$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json) Hash identifier: g/97pn3J5getJDIsA9egmp9hKlj0HApO8LahCl/LZok= Subject key identifier: 69:CD:3D:79:52:EE:6D:36:24:3A:86:BF:36:C7:6F:A9:E9:48:A0:7A Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft Manifest number: 01AA Signing time: Fri 13 Jun 2025 02:16:21 +0000 Manifest this update: Fri 13 Jun 2025 02:16:21 +0000 Manifest next update: Fri 20 Jun 2025 02:16:21 +0000 Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: zXOrUd6TwNtM0Mvo6hgLwFoX2hrIUPZ5mFh2lJVaBlI=) 2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: la16kPDMZ0PGNGFfbiOJE4nU4r91VONeRM7xfP7lGe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650, serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: Jun 13 02:16:21 2025 GMT Not After : Jun 20 02:16:21 2025 GMT Subject: CN=684b89f5-bca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:95:f1:0a:6f:05:35:b0:a0:3d:f4:35:64: ce:83:98:23:4f:2c:e4:ed:b7:a9:92:e3:d7:44:16: 6f:a5:7a:86:e1:3c:eb:59:37:ba:f4:47:f6:fe:4c: af:53:b0:5a:11:77:48:b2:b7:80:e3:98:54:07:41: 72:30:79:ca:e4:3f:2f:53:cf:37:75:ea:3b:d7:0d: 9c:e8:a3:25:40:a7:9c:54:37:37:bf:a2:11:58:2c: 93:97:05:87:d3:8c:8f:1b:b1:a5:d3:ce:58:d4:33: 08:6c:62:5f:59:ee:85:3f:cf:dd:8d:22:9a:f7:ea: 30:65:f4:74:32:66:46:a5:fe:fb:48:34:d8:77:9f: 78:c2:54:6e:73:4e:b1:8a:a7:1d:ba:a9:de:a6:50: bb:72:e9:55:40:73:a4:f7:f7:20:fd:f4:2a:ba:be: dd:03:c7:98:6d:3b:e5:24:95:aa:03:42:9f:57:74: 17:fd:22:81:46:39:76:a0:79:59:ed:cf:69:c6:0b: 00:54:4e:89:e8:e4:7a:30:05:c6:ab:05:4c:e5:31: 79:ed:3e:8f:18:35:56:48:11:27:5d:ce:df:4a:e5: de:0f:7a:41:4b:39:b1:2f:5c:42:de:ac:09:41:e6: 0f:46:d9:72:1d:5d:b7:0e:b0:00:7f:c2:a0:3f:15: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CD:3D:79:52:EE:6D:36:24:3A:86:BF:36:C7:6F:A9:E9:48:A0:7A X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:94:9b:ae:f4:e6:fa:d7:37:d7:9d:bf:a6:c4:27:c2:44:9d: 31:23:65:91:6f:3b:9a:81:cf:e6:24:5f:e7:70:fc:8c:b2:8e: a4:8b:b5:62:89:54:52:5b:83:45:f1:cf:a8:e5:63:d4:dd:e5: 66:db:3a:fe:43:ed:9b:10:2d:d0:bd:c8:32:e1:fa:f4:23:cc: 59:ad:72:8f:2d:f6:72:23:21:b9:23:cc:0c:23:51:d4:75:b1: c8:ce:4f:ac:ea:b8:f5:79:1e:d9:01:81:6e:5d:7a:95:d7:16: ba:c1:f8:db:87:88:7e:32:21:ef:5c:fd:ff:08:49:b1:f1:eb: 5e:8f:4f:23:9e:35:10:26:22:ef:13:cb:a6:7a:05:82:90:fc: f8:97:80:71:cc:a1:41:11:b2:b8:85:a7:23:b1:a9:3c:b9:94: 37:04:8f:8f:db:c7:74:1a:ea:c9:a6:d4:d3:1a:06:6a:a9:a6: e7:6c:22:56:d9:85:e3:88:35:33:e8:cd:b4:76:46:5b:14:37: 37:f5:27:31:5c:a3:90:53:a2:88:88:f0:f8:f5:43:84:5e:32: 45:7e:37:ae:fd:3a:3e:35:32:71:44:89:66:dc:fb:39:ca:6b: 3f:85:ac:90:77:d2:ad:68:9e:5b:39:6f:d3:01:55:34:d9:9e: 31:99:55:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjUwNjEzMDIxNjIxWhcNMjUwNjIwMDIxNjIxWjAYMRYwFAYD VQQDEw02ODRiODlmNS1iY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS2V8QpvBTWwoD30NWTOg5gjTyzk7bepkuPXRBZvpXqG4TzrWTe69Ef2/kyv U7BaEXdIsreA45hUB0FyMHnK5D8vU883deo71w2c6KMlQKecVDc3v6IRWCyTlwWH 04yPG7Gl085Y1DMIbGJfWe6FP8/djSKa9+owZfR0MmZGpf77SDTYd594wlRuc06x iqcduqneplC7culVQHOk9/cg/fQqur7dA8eYbTvlJJWqA0KfV3QX/SKBRjl2oHlZ 7c9pxgsAVE6J6OR6MAXGqwVM5TF57T6PGDVWSBEnXc7fSuXeD3pBSzmxL1xC3qwJ QeYPRtlyHV23DrAAf8KgPxVhPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnNPXlS 7m02JDqGvzbHb6npSKB6MB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF R2EzTTdqREU2SG9rMHY5WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAglJuu9Ob61zfXnb+mxCfCRJ0xI2WRbzuagc/mJF/ncPyMso6ki7Vi iVRSW4NF8c+o5WPU3eVm2zr+Q+2bEC3Qvcgy4fr0I8xZrXKPLfZyIyG5I8wMI1HU dbHIzk+s6rj1eR7ZAYFuXXqV1xa6wfjbh4h+MiHvXP3/CEmx8etej08jnjUQJiLv E8umegWCkPz4l4BxzKFBEbK4hacjsak8uZQ3BI+P28d0GurJptTTGgZqqabnbCJW 2YXjiDUz6M20dkZbFDc39ScxXKOQU6KIiPD49UOEXjJFfjeu/To+NTJxRIlm3Ps5 yms/hayQd9KtaJ5bOW/TAVU02Z4xmVWC -----END CERTIFICATE-----Generated at Sat Jun 14 17:47:15 2025 by rpki-client