$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: 17dnB3LG6o5bpq4hOQillO9tcXWFCa3gFS7S/HlqP0c= Subject key identifier: 50:6D:CD:2E:06:03:CF:C6:8C:44:EB:30:03:99:51:A9:16:40:6F:1D Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 0134 Signing time: Fri 13 Jun 2025 03:26:49 +0000 Manifest this update: Fri 13 Jun 2025 03:26:48 +0000 Manifest next update: Fri 20 Jun 2025 03:26:48 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: ArlzSx812jwEd5gUhCgFzgCwr6ufvnGYpEuNhIcrYJw=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: fKu+QnI9JJSs0/0qC7wtQtv1o9IdD9KvcLGhg+7rRMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Jun 13 03:26:48 2025 GMT Not After : Jun 20 03:26:48 2025 GMT Subject: CN=684b9a79-cf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:09:fe:b0:6f:93:bc:25:90:ff:ca:83:d8: 21:58:2f:9a:64:73:02:bc:84:eb:b1:65:62:52:a8: 65:c1:76:b4:a1:2a:a2:cc:3a:b7:fe:e1:71:88:7c: 2c:92:ac:49:07:c6:ea:d8:92:2e:d8:9a:76:0c:66: 47:49:37:25:13:0d:52:25:c2:47:28:3f:dc:72:9c: 3e:ca:ba:01:5b:35:62:72:7a:d1:a9:eb:f5:fb:c2: 13:4d:a9:54:89:36:ec:b1:82:81:b0:79:3e:61:d0: 55:dc:9f:08:45:7f:01:eb:0d:65:38:66:20:29:36: 4c:e2:06:71:64:a9:1d:e1:c5:43:f7:05:26:de:cf: 9e:5c:81:0e:5c:d4:ca:58:73:87:a4:9f:f9:30:73: 7e:df:80:0c:8b:9d:f5:3f:62:89:0d:00:0e:6d:d8: 63:16:c0:1d:b9:e2:0b:a7:36:9b:d0:3f:bb:37:3e: 54:99:f3:85:49:df:bb:9f:5e:de:53:79:69:c7:5e: 13:aa:d8:8a:e0:b6:28:ac:8c:d6:77:6c:66:28:3c: 3b:28:dd:1a:38:70:c1:fc:80:d4:dc:fd:9e:6a:cf: 44:f9:43:5c:3b:11:50:57:a9:9f:9a:07:54:31:cd: cb:40:24:39:c6:51:62:7d:8f:98:59:5f:a5:21:55: da:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6D:CD:2E:06:03:CF:C6:8C:44:EB:30:03:99:51:A9:16:40:6F:1D X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:b3:0e:cc:2f:13:00:12:b3:b0:21:ff:ff:8e:03:11:5f:40: 73:c8:b4:eb:a7:82:df:2a:47:a2:76:79:69:34:ff:69:e2:03: a9:a5:53:c1:2b:88:9d:46:71:c2:aa:b5:13:3d:a0:bd:48:d4: a0:97:33:c6:86:97:32:fe:a0:01:60:42:91:c8:c3:89:36:cb: 8e:65:85:3e:3d:a7:ca:11:9f:53:98:f3:b9:41:94:d3:e7:c2: 5e:21:4c:fb:99:0e:38:18:74:26:79:99:c3:e7:94:f3:b0:05: 6a:28:cd:47:0b:d5:10:c6:69:a4:49:27:08:8e:c1:18:3c:ba: 86:10:16:d2:00:e5:69:fd:b6:50:c7:30:71:ee:fe:75:54:fa: 60:1c:2f:71:7e:91:76:11:16:20:05:89:5a:98:81:a4:5d:da: 73:09:8c:64:f6:f9:b2:9d:21:4d:4c:1d:30:a3:bc:8c:3e:91: e8:d4:30:18:de:a7:1d:20:d6:10:db:68:21:d4:17:7a:0c:48: 73:aa:b5:21:ec:bf:b8:4b:4e:d3:3a:ff:08:b8:c4:ed:8a:f9: 1f:21:6f:ec:8c:97:32:5a:3e:93:ec:32:a1:21:1a:8c:f6:5f: 4b:bc:aa:92:75:04:d6:e4:03:de:56:0e:3f:ce:40:ac:54:e2: 62:91:2f:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjUwNjEzMDMyNjQ4WhcNMjUwNjIwMDMyNjQ4WjAYMRYwFAYD VQQDEw02ODRiOWE3OS1jZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxokJ/rBvk7wlkP/Kg9ghWC+aZHMCvITrsWViUqhlwXa0oSqizDq3/uFxiHws kqxJB8bq2JIu2Jp2DGZHSTclEw1SJcJHKD/ccpw+yroBWzVicnrRqev1+8ITTalU iTbssYKBsHk+YdBV3J8IRX8B6w1lOGYgKTZM4gZxZKkd4cVD9wUm3s+eXIEOXNTK WHOHpJ/5MHN+34AMi531P2KJDQAObdhjFsAdueILpzab0D+7Nz5UmfOFSd+7n17e U3lpx14TqtiK4LYorIzWd2xmKDw7KN0aOHDB/IDU3P2eas9E+UNcOxFQV6mfmgdU Mc3LQCQ5xlFifY+YWV+lIVXa9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBtzS4G A8/GjETrMAOZUakWQG8dMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/sw7MLxMAErOwIf//jgMRX0BzyLTrp4LfKkeidnlpNP9p4gOppVPB K4idRnHCqrUTPaC9SNSglzPGhpcy/qABYEKRyMOJNsuOZYU+PafKEZ9TmPO5QZTT 58JeIUz7mQ44GHQmeZnD55TzsAVqKM1HC9UQxmmkSScIjsEYPLqGEBbSAOVp/bZQ xzBx7v51VPpgHC9xfpF2ERYgBYlamIGkXdpzCYxk9vmynSFNTB0wo7yMPpHo1DAY 3qcdINYQ22gh1Bd6DEhzqrUh7L+4S07TOv8IuMTtivkfIW/sjJcyWj6T7DKhIRqM 9l9LvKqSdQTW5APeVg4/zkCsVOJikS8c -----END CERTIFICATE-----Generated at Sat Jun 14 19:11:25 2025 by rpki-client