$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json) Hash identifier: aha893f6UO9cyiSeKx7fpYVDUUzPYzFOaxSPys20zao= Subject key identifier: 2D:B4:C4:D9:22:DE:32:02:73:6E:10:56:58:BF:CF:7D:1D:B4:22:52 Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Certificate serial: 0622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft Manifest number: 061D Signing time: Mon 16 Jun 2025 22:27:54 +0000 Manifest this update: Mon 16 Jun 2025 22:27:53 +0000 Manifest next update: Mon 23 Jun 2025 22:27:53 +0000 Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: H+kxLEAxHOpreC8RkWhWt6J96TorU/mf50NQMhv8XsA=) 2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Validity Not Before: Jun 16 22:27:53 2025 GMT Not After : Jun 23 22:27:53 2025 GMT Subject: CN=68509a6a-9206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:ec:a6:81:62:f0:e6:44:a6:65:65:b3:97: 36:e9:c1:06:0a:5f:2a:fe:44:96:06:5e:40:38:ce: ca:73:81:e4:b3:85:2d:1b:b5:b0:9e:3b:bc:4e:0d: 71:04:d6:4e:b8:fe:3b:3a:b0:8f:a2:bf:5c:e9:ad: 06:ab:0e:83:a1:6e:a9:52:1d:23:7a:be:65:64:1e: 03:eb:a6:53:02:84:8e:1b:43:99:ac:2e:31:c8:29: c1:a9:8b:13:48:ba:8c:cc:a0:50:5e:24:83:05:35: 05:60:ec:3f:c3:d2:34:95:b2:c2:b1:ca:fa:83:88: b5:d3:16:c3:77:54:d9:74:55:1a:c8:f6:9e:c5:e7: 77:ae:c8:1e:3b:cb:8e:48:67:c9:61:f4:c6:64:6a: 45:eb:27:1d:62:67:da:e5:61:c1:fc:86:cb:04:89: b2:b3:04:a5:9b:1a:71:76:23:1b:a3:40:db:3c:e1: 99:2f:5e:6e:9f:80:83:1c:91:25:21:b9:1a:83:c4: 41:0e:22:48:b0:c2:05:3a:4d:70:67:3e:57:82:a2: e6:68:ab:fb:2b:2e:34:c1:8b:6a:70:65:11:e6:1f: 44:65:e7:2c:ee:6f:02:f3:af:0a:af:37:a6:82:fc: bc:13:8f:d6:be:35:4f:ad:96:61:9c:2d:0c:6b:2a: e1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B4:C4:D9:22:DE:32:02:73:6E:10:56:58:BF:CF:7D:1D:B4:22:52 X509v3 Authority Key Identifier: keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0c:6c:c3:6a:1c:4c:19:e5:dd:ed:80:c7:c1:d8:0a:a0:de: 00:c2:26:31:b6:15:7e:00:5a:4a:45:bf:ce:06:c3:05:84:68: 2a:a9:02:fd:8e:af:57:75:cf:74:52:b3:50:dd:28:4d:c5:a7: e7:bc:b1:1b:ae:7f:2b:00:f1:db:2d:77:4c:54:86:cf:68:6e: 44:3a:b3:27:1e:da:3b:17:d9:e3:15:bd:e7:90:7e:cb:00:7c: 11:55:31:7e:85:71:2d:42:60:6d:c2:0c:c2:49:12:40:2e:f7: bd:d7:4c:f9:b1:3a:a9:42:5c:94:c9:75:92:1b:8c:f9:41:e6: 20:36:d7:aa:cb:7e:52:b0:30:f8:a4:b5:30:56:75:b0:bd:8c: 9e:d3:57:54:df:a0:cd:45:04:fb:7e:02:96:bf:40:29:8d:c9: 47:65:4d:31:bd:69:46:a2:f9:24:9a:48:26:16:37:19:9e:29: e2:0a:8e:57:eb:03:3a:b8:21:9c:61:3e:66:ae:9e:bd:f6:9b: b7:bc:06:78:48:e4:6a:bb:f0:93:45:18:34:ac:a7:1d:04:63: 88:5e:af:fe:11:a9:b5:b4:5f:90:26:9a:ef:5c:a6:78:4d:c5: 00:ea:28:08:22:f5:f6:ce:5e:5a:14:01:aa:3a:be:76:df:ea: e0:09:21:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw MTIzNkIyN0MwHhcNMjUwNjE2MjIyNzUzWhcNMjUwNjIzMjIyNzUzWjAYMRYwFAYD VQQDEw02ODUwOWE2YS05MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnfspoFi8OZEpmVls5c26cEGCl8q/kSWBl5AOM7Kc4Hks4UtG7Wwnju8Tg1x BNZOuP47OrCPor9c6a0Gqw6DoW6pUh0jer5lZB4D66ZTAoSOG0OZrC4xyCnBqYsT SLqMzKBQXiSDBTUFYOw/w9I0lbLCscr6g4i10xbDd1TZdFUayPaexed3rsgeO8uO SGfJYfTGZGpF6ycdYmfa5WHB/IbLBImyswSlmxpxdiMbo0DbPOGZL15un4CDHJEl Ibkag8RBDiJIsMIFOk1wZz5XgqLmaKv7Ky40wYtqcGUR5h9EZecs7m8C868Krzem gvy8E4/WvjVPrZZhnC0MayrhmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC20xNki 3jICc24QVli/z30dtCJSMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs aE9Rck5ETk04WElCSTJzbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhDGzDahxMGeXd7YDHwdgKoN4AwiYxthV+AFpKRb/OBsMFhGgqqQL9 jq9Xdc90UrNQ3ShNxafnvLEbrn8rAPHbLXdMVIbPaG5EOrMnHto7F9njFb3nkH7L AHwRVTF+hXEtQmBtwgzCSRJALve910z5sTqpQlyUyXWSG4z5QeYgNteqy35SsDD4 pLUwVnWwvYye01dU36DNRQT7fgKWv0ApjclHZU0xvWlGovkkmkgmFjcZniniCo5X 6wM6uCGcYT5mrp699pu3vAZ4SORqu/CTRRg0rKcdBGOIXq/+Eam1tF+QJprvXKZ4 TcUA6igIIvX2zl5aFAGqOr523+rgCSHs -----END CERTIFICATE-----Generated at Tue Jun 17 16:41:59 2025 by rpki-client