$ rpki-client -vvf rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft File: kDo4Q2eaCxBdykhcPWSPPREnL7c.mft (raw, json) Hash identifier: i1MlT2+Ur1yyFjxDjeNngbJN0KsOU5rEwz3aFuELMqU= Subject key identifier: FC:87:1C:19:E2:03:B0:96:9D:8D:68:B3:42:F1:E8:D8:6C:D2:44:7F Authority key identifier: 90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7 Certificate issuer: /CN=A914E488/serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft Manifest number: 0247 Signing time: Sun 15 Jun 2025 01:32:18 +0000 Manifest this update: Sun 15 Jun 2025 01:32:18 +0000 Manifest next update: Sun 22 Jun 2025 01:32:18 +0000 Files and hashes: 1: kDo4Q2eaCxBdykhcPWSPPREnL7c.crl (hash: Q7ANNenS76UG/qPiz9WFME4S2YCfFgO4vtIrtyTiqsg=) 2: 606EB6AE240911EDBFA59C27C4F9AE02.roa (hash: NNo4SAwO23W3h7iwFhvtQVGgAhn5LQhxSRbEa+xKr7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E488, serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7 Validity Not Before: Jun 15 01:32:18 2025 GMT Not After : Jun 22 01:32:18 2025 GMT Subject: CN=684e22a2-4c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:7c:c9:2f:67:24:b8:a7:21:69:b9:76:1b: 81:e0:c1:e8:87:e4:a8:b1:b0:6c:47:4a:ab:9f:72: 20:e9:64:fa:ab:d2:18:36:ca:c7:79:b4:0e:65:5f: 39:18:eb:6a:b7:b2:ca:d9:73:d5:07:70:0e:3d:00: 29:9c:36:99:2e:da:e4:d6:b6:27:80:ac:8a:1a:25: a0:c8:60:40:ed:a5:92:e6:a1:64:d6:3e:52:5a:19: bd:91:76:17:49:63:24:72:04:a1:d5:d0:ca:34:80: a0:69:f3:e6:42:0c:85:6f:69:1d:00:59:63:9a:0c: 1d:d3:7d:d4:11:cb:7a:4b:4e:fd:fb:6c:41:6c:98: b1:e1:3f:84:22:c0:9e:66:c2:32:76:45:02:1b:77: d9:61:51:b6:d2:94:fb:64:73:b7:b9:f4:f6:f6:a8: 87:6d:80:45:b5:77:11:33:51:e2:5d:48:b8:55:11: 56:40:55:ed:59:49:43:a8:9f:8f:df:13:bb:96:39: 10:2a:42:2b:f1:f3:dd:1d:e2:f2:c3:f7:8c:f9:83: 71:50:3d:47:32:1c:46:af:07:75:b0:b0:63:f5:78: 0c:15:65:47:fc:94:34:50:d3:e7:eb:4a:bb:fd:38: f7:51:09:23:b5:3f:4d:53:68:bf:af:ea:3e:d8:31: 9f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:87:1C:19:E2:03:B0:96:9D:8D:68:B3:42:F1:E8:D8:6C:D2:44:7F X509v3 Authority Key Identifier: keyid:90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:28:76:04:2b:b8:1c:72:af:52:4a:9b:3c:d0:29:42:11:ca: 0e:6b:f0:01:0b:52:51:c0:22:c6:6a:ce:61:46:e0:a4:48:9f: 7d:8e:72:2e:c9:d2:75:dd:28:08:31:3e:75:b5:45:ac:b2:76: f7:1d:ae:6c:ad:e1:05:90:10:5c:f0:a6:71:4d:cb:27:aa:11: 6f:4c:9b:93:ae:41:b7:fa:8f:a5:32:11:14:ad:b2:81:d8:49: fb:42:f0:92:3a:72:24:1f:99:d4:4e:fd:31:05:c4:07:57:fa: e7:d9:06:d5:d0:61:e5:60:b0:1b:00:40:db:0f:4b:26:54:46: df:ff:ca:12:d9:a5:3d:9d:ac:0e:cc:aa:8a:ee:b1:23:39:0d: e7:f3:4a:6a:d8:ec:0b:90:d4:48:f0:b1:3c:a0:69:0e:07:12: a0:91:f5:81:32:3b:35:4e:d3:c9:6b:41:0a:30:4a:a3:1d:c9: e2:b2:3d:06:2d:a1:85:a3:8e:d0:fe:49:a1:4c:5c:a3:7b:47: 13:c3:59:0f:b6:50:2e:ba:c2:fe:42:5a:9e:ae:be:6d:c6:05: 97:73:57:ea:5d:e4:06:95:5e:1c:97:cd:65:af:41:d6:b3:7d: 6c:0b:ff:fd:2e:1b:21:1a:9c:88:aa:55:c3:07:47:fb:7c:b7: 93:8a:ee:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0ODgxMTAvBgNVBAUTKDkwM0EzODQzNjc5QTBCMTA1RENBNDg1QzNENjQ4RjNE MTEyNzJGQjcwHhcNMjUwNjE1MDEzMjE4WhcNMjUwNjIyMDEzMjE4WjAYMRYwFAYD VQQDEw02ODRlMjJhMi00YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWF8yS9nJLinIWm5dhuB4MHoh+SosbBsR0qrn3Ig6WT6q9IYNsrHebQOZV85 GOtqt7LK2XPVB3AOPQApnDaZLtrk1rYngKyKGiWgyGBA7aWS5qFk1j5SWhm9kXYX SWMkcgSh1dDKNICgafPmQgyFb2kdAFljmgwd033UEct6S079+2xBbJix4T+EIsCe ZsIydkUCG3fZYVG20pT7ZHO3ufT29qiHbYBFtXcRM1HiXUi4VRFWQFXtWUlDqJ+P 3xO7ljkQKkIr8fPdHeLyw/eM+YNxUD1HMhxGrwd1sLBj9XgMFWVH/JQ0UNPn60q7 /Tj3UQkjtT9NU2i/r+o+2DGfuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyHHBni A7CWnY1os0Lx6Nhs0kR/MB8GA1UdIwQYMBaAFJA6OENnmgsQXcpIXD1kjz0RJy+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTQ4OC9GODg2OThDQTI0 MDUxMUVEQjk4N0I4MjNDNEY5QUUwMi9rRG80UTJlYUN4QmR5a2hjUFdTUFBSRW5M N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tEbzRRMmVhQ3hCZHlraGNQV1NQUFJFbkw3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTQ4OC9GODg2OThDQTI0MDUxMUVEQjk4N0I4MjNDNEY5QUUwMi9rRG80UTJlYUN4 QmR5a2hjUFdTUFBSRW5MN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsKHYEK7gccq9SSps80ClCEcoOa/ABC1JRwCLGas5hRuCkSJ99jnIu ydJ13SgIMT51tUWssnb3Ha5sreEFkBBc8KZxTcsnqhFvTJuTrkG3+o+lMhEUrbKB 2En7QvCSOnIkH5nUTv0xBcQHV/rn2QbV0GHlYLAbAEDbD0smVEbf/8oS2aU9nawO zKqK7rEjOQ3n80pq2OwLkNRI8LE8oGkOBxKgkfWBMjs1TtPJa0EKMEqjHcnisj0G LaGFo47Q/kmhTFyje0cTw1kPtlAuusL+Qlqerr5txgWXc1fqXeQGlV4cl81lr0HW s31sC//9LhshGpyIqlXDB0f7fLeTiu4F -----END CERTIFICATE-----Generated at Sun Jun 15 10:04:24 2025 by rpki-client