$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json) Hash identifier: EK1rEAQjNUAEF60/7dzd9ef8TOB3BUBJLLa6xSJovDE= Subject key identifier: 76:3B:52:32:35:3F:A3:9A:E1:0F:C3:F3:D4:75:93:D3:FA:99:12:B6 Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft Manifest number: 68 Signing time: Wed 18 Jun 2025 19:09:44 +0000 Manifest this update: Wed 18 Jun 2025 19:09:44 +0000 Manifest next update: Wed 25 Jun 2025 19:09:44 +0000 Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: ZYiP8SFlPhiwYmz2v7fUhwL1Bdw67mN6Vw+KDNlMPGs=) 2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: m/ts4+3+KZRfhNwqXbAAZsLEK7jXSiR3RbLIiPT9ph8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Validity Not Before: Jun 18 19:09:44 2025 GMT Not After : Jun 25 19:09:44 2025 GMT Subject: CN=68530ef8-6ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:aa:7d:f6:6c:10:bc:6b:48:97:9c:fb:f4: 9f:4a:1e:e0:8f:2b:c1:19:09:58:16:87:b7:af:da: 19:3e:7a:ab:2b:24:17:fa:24:93:b3:ff:87:26:9d: e4:89:51:c8:b2:41:81:1f:0c:43:13:a1:f9:f3:fe: cb:f8:78:fa:a3:59:66:62:90:08:43:1d:a3:07:e1: 84:3d:12:6a:fa:38:d4:eb:4f:65:f1:3c:df:db:91: 2c:ef:75:df:9a:9c:06:77:9f:dc:42:d0:ce:da:65: 78:30:01:c1:79:c7:5b:e2:10:09:10:43:a6:24:75: 55:76:b9:7d:ee:9b:b0:b9:bb:3b:22:81:8b:98:c4: f0:49:e8:ac:9c:a6:bd:af:71:88:af:46:65:43:9c: 52:aa:cc:85:6c:12:31:03:ea:ad:75:9b:1f:e2:f2: 08:30:93:56:95:d4:46:71:1e:7f:7d:b8:c6:f4:b8: e5:7a:94:b7:d4:0b:42:63:3e:65:e3:6b:14:1a:c5: ea:4f:fa:38:81:b7:b7:6f:47:4d:8c:c8:61:eb:5c: a3:44:b1:8d:07:13:c9:67:b2:70:9e:e5:4d:ac:6e: b4:22:0f:ca:48:d7:c7:e8:cf:9b:cb:d9:58:39:41: d0:79:9d:bb:69:48:26:9d:b8:db:02:08:ad:f0:49: f2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3B:52:32:35:3F:A3:9A:E1:0F:C3:F3:D4:75:93:D3:FA:99:12:B6 X509v3 Authority Key Identifier: keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:cd:bd:67:0f:52:c3:1c:ab:27:61:62:be:f0:fb:c9:6b:3a: 0d:2f:2e:e4:55:72:6f:05:6d:9b:fd:2f:45:b4:53:63:a4:50: e4:4f:2f:43:c1:00:76:d5:95:f7:22:b7:c1:76:d4:6d:85:e1: a2:2e:0d:8c:95:eb:cb:79:8f:79:05:94:a9:35:e3:e0:44:5b: 88:01:55:98:38:c7:f4:35:2a:17:c6:f2:bc:5d:d6:23:f8:b7: 68:e8:cc:98:e3:57:87:78:d7:15:25:6e:6b:24:24:2b:8b:e1: 85:2a:eb:f3:2c:54:fa:b8:a9:48:f6:de:64:e1:8a:24:6e:d7: 39:d6:ee:84:c4:88:d4:30:6a:b2:0a:be:7a:3a:e9:dc:41:d9: 5c:53:ec:7d:1a:4d:4d:93:96:db:fd:9d:be:06:67:6b:82:1c: 65:d7:9e:e0:d4:3f:6b:3d:25:ff:a3:58:b3:0d:e3:af:c9:e8: cf:37:ca:78:b0:d8:ff:d9:5c:3e:5a:54:84:6d:17:9a:ef:66: 09:0b:75:9f:be:7b:f6:14:50:bc:d3:10:3f:4f:8a:6c:78:c5: 98:ff:04:00:ce:2e:cd:77:bf:d6:e7:1e:46:ae:07:b5:8a:80: da:6e:cb:e3:bf:6b:64:b9:d5:e5:ef:4e:4a:00:53:12:d6:b4: 22:fa:3f:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODhEOTExMC8GA1UEBRMoQTY0QkU0NEFDQjAwRTRCREFFNDQ5MUIwRkEwQ0Q3MDk5 RDJDNzI3QzAeFw0yNTA2MTgxOTA5NDRaFw0yNTA2MjUxOTA5NDRaMBgxFjAUBgNV BAMTDTY4NTMwZWY4LTZkZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5gap99mwQvGtIl5z79J9KHuCPK8EZCVgWh7ev2hk+eqsrJBf6JJOz/4cmneSJ UciyQYEfDEMTofnz/sv4ePqjWWZikAhDHaMH4YQ9Emr6ONTrT2XxPN/bkSzvdd+a nAZ3n9xC0M7aZXgwAcF5x1viEAkQQ6YkdVV2uX3um7C5uzsigYuYxPBJ6Kycpr2v cYivRmVDnFKqzIVsEjED6q11mx/i8ggwk1aV1EZxHn99uMb0uOV6lLfUC0JjPmXj axQaxepP+jiBt7dvR02MyGHrXKNEsY0HE8lnsnCe5U2sbrQiD8pI18foz5vL2Vg5 QdB5nbtpSCaduNsCCK3wSfL7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdjtSMjU/ o5rhD8Pz1HWT0/qZErYwHwYDVR0jBBgwFoAUpkvkSssA5L2uRJGw+gzXCZ0scnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4OEQ5L0Y4M0UzRkNFQURC QzExRUZCMzAyOTgzRUM0RjlBRTAyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGt2a1Nzc0E1TDJ1UkpHdy1nelhDWjBzY253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 OEQ5L0Y4M0UzRkNFQURCQzExRUZCMzAyOTgzRUM0RjlBRTAyL3BrdmtTc3NBNUwy dVJKR3ctZ3pYQ1owc2Nudy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnNvWcPUsMcqydhYr7w+8lrOg0vLuRVcm8FbZv9L0W0U2OkUORPL0PB AHbVlfcit8F21G2F4aIuDYyV68t5j3kFlKk14+BEW4gBVZg4x/Q1KhfG8rxd1iP4 t2jozJjjV4d41xUlbmskJCuL4YUq6/MsVPq4qUj23mThiiRu1znW7oTEiNQwarIK vno66dxB2VxT7H0aTU2Tltv9nb4GZ2uCHGXXnuDUP2s9Jf+jWLMN46/J6M83yniw 2P/ZXD5aVIRtF5rvZgkLdZ++e/YUULzTED9Pimx4xZj/BADOLs13v9bnHkauB7WK gNpuy+O/a2S51eXvTkoAUxLWtCL6P5E= -----END CERTIFICATE-----Generated at Fri Jun 20 04:01:10 2025 by rpki-client