$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: OFlzPCEPyiH2bS8AtGz/VBuJyuajv9IQ0ZaebSmxTvg= Subject key identifier: 74:96:1D:3E:14:04:69:01:EA:EF:91:37:89:F3:70:5B:A8:9F:9C:05 Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 045F Signing time: Sat 14 Jun 2025 23:53:22 +0000 Manifest this update: Sat 14 Jun 2025 23:53:21 +0000 Manifest next update: Sat 21 Jun 2025 23:53:21 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: fmKBkuec+1xWbk8gg4p21w308jhRTREM+60+bJIjx+w=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: /FpsHXLPYXsoHcGNcebXfdYyitx9/IlpkTRLrZlFe1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Jun 14 23:53:21 2025 GMT Not After : Jun 21 23:53:21 2025 GMT Subject: CN=684e0b71-b1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:d3:40:64:6e:fe:05:41:82:fc:b5:7c:7c: f0:73:e3:4b:a0:59:4f:43:3b:11:87:b0:03:ef:04: c9:81:ab:bc:20:ad:9b:ad:15:8e:f4:7d:4f:b7:df: 92:a0:0e:23:59:df:1f:d2:d3:d6:75:94:f1:cf:2d: 02:5c:91:32:3f:94:72:7a:c9:d4:44:0e:5b:73:64: 70:4f:3f:22:49:b3:f0:91:1c:ea:7d:0c:7c:25:ce: 1d:06:46:cc:f8:82:44:cd:e4:8d:e9:11:61:10:cc: 26:08:bd:91:2e:f2:b1:14:a1:ea:62:7e:df:26:ac: 71:17:2b:5a:42:02:58:8b:c9:d2:59:59:e5:0f:78: fa:9f:5f:c2:b7:a3:86:6d:e6:16:4d:b6:71:39:a9: df:15:58:cf:3f:a6:21:ab:93:cc:ed:42:34:b6:06: f0:ff:ca:f0:f7:43:20:f3:9b:34:6f:56:56:a7:0e: 53:27:2f:42:27:21:c4:8f:95:bc:d1:ca:37:28:80: a4:73:2b:06:80:3c:65:fd:97:cd:18:42:03:4c:38: dd:c6:1d:88:73:53:a3:72:4b:f3:8a:43:f7:42:f1: 53:2a:7c:a6:b6:80:b0:f8:fd:47:4c:a9:75:44:ad: 3d:cd:06:ea:70:59:32:93:6b:95:6a:ab:a3:c2:0e: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:96:1D:3E:14:04:69:01:EA:EF:91:37:89:F3:70:5B:A8:9F:9C:05 X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d4:9c:63:e2:ab:de:af:d9:44:56:49:84:df:4e:95:58:3b: d2:de:3b:c0:85:d6:9d:3d:72:db:cf:7d:16:d8:01:38:0a:ea: 9f:41:57:5e:41:8f:89:a4:1a:d7:f3:ba:e1:33:b3:bd:47:c4: c7:93:04:d8:83:9d:0b:fb:e2:e1:83:0e:ff:4e:6d:74:18:55: 69:36:61:38:0b:b9:be:45:10:0d:da:15:77:2a:e6:d6:93:b1: f3:64:25:cf:aa:04:68:8b:b2:6d:0b:1d:5d:a0:fb:16:51:d9: 3d:6c:04:ef:da:88:1c:74:1e:01:64:a2:34:82:0a:ce:da:58: ed:25:c4:d2:18:ae:84:02:c4:e1:6a:73:2a:8d:b9:6f:d1:8d: 75:06:7d:5b:cb:b3:5a:a0:29:ec:80:23:f8:11:46:c1:5d:06: 46:e8:36:c1:d0:f3:df:6e:7f:62:32:33:19:7a:83:38:e6:fe: 02:f3:cb:9c:39:fb:2e:53:d6:03:38:58:19:ca:61:95:ad:5e: dd:a4:ce:c5:99:62:fc:30:da:59:fb:fd:6e:bd:1e:7d:9c:54: fd:33:25:29:e9:c0:88:7d:1e:6b:9d:c0:3f:6b:79:5b:33:db: 98:b0:17:d7:76:36:30:27:05:72:c9:c3:22:7e:a9:28:a5:97: ef:6c:0b:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjUwNjE0MjM1MzIxWhcNMjUwNjIxMjM1MzIxWjAYMRYwFAYD VQQDEw02ODRlMGI3MS1iMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoHTQGRu/gVBgvy1fHzwc+NLoFlPQzsRh7AD7wTJgau8IK2brRWO9H1Pt9+S oA4jWd8f0tPWdZTxzy0CXJEyP5RyesnURA5bc2RwTz8iSbPwkRzqfQx8Jc4dBkbM +IJEzeSN6RFhEMwmCL2RLvKxFKHqYn7fJqxxFytaQgJYi8nSWVnlD3j6n1/Ct6OG beYWTbZxOanfFVjPP6Yhq5PM7UI0tgbw/8rw90Mg85s0b1ZWpw5TJy9CJyHEj5W8 0co3KICkcysGgDxl/ZfNGEIDTDjdxh2Ic1OjckvzikP3QvFTKnymtoCw+P1HTKl1 RK09zQbqcFkyk2uVaqujwg7lawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSWHT4U BGkB6u+RN4nzcFuon5wFMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC61Jxj4qver9lEVkmE306VWDvS3jvAhdadPXLbz30W2AE4CuqfQVde QY+JpBrX87rhM7O9R8THkwTYg50L++Lhgw7/Tm10GFVpNmE4C7m+RRAN2hV3KubW k7HzZCXPqgRoi7JtCx1doPsWUdk9bATv2ogcdB4BZKI0ggrO2ljtJcTSGK6EAsTh anMqjblv0Y11Bn1by7NaoCnsgCP4EUbBXQZG6DbB0PPfbn9iMjMZeoM45v4C88uc OfsuU9YDOFgZymGVrV7dpM7FmWL8MNpZ+/1uvR59nFT9MyUp6cCIfR5rncA/a3lb M9uYsBfXdjYwJwVyycMifqkopZfvbAvo -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:16 2025 by rpki-client