$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: KQKSl5xcO4hCrbjmaPrOd0dofVwAhtsFGFyKs12GtKY= Subject key identifier: A0:76:FB:0B:75:18:22:9E:43:9F:A2:E8:F1:E2:E5:D9:91:FE:36:FD Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 118F Signing time: Sun 10 Aug 2025 19:35:18 +0000 Manifest this update: Sun 10 Aug 2025 19:35:17 +0000 Manifest next update: Sun 17 Aug 2025 19:35:17 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: nwbUfqZgaMo+diSQ+JWVBxHepyhTSjhc9tE7HDfjv4M=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: kG/awft1YnlMUcGo/TLCAbm8s2p3POH5kub747SVbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: Aug 10 19:35:17 2025 GMT Not After : Aug 17 19:35:17 2025 GMT Subject: CN=6898f476-60fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2f:58:36:53:9c:92:50:4d:ef:25:52:5f:26: 9c:28:ca:3e:cf:6c:cf:f9:66:55:ed:51:9d:8d:2d: 7c:5c:19:27:eb:8b:3a:15:1c:1f:17:a2:a8:c2:54: 24:10:2b:dd:b6:d5:fe:e1:3a:fb:48:7d:41:e5:14: 23:e8:21:16:b6:27:aa:f5:4e:17:f5:ff:ea:cf:0b: 53:93:cd:3c:ea:0a:bd:1c:21:3e:11:0a:0d:44:c8: 47:60:e2:ff:a8:0a:13:1c:c6:08:4a:71:1f:49:10: 53:ef:21:f2:f1:26:7b:fd:6b:28:6c:bd:aa:0a:d9: 21:c7:4c:bc:80:52:90:9d:94:85:37:e3:3d:b5:b6: ff:b2:6b:62:5e:6b:a1:50:5d:c9:11:e7:01:ab:2f: 6c:1b:10:3b:d3:8e:10:cb:ff:2e:e7:a4:3b:27:6d: 1e:c9:bb:fa:75:70:50:91:c7:fb:8d:37:46:90:ef: ba:c7:05:6e:54:a1:a0:f6:77:40:32:46:1d:fd:c5: 82:b9:ad:b0:72:12:04:41:b1:4b:40:9a:c9:01:25: c1:06:6a:3a:ee:19:5f:c0:84:93:6f:93:41:55:e4: 61:53:ef:68:2b:17:55:22:4e:79:9e:d6:48:23:2e: 25:18:0a:ad:8e:1e:16:a3:70:2b:ba:8a:47:d7:6a: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:FB:0B:75:18:22:9E:43:9F:A2:E8:F1:E2:E5:D9:91:FE:36:FD X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:54:77:8f:2d:bf:e7:31:e1:13:9d:a1:d2:c9:92:5e:0c:13: 54:a7:7c:b4:6b:d6:57:ec:3a:a6:91:9e:7c:12:e0:87:01:0a: 2e:c8:b2:7d:a4:6b:ca:99:5c:d3:de:8f:fb:b9:0f:a7:d7:88: 83:ab:94:e3:9b:12:43:9b:f2:5f:5b:72:3d:ec:44:12:ad:74: 23:be:ec:1e:b2:5f:2b:dc:42:91:68:e5:72:81:56:cf:fa:0f: 60:bd:e5:55:ad:41:c8:82:a1:05:f3:29:1a:1a:25:90:cd:7f: 27:15:4c:5a:b0:48:5f:5e:7b:58:8b:4e:b9:75:cc:28:9c:86: 3b:64:32:b1:22:79:46:98:21:96:91:bc:88:c4:88:95:43:49: b3:4b:a7:16:a7:33:64:75:36:3c:f5:f1:9e:6a:7f:1d:6d:1c: 87:aa:71:c4:78:94:4c:36:ff:c7:88:47:b8:ff:23:e2:46:01: f6:9d:76:26:31:59:16:45:00:9d:6d:c0:92:77:4d:8d:29:55: a1:74:48:59:9c:07:a4:91:a8:c9:64:5e:37:a0:9c:1e:25:f7: 34:0b:ec:a5:e1:38:65:c0:27:bd:2a:06:0f:27:aa:31:aa:f0: 0c:5a:7e:8a:a1:82:0b:87:01:f2:2e:ef:ab:fb:68:8f:e2:2e: 60:0a:61:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjUwODEwMTkzNTE3WhcNMjUwODE3MTkzNTE3WjAYMRYwFAYD VQQDEw02ODk4ZjQ3Ni02MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9S9YNlOcklBN7yVSXyacKMo+z2zP+WZV7VGdjS18XBkn64s6FRwfF6KowlQk ECvdttX+4Tr7SH1B5RQj6CEWtieq9U4X9f/qzwtTk8086gq9HCE+EQoNRMhHYOL/ qAoTHMYISnEfSRBT7yHy8SZ7/WsobL2qCtkhx0y8gFKQnZSFN+M9tbb/smtiXmuh UF3JEecBqy9sGxA7044Qy/8u56Q7J20eybv6dXBQkcf7jTdGkO+6xwVuVKGg9ndA MkYd/cWCua2wchIEQbFLQJrJASXBBmo67hlfwISTb5NBVeRhU+9oKxdVIk55ntZI Iy4lGAqtjh4Wo3AruopH12ogvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB2+wt1 GCKeQ5+i6PHi5dmR/jb9MB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8VHePLb/nMeETnaHSyZJeDBNUp3y0a9ZX7DqmkZ58EuCHAQouyLJ9 pGvKmVzT3o/7uQ+n14iDq5TjmxJDm/JfW3I97EQSrXQjvuwesl8r3EKRaOVygVbP +g9gveVVrUHIgqEF8ykaGiWQzX8nFUxasEhfXntYi065dcwonIY7ZDKxInlGmCGW kbyIxIiVQ0mzS6cWpzNkdTY89fGean8dbRyHqnHEeJRMNv/HiEe4/yPiRgH2nXYm MVkWRQCdbcCSd02NKVWhdEhZnAekkajJZF43oJweJfc0C+yl4ThlwCe9KgYPJ6ox qvAMWn6KoYILhwHyLu+r+2iP4i5gCmEY -----END CERTIFICATE-----Generated at Mon Aug 11 07:25:55 2025 by rpki-client