$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: Nu03ZcDDT/sBE0qncOXpZxcWB7q+hRCb51owOf3re8U= Subject key identifier: B8:D1:64:6D:2E:44:2D:7A:06:7C:D1:97:1C:9B:CE:21:ED:35:28:37 Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 16D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 16BC Signing time: Fri 08 Aug 2025 16:50:06 +0000 Manifest this update: Fri 08 Aug 2025 16:50:06 +0000 Manifest next update: Fri 15 Aug 2025 16:50:06 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: 5huWV8xCSoFO+S2Lu7d65MkQRaEp9LUP7+54JtBIjCM=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5842 (0x16d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Aug 8 16:50:06 2025 GMT Not After : Aug 15 16:50:06 2025 GMT Subject: CN=68962abe-676f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9a:20:32:73:43:ca:21:fb:fa:f9:0c:c5:6d: 49:85:89:c4:01:d2:51:c6:33:d3:80:3c:06:c9:04: 54:eb:19:10:69:f5:fa:ef:e9:86:b1:bc:87:8f:e3: db:e3:e2:09:4d:a0:02:46:bd:8a:74:0e:07:8a:0e: 31:56:fb:6d:15:7c:33:aa:c6:88:61:ec:e7:72:4e: fe:6a:c2:95:61:e8:9f:15:28:62:00:84:bc:f0:49: f8:d6:5c:43:1b:6a:81:d3:31:6e:95:70:be:9d:80: e6:12:2d:48:f2:57:92:8e:9e:03:12:01:04:a7:b8: 38:f7:96:b1:e1:6e:31:0a:7c:ad:72:67:67:95:8b: fe:5b:f9:ff:fb:ef:41:db:6b:71:86:21:7c:17:d1: 61:c4:61:13:3b:cd:e3:61:d6:4b:83:c8:6e:85:25: b3:63:d5:31:81:90:90:88:46:9b:de:9f:7c:4c:a6: 1c:3d:a4:0a:fd:81:0f:bb:b2:a7:1a:a5:c8:78:d4: 80:b5:ac:45:cb:f5:ea:6b:7b:31:46:27:5b:57:06: b3:6e:82:19:26:ab:65:f9:d4:26:4e:e6:4c:05:00: ff:c6:e2:be:ac:19:a9:91:eb:0d:e5:1b:4a:93:c6: 06:18:ff:75:72:e1:93:02:48:1a:b9:40:f9:06:ef: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:64:6D:2E:44:2D:7A:06:7C:D1:97:1C:9B:CE:21:ED:35:28:37 X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a0:a8:c4:21:ae:72:f5:83:4e:5a:d1:8f:44:00:ed:34:19: 93:e5:f9:92:af:46:1c:c9:34:51:46:a7:e4:32:85:6a:00:c9: e9:b4:ff:18:93:70:5f:65:a1:b9:a5:0f:e6:16:34:52:a9:42: 54:4a:73:17:87:fe:c9:7d:35:09:b1:d7:40:0a:1a:81:9b:b5: bc:b4:7f:7b:c1:a4:5c:aa:5a:7c:58:4d:aa:38:d5:fa:c8:9b: 27:e2:ba:8a:54:87:1b:9c:cb:07:f7:f7:bd:ba:64:cb:e6:c0: 3c:a6:07:d0:cf:bf:2e:d9:af:ee:df:30:b6:54:df:13:e6:93: 3b:b0:15:fd:fa:50:d0:e9:8f:39:c6:8f:05:e9:d8:8b:87:fe: 74:d2:a3:62:a2:12:77:dd:96:8d:5b:f9:9b:28:b3:70:6e:0c: 6d:34:b2:66:70:73:7d:df:9a:71:eb:8e:66:0a:48:f3:9a:e1: 27:29:e2:a6:20:a4:45:8d:3c:8a:07:7c:b2:47:ad:77:fc:1c: c9:3b:91:05:15:a0:a1:0f:f0:f7:a5:92:c9:19:8c:a6:ee:50: 87:43:36:42:ad:f1:03:0a:46:0a:b7:1c:d1:5e:33:ff:9b:d7: 82:29:06:f8:a3:a5:df:d8:63:60:2a:45:d7:67:8e:00:46:95: c8:7c:cb:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUwODA4MTY1MDA2WhcNMjUwODE1MTY1MDA2WjAYMRYwFAYD VQQDEw02ODk2MmFiZS02NzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZogMnNDyiH7+vkMxW1JhYnEAdJRxjPTgDwGyQRU6xkQafX67+mGsbyHj+Pb 4+IJTaACRr2KdA4Hig4xVvttFXwzqsaIYeznck7+asKVYeifFShiAIS88En41lxD G2qB0zFulXC+nYDmEi1I8leSjp4DEgEEp7g495ax4W4xCnytcmdnlYv+W/n/++9B 22txhiF8F9FhxGETO83jYdZLg8huhSWzY9UxgZCQiEab3p98TKYcPaQK/YEPu7Kn GqXIeNSAtaxFy/Xqa3sxRidbVwazboIZJqtl+dQmTuZMBQD/xuK+rBmpkesN5RtK k8YGGP91cuGTAkgauUD5Bu/swwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjRZG0u RC16BnzRlxybziHtNSg3MB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+oKjEIa5y9YNOWtGPRADtNBmT5fmSr0YcyTRRRqfkMoVqAMnptP8Y k3BfZaG5pQ/mFjRSqUJUSnMXh/7JfTUJsddAChqBm7W8tH97waRcqlp8WE2qONX6 yJsn4rqKVIcbnMsH9/e9umTL5sA8pgfQz78u2a/u3zC2VN8T5pM7sBX9+lDQ6Y85 xo8F6diLh/500qNiohJ33ZaNW/mbKLNwbgxtNLJmcHN935px645mCkjzmuEnKeKm IKRFjTyKB3yyR613/BzJO5EFFaChD/D3pZLJGYym7lCHQzZCrfEDCkYKtxzRXjP/ m9eCKQb4o6Xf2GNgKkXXZ44ARpXIfMuD -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:35 2025 by rpki-client