$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json) Hash identifier: 1To0U/72cZez5t4r2LoR0xeYU8d0I8aaDC26lmeB6Hs= Subject key identifier: 06:98:CA:8A:5D:8C:4E:CD:80:47:C2:3F:47:C2:C3:D4:FB:D7:42:C4 Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Certificate serial: 21A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft Manifest number: 21A0 Signing time: Sat 14 Jun 2025 15:51:49 +0000 Manifest this update: Sat 14 Jun 2025 15:51:49 +0000 Manifest next update: Sat 21 Jun 2025 15:51:49 +0000 Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: 1DgUQ/zr2K3Xvm7WCkZPiqq8TErJBTqHoOHcIhT0hsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8608 (0x21a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Validity Not Before: Jun 14 15:51:49 2025 GMT Not After : Jun 21 15:51:49 2025 GMT Subject: CN=684d9a95-1eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:48:4b:1d:dc:b4:6b:17:b7:51:b4:51:1b: f7:75:61:cd:3e:ef:8a:98:5c:b8:90:41:0b:c4:8c: 8b:f2:7f:f5:8c:2f:7c:65:9b:f8:b1:ca:27:3f:f0: a3:05:52:e6:ea:20:2e:91:68:ef:8e:c1:fe:97:b0: e9:34:f4:1c:63:0a:ea:8d:16:a2:14:95:b1:b7:d3: d5:cd:5f:1d:02:10:77:df:8e:70:83:a8:d6:88:6b: 21:43:04:1b:34:91:39:85:c8:0f:f4:f8:6a:3e:14: 61:c1:6a:ef:e7:92:92:4d:08:71:bf:45:30:65:fe: 85:50:5d:5d:3b:9e:1d:fb:f2:22:cc:b7:cc:42:23: d2:1c:5d:98:66:0b:b0:c2:fa:65:e8:9d:72:1e:af: 04:42:20:dc:8c:09:13:78:85:33:7d:70:5a:2b:d7: 0d:f8:05:68:45:50:e9:b1:0a:4d:4c:69:02:cb:ae: 18:f2:13:78:ca:d4:cc:cd:c4:f0:0c:a3:76:51:07: 29:58:48:38:cc:0e:dd:fc:13:c4:5a:c7:2d:75:72: 73:2b:13:4b:ab:3b:de:d0:67:31:33:81:e3:de:b6: 82:8b:34:7a:c2:6f:6f:63:21:05:47:ba:37:9e:e9: b5:3d:c7:a0:66:55:a6:20:bb:e8:36:98:fe:90:64: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:98:CA:8A:5D:8C:4E:CD:80:47:C2:3F:47:C2:C3:D4:FB:D7:42:C4 X509v3 Authority Key Identifier: keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:be:3c:bf:ce:86:f2:30:48:db:28:bd:96:99:07:da:b1:cb: 90:12:ac:63:26:f8:a6:40:96:b7:f5:43:89:59:a8:e0:36:66: e0:ff:70:89:16:92:a1:02:2e:41:73:a9:d8:fe:5a:ec:98:e9: 40:49:43:04:54:9a:c3:e8:10:ed:21:1e:a6:30:b0:d3:5f:f0: 63:0a:72:db:26:0d:4e:74:09:18:f2:42:2e:a0:c5:dd:32:f8: 3f:46:e9:d1:1a:3e:04:b6:57:75:2c:1b:5d:3e:68:54:d4:d4: b2:d1:00:28:c8:d1:ec:6b:e5:4d:5a:d4:7e:c3:a9:94:03:53: a1:bd:1b:57:ef:4a:25:10:ec:12:f1:35:a1:d1:98:03:af:53: 02:93:9c:84:f1:78:1a:c7:a9:e1:ae:f0:6e:b3:e5:d8:55:09: 53:55:1c:01:66:0b:15:d5:57:2d:fe:ee:59:42:e3:ff:42:76: 4d:4f:42:5c:94:fb:82:ae:35:bf:86:ab:9d:a5:9b:48:e5:c5: f8:be:4d:ef:38:2a:f7:a5:dc:f0:bf:1c:08:56:e6:0d:2f:fc: 70:b3:0b:c2:bc:4b:10:3d:de:88:39:e2:8b:82:9f:90:19:aa: 71:21:c6:ec:8d:0c:17:8d:0f:ed:e8:37:4a:ec:1d:01:43:82: 93:94:9e:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE ODU4RTFDRDAwHhcNMjUwNjE0MTU1MTQ5WhcNMjUwNjIxMTU1MTQ5WjAYMRYwFAYD VQQDEw02ODRkOWE5NS0xZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1dISx3ctGsXt1G0URv3dWHNPu+KmFy4kEELxIyL8n/1jC98ZZv4sconP/Cj BVLm6iAukWjvjsH+l7DpNPQcYwrqjRaiFJWxt9PVzV8dAhB3345wg6jWiGshQwQb NJE5hcgP9PhqPhRhwWrv55KSTQhxv0UwZf6FUF1dO54d+/IizLfMQiPSHF2YZguw wvpl6J1yHq8EQiDcjAkTeIUzfXBaK9cN+AVoRVDpsQpNTGkCy64Y8hN4ytTMzcTw DKN2UQcpWEg4zA7d/BPEWsctdXJzKxNLqzve0GcxM4Hj3raCizR6wm9vYyEFR7o3 num1PcegZlWmILvoNpj+kGR+8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaYyopd jE7NgEfCP0fCw9T710LEMB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS S3g1UW9ONHpEU3JZV09ITkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPvjy/zobyMEjbKL2WmQfascuQEqxjJvimQJa39UOJWajgNmbg/3CJ FpKhAi5Bc6nY/lrsmOlASUMEVJrD6BDtIR6mMLDTX/BjCnLbJg1OdAkY8kIuoMXd Mvg/RunRGj4Etld1LBtdPmhU1NSy0QAoyNHsa+VNWtR+w6mUA1OhvRtX70olEOwS 8TWh0ZgDr1MCk5yE8Xgax6nhrvBus+XYVQlTVRwBZgsV1Vct/u5ZQuP/QnZNT0Jc lPuCrjW/hqudpZtI5cX4vk3vOCr3pdzwvxwIVuYNL/xwswvCvEsQPd6IOeKLgp+Q GapxIcbsjQwXjQ/t6DdK7B0BQ4KTlJ7i -----END CERTIFICATE-----Generated at Sat Jun 14 18:56:52 2025 by rpki-client