$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json) Hash identifier: GAOKm1PevFXh2TFvKMm7nuga9Ka3TyCNIgK4dWr6oiY= Subject key identifier: F5:E6:BC:56:6D:7C:40:88:56:8A:19:8B:5A:20:F7:E5:66:3D:8E:2F Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft Manifest number: F1 Signing time: Fri 13 Jun 2025 04:16:00 +0000 Manifest this update: Fri 13 Jun 2025 04:15:59 +0000 Manifest next update: Fri 20 Jun 2025 04:15:59 +0000 Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: OH+lH0vzfh3+3sYEPznlXLoCp6RK0L9KhuxfGg28P6U=) 2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: d6abLKyd7fr1z0R2GJ3OwWkvRu3wB2ZUv3mxpyp6whI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Validity Not Before: Jun 13 04:15:59 2025 GMT Not After : Jun 20 04:15:59 2025 GMT Subject: CN=684ba5ff-5d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:df:73:d3:1b:2a:d1:43:1c:bd:23:59:c7: cb:ef:54:8f:10:f4:8b:b6:63:83:a8:ee:23:bb:93: a7:0f:fc:95:6d:78:88:f5:16:0e:e6:31:bc:9e:30: 7b:45:d5:bf:09:8a:ea:ca:aa:e9:b0:07:11:ab:d9: 94:89:fb:5c:fd:40:44:03:73:de:74:cc:3c:43:09: 79:47:9d:d9:07:28:7c:56:26:67:81:e6:86:0d:3b: 46:23:90:55:91:e6:66:1a:cf:26:d1:59:b4:4c:97: 02:6e:15:6d:0b:fc:78:4c:3f:15:28:ab:5d:46:68: 56:a2:df:09:fa:52:ec:38:48:27:73:72:46:a7:a0: ed:82:3f:38:fd:fa:c1:46:b5:6d:19:22:b4:51:29: 3e:1f:7a:69:c9:47:b8:84:3d:66:d1:e1:37:0c:cd: c9:05:12:66:79:88:df:d2:2a:46:57:b6:bb:ca:8b: 9e:7c:62:f9:9b:c9:9a:2b:57:c6:9c:42:da:1d:e3: f2:9d:7b:8c:fc:aa:27:37:ca:56:87:3f:fd:0b:37: f3:ba:cf:27:a2:16:ab:11:91:ef:a8:97:a7:4d:7c: e6:70:a3:f9:88:80:04:7a:a7:34:f6:4b:21:53:6b: 97:21:53:ad:16:87:47:14:8d:83:e5:28:80:0a:29: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E6:BC:56:6D:7C:40:88:56:8A:19:8B:5A:20:F7:E5:66:3D:8E:2F X509v3 Authority Key Identifier: keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:46:08:93:ff:6d:ad:01:b1:2e:f1:1d:4c:9c:f5:06:98:3f: 0b:4e:67:2c:f6:80:03:b8:cc:6c:3b:fd:e3:da:53:be:2e:86: 5a:a1:7a:bf:2a:98:4b:1e:38:1a:42:5d:84:5e:a0:00:f9:79: 0c:72:ef:22:bf:a9:6f:20:4d:1a:dd:74:c9:a9:35:31:7f:33: e4:af:52:8a:bb:a5:3a:48:fb:69:92:a2:88:1e:f6:a4:34:0a: 58:65:11:35:5f:3f:f8:42:a9:75:2d:ff:4a:8d:4b:f1:bd:d3: a9:ef:40:af:1c:ca:55:f9:23:be:3c:7d:a0:a7:ce:1e:7c:c7: 37:6b:20:ca:e5:3c:93:39:02:f4:f4:21:ca:41:c2:5c:4b:1b: b6:f6:4e:bb:3d:06:64:1d:71:9f:dd:43:68:21:a1:f6:50:62: e0:3e:43:c8:9e:e0:37:47:95:09:ba:20:c7:1e:78:c5:ed:bb: af:f9:a9:fc:29:ae:f5:b4:3e:9b:8e:05:c3:ab:07:ee:7d:86: 79:27:a5:5a:7f:63:52:74:2c:6b:7a:6f:eb:30:6d:9e:f4:3b: fe:87:5e:48:eb:77:31:9b:22:5a:bc:fa:94:72:f7:cc:c0:c2: d7:aa:60:0a:dc:46:5d:8e:2b:ce:23:80:10:f3:5e:8e:c5:c5: 0d:be:7a:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy NDlDQ0M4RjQwHhcNMjUwNjEzMDQxNTU5WhcNMjUwNjIwMDQxNTU5WjAYMRYwFAYD VQQDEw02ODRiYTVmZi01ZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUjfc9MbKtFDHL0jWcfL71SPEPSLtmODqO4ju5OnD/yVbXiI9RYO5jG8njB7 RdW/CYrqyqrpsAcRq9mUiftc/UBEA3PedMw8Qwl5R53ZByh8ViZngeaGDTtGI5BV keZmGs8m0Vm0TJcCbhVtC/x4TD8VKKtdRmhWot8J+lLsOEgnc3JGp6Dtgj84/frB RrVtGSK0USk+H3ppyUe4hD1m0eE3DM3JBRJmeYjf0ipGV7a7youefGL5m8maK1fG nELaHePynXuM/KonN8pWhz/9Czfzus8noharEZHvqJenTXzmcKP5iIAEeqc09ksh U2uXIVOtFodHFI2D5SiACimpowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXmvFZt fECIVooZi1og9+VmPY4vMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54 ajl5QzB3QjZuVFFrbk15UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqRgiT/22tAbEu8R1MnPUGmD8LTmcs9oADuMxsO/3j2lO+LoZaoXq/ KphLHjgaQl2EXqAA+XkMcu8iv6lvIE0a3XTJqTUxfzPkr1KKu6U6SPtpkqKIHvak NApYZRE1Xz/4Qql1Lf9KjUvxvdOp70CvHMpV+SO+PH2gp84efMc3ayDK5TyTOQL0 9CHKQcJcSxu29k67PQZkHXGf3UNoIaH2UGLgPkPInuA3R5UJuiDHHnjF7buv+an8 Ka71tD6bjgXDqwfufYZ5J6Vaf2NSdCxrem/rMG2e9Dv+h15I63cxmyJavPqUcvfM wMLXqmAK3EZdjivOI4AQ816OxcUNvnqK -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:13 2025 by rpki-client