$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft File: kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json) Hash identifier: tOponyUvlpcLufNiK2TpGOhjjw7ng9CbeW7QFQB2xHY= Subject key identifier: CC:17:1F:F8:65:A9:DE:8C:35:07:98:B0:47:13:89:DE:96:9E:90:07 Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA Certificate issuer: /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Certificate serial: 0805 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft Manifest number: 07FF Signing time: Sun 10 Aug 2025 20:56:28 +0000 Manifest this update: Sun 10 Aug 2025 20:56:28 +0000 Manifest next update: Sun 17 Aug 2025 20:56:28 +0000 Files and hashes: 1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: Dyd3Rs9zd/C03RH671wsZc5R7uJqvWw2VPOWVq6XPHw=) 2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: IS2j0d/zVkxwnqe+1txywwwV0QyYZmwCTkV8FQIqSXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2053 (0x805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Validity Not Before: Aug 10 20:56:28 2025 GMT Not After : Aug 17 20:56:28 2025 GMT Subject: CN=6899077c-92ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:b2:77:6c:7f:ed:1e:3f:a8:52:ce:e9:f9: 12:a5:6c:11:4f:4a:25:04:0e:91:f6:6e:b3:c2:4b: e7:00:97:28:d2:2b:72:c9:42:eb:ed:ac:b7:a6:15: 43:00:b6:65:45:8f:98:f2:8b:23:97:f2:66:73:0a: 05:c1:ae:a4:6c:5a:77:d4:ff:5a:74:98:36:eb:88: 42:9e:d0:7f:bf:37:50:1e:4f:38:d8:d6:15:8b:c8: 65:3b:8a:6e:b0:1f:77:c7:8b:00:c1:24:5c:60:3b: b7:bb:b1:e8:db:c5:78:9e:6b:e4:1a:2f:4f:c8:cb: 69:84:86:9d:ab:4b:b1:a2:e1:20:97:de:bc:7c:e6: f1:6a:e0:14:4f:d6:e8:cb:da:91:fd:13:29:c2:59: 03:f2:7c:bc:8c:91:c7:0a:3f:01:7c:ab:29:63:88: a1:02:cb:98:ed:01:fc:74:80:7e:7d:85:44:68:aa: e6:23:e6:19:c3:2e:70:94:c0:dc:8d:61:a2:d8:4c: be:ed:64:a6:d4:b9:47:09:1a:14:01:a5:f7:76:bd: ab:67:b0:0b:e6:80:30:d6:71:90:72:96:b1:e3:5f: 52:6d:c6:e2:94:63:13:ec:b3:4a:2d:95:d5:1f:51: 5b:07:dc:4b:b6:7b:59:aa:af:fd:d5:ee:44:31:6a: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:17:1F:F8:65:A9:DE:8C:35:07:98:B0:47:13:89:DE:96:9E:90:07 X509v3 Authority Key Identifier: keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:53:d5:53:d9:7e:ff:3e:20:ca:04:b0:3a:e7:d3:23:f5:e4: 02:02:88:83:1d:a5:21:41:11:67:ce:6b:3e:f9:29:f5:fe:f6: 13:a0:f2:40:a4:db:61:02:2f:96:4a:c5:a5:a5:8a:40:30:4f: 63:a0:a8:e4:3a:27:b9:c4:e0:f3:e1:49:fc:7e:41:70:48:e8: 1b:2c:7e:07:53:aa:2f:ce:f8:b1:14:0f:92:e7:eb:2c:33:8b: 1c:01:73:22:45:87:9f:fa:33:9a:f6:be:51:74:99:ec:5b:c2: 57:55:0e:ab:b6:51:b4:b6:17:0a:0e:99:c9:1b:91:0c:ce:bb: b1:9b:95:17:88:fc:1b:56:6d:3b:5a:81:3a:c2:c9:ba:42:80: 0c:02:0e:e8:d5:ae:c3:2d:80:6a:01:bc:08:4e:72:1b:8a:7c: da:bd:e5:cd:39:3c:01:b7:0a:b5:0d:45:67:05:be:16:71:77: 22:a3:84:3b:11:5e:c5:3d:7d:ee:bc:ef:34:5a:1f:b1:20:96: 4b:e3:93:1e:cd:63:2b:42:c7:3d:13:6c:05:5a:21:04:a7:ac: 4b:f9:43:f1:46:f6:12:89:fd:06:95:2e:b5:63:9b:37:f6:11: b5:31:6b:57:06:48:d0:88:53:4c:d8:e5:57:f6:e1:4d:39:09: 06:c1:9e:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1MDMxMTAvBgNVBAUTKDkzM0VGNzI2MDZEOUQ1QjI5RkUzQTQxRjIwQzUyQjIw Q0FGNTU1QkEwHhcNMjUwODEwMjA1NjI4WhcNMjUwODE3MjA1NjI4WjAYMRYwFAYD VQQDEw02ODk5MDc3Yy05MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFyyd2x/7R4/qFLO6fkSpWwRT0olBA6R9m6zwkvnAJco0ityyULr7ay3phVD ALZlRY+Y8osjl/JmcwoFwa6kbFp31P9adJg264hCntB/vzdQHk842NYVi8hlO4pu sB93x4sAwSRcYDu3u7Ho28V4nmvkGi9PyMtphIadq0uxouEgl968fObxauAUT9bo y9qR/RMpwlkD8ny8jJHHCj8BfKspY4ihAsuY7QH8dIB+fYVEaKrmI+YZwy5wlMDc jWGi2Ey+7WSm1LlHCRoUAaX3dr2rZ7AL5oAw1nGQcpax419SbcbilGMT7LNKLZXV H1FbB9xLtntZqq/91e5EMWqrsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwXH/hl qd6MNQeYsEcTid6WnpAHMB8GA1UdIwQYMBaAFJM+9yYG2dWyn+OkHyDFKyDK9VW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjUwMy8wMTU0QjRCNkVF ODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFiS2Y0NlFmSU1VcklNcjFW Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6NzNKZ2JaMWJLZjQ2UWZJTVVySU1yMVZiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjUwMy8wMTU0QjRCNkVFODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFi S2Y0NlFmSU1VcklNcjFWYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEU9VT2X7/PiDKBLA659Mj9eQCAoiDHaUhQRFnzms++Sn1/vYToPJA pNthAi+WSsWlpYpAME9joKjkOie5xODz4Un8fkFwSOgbLH4HU6ovzvixFA+S5+ss M4scAXMiRYef+jOa9r5RdJnsW8JXVQ6rtlG0thcKDpnJG5EMzruxm5UXiPwbVm07 WoE6wsm6QoAMAg7o1a7DLYBqAbwITnIbinzaveXNOTwBtwq1DUVnBb4WcXcio4Q7 EV7FPX3uvO80Wh+xIJZL45MezWMrQsc9E2wFWiEEp6xL+UPxRvYSif0GlS61Y5s3 9hG1MWtXBkjQiFNM2OVX9uFNOQkGwZ6n -----END CERTIFICATE-----Generated at Mon Aug 11 11:18:56 2025 by rpki-client