$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: HGZG1PWwffHgp18WUpf/YK+QjdFtY4RLpgoKieU3pd0= Subject key identifier: B6:F5:06:49:73:A4:68:D7:FB:0D:EA:D2:30:2B:4F:DC:02:40:1D:09 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 0186 Signing time: Fri 13 Jun 2025 02:45:52 +0000 Manifest this update: Fri 13 Jun 2025 02:45:51 +0000 Manifest next update: Fri 20 Jun 2025 02:45:51 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: kCWA24ypTyGKSpUa18bxYF+V5xW7WyPDzPoUC3a86n0=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: g1Yxh4X4gr9QP8BwAN2yJktOsO1m01aHRbfwGJbCyik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Jun 13 02:45:51 2025 GMT Not After : Jun 20 02:45:51 2025 GMT Subject: CN=684b90e0-a7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a9:b7:be:fb:38:7e:6f:c5:f3:c2:e7:ea:a2: 66:39:3f:af:f9:5c:69:c1:df:2c:ef:46:7c:f5:1b: c8:7e:89:01:c8:2f:24:7f:cc:d3:cb:21:e0:e0:db: 30:c0:dc:fa:7c:6c:70:fc:81:94:c1:21:12:f7:0e: c4:f4:76:31:3b:de:33:30:3e:32:e3:b2:99:f7:b3: 6f:e1:75:96:02:e0:98:ee:01:32:6d:9c:de:63:31: 5c:b7:15:d3:fd:f3:30:5d:d2:1e:70:98:c5:cf:76: be:3e:92:e3:e4:73:fd:ba:cc:9b:84:35:7a:da:af: af:1c:13:35:c3:f9:dc:33:6b:8e:95:9e:32:d3:ba: 6a:4e:ba:a4:10:4d:d4:62:24:f8:ea:4c:db:c3:cd: 6b:10:82:3a:db:bf:c8:50:d3:bc:b6:68:1b:c6:f3: 59:74:b3:86:f7:f7:84:ee:52:4b:96:25:b2:76:3a: 2f:3e:fc:f9:a8:ac:d5:d5:a2:3e:ae:c1:37:e9:24: e6:c9:2c:19:9f:6c:a3:5d:c9:8f:06:3b:0f:4d:ff: 2c:a8:95:01:36:7b:68:11:dc:f2:e4:14:48:da:9e: 35:3b:42:44:2e:9f:fc:91:68:80:2a:c7:99:4d:96: 33:b0:85:7a:fe:0a:55:41:24:47:7d:60:34:52:6d: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F5:06:49:73:A4:68:D7:FB:0D:EA:D2:30:2B:4F:DC:02:40:1D:09 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:3a:d2:b7:5a:83:02:62:44:08:60:12:31:c6:82:7a:40:63: 01:20:6b:02:82:55:2f:cc:33:03:ae:e3:b0:e9:e7:ae:22:a6: 05:83:1c:9e:32:c9:90:07:30:b8:23:55:98:14:a1:74:11:d4: 14:cf:73:e3:e8:b2:77:0f:fa:b6:7e:95:09:2e:06:67:71:39: 9e:18:78:b4:7e:07:64:96:1b:3d:d4:43:9c:3f:4d:dd:22:16: 15:89:d7:98:6a:89:42:2f:ff:4a:75:ee:63:75:9d:ee:cc:c8: 58:0a:d8:bc:86:5c:ca:39:bb:62:7d:8c:9b:00:90:f6:ea:bb: e0:c1:4b:fa:bc:ba:db:9f:95:ba:a2:3d:c8:99:cd:f6:ea:a8: d8:29:95:1d:6a:69:10:97:4f:30:ed:4d:3d:89:2a:7f:ae:ef: b5:71:6d:48:48:c2:7f:9f:ee:13:fd:22:55:66:c9:95:f5:e0: cd:13:54:8e:c1:82:51:76:9c:1c:f9:36:ed:75:45:d3:1c:75: 76:d3:75:f5:57:30:20:49:a7:f8:aa:23:28:c9:ed:22:e6:91: ff:3b:8c:9d:65:dc:42:10:8e:7f:be:3e:7f:a8:78:f6:4f:ae: 33:0e:15:48:19:22:21:f8:4a:75:7d:4b:de:75:f3:ee:e2:db: ff:20:ae:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjUwNjEzMDI0NTUxWhcNMjUwNjIwMDI0NTUxWjAYMRYwFAYD VQQDEw02ODRiOTBlMC1hN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qm3vvs4fm/F88Ln6qJmOT+v+Vxpwd8s70Z89RvIfokByC8kf8zTyyHg4Nsw wNz6fGxw/IGUwSES9w7E9HYxO94zMD4y47KZ97Nv4XWWAuCY7gEybZzeYzFctxXT /fMwXdIecJjFz3a+PpLj5HP9usybhDV62q+vHBM1w/ncM2uOlZ4y07pqTrqkEE3U YiT46kzbw81rEII627/IUNO8tmgbxvNZdLOG9/eE7lJLliWydjovPvz5qKzV1aI+ rsE36STmySwZn2yjXcmPBjsPTf8sqJUBNntoEdzy5BRI2p41O0JELp/8kWiAKseZ TZYzsIV6/gpVQSRHfWA0Um2MBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb1Bklz pGjX+w3q0jArT9wCQB0JMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiOtK3WoMCYkQIYBIxxoJ6QGMBIGsCglUvzDMDruOw6eeuIqYFgxye MsmQBzC4I1WYFKF0EdQUz3Pj6LJ3D/q2fpUJLgZncTmeGHi0fgdklhs91EOcP03d IhYVideYaolCL/9Kde5jdZ3uzMhYCti8hlzKObtifYybAJD26rvgwUv6vLrbn5W6 oj3Imc326qjYKZUdamkQl08w7U09iSp/ru+1cW1ISMJ/n+4T/SJVZsmV9eDNE1SO wYJRdpwc+TbtdUXTHHV203X1VzAgSaf4qiMoye0i5pH/O4ydZdxCEI5/vj5/qHj2 T64zDhVIGSIh+Ep1fUvedfPu4tv/IK79 -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:17 2025 by rpki-client