$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json) Hash identifier: VNr2fVebIGzWaBxVGmH6n0gAf7393kOnoGZq9nUJ+M4= Subject key identifier: 83:99:E5:F2:C5:EC:7B:C2:2D:36:88:78:C1:ED:27:FE:09:85:FE:8C Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft Manifest number: 046D Signing time: Mon 16 Jun 2025 23:43:30 +0000 Manifest this update: Mon 16 Jun 2025 23:43:30 +0000 Manifest next update: Mon 23 Jun 2025 23:43:30 +0000 Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: U/zgC3wQNkHEwzNyHJZVd9iZLc1HclLkt8xjK9CiQec=) 2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Validity Not Before: Jun 16 23:43:30 2025 GMT Not After : Jun 23 23:43:30 2025 GMT Subject: CN=6850ac22-6fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:b9:3d:48:72:a7:9e:8a:c4:13:bf:ca:7c: 43:a4:b6:22:ea:ef:b8:60:1a:d5:f9:f5:9a:f9:3f: 88:04:56:14:61:b1:73:7c:62:a4:d4:6d:f7:0f:e6: 34:d0:24:09:0a:f8:5d:ae:f4:78:5b:82:48:0b:a4: db:12:23:44:82:19:3b:e9:12:11:75:0c:c7:a2:51: 73:19:ec:19:c5:2b:aa:d8:18:37:bd:a5:08:33:dd: bd:a0:92:81:fe:28:cd:e4:3b:62:c7:15:c2:3e:82: e4:a1:6e:17:8d:14:84:81:c7:62:1f:98:77:6f:32: 84:41:a6:79:04:9a:07:bc:79:41:ee:30:ea:1b:7a: fd:61:b2:32:59:f1:7c:5a:26:3f:8f:70:7f:ef:f5: e6:d6:11:a9:91:5a:34:4b:c1:20:f4:50:34:80:4d: ea:d8:2a:25:ef:1d:a3:d8:06:ca:22:2a:80:f2:96: b1:82:a9:f9:c5:da:bb:15:45:d9:58:49:14:34:03: fa:94:23:db:77:63:cb:80:a0:f8:87:45:f9:39:3b: a1:7b:d8:03:74:74:bc:62:e1:fa:0b:85:0e:35:e5: 34:37:90:80:a5:94:5d:7c:7a:7b:12:da:66:88:ee: 1d:fe:aa:eb:5b:7d:6f:3d:8e:9f:a1:73:dc:26:64: 62:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:E5:F2:C5:EC:7B:C2:2D:36:88:78:C1:ED:27:FE:09:85:FE:8C X509v3 Authority Key Identifier: keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:fe:d1:09:a9:4a:de:73:1b:76:91:55:70:e4:fd:cb:a5:8b: e9:f1:93:ba:5a:04:17:55:0a:f1:d8:10:59:14:2c:2a:b0:0f: df:e8:a8:3c:f6:dd:1b:65:ae:b8:57:37:a0:9f:5d:77:34:29: 1d:91:67:04:65:42:61:f1:6f:a8:c7:02:2d:e5:38:23:07:78: c5:cb:76:6b:fe:6e:a6:db:5d:c1:99:57:34:74:67:b8:da:d1: ce:86:ab:dd:fa:c5:ee:87:b1:39:29:df:ea:99:7b:b3:6e:4d: f6:ee:59:3c:ee:a6:76:6b:6b:e6:14:42:a9:c5:3b:e6:7e:f4: 2f:6c:e8:80:42:07:56:62:c5:3b:c6:91:1e:93:56:bb:5d:dc: 83:5c:40:6c:a4:a4:3e:cd:a8:44:ff:73:18:aa:7e:6f:36:17: f9:f4:41:8c:36:57:c2:7c:69:3c:ec:6a:ad:7e:66:d9:e5:71: 72:ca:7c:e1:fa:82:13:ac:56:61:80:e3:71:f9:34:54:5f:a1: e4:ae:6e:36:59:c8:be:d6:41:b6:e7:87:37:56:c1:32:02:d1: 81:c1:13:91:30:7d:28:79:78:80:32:8d:d2:ad:66:e3:d8:79: d6:87:38:8e:0f:f2:ba:30:ee:4f:7a:da:f6:96:3d:fe:c2:bc: 72:37:1c:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCQkExMTAvBgNVBAUTKDJCNDRDODg5MUFBRTJCOEExRkRCNDhFQkY0QTU3RTk4 OUFFQjczNjMwHhcNMjUwNjE2MjM0MzMwWhcNMjUwNjIzMjM0MzMwWjAYMRYwFAYD VQQDEw02ODUwYWMyMi02ZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfu5PUhyp56KxBO/ynxDpLYi6u+4YBrV+fWa+T+IBFYUYbFzfGKk1G33D+Y0 0CQJCvhdrvR4W4JIC6TbEiNEghk76RIRdQzHolFzGewZxSuq2Bg3vaUIM929oJKB /ijN5DtixxXCPoLkoW4XjRSEgcdiH5h3bzKEQaZ5BJoHvHlB7jDqG3r9YbIyWfF8 WiY/j3B/7/Xm1hGpkVo0S8Eg9FA0gE3q2Col7x2j2AbKIiqA8paxgqn5xdq7FUXZ WEkUNAP6lCPbd2PLgKD4h0X5OTuhe9gDdHS8YuH6C4UONeU0N5CApZRdfHp7Etpm iO4d/qrrW31vPY6foXPcJmRiLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOZ5fLF 7HvCLTaIeMHtJ/4Jhf6MMB8GA1UdIwQYMBaAFCtEyIkariuKH9tI6/Slfpia63Nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJCQS9GOTEzQzBCQTRD NDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0b2YyMGpyOUtWLW1KcnJj Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swVElpUnF1SzRvZjIwanI5S1YtbUpycmMyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJCQS9GOTEzQzBCQTRDNDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0 b2YyMGpyOUtWLW1KcnJjMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ/tEJqUrecxt2kVVw5P3LpYvp8ZO6WgQXVQrx2BBZFCwqsA/f6Kg8 9t0bZa64Vzegn113NCkdkWcEZUJh8W+oxwIt5TgjB3jFy3Zr/m6m213BmVc0dGe4 2tHOhqvd+sXuh7E5Kd/qmXuzbk327lk87qZ2a2vmFEKpxTvmfvQvbOiAQgdWYsU7 xpEek1a7XdyDXEBspKQ+zahE/3MYqn5vNhf59EGMNlfCfGk87GqtfmbZ5XFyynzh +oITrFZhgONx+TRUX6Hkrm42Wci+1kG254c3VsEyAtGBwRORMH0oeXiAMo3SrWbj 2HnWhziOD/K6MO5Petr2lj3+wrxyNxzT -----END CERTIFICATE-----Generated at Wed Jun 18 17:11:58 2025 by rpki-client