$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft File: KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json) Hash identifier: 9MXYS73LfzS31k5/vw31aD6r+gjx82QaVdmYL0u4nMA= Subject key identifier: 85:92:7F:1F:24:09:83:C0:AB:C4:04:FA:6F:E8:5D:AC:17:3E:2F:1A Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B Certificate issuer: /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft Manifest number: 0488 Signing time: Fri 13 Jun 2025 00:09:33 +0000 Manifest this update: Fri 13 Jun 2025 00:09:33 +0000 Manifest next update: Fri 20 Jun 2025 00:09:33 +0000 Files and hashes: 1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: ZOrMDugstNxsYbVTai9sXBCbXO/NKyi5ESvFW/imKac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A80, serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B Validity Not Before: Jun 13 00:09:33 2025 GMT Not After : Jun 20 00:09:33 2025 GMT Subject: CN=684b6c3d-1a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:6f:76:5d:cc:c3:40:8f:8c:27:ce:63:ba: 70:85:ac:7d:5b:87:88:a1:c4:a7:3d:4f:54:d9:3e: d3:3d:27:2d:d5:d3:14:9e:57:73:3b:20:ff:a1:99: 61:ee:a1:3c:cd:75:1a:a4:01:1f:5c:dc:34:57:59: ac:10:f9:8f:40:0b:2b:3b:0e:8f:c7:ae:50:41:47: ba:2e:53:58:d7:6c:aa:b3:de:c9:ff:eb:13:e6:27: b1:a5:af:d5:02:ad:de:6d:bc:42:e5:f5:05:1c:fe: cd:85:5e:ad:91:c6:66:17:2e:d4:47:ba:3c:c1:ae: c0:b7:2e:cd:f7:5c:23:26:7a:1c:94:86:d2:94:1c: 22:08:5a:35:44:1b:9e:3b:f2:b1:a6:a4:26:14:a0: 6a:86:d9:af:7c:12:f5:67:85:34:89:86:ff:6a:5b: 30:3d:1d:59:94:80:a3:3d:f3:59:34:05:90:10:ea: b0:49:c5:39:31:bf:30:8b:75:25:25:52:b9:3a:6d: 00:cb:64:da:26:25:24:c7:df:2c:1b:2b:07:55:af: 82:7a:13:28:26:66:7d:c3:d4:18:c5:44:bc:a7:43: dc:34:88:92:f4:41:f2:1e:67:ce:5e:4e:75:0d:a6: 67:25:d8:cb:a9:8b:e7:eb:b1:b5:08:66:4d:c8:77: e0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:7F:1F:24:09:83:C0:AB:C4:04:FA:6F:E8:5D:AC:17:3E:2F:1A X509v3 Authority Key Identifier: keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:df:4f:7d:ff:02:46:14:99:08:d8:68:f5:e7:5e:4e:11:41: d5:be:b6:db:9c:d3:93:56:ef:40:e2:ea:14:cf:52:dc:e4:63: cb:71:0d:fc:77:bc:6f:55:54:8a:8c:a4:81:97:a5:76:67:68: 28:41:2c:20:e4:04:70:e0:51:4d:be:3f:a8:64:fd:b2:dc:0c: d8:f9:64:b3:54:43:36:0b:19:e7:b0:5a:88:6b:7b:98:6e:ee: 40:99:9e:2f:2b:e2:7c:41:e4:88:5c:c1:91:4c:79:ec:9a:d3: 4e:19:7e:e4:dd:3f:99:48:b7:d5:31:3a:e4:d8:b3:5c:1c:b2: e9:30:1a:c6:12:43:54:00:7f:2f:8f:84:6a:c2:b7:3c:2d:ef: bb:cf:49:08:66:24:d9:67:0e:d7:37:53:7f:e1:f3:6d:5f:1a: 5c:23:33:ca:7c:70:92:d9:56:c0:31:14:c3:0a:a9:dd:9c:5f: b7:a5:ed:7e:43:02:94:cb:47:5d:da:af:d4:13:fc:88:2e:84: 3e:83:ba:0b:04:3f:71:92:2c:65:a7:8f:77:5f:12:aa:7e:16: 22:8c:93:d3:e5:56:16:a7:52:a1:0e:80:f0:ea:84:d1:ba:1f: 16:ea:3a:68:d6:61:f1:75:93:2a:b3:e1:43:38:29:5b:99:0d: c5:c1:31:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBODAxMTAvBgNVBAUTKDJCMDM3RTVFREJDMjg0QTM5Mzg4RDE5QkNENDVEMkQ5 NDc0QjMxOUIwHhcNMjUwNjEzMDAwOTMzWhcNMjUwNjIwMDAwOTMzWjAYMRYwFAYD VQQDEw02ODRiNmMzZC0xYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypxvdl3Mw0CPjCfOY7pwhax9W4eIocSnPU9U2T7TPSct1dMUnldzOyD/oZlh 7qE8zXUapAEfXNw0V1msEPmPQAsrOw6Px65QQUe6LlNY12yqs97J/+sT5iexpa/V Aq3ebbxC5fUFHP7NhV6tkcZmFy7UR7o8wa7Aty7N91wjJnoclIbSlBwiCFo1RBue O/KxpqQmFKBqhtmvfBL1Z4U0iYb/alswPR1ZlICjPfNZNAWQEOqwScU5Mb8wi3Ul JVK5Om0Ay2TaJiUkx98sGysHVa+CehMoJmZ9w9QYxUS8p0PcNIiS9EHyHmfOXk51 DaZnJdjLqYvn67G1CGZNyHfg3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWSfx8k CYPAq8QE+m/oXawXPi8aMB8GA1UdIwQYMBaAFCsDfl7bwoSjk4jRm81F0tlHSzGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4 MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hLT1RpTkdielVYUzJVZExN WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t3Ti1YdHZDaEtPVGlOR2J6VVhTMlVkTE1acy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hL T1RpTkdielVYUzJVZExNWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+3099/wJGFJkI2Gj1515OEUHVvrbbnNOTVu9A4uoUz1Lc5GPLcQ38 d7xvVVSKjKSBl6V2Z2goQSwg5ARw4FFNvj+oZP2y3AzY+WSzVEM2CxnnsFqIa3uY bu5AmZ4vK+J8QeSIXMGRTHnsmtNOGX7k3T+ZSLfVMTrk2LNcHLLpMBrGEkNUAH8v j4Rqwrc8Le+7z0kIZiTZZw7XN1N/4fNtXxpcIzPKfHCS2VbAMRTDCqndnF+3pe1+ QwKUy0dd2q/UE/yILoQ+g7oLBD9xkixlp493XxKqfhYijJPT5VYWp1KhDoDw6oTR uh8W6jpo1mHxdZMqs+FDOClbmQ3FwTH2 -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:52 2025 by rpki-client