$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: PHKgZu5XA6H4JMDzL27y4aAPow09D+H7JKMebZuKVpY= Subject key identifier: D0:B6:E7:8F:82:09:41:57:07:F2:3D:C8:CA:93:9A:EF:4A:41:6E:99 Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: D5 Signing time: Fri 13 Jun 2025 04:37:17 +0000 Manifest this update: Fri 13 Jun 2025 04:37:17 +0000 Manifest next update: Fri 20 Jun 2025 04:37:17 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: F2mvccKdu/ZfJtN6JWRL/yr35auZQs3S7IoGBXoZgjA=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: We+bh/dPouK8NlGju2k+lFoIHBb/HkpPfF89DMkSLSg=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: OvtEst3O8Yb7GSI88hSTYs6uncMGZjm+NzSGzxQ2axk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: Jun 13 04:37:17 2025 GMT Not After : Jun 20 04:37:17 2025 GMT Subject: CN=684baafd-0662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:9e:8b:f0:5c:0d:15:71:41:47:2f:df:f3: 9f:ef:47:dd:b1:e0:75:45:38:0c:2c:0f:f9:0b:4f: 37:31:11:94:ed:ce:d6:8c:d0:a1:5e:0e:dc:ab:ae: ab:b7:26:8d:8b:f7:6d:fe:13:3b:35:4d:ce:1f:7b: 8b:50:d1:3a:fe:64:03:f2:d9:d4:e7:a2:f8:f1:76: 4c:c1:4b:b0:7e:df:f6:c1:86:d2:9f:27:10:d6:32: 6c:56:df:65:46:00:2d:35:d0:52:4b:1f:0c:82:ce: 59:68:61:8f:bd:b7:bc:a7:d7:25:db:9f:65:b9:1a: 57:d8:99:15:58:23:86:5d:84:90:f6:14:7e:ce:4e: 47:19:b2:09:73:7b:b7:a7:10:a5:f9:f9:d0:0f:b5: e8:43:37:27:e5:cc:a9:57:55:ba:50:b5:14:7e:98: e3:80:8f:62:9b:41:0a:0b:aa:ae:85:29:8a:08:57: 2a:4c:60:b0:c5:84:c9:07:79:01:69:cb:87:62:fd: 5c:e1:0c:74:55:0e:aa:f7:50:42:82:0a:26:fe:90: 94:c2:d9:45:49:8c:00:06:31:7a:06:6b:b6:61:48: c2:85:e2:ac:2f:51:fd:f2:53:4c:5d:63:cf:45:21: 50:7d:6b:af:b7:78:b5:ad:a4:99:8c:0d:e4:59:d5: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B6:E7:8F:82:09:41:57:07:F2:3D:C8:CA:93:9A:EF:4A:41:6E:99 X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:fd:19:9f:0b:0d:05:a4:4f:dc:71:17:60:f9:83:ad:67:28: 3d:f5:74:31:a6:16:5a:7d:67:40:67:99:60:62:99:12:3b:99: f7:f5:0f:8f:ca:fa:e6:dc:b8:18:c3:4d:c6:3d:99:c0:e1:fc: 05:04:87:c2:5e:a2:40:ef:46:cf:cc:f0:f7:d2:d6:4e:b5:e9: 29:60:c5:b6:15:da:e5:24:55:07:83:74:25:cb:11:6d:b2:24: 85:0f:72:d7:a9:5e:1b:5a:2c:fd:5e:56:1d:6a:32:70:8d:56: c1:88:e5:96:c4:19:f7:e4:e2:7f:f1:78:69:ec:62:79:e7:78: 69:16:82:e9:e7:0d:3c:56:9a:ca:d5:92:4b:e2:f9:91:a0:1f: 13:d8:bd:f8:4e:d6:e5:5e:62:30:33:23:30:5d:93:4d:a9:db: 67:2d:1c:a6:ea:27:f1:93:0a:0a:29:bc:99:7c:14:f6:6e:cc: f0:04:e6:55:f3:7d:db:45:ea:fb:17:d6:76:68:69:94:35:6c: 8e:26:3a:ea:b9:cc:63:e5:05:32:b6:db:3e:75:f8:bd:53:08: 77:d7:44:64:4c:51:af:dc:1a:28:f3:b8:9d:b9:8c:ca:d0:4f: a9:f7:42:07:cc:f3:2e:2d:31:78:ec:cb:fd:2a:74:50:c5:a8: 7b:3e:3b:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy M0UwQzIyODMwHhcNMjUwNjEzMDQzNzE3WhcNMjUwNjIwMDQzNzE3WjAYMRYwFAYD VQQDEw02ODRiYWFmZC0wNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IGei/BcDRVxQUcv3/Of70fdseB1RTgMLA/5C083MRGU7c7WjNChXg7cq66r tyaNi/dt/hM7NU3OH3uLUNE6/mQD8tnU56L48XZMwUuwft/2wYbSnycQ1jJsVt9l RgAtNdBSSx8Mgs5ZaGGPvbe8p9cl259luRpX2JkVWCOGXYSQ9hR+zk5HGbIJc3u3 pxCl+fnQD7XoQzcn5cypV1W6ULUUfpjjgI9im0EKC6quhSmKCFcqTGCwxYTJB3kB acuHYv1c4Qx0VQ6q91BCggom/pCUwtlFSYwABjF6Bmu2YUjCheKsL1H98lNMXWPP RSFQfWuvt3i1raSZjA3kWdVmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNC254+C CUFXB/I9yMqTmu9KQW6ZMB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ/RmfCw0FpE/ccRdg+YOtZyg99XQxphZafWdAZ5lgYpkSO5n39Q+P yvrm3LgYw03GPZnA4fwFBIfCXqJA70bPzPD30tZOtekpYMW2FdrlJFUHg3QlyxFt siSFD3LXqV4bWiz9XlYdajJwjVbBiOWWxBn35OJ/8Xhp7GJ553hpFoLp5w08VprK 1ZJL4vmRoB8T2L34TtblXmIwMyMwXZNNqdtnLRym6ifxkwoKKbyZfBT2bszwBOZV 833bRer7F9Z2aGmUNWyOJjrqucxj5QUytts+dfi9Uwh310RkTFGv3Boo87iduYzK 0E+p90IHzPMuLTF47Mv9KnRQxah7Pjtf -----END CERTIFICATE-----Generated at Sun Jun 15 05:54:27 2025 by rpki-client