$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: sRiDqyeWVLIv1S0PuXVLowOw1Lf5GzOfW4Z/qeoKZxE= Subject key identifier: 69:6F:CD:F2:FF:BF:7E:03:86:F3:72:BB:C9:3B:54:AB:1B:C1:AB:F2 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 05AB Signing time: Sat 14 Jun 2025 22:54:24 +0000 Manifest this update: Sat 14 Jun 2025 22:54:24 +0000 Manifest next update: Sat 21 Jun 2025 22:54:24 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: MwQiJ9G35o73gL7pAnnk0B8/isqisgV9/NqfxzJ7BtI=) 2: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Jun 14 22:54:24 2025 GMT Not After : Jun 21 22:54:24 2025 GMT Subject: CN=684dfda0-a2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ae:03:a7:c8:e2:98:0d:b1:77:db:d8:cb:b9: 01:6a:1f:59:a7:a7:22:ca:dd:49:97:64:07:65:95: ed:81:a5:4c:30:db:f9:7c:87:81:3c:4a:42:81:cf: b4:57:8b:9b:a1:ac:a3:00:12:d1:71:20:00:e0:4c: c5:60:f6:13:a0:10:28:2b:94:e8:26:be:0e:94:75: 43:69:d3:14:f9:8d:dd:74:e5:37:23:22:1f:a2:49: 3e:ab:f8:e1:d6:10:48:1d:78:a6:06:09:8a:d9:17: e8:1b:c3:31:56:bf:4a:32:fe:39:1d:d2:21:39:43: 57:bc:83:25:44:3e:68:6b:8a:69:42:89:17:9e:d9: 62:1c:69:d3:61:48:52:60:c9:23:8f:8d:74:bb:71: 54:49:73:4d:e7:c1:66:b1:33:b4:02:0b:f7:3f:6d: 6c:22:4c:d1:f6:76:57:b8:9f:df:f1:49:20:14:7a: 8b:40:6a:da:2e:3f:d1:59:fa:45:ea:ca:ff:d7:df: 83:c5:b1:0d:12:aa:1e:4a:1c:ca:50:0e:23:13:ea: 43:00:33:4e:15:9f:db:36:2f:22:b1:b3:69:a4:9c: 9d:53:e9:1d:12:35:0e:30:8a:a9:ce:e8:23:b4:1c: 75:4e:10:8f:24:f9:b6:c2:59:2c:4a:f2:aa:2d:b9: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6F:CD:F2:FF:BF:7E:03:86:F3:72:BB:C9:3B:54:AB:1B:C1:AB:F2 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f7:72:26:bc:df:d6:c7:bf:f3:54:f1:f7:ae:a8:3e:48:18: e3:0d:cd:77:d4:30:c1:3d:f3:34:ec:a0:3b:eb:e4:aa:d9:3e: c5:c0:b9:1d:26:b9:71:9c:04:7a:d7:a2:13:df:75:2f:d6:64: 44:14:90:19:eb:50:09:f1:16:cb:9f:06:3e:04:73:ef:c4:44: 55:67:50:de:cb:ee:8e:f0:71:cf:71:04:3b:d5:fa:3e:01:c8: 7b:67:27:61:8d:32:89:ba:50:b7:4c:b2:19:eb:92:5b:9c:34: bd:68:5e:81:82:99:d0:bc:54:4d:1c:cb:39:59:74:6f:e0:e3: 4b:74:b4:f6:f5:45:01:28:89:80:9c:21:18:6a:86:3b:93:97: 2c:64:8b:da:81:f2:2d:64:24:1c:56:2e:8b:6f:04:ea:1f:7e: 95:af:3a:8f:df:9d:ba:02:2e:f5:61:28:24:de:09:2f:e5:64: 25:cd:b9:60:82:8c:71:1a:3e:ad:ca:5e:52:21:a3:0f:12:df: 57:df:cd:4a:7a:6b:fe:b8:5d:02:84:54:c5:bc:b6:37:ea:6b: ac:90:0d:50:57:7f:55:88:7e:c9:e3:c3:ec:d1:98:18:e5:a5: 8e:21:fc:8a:d1:2e:77:86:da:fd:b0:d3:65:fa:1b:80:e3:a3: 3e:3e:8e:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUwNjE0MjI1NDI0WhcNMjUwNjIxMjI1NDI0WjAYMRYwFAYD VQQDEw02ODRkZmRhMC1hMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+a4Dp8jimA2xd9vYy7kBah9Zp6ciyt1Jl2QHZZXtgaVMMNv5fIeBPEpCgc+0 V4uboayjABLRcSAA4EzFYPYToBAoK5ToJr4OlHVDadMU+Y3ddOU3IyIfokk+q/jh 1hBIHXimBgmK2RfoG8MxVr9KMv45HdIhOUNXvIMlRD5oa4ppQokXntliHGnTYUhS YMkjj410u3FUSXNN58FmsTO0Agv3P21sIkzR9nZXuJ/f8UkgFHqLQGraLj/RWfpF 6sr/19+DxbENEqoeShzKUA4jE+pDADNOFZ/bNi8isbNppJydU+kdEjUOMIqpzugj tBx1ThCPJPm2wlksSvKqLbk3uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlvzfL/ v34DhvNyu8k7VKsbwavyMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU93ImvN/Wx7/zVPH3rqg+SBjjDc131DDBPfM07KA76+Sq2T7FwLkd JrlxnAR616IT33Uv1mREFJAZ61AJ8RbLnwY+BHPvxERVZ1Dey+6O8HHPcQQ71fo+ Ach7ZydhjTKJulC3TLIZ65JbnDS9aF6BgpnQvFRNHMs5WXRv4ONLdLT29UUBKImA nCEYaoY7k5csZIvagfItZCQcVi6LbwTqH36VrzqP3526Ai71YSgk3gkv5WQlzblg goxxGj6tyl5SIaMPEt9X381Kemv+uF0ChFTFvLY36muskA1QV39ViH7J48Ps0ZgY 5aWOIfyK0S53htr9sNNl+huA46M+Po7u -----END CERTIFICATE-----Generated at Sun Jun 15 07:14:47 2025 by rpki-client