:dc: 2f:d7:b5:57:74:de:16:21:bf:8c:23:6e:9b:c3:20:a7:7a:05: bf:a7:28:e4:cf:9d:4e:9e:07:35:88:a1:f6:c1:f7:bf:c4:48: 51:dd:ba:ab:e2:e8:04:7b:1e:0d:b0:a5:8c:32:8e:65:51:d0: ad:a1:a0:b3:b0:75:6e:2c:e6:88:71:de:a7:93:83:84:b2:92: da:b3:8d:9f:87:e5:16:f1:2c:a2:29:37:86:c4:f4:d3:0a:14: 70:75:b4:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjUwODA5MDUyNjM1WhcNMjUwODE2MDUyNjM1WjAYMRYwFAYD VQQDEw02ODk2ZGMwYi05YzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9s9vDPtjSTUTvgsgFNRp44Ra0p1ow0f3FCqtitlPNl9ZliCRohz1H7j+qBQ PEzwrXjKDh+RrHfKEdPHekNE1CK+dI3/hXYdi18uAdv8SfGgjx9fX4Q2wist8y1C JaFctQQFZqjl36BrJPVBB+N/ExnnMx6zTd/7SSFhC7aM71saY/0BWomgPfs4/AX2 NsRGkHV8iLkbS6IFlRVGAyx5ELAI9GX7eBK7li0bKT6nnvS6Zt9BUr3JzsjI7fsd WI0F3VzgCQqw9lkdyWeejNq8SYYeqrhsSFWljmuPB+Ihkl5o8L9jKvhj4S8t4UlQ gFpcakkzD61Uk9YAxXVRkAFw1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcelM1L NaQW+ze3F/21DEDJp5nTMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z LTVaMFVmN3RyMG54U09Ham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpAmX1helUtToqInPvSpyaifTp8M7ULlVeY4o9nwmzYRWKWF/sIbpk 9fWIMhlLaweViMD+2+5Zz+r/a0JMtJdqboJqQM729rEMtDh+BuuDWkBzytrjhAnr Pk7iAXRPWLn+L0Ve1QW8Y3YPwN4yaFmpQ+HAmjnRt3PlGnr0xF9EUgqGD+5QqyXU pXOyKXguVPU44KnUPnZazKz2TIm3ye6+uNwv17VXdN4WIb+MI26bwyCnegW/pyjk z51Ongc1iKH2wfe/xEhR3bqr4ugEex4NsKWMMo5lUdCtoaCzsHVuLOaIcd6nk4OE spLas42fh+UW8SyiKTeGxPTTChRwdbRs -----END CERTIFICATE-----Generated at Sat Aug 9 20:42:37 2025 by rpki-client