$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: h+KZGjv3B+Xc/DBtnuPU5WwGJ1AgtNIutXhWNUB4ltA= Subject key identifier: 30:64:8D:6B:8C:99:F9:B5:B7:C0:DA:28:17:13:63:EB:0D:C2:B2:77 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 0A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 0A0A Signing time: Sat 14 Jun 2025 19:38:51 +0000 Manifest this update: Sat 14 Jun 2025 19:38:50 +0000 Manifest next update: Sat 21 Jun 2025 19:38:50 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: wmLT3rfUiWxoJrk8vOsymC+nJQ4QscQhj8O8lcvHBNo=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: 8FzeKBFXv99yFqvBAS0u3OPnou1QCr+Lbmbr/8Rb56w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Jun 14 19:38:50 2025 GMT Not After : Jun 21 19:38:50 2025 GMT Subject: CN=684dcfcb-fe55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:58:c7:90:35:26:aa:60:21:ca:27:cc:77:94: 49:58:04:e9:eb:55:b3:e8:98:2a:9d:08:b3:8b:6d: 1b:63:d5:9b:8a:6b:7c:d2:e2:62:fd:19:c3:1d:bb: d0:aa:33:a0:9d:74:60:98:59:a9:8c:e8:7b:ad:ca: 13:23:b2:7f:51:76:07:bf:c2:db:13:26:24:6b:88: 53:43:f0:5b:cf:0c:e0:13:cf:41:cb:5f:5b:31:e9: c0:30:ef:d1:f6:fa:9b:17:80:16:08:7a:2f:6b:d4: ea:9d:ec:fc:6a:53:85:13:95:78:b4:7b:07:74:97: 07:f4:6d:20:b1:51:89:60:c4:e7:a5:0a:95:1f:e4: 8f:6e:cf:aa:c8:47:3f:23:5e:13:2f:3a:4d:ce:72: cb:08:fa:25:3a:ac:8b:16:4c:da:51:04:98:20:ed: 7c:00:1a:06:08:00:b4:c3:0d:8d:f5:0d:43:f4:22: 3a:c9:9d:8a:7b:48:fb:1f:a4:13:ce:93:bd:ad:97: fd:8a:d5:3b:4d:71:b7:8e:90:f2:b2:97:88:44:b5: c9:de:41:65:58:79:e5:fe:87:70:4f:34:6b:8d:3b: b9:bd:2d:03:99:b8:4a:fc:67:89:84:a1:2c:2b:84: 57:96:ea:24:65:31:61:1a:1f:58:f9:c7:3d:3d:ad: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:64:8D:6B:8C:99:F9:B5:B7:C0:DA:28:17:13:63:EB:0D:C2:B2:77 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b4:ed:24:d4:f7:ef:f0:ba:23:17:22:49:43:9e:89:d3:5f: 34:44:2b:06:e1:eb:71:4b:e9:9a:dc:fa:ca:23:40:7d:dd:c9: 4a:ae:3b:43:3f:c0:cf:a1:ca:bb:33:fa:80:73:eb:95:0c:50: ea:a8:91:0a:11:70:33:28:2f:98:ac:ea:7c:43:f5:c2:0d:28: 64:8d:7a:50:ef:c8:27:f9:90:71:4b:bd:e3:0f:74:31:49:6d: af:ee:79:d2:5b:6a:98:b5:21:92:78:28:17:fe:67:97:2d:27: 5d:05:d3:16:18:81:94:9b:a1:65:a6:b8:26:c2:db:96:c3:56: d5:76:4e:c3:c7:be:7e:70:d7:19:5b:25:d8:a0:93:83:89:a7: 9a:fc:60:af:bb:3f:c7:37:30:0a:d1:a0:27:56:ad:ef:93:6b: b8:f6:90:e8:0c:88:e3:cb:60:d8:26:8f:65:da:d1:54:50:eb: 3e:c1:bc:96:74:cd:30:bc:3a:1d:5c:ef:29:21:3c:e4:09:93: ed:f8:87:37:0d:44:67:c4:1a:79:74:02:49:67:9e:dc:e7:83: dc:ad:50:7e:62:bb:8c:36:64:c2:ef:f2:07:f8:81:97:7b:15: 4f:4b:24:09:a3:0e:a2:a6:07:5b:ae:33:f8:83:63:61:fa:ec: 24:67:ed:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjUwNjE0MTkzODUwWhcNMjUwNjIxMTkzODUwWjAYMRYwFAYD VQQDEw02ODRkY2ZjYi1mZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VjHkDUmqmAhyifMd5RJWATp61Wz6JgqnQizi20bY9Wbimt80uJi/RnDHbvQ qjOgnXRgmFmpjOh7rcoTI7J/UXYHv8LbEyYka4hTQ/BbzwzgE89By19bMenAMO/R 9vqbF4AWCHova9Tqnez8alOFE5V4tHsHdJcH9G0gsVGJYMTnpQqVH+SPbs+qyEc/ I14TLzpNznLLCPolOqyLFkzaUQSYIO18ABoGCAC0ww2N9Q1D9CI6yZ2Ke0j7H6QT zpO9rZf9itU7TXG3jpDyspeIRLXJ3kFlWHnl/odwTzRrjTu5vS0DmbhK/GeJhKEs K4RXluokZTFhGh9Y+cc9Pa0fWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBkjWuM mfm1t8DaKBcTY+sNwrJ3MB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7tO0k1Pfv8LojFyJJQ56J0180RCsG4etxS+ma3PrKI0B93clKrjtD P8DPocq7M/qAc+uVDFDqqJEKEXAzKC+YrOp8Q/XCDShkjXpQ78gn+ZBxS73jD3Qx SW2v7nnSW2qYtSGSeCgX/meXLSddBdMWGIGUm6FlprgmwtuWw1bVdk7Dx75+cNcZ WyXYoJODiaea/GCvuz/HNzAK0aAnVq3vk2u49pDoDIjjy2DYJo9l2tFUUOs+wbyW dM0wvDodXO8pITzkCZPt+Ic3DURnxBp5dAJJZ57c54PcrVB+YruMNmTC7/IH+IGX exVPSyQJow6ipgdbrjP4g2Nh+uwkZ+23 -----END CERTIFICATE-----Generated at Sun Jun 15 08:30:42 2025 by rpki-client