$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json) Hash identifier: gO4ESvDh8EoisvqZIImKSidgjBZ/D1c7nehI1XTw1G4= Subject key identifier: BE:CA:D8:59:8E:1A:36:C3:99:B3:1C:9E:52:D9:2D:C8:E8:A5:A9:69 Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Certificate serial: 0FF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft Manifest number: 0FF1 Signing time: Sat 14 Jun 2025 17:23:07 +0000 Manifest this update: Sat 14 Jun 2025 17:23:07 +0000 Manifest next update: Sat 21 Jun 2025 17:23:07 +0000 Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: RctBOp0HZNJBBzPjc0BmB0wvKv6VpBrY/leQ38udlJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4081 (0xff1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Validity Not Before: Jun 14 17:23:07 2025 GMT Not After : Jun 21 17:23:07 2025 GMT Subject: CN=684daffb-3725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:0d:b6:2b:11:aa:07:fc:b6:d7:be:d0:aa: 71:d4:f5:fb:c2:6a:41:6d:47:de:5e:3d:3f:da:05: 8f:69:3b:ef:fa:05:30:bb:84:6f:18:09:f8:2f:0c: c8:d8:ea:51:50:19:68:a9:d7:f2:05:5c:6a:32:63: 65:4a:47:55:69:56:13:e8:60:ed:43:e7:86:f0:72: fa:89:a0:ec:32:7b:0b:f5:dd:0e:d2:09:bd:32:ec: 72:e3:3d:62:1d:21:0a:1d:92:a9:c9:96:07:55:ba: 29:1a:4d:53:77:62:f8:a6:fa:4f:19:5b:0a:79:15: c6:50:89:f3:8d:40:5e:4a:a3:85:a2:c5:d5:ec:f7: 05:c9:80:7d:0a:24:ae:21:9a:4d:f3:53:59:ee:16: e4:6b:ed:f6:45:78:3b:25:0a:23:27:22:bd:ac:7b: 3d:35:38:10:62:84:f7:c7:72:97:a4:80:5a:17:49: 6d:11:bb:82:65:9c:bc:30:26:88:0c:76:1a:56:40: 72:39:f8:f3:13:ed:ad:ac:70:40:eb:82:f7:93:fa: 24:b0:12:86:19:08:0c:4c:f1:be:07:c0:0e:80:b9: 2b:08:5b:a1:87:e7:93:45:ab:06:86:46:f7:45:94: 5e:14:e8:39:6b:aa:3d:0b:86:25:9a:90:0a:ce:11: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CA:D8:59:8E:1A:36:C3:99:B3:1C:9E:52:D9:2D:C8:E8:A5:A9:69 X509v3 Authority Key Identifier: keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7e:e3:80:cf:ef:88:67:ca:5a:35:f3:c1:27:83:90:89:b9: c3:03:a0:40:bb:db:b3:85:e3:16:24:4b:e5:06:fd:22:61:8e: 16:46:75:e0:09:93:d2:cf:75:a9:80:61:67:f0:c3:16:1a:36: 33:ad:30:c1:71:10:4b:0f:a4:69:77:0d:cf:87:23:bf:1a:11: 41:e6:e3:9b:ef:a8:b7:84:bd:05:49:0c:c6:b3:ff:23:33:5a: cd:5f:8a:65:94:6e:88:bd:de:d4:c6:1c:98:29:4d:ab:7e:c1: 98:18:49:08:72:fb:bf:95:a2:36:ba:85:1f:8d:78:2b:de:db: 57:6b:c4:a0:4c:26:48:44:18:9c:a9:16:d0:a7:21:ba:f7:3c: 4e:78:50:57:47:b0:45:44:84:be:35:19:f6:2b:19:63:f7:3f: 43:e1:17:96:3b:2b:fb:8c:4e:64:65:50:05:fb:20:24:c5:6c: e4:89:73:90:7c:71:96:87:d1:46:d3:ed:8c:ce:73:7b:f4:f2: cf:5d:46:e2:b7:87:54:67:0e:13:08:61:f5:24:73:1d:bb:17: 59:92:1c:85:71:f1:b4:e1:98:11:46:e3:d7:40:c6:fe:5a:63: d6:ef:a2:dc:fc:a6:63:f4:30:8d:73:3a:c9:7a:30:41:47:ca: 4f:78:a6:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUExNjExMTAvBgNVBAUTKDkwMkIzRUIzQ0Q0OEQwOUFBMEExMEM5QjJDQjI4MEQw QTBDRDJEQkEwHhcNMjUwNjE0MTcyMzA3WhcNMjUwNjIxMTcyMzA3WjAYMRYwFAYD VQQDEw02ODRkYWZmYi0zNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT4NtisRqgf8tte+0Kpx1PX7wmpBbUfeXj0/2gWPaTvv+gUwu4RvGAn4LwzI 2OpRUBloqdfyBVxqMmNlSkdVaVYT6GDtQ+eG8HL6iaDsMnsL9d0O0gm9Muxy4z1i HSEKHZKpyZYHVbopGk1Td2L4pvpPGVsKeRXGUInzjUBeSqOFosXV7PcFyYB9CiSu IZpN81NZ7hbka+32RXg7JQojJyK9rHs9NTgQYoT3x3KXpIBaF0ltEbuCZZy8MCaI DHYaVkByOfjzE+2trHBA64L3k/oksBKGGQgMTPG+B8AOgLkrCFuhh+eTRasGhkb3 RZReFOg5a6o9C4YlmpAKzhGfSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7K2FmO GjbDmbMcnlLZLcjopalpMB8GA1UdIwQYMBaAFJArPrPNSNCaoKEMmyyygNCgzS26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE2MS9CMDdCMkFCODRC MTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBKcWdvUXliTExLQTBLRE5M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDcy1zODFJMEpxZ29ReWJMTEtBMEtETkxiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTE2MS9CMDdCMkFCODRCMTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBK cWdvUXliTExLQTBLRE5MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsfuOAz++IZ8paNfPBJ4OQibnDA6BAu9uzheMWJEvlBv0iYY4WRnXg CZPSz3WpgGFn8MMWGjYzrTDBcRBLD6Rpdw3PhyO/GhFB5uOb76i3hL0FSQzGs/8j M1rNX4pllG6Ivd7UxhyYKU2rfsGYGEkIcvu/laI2uoUfjXgr3ttXa8SgTCZIRBic qRbQpyG69zxOeFBXR7BFRIS+NRn2Kxlj9z9D4ReWOyv7jE5kZVAF+yAkxWzkiXOQ fHGWh9FG0+2MznN79PLPXUbit4dUZw4TCGH1JHMduxdZkhyFcfG04ZgRRuPXQMb+ WmPW76Lc/KZj9DCNczrJejBBR8pPeKad -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:37 2025 by rpki-client