$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: 2fR+dI7ydSIWnLx+XG4g6q0pgA8zpDOXNS4aJSDUafw= Subject key identifier: 59:E1:3F:B4:FD:FF:27:B5:F0:B2:41:26:B2:47:02:03:08:CD:3F:60 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 01DC Signing time: Fri 13 Jun 2025 01:48:31 +0000 Manifest this update: Fri 13 Jun 2025 01:48:31 +0000 Manifest next update: Fri 20 Jun 2025 01:48:31 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: Gf9HrnHRpgYVixm1eSbORxKZ43ehrns5EjEewav8c5c=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: qtI3PzkdqX+ax/bSegc1SLzhSYkSDBIGZPjolcu7R3M=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: d2+un5XTDgzJbWROr+IzD11y+bXi6HVh7GN60G2Vs5w=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: sj2URhxZjW3y0qKioZtUw0R7cEojajRcOxadk4cHwRY=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: IcwXnPB2ehwiVEdMK3NN6Y5gPNM9uX8Kc+jyAk4uAcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Jun 13 01:48:31 2025 GMT Not After : Jun 20 01:48:31 2025 GMT Subject: CN=684b836f-c025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:fb:b9:0f:fa:51:a9:3c:f8:52:ab:55:84: 77:6c:e9:ec:d5:a4:73:87:d5:fa:b9:78:c2:b3:81: 0c:46:e3:fb:3c:f4:84:3f:dd:73:b0:1a:c5:23:83: 61:12:40:e5:f4:20:97:91:1a:eb:e8:35:6d:96:e2: 47:bb:c3:72:54:50:68:ed:85:f9:33:5e:9d:04:7b: ee:c4:f4:d3:d6:8e:2e:70:53:e8:27:c9:e3:16:70: 13:51:81:a2:ea:f5:8b:eb:05:cc:b8:ce:60:7b:28: 20:55:70:36:f4:84:a8:76:e4:12:93:8e:77:72:16: b4:6e:b2:19:a2:1b:49:09:b5:c4:90:41:3c:2d:19: 14:6f:e5:dc:4d:49:16:d0:08:ba:b3:5b:74:29:d5: 21:11:08:ee:3c:4e:59:52:af:78:bd:be:c8:44:7d: 48:81:c0:cb:75:b1:78:a6:f2:23:6f:5a:1b:4e:ee: 4e:cd:1f:f3:2a:59:66:24:1e:36:a1:f9:23:4a:13: b4:5e:17:7b:5a:8c:b3:73:25:57:b3:b4:33:36:60: 9b:3e:96:81:e8:64:10:27:50:40:1c:5c:41:4e:d4: 41:c4:bf:eb:d1:38:4e:a7:67:0d:25:16:97:33:ae: 6d:43:57:7b:2d:d5:1d:19:ae:67:6c:51:f9:87:22: ad:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:3F:B4:FD:FF:27:B5:F0:B2:41:26:B2:47:02:03:08:CD:3F:60 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e7:fa:83:bb:21:52:a7:8d:d9:49:c2:d1:54:98:ac:07:12: a7:d3:d1:c1:92:ed:d2:58:ec:e8:a8:4d:1d:c0:36:4f:8d:cd: 6e:10:aa:c2:20:34:ee:86:ee:40:0b:46:88:fe:0a:e3:f8:50: 43:1c:3b:c9:c6:12:98:bf:92:42:f0:53:27:08:a3:b3:83:18: c4:48:f7:4a:8b:a2:45:bc:b2:a5:58:28:15:1e:2d:9f:13:86: 80:21:c0:86:2d:1a:3f:3e:ea:0b:68:dc:d8:95:07:3b:02:14: b9:ae:9d:7b:95:58:74:ed:f7:81:2d:4f:bc:39:f6:f0:8e:e4: b5:d5:48:5f:d6:5c:d6:25:26:55:43:5c:b5:49:aa:06:89:a3: ee:83:91:64:63:d2:e2:d8:f9:fa:6a:1f:b9:43:50:f8:96:9a: 89:45:4e:73:f5:bf:f9:fb:30:6a:4c:c8:09:fb:43:3d:53:32: bc:74:52:46:c0:39:6f:3a:2e:ff:94:4f:b0:95:ec:dc:04:45: aa:ea:1a:b0:22:2b:0c:00:3d:e1:8b:b9:9c:20:37:cc:83:7b: 94:b5:55:39:7f:90:b7:b2:19:ea:01:d1:75:33:70:f4:ad:33: 21:ca:3b:2c:0c:3d:c2:be:15:28:57:a5:9a:a6:d1:30:db:e8: 94:06:7f:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwNjEzMDE0ODMxWhcNMjUwNjIwMDE0ODMxWjAYMRYwFAYD VQQDEw02ODRiODM2Zi1jMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvj/7uQ/6Uak8+FKrVYR3bOns1aRzh9X6uXjCs4EMRuP7PPSEP91zsBrFI4Nh EkDl9CCXkRrr6DVtluJHu8NyVFBo7YX5M16dBHvuxPTT1o4ucFPoJ8njFnATUYGi 6vWL6wXMuM5geyggVXA29ISoduQSk453cha0brIZohtJCbXEkEE8LRkUb+XcTUkW 0Ai6s1t0KdUhEQjuPE5ZUq94vb7IRH1IgcDLdbF4pvIjb1obTu5OzR/zKllmJB42 ofkjShO0Xhd7WoyzcyVXs7QzNmCbPpaB6GQQJ1BAHFxBTtRBxL/r0ThOp2cNJRaX M65tQ1d7LdUdGa5nbFH5hyKtGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnhP7T9 /ye18LJBJrJHAgMIzT9gMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH5/qDuyFSp43ZScLRVJisBxKn09HBku3SWOzoqE0dwDZPjc1uEKrC IDTuhu5AC0aI/grj+FBDHDvJxhKYv5JC8FMnCKOzgxjESPdKi6JFvLKlWCgVHi2f E4aAIcCGLRo/PuoLaNzYlQc7AhS5rp17lVh07feBLU+8OfbwjuS11Uhf1lzWJSZV Q1y1SaoGiaPug5FkY9Li2Pn6ah+5Q1D4lpqJRU5z9b/5+zBqTMgJ+0M9UzK8dFJG wDlvOi7/lE+wlezcBEWq6hqwIisMAD3hi7mcIDfMg3uUtVU5f5C3shnqAdF1M3D0 rTMhyjssDD3CvhUoV6WaptEw2+iUBn98 -----END CERTIFICATE-----Generated at Sat Jun 14 18:15:56 2025 by rpki-client