$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: ZfotT+58vxVE3iLHndnx8m8xcNzCR5aiWN0GO0iwTwg= Subject key identifier: 11:48:A7:C2:A3:04:A5:02:B9:24:86:56:41:8F:A6:AF:DB:62:5A:78 Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 027D Signing time: Sat 21 Jun 2025 01:21:45 +0000 Manifest this update: Sat 21 Jun 2025 01:21:44 +0000 Manifest next update: Sat 28 Jun 2025 01:21:44 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: ++96rSWixEUSr6PMfQVb/SpkPGawD0Ax9Kets2MECiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 01:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Jun 21 01:21:44 2025 GMT Not After : Jun 28 01:21:44 2025 GMT Subject: CN=68560928-4117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:90:cc:dc:98:94:58:b6:8e:c7:27:94:2f: 23:7c:c1:71:c6:c0:ff:42:99:de:ed:a5:67:79:19: 68:ad:aa:ec:ac:71:56:ec:58:fa:a7:4c:97:8c:8e: 32:54:65:05:09:01:92:3e:34:08:e0:7f:be:67:19: 04:ea:ca:88:71:f5:3a:0d:71:05:ae:af:b3:3c:d8: 7f:8d:bc:b4:97:16:28:eb:c9:50:dc:51:5c:b8:70: f6:f1:cc:c9:a4:04:13:e7:3f:bc:66:f5:40:25:aa: 9d:cb:bb:a6:50:38:09:45:cd:d9:da:cb:89:f3:df: 03:84:42:06:45:86:9e:49:b0:b9:81:a3:81:20:56: 85:e0:48:98:d6:b0:b8:df:de:d6:0c:d5:49:2c:b6: bd:9e:2f:38:ad:be:b1:1e:64:3c:af:46:db:7b:26: 7f:fa:59:e3:59:6b:5c:f0:30:24:d1:4a:ce:72:ca: 7d:34:5c:2f:e4:58:6a:4e:3e:dc:21:5e:11:3a:30: eb:8e:5f:13:df:85:c9:bc:3f:27:83:79:c8:fc:04: 23:00:b4:09:50:1a:1a:1b:b1:af:1c:01:86:17:c8: de:43:95:82:5f:20:b1:03:2b:56:22:dd:1b:5f:ec: ff:54:bd:b3:e3:29:aa:61:80:47:75:d7:2b:bb:62: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:48:A7:C2:A3:04:A5:02:B9:24:86:56:41:8F:A6:AF:DB:62:5A:78 X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ab:3a:77:ac:a3:7e:a4:ed:8c:02:52:9a:c5:db:68:9b:a2: 04:05:f0:5c:59:f7:b7:23:69:f7:07:ab:b9:9a:76:b1:a7:40: 11:44:46:90:f6:bd:7f:e3:ec:99:92:f0:78:08:5d:8f:8e:00: 9c:05:13:74:1f:62:23:93:3d:fa:2c:a4:4a:01:79:84:43:d1: 12:5a:8b:9e:70:ef:7e:e5:21:fc:5d:9b:b1:e1:aa:ed:13:38: 71:49:e0:27:28:18:df:8e:20:a1:fd:0c:c4:26:56:0a:48:e1: b8:6c:4a:75:f8:50:d5:71:46:dd:ab:5c:c2:99:f9:00:22:af: 76:5f:2c:dd:ee:d0:92:b1:eb:ed:f2:7c:38:e8:06:ec:65:ad: 8d:ad:2c:01:d9:4c:c9:c8:05:2b:06:4b:60:e2:0c:84:fe:41: 6e:3b:4a:0e:b4:ce:9c:0f:e3:b5:3e:26:c1:0b:bc:58:e4:4f: 90:dd:fb:39:88:00:0d:8e:9a:19:32:3a:11:41:d5:d7:4d:33: 66:d4:45:2d:09:78:4c:92:18:b5:f4:64:75:a4:43:0d:f4:fb: 97:0f:30:3a:a1:e9:b2:67:78:f6:fb:c9:74:f4:1a:da:d4:04: 91:22:a2:55:45:88:16:60:72:66:7f:eb:9f:48:74:a0:48:36: 74:5f:eb:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUwNjIxMDEyMTQ0WhcNMjUwNjI4MDEyMTQ0WjAYMRYwFAYD VQQDEw02ODU2MDkyOC00MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDWQzNyYlFi2jscnlC8jfMFxxsD/Qpne7aVneRlorarsrHFW7Fj6p0yXjI4y VGUFCQGSPjQI4H++ZxkE6sqIcfU6DXEFrq+zPNh/jby0lxYo68lQ3FFcuHD28czJ pAQT5z+8ZvVAJaqdy7umUDgJRc3Z2suJ898DhEIGRYaeSbC5gaOBIFaF4EiY1rC4 397WDNVJLLa9ni84rb6xHmQ8r0bbeyZ/+lnjWWtc8DAk0UrOcsp9NFwv5FhqTj7c IV4ROjDrjl8T34XJvD8ng3nI/AQjALQJUBoaG7GvHAGGF8jeQ5WCXyCxAytWIt0b X+z/VL2z4ymqYYBHddcru2I2nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFIp8Kj BKUCuSSGVkGPpq/bYlp4MB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGqzp3rKN+pO2MAlKaxdtom6IEBfBcWfe3I2n3B6u5mnaxp0ARREaQ 9r1/4+yZkvB4CF2PjgCcBRN0H2Ijkz36LKRKAXmEQ9ESWouecO9+5SH8XZux4art EzhxSeAnKBjfjiCh/QzEJlYKSOG4bEp1+FDVcUbdq1zCmfkAIq92Xyzd7tCSsevt 8nw46AbsZa2NrSwB2UzJyAUrBktg4gyE/kFuO0oOtM6cD+O1PibBC7xY5E+Q3fs5 iAANjpoZMjoRQdXXTTNm1EUtCXhMkhi19GR1pEMN9PuXDzA6oemyZ3j2+8l09Bra 1ASRIqJVRYgWYHJmf+ufSHSgSDZ0X+sb -----END CERTIFICATE-----Generated at Sat Jun 21 08:40:09 2025 by rpki-client