$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json) Hash identifier: R/HULk3nE8dgigBpYiFBFt7WDU7+UGyvtp16TzFTJYU= Subject key identifier: 13:91:5E:8A:53:23:BF:D9:DE:E7:CA:A0:3A:3E:97:D1:B3:F1:58:E3 Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft Manifest number: AB Signing time: Sun 15 Jun 2025 05:26:20 +0000 Manifest this update: Sun 15 Jun 2025 05:26:20 +0000 Manifest next update: Sun 22 Jun 2025 05:26:20 +0000 Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: NmOR/yJYQeRavjBCq9NfST1L3d637OdlAAHPT/9e0rU=) 2: AC7759D2135511F092D0090CC4F9AE02.roa (hash: onYsR/Z0zfQbFj+mcD8abagulwJaECFH59WKOVFKUeE=) 3: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=) 4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: swi4PXSK/F+KN97GlDzhN7O3Kmz0645WUAiVa8gtnyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Validity Not Before: Jun 15 05:26:20 2025 GMT Not After : Jun 22 05:26:20 2025 GMT Subject: CN=684e597c-9216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:70:6b:cd:cc:f0:5c:fa:d1:74:da:04:a8: e4:1d:87:14:19:6e:29:ac:14:f7:1d:49:94:25:55: 6b:db:ae:ec:13:a4:ee:c5:a4:16:1d:41:77:79:d5: 2e:fb:06:f8:a9:95:d1:42:3f:46:62:bc:7d:9d:b2: ce:15:6f:81:6b:57:bc:13:7d:4d:e8:a5:95:ac:2f: 1b:9e:29:61:00:eb:32:6a:5f:5f:be:75:74:4a:b5: bc:7c:4c:70:56:1c:d9:1a:b9:2a:18:ba:64:49:6b: dc:28:10:6a:68:8e:4e:6c:74:6b:c1:84:68:9b:b7: 82:2b:40:03:3c:33:1c:76:0f:ec:bb:f3:65:18:0e: e1:74:3c:aa:59:ac:08:56:85:df:15:d8:31:11:e5: e3:1b:84:21:e4:21:99:5f:9d:7d:7a:ba:bb:78:5f: 7e:9c:e0:20:a0:37:3d:8c:da:36:ad:e4:aa:f0:f5: 72:9c:13:89:72:e5:52:e4:f8:1f:5f:1d:81:46:b7: 65:27:59:1a:ec:11:7d:a7:15:10:0a:8d:ec:9d:99: 8e:a7:a8:24:cf:3d:b6:b7:33:f3:00:bf:1e:fd:3e: d2:05:23:08:82:ea:65:c1:2d:e0:77:63:21:ff:bc: 9e:3b:02:29:31:d4:1d:d5:a8:09:c9:ad:16:5a:d5: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:91:5E:8A:53:23:BF:D9:DE:E7:CA:A0:3A:3E:97:D1:B3:F1:58:E3 X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:21:fd:aa:3f:b5:e8:ee:4d:9e:55:9e:9c:30:a0:f1:cb:b6: fd:8d:0d:6e:58:f6:53:97:0d:8e:d5:34:40:49:1a:47:99:9c: 0e:89:17:09:54:4b:22:e5:8d:13:65:93:5d:3b:92:a1:87:f7: a8:bc:71:8d:92:26:22:17:6d:1b:be:04:fe:30:65:71:b1:8e: cc:e7:20:f3:44:6d:14:49:c8:cf:19:d1:1f:b7:a7:78:1d:66: bd:3e:f1:57:bb:95:d9:3b:6d:99:53:8d:4c:ca:6f:62:80:f9: d1:bb:ef:e3:39:7b:16:a4:ee:91:6b:ff:ac:d0:68:72:34:69: 95:92:3f:93:69:08:d3:d1:9e:4a:11:a7:ae:99:11:f3:46:c2: b4:2e:0e:0b:08:c6:36:75:73:71:13:cb:1a:fe:3a:df:d3:0d: 68:23:0d:a4:7e:e2:11:60:61:a5:48:96:a4:64:f5:24:03:8d: f5:33:e3:dc:1a:49:58:a9:1c:5b:91:59:1f:68:a3:7f:63:72: c4:5b:8d:88:3f:d3:ec:39:f9:9d:89:95:c4:b1:1d:56:c1:8f: e6:1b:85:9f:dc:14:2d:13:70:9e:a9:70:76:7c:8f:51:fc:48: 7b:02:84:d4:1c:8b:69:4a:38:cc:9a:fa:a8:04:2e:f2:f4:2f: 08:33:02:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0 MUZCM0VFQUIwHhcNMjUwNjE1MDUyNjIwWhcNMjUwNjIyMDUyNjIwWjAYMRYwFAYD VQQDEw02ODRlNTk3Yy05MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoB5wa83M8Fz60XTaBKjkHYcUGW4prBT3HUmUJVVr267sE6TuxaQWHUF3edUu +wb4qZXRQj9GYrx9nbLOFW+Ba1e8E31N6KWVrC8bnilhAOsyal9fvnV0SrW8fExw VhzZGrkqGLpkSWvcKBBqaI5ObHRrwYRom7eCK0ADPDMcdg/su/NlGA7hdDyqWawI VoXfFdgxEeXjG4Qh5CGZX519erq7eF9+nOAgoDc9jNo2reSq8PVynBOJcuVS5Pgf Xx2BRrdlJ1ka7BF9pxUQCo3snZmOp6gkzz22tzPzAL8e/T7SBSMIguplwS3gd2Mh /7yeOwIpMdQd1agJya0WWtWa8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBORXopT I7/Z3ufKoDo+l9Gz8VjjMB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3 cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTY3Mi9FNUY0NUFEMDVGNTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VC bURqRXFSeVJ4ZzFCLXo3cXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5If2qP7Xo7k2eVZ6cMKDxy7b9jQ1uWPZTlw2O1TRASRpHmZwOiRcJ VEsi5Y0TZZNdO5Khh/eovHGNkiYiF20bvgT+MGVxsY7M5yDzRG0UScjPGdEft6d4 HWa9PvFXu5XZO22ZU41Mym9igPnRu+/jOXsWpO6Ra/+s0GhyNGmVkj+TaQjT0Z5K EaeumRHzRsK0Lg4LCMY2dXNxE8sa/jrf0w1oIw2kfuIRYGGlSJakZPUkA431M+Pc GklYqRxbkVkfaKN/Y3LEW42IP9PsOfmdiZXEsR1WwY/mG4Wf3BQtE3CeqXB2fI9R /Eh7AoTUHItpSjjMmvqoBC7y9C8IMwK4 -----END CERTIFICATE-----Generated at Sun Jun 15 10:26:13 2025 by rpki-client