$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: zDKpaZGoLOlOp72nX3s0ZHel8tNT5vdUkJ2lyWco4bI= Subject key identifier: C4:F7:62:88:BF:85:CE:5B:B3:08:E4:45:1B:C4:22:48:16:73:F9:FF Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1A48 Signing time: Mon 16 Jun 2025 16:26:36 +0000 Manifest this update: Mon 16 Jun 2025 16:26:36 +0000 Manifest next update: Mon 23 Jun 2025 16:26:36 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: 1lg0DdwWs5U/LpOxMy6j/4ojG6KYN4ImH+aVzElwRrM=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 1W3bZjmYo4y/faIyWLiaDn4cNEWTqd/xhoIAZdOleqM=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: hBSO24ULXhKu94YR3RfqFp/a4boCJIBAaE6mmtZ9Bvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6760 (0x1a68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Jun 16 16:26:36 2025 GMT Not After : Jun 23 16:26:36 2025 GMT Subject: CN=685045bc-69ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:a7:a5:1f:7a:3e:f8:f0:e0:e7:50:66:e9: 54:83:88:d5:ef:d9:66:25:25:cc:cd:88:2a:f1:7c: 7d:12:08:6a:ce:1c:36:78:c2:73:38:53:5c:b0:a2: 78:f8:37:14:42:21:57:6e:14:bc:5b:23:f5:6e:2c: cd:6e:8a:b3:12:03:63:d3:1c:19:f6:d1:a7:97:33: 25:13:1d:c8:5e:4e:1f:bd:23:ee:0d:5f:3e:cc:4e: f8:5f:7c:56:eb:6a:8d:00:55:7c:3c:62:75:21:34: 82:6f:44:0c:6f:86:38:fb:14:b4:f2:7c:8b:4f:b6: a7:8b:3c:e6:02:e1:fa:78:76:e6:b2:ef:e4:9d:c8: 0c:62:f1:0b:b0:ca:0b:e9:c2:33:a9:76:ca:26:1b: 7e:4e:20:67:ce:6e:ad:9c:43:1c:4e:97:2a:8b:66: 7f:0d:4a:b1:06:f0:78:c4:28:54:fe:66:cd:25:bc: 98:5d:53:77:6b:f5:e9:6c:f7:8f:65:3e:0f:30:49: f0:b9:39:29:a6:93:d5:ef:0a:5d:b0:eb:9c:47:f3: 0a:09:b4:48:2d:93:62:d3:10:04:34:e1:05:fd:e5: 73:0e:21:54:82:19:b3:a2:80:37:41:f0:a1:f6:38: 22:77:f3:af:5d:bd:fe:f0:0e:10:21:28:46:7f:32: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F7:62:88:BF:85:CE:5B:B3:08:E4:45:1B:C4:22:48:16:73:F9:FF X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:49:4d:3b:d2:a3:c6:58:d4:e0:24:ae:8c:cd:33:6c:f1:62: 8d:5b:37:d9:08:cb:51:25:75:89:48:c5:da:e5:3f:2c:51:77: 1c:ce:6f:19:c6:92:3c:27:01:81:e9:32:47:49:c3:08:a4:2a: 5e:9b:2b:c4:af:80:af:51:46:c5:e5:31:64:ca:4d:5c:27:de: 56:fa:ed:5f:19:f1:32:3f:fa:e7:64:32:55:db:42:27:44:6e: 53:bd:77:46:cb:a3:db:d4:dd:e1:be:4b:e9:2d:44:40:4f:52: 48:df:a6:ff:bd:21:19:c6:a4:e6:8d:73:9f:1d:1b:a7:83:0a: 65:5e:92:c9:9b:43:8d:4e:05:3d:80:d9:0c:8d:09:c7:37:5c: 45:45:73:46:ba:e9:ab:d3:56:df:7e:c0:5d:01:44:63:b6:4a: 21:7c:bc:ff:28:79:68:be:34:d7:25:2e:fb:0d:5a:a9:76:5a: 9d:6e:18:56:19:86:54:93:99:cd:86:fd:12:d1:f0:48:03:c2: 25:66:55:46:2f:a9:22:04:20:d7:65:bb:4a:42:3b:e8:e6:5a: 5b:e2:4e:4f:c6:15:f8:2c:fb:00:71:64:be:50:e9:ea:8b:c1: 24:5a:73:dc:c1:46:b2:d6:4d:f1:86:9f:06:d9:58:c3:72:5e: 9c:42:bb:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUwNjE2MTYyNjM2WhcNMjUwNjIzMTYyNjM2WjAYMRYwFAYD VQQDEw02ODUwNDViYy02OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwanpR96Pvjw4OdQZulUg4jV79lmJSXMzYgq8Xx9Eghqzhw2eMJzOFNcsKJ4 +DcUQiFXbhS8WyP1bizNboqzEgNj0xwZ9tGnlzMlEx3IXk4fvSPuDV8+zE74X3xW 62qNAFV8PGJ1ITSCb0QMb4Y4+xS08nyLT7anizzmAuH6eHbmsu/kncgMYvELsMoL 6cIzqXbKJht+TiBnzm6tnEMcTpcqi2Z/DUqxBvB4xChU/mbNJbyYXVN3a/XpbPeP ZT4PMEnwuTkpppPV7wpdsOucR/MKCbRILZNi0xAENOEF/eVzDiFUghmzooA3QfCh 9jgid/OvXb3+8A4QIShGfzKIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMT3Yoi/ hc5bswjkRRvEIkgWc/n/MB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvSU070qPGWNTgJK6MzTNs8WKNWzfZCMtRJXWJSMXa5T8sUXcczm8Z xpI8JwGB6TJHScMIpCpemyvEr4CvUUbF5TFkyk1cJ95W+u1fGfEyP/rnZDJV20In RG5TvXdGy6Pb1N3hvkvpLURAT1JI36b/vSEZxqTmjXOfHRungwplXpLJm0ONTgU9 gNkMjQnHN1xFRXNGuumr01bffsBdAURjtkohfLz/KHlovjTXJS77DVqpdlqdbhhW GYZUk5nNhv0S0fBIA8IlZlVGL6kiBCDXZbtKQjvo5lpb4k5PxhX4LPsAcWS+UOnq i8EkWnPcwUay1k3xhp8G2VjDcl6cQrtz -----END CERTIFICATE-----Generated at Wed Jun 18 04:54:05 2025 by rpki-client