$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json) Hash identifier: bieYadi2XjWDBQZOw1aeUWH4vdJSRz55lC0y/v3dqhQ= Subject key identifier: F3:EE:0F:E6:86:51:31:41:09:2B:41:D5:0B:72:9E:63:C8:2B:A4:69 Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Certificate serial: 0841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft Manifest number: 083B Signing time: Sun 10 Aug 2025 20:45:17 +0000 Manifest this update: Sun 10 Aug 2025 20:45:17 +0000 Manifest next update: Sun 17 Aug 2025 20:45:17 +0000 Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: SNrpNW3wsUubkdkIQk0FOqUWirrALEBEjUYBVcgfIMM=) 2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Validity Not Before: Aug 10 20:45:17 2025 GMT Not After : Aug 17 20:45:17 2025 GMT Subject: CN=689904dd-7520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:25:31:7b:aa:7e:2e:24:22:d5:d0:49:ab: db:d2:f1:dd:8a:c6:9d:2f:77:3e:9f:8b:06:7b:bd: e5:33:c8:4d:53:16:19:f9:dd:59:d6:06:c9:56:99: fb:41:e3:d0:df:16:9d:8d:62:fa:bb:b1:49:50:95: 12:15:59:da:43:e2:02:5d:cb:a4:24:65:ee:6f:c6: c2:d5:69:e7:42:4b:c0:d7:c9:1c:3b:25:7b:03:b4: 3a:a5:90:bb:34:ff:96:d4:0d:79:a0:b2:31:1e:51: df:52:4e:bc:4d:5f:9a:ca:06:a3:83:7a:67:7f:2e: a5:a9:43:d8:a9:e7:ff:41:8e:bf:aa:5a:31:50:97: 14:20:be:97:cf:13:04:1e:db:6f:c0:f2:11:06:a4: 45:65:57:3b:23:5b:b3:e1:56:7c:93:50:77:5b:54: b1:c4:0f:37:19:b4:d3:4b:54:1f:91:96:60:ee:be: 5f:25:d0:76:95:3e:45:f6:fd:db:6c:19:53:df:50: 77:f6:08:af:09:8a:27:4b:30:bf:db:26:e4:b7:0e: 35:3c:1e:cd:d6:05:4a:be:df:3b:1f:22:81:7a:8d: 6e:68:36:d9:47:d2:cc:95:63:1d:ba:bc:98:1b:c9: be:00:f7:b6:b8:13:b1:17:ed:d0:66:3e:f9:c9:0e: 34:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EE:0F:E6:86:51:31:41:09:2B:41:D5:0B:72:9E:63:C8:2B:A4:69 X509v3 Authority Key Identifier: keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:d6:43:4a:72:ea:29:66:48:ba:3a:38:ed:e4:2f:46:d5:1f: 16:ee:47:ab:22:1f:34:4b:d2:ac:d8:f7:f6:35:bc:4a:98:42: 05:01:db:f5:8e:04:4b:24:5b:db:59:95:a5:fd:8b:c5:eb:28: 4f:a6:c2:d8:52:b3:d3:be:de:ab:71:55:8a:98:8b:5f:38:3c: 04:65:5b:d1:be:51:1e:dd:c9:26:ee:2d:6f:3a:d6:ea:ca:0d: d4:f2:4b:90:7f:b3:fe:9a:96:ee:49:ca:12:91:60:56:2b:8d: 7d:a7:04:4b:7f:83:be:fb:7d:af:57:9f:cb:57:ae:fe:0d:fa: 71:99:9b:40:76:37:4c:dd:f7:9f:7a:0b:73:e7:42:16:fa:f9: 3b:fe:7a:c9:af:4b:a5:58:3d:3f:5f:f2:51:dc:5d:11:28:0c: dd:3b:6d:98:17:78:db:93:57:ad:de:4a:86:53:bb:1b:df:c8: 72:16:10:92:b9:fb:17:6c:31:18:b7:4f:9f:cf:69:9d:cf:2b: fb:90:5f:d8:30:fe:94:cf:37:70:7f:76:9f:32:d5:ce:a0:1d: 12:f6:6a:69:50:c6:9c:5c:61:20:8b:07:03:4c:f7:29:e3:ff: e6:cf:3b:19:78:d3:32:14:73:b3:ad:b2:d3:13:0d:2e:6d:c1: 9c:e2:90:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3 RDcxNjQyNEIwHhcNMjUwODEwMjA0NTE3WhcNMjUwODE3MjA0NTE3WjAYMRYwFAYD VQQDEw02ODk5MDRkZC03NTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgwlMXuqfi4kItXQSavb0vHdisadL3c+n4sGe73lM8hNUxYZ+d1Z1gbJVpn7 QePQ3xadjWL6u7FJUJUSFVnaQ+ICXcukJGXub8bC1WnnQkvA18kcOyV7A7Q6pZC7 NP+W1A15oLIxHlHfUk68TV+aygajg3pnfy6lqUPYqef/QY6/qloxUJcUIL6XzxME HttvwPIRBqRFZVc7I1uz4VZ8k1B3W1SxxA83GbTTS1QfkZZg7r5fJdB2lT5F9v3b bBlT31B39givCYonSzC/2ybktw41PB7N1gVKvt87HyKBeo1uaDbZR9LMlWMduryY G8m+APe2uBOxF+3QZj75yQ402wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPuD+aG UTFBCStB1QtynmPIK6RpMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3 ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3 V0NtSl9NdHlfSko5Y1dRa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG1kNKcuopZki6Ojjt5C9G1R8W7kerIh80S9Ks2Pf2NbxKmEIFAdv1 jgRLJFvbWZWl/YvF6yhPpsLYUrPTvt6rcVWKmItfODwEZVvRvlEe3ckm7i1vOtbq yg3U8kuQf7P+mpbuScoSkWBWK419pwRLf4O++32vV5/LV67+DfpxmZtAdjdM3fef egtz50IW+vk7/nrJr0ulWD0/X/JR3F0RKAzdO22YF3jbk1et3kqGU7sb38hyFhCS ufsXbDEYt0+fz2mdzyv7kF/YMP6Uzzdwf3afMtXOoB0S9mppUMacXGEgiwcDTPcp 4//mzzsZeNMyFHOzrbLTEw0ubcGc4pBJ -----END CERTIFICATE-----Generated at Mon Aug 11 10:35:30 2025 by rpki-client