$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json) Hash identifier: IW4taCN3O2CbYtNCY8CRNhvXD7nAQyvV2VVCi05Z43E= Subject key identifier: 0C:C3:A5:0A:9A:DF:24:EE:26:64:23:20:5C:43:E4:A2:89:1C:93:4D Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft Manifest number: 03D4 Signing time: Sun 15 Jun 2025 00:19:09 +0000 Manifest this update: Sun 15 Jun 2025 00:19:08 +0000 Manifest next update: Sun 22 Jun 2025 00:19:08 +0000 Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: /JhWgMgYxaRaMXABhP9CgELzNGKhhpoMVC7V+SWaEC8=) 2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: l0TDwbIQKnn22v377SYBCTiXJEwlU244XaVGT+AApO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Validity Not Before: Jun 15 00:19:08 2025 GMT Not After : Jun 22 00:19:08 2025 GMT Subject: CN=684e117c-9d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:f6:7a:22:12:2d:4d:df:c3:24:79:d5:1a: d8:8e:aa:88:2e:5b:9e:35:93:32:5c:2d:f1:2b:a0: 32:21:61:38:cb:15:4f:43:8a:05:ba:29:b2:8f:1e: e3:8b:19:ff:3f:a9:19:d2:bf:16:9b:a8:d8:7d:65: 6a:1b:31:8f:96:aa:2b:ee:89:75:a9:99:8e:2f:12: b7:6d:d1:6c:0d:6c:a2:1f:9f:a9:91:31:f1:04:94: 98:1e:d4:cd:16:8c:2c:04:4e:66:70:ba:4d:65:38: b2:ed:86:ca:91:0b:ce:95:e0:15:d7:e4:07:8c:63: d8:e8:d0:74:1a:82:68:2e:3e:b3:3d:ad:c4:ae:ae: b2:4d:96:1f:95:0d:3f:68:85:b6:8a:2d:53:7d:08: da:10:b7:9e:93:94:1a:8e:1b:d9:a4:44:fa:8d:2c: 38:4c:21:d5:0e:66:8e:04:ae:72:11:dd:b4:0b:e4: 36:b3:b1:e0:75:12:3a:12:67:10:54:de:d6:93:58: 22:24:bf:f6:53:f3:93:3c:db:0c:cc:c3:42:ce:8a: 89:4f:32:39:08:72:24:19:d8:f3:11:a6:9c:2c:c0: 20:2c:d8:a5:63:41:84:45:34:ec:2c:6d:92:ac:3c: cc:e8:9b:21:58:93:a6:90:41:81:ae:16:e5:b8:ca: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C3:A5:0A:9A:DF:24:EE:26:64:23:20:5C:43:E4:A2:89:1C:93:4D X509v3 Authority Key Identifier: keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f2:af:35:71:7d:d0:b7:26:43:e8:7b:e0:10:25:5b:f0:4f: f0:17:0d:1b:79:e8:c9:8f:d4:44:ee:19:c3:55:d8:5f:dc:ed: 5b:a1:0a:4b:c1:00:07:5e:b7:95:e3:bb:40:00:d8:b8:e2:56: 71:e7:e9:5b:62:00:8f:3c:73:ae:24:34:2c:c0:52:dd:6c:4f: 00:52:b9:b3:f0:65:8b:93:f6:3f:39:28:ec:19:1b:ac:e2:41: 68:86:f2:c4:3a:b4:f6:8b:c6:88:a7:f5:e6:24:4c:c5:49:6c: a9:d2:c0:97:3a:f2:14:34:2c:fd:c4:a5:22:cb:c8:91:82:b6: 45:84:25:c0:95:63:15:02:d7:b8:4f:54:a6:48:0f:bc:5e:12: 3a:d2:26:f8:3e:8d:2c:b3:12:bf:ba:d0:5c:0b:51:fe:c8:15: fa:fc:50:76:65:13:f8:eb:a8:71:e8:71:11:46:3d:7e:67:a4: ab:b8:1b:42:1f:be:2a:8e:31:e7:b8:10:d5:5b:09:3e:7b:9e: fa:4c:25:a2:8b:5a:ff:0c:bd:a3:8c:ee:77:a6:ba:60:e7:17: 23:ab:e6:65:e7:b5:2f:80:0c:1c:da:e2:00:18:cc:55:8e:c0: 20:4e:56:ef:b4:0a:93:dd:b7:01:8e:22:6a:ea:d7:af:e6:d8: d0:a4:18:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MjkxMTAvBgNVBAUTKDJCNDQwQzdDNDU5MDAzMDU1MTU3NjI3REU3MjE0RTlD QUMxMjhCNEMwHhcNMjUwNjE1MDAxOTA4WhcNMjUwNjIyMDAxOTA4WjAYMRYwFAYD VQQDEw02ODRlMTE3Yy05ZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnL2eiISLU3fwyR51RrYjqqILlueNZMyXC3xK6AyIWE4yxVPQ4oFuimyjx7j ixn/P6kZ0r8Wm6jYfWVqGzGPlqor7ol1qZmOLxK3bdFsDWyiH5+pkTHxBJSYHtTN FowsBE5mcLpNZTiy7YbKkQvOleAV1+QHjGPY6NB0GoJoLj6zPa3Erq6yTZYflQ0/ aIW2ii1TfQjaELeek5QajhvZpET6jSw4TCHVDmaOBK5yEd20C+Q2s7HgdRI6EmcQ VN7Wk1giJL/2U/OTPNsMzMNCzoqJTzI5CHIkGdjzEaacLMAgLNilY0GERTTsLG2S rDzM6JshWJOmkEGBrhbluMouXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzDpQqa 3yTuJmQjIFxD5KKJHJNNMB8GA1UdIwQYMBaAFCtEDHxFkAMFUVdifechTpysEotM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcyOS8xMzEyRjkwODg4 OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3VlJWMko5NXlGT25Ld1Np MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swUU1mRVdRQXdWUlYySjk1eUZPbkt3U2kwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcyOS8xMzEyRjkwODg4OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3 VlJWMko5NXlGT25Ld1NpMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh8q81cX3QtyZD6HvgECVb8E/wFw0beejJj9RE7hnDVdhf3O1boQpL wQAHXreV47tAANi44lZx5+lbYgCPPHOuJDQswFLdbE8AUrmz8GWLk/Y/OSjsGRus 4kFohvLEOrT2i8aIp/XmJEzFSWyp0sCXOvIUNCz9xKUiy8iRgrZFhCXAlWMVAte4 T1SmSA+8XhI60ib4Po0ssxK/utBcC1H+yBX6/FB2ZRP466hx6HERRj1+Z6SruBtC H74qjjHnuBDVWwk+e576TCWii1r/DL2jjO53prpg5xcjq+Zl57UvgAwc2uIAGMxV jsAgTlbvtAqT3bcBjiJq6tev5tjQpBgF -----END CERTIFICATE-----Generated at Sun Jun 15 09:44:19 2025 by rpki-client