$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: 9sCvsajw8ZbjeQ4gSKY5UpY1eGY4A8oVyDo00JbPngk= Subject key identifier: 50:D0:B6:B6:3E:E6:C8:6A:44:7D:52:13:AA:96:E9:85:69:EA:2C:BD Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 38CD Signing time: Mon 16 Jun 2025 14:38:58 +0000 Manifest this update: Mon 16 Jun 2025 14:38:57 +0000 Manifest next update: Mon 23 Jun 2025 14:38:57 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: HQZzBUfHhfKhx9UEiVUgNEjNC3JNFENFaRzauKKuxkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Jun 16 14:38:57 2025 GMT Not After : Jun 23 14:38:57 2025 GMT Subject: CN=68502c82-6ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:68:5d:3d:9a:c4:1b:89:02:32:33:bc:55: 13:a4:19:a8:6c:e4:ce:df:36:12:ed:73:22:72:85: d3:63:07:f3:0a:c9:f1:e3:62:0a:76:30:3e:fd:f6: 3a:0a:f9:10:c1:4f:d9:09:97:fd:f3:91:e1:d7:bc: fa:04:44:bf:cc:58:f8:c4:2f:44:af:d8:5c:8b:1a: 79:1b:e9:9e:27:6b:e3:70:fa:af:c3:62:fe:62:76: 47:1c:a1:f4:18:d1:c1:4e:f1:10:51:a8:d3:d9:75: 2c:eb:9e:5e:2a:26:fd:4f:19:79:c5:e6:85:47:ea: b9:76:b7:5e:f7:1d:4e:64:05:d2:9c:9d:bf:7f:8a: 28:38:c8:71:58:59:23:5d:57:7f:03:cd:39:42:86: e5:25:c6:f3:7f:c3:18:08:2a:de:30:de:1d:b3:36: dd:00:2d:9c:43:8f:2d:ad:19:11:d7:b1:dd:62:e0: f8:cb:a6:94:30:fc:d9:4e:26:12:ff:d3:a8:30:87: 91:a0:be:0b:c4:18:e0:13:f3:c8:05:c1:ce:7e:e4: 85:e6:77:7d:7b:ec:50:1d:4e:99:d9:68:3a:07:c9: b0:ac:c5:93:27:e9:10:0a:d0:32:80:8e:0c:eb:8f: f2:a6:c1:92:ad:c8:1c:fc:f8:4d:0e:61:17:e7:4e: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D0:B6:B6:3E:E6:C8:6A:44:7D:52:13:AA:96:E9:85:69:EA:2C:BD X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ba:d3:00:2b:cc:2c:53:6b:fe:31:0d:05:92:c8:b6:3d:2a: 9c:69:c1:c9:ed:e3:2f:31:77:65:bd:fa:f4:23:88:9f:9f:40: 89:06:b2:ef:73:b2:15:ec:c8:f4:cc:37:98:b8:24:42:83:c8: 65:16:07:ad:48:79:08:4c:04:6d:10:fe:d3:73:d4:dc:3d:fb: 70:e9:ac:ab:52:7c:f1:98:39:6a:f2:18:76:da:9b:9f:64:6c: 0d:ce:07:a7:89:25:6d:46:82:7e:c2:11:b2:40:f7:a9:6a:8f: dc:49:18:df:84:0c:e6:53:0d:14:37:ef:8b:49:8b:77:2d:1e: 44:72:34:4a:1a:b1:91:ba:12:a1:70:1e:9b:78:56:9f:26:80: b3:03:64:15:39:7b:8e:d9:47:7d:ed:9d:bb:56:94:85:bf:e8: 32:11:22:47:d1:49:bf:52:81:11:3d:0f:e4:8a:a7:a9:f1:5c: d6:3d:e2:f4:49:b8:ea:e8:6b:81:10:7f:09:dc:16:94:0c:45: 74:1b:75:ff:e2:2d:45:e3:f4:63:22:8d:85:3b:0d:1c:bf:b1: 40:df:5d:9a:53:e7:30:eb:81:cb:51:04:0e:56:ce:c2:40:5a: 39:fa:8a:67:65:cb:47:fd:2e:a9:ac:49:db:9d:29:22:a5:4c: e7:c6:bb:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUwNjE2MTQzODU3WhcNMjUwNjIzMTQzODU3WjAYMRYwFAYD VQQDEw02ODUwMmM4Mi02Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9JoXT2axBuJAjIzvFUTpBmobOTO3zYS7XMicoXTYwfzCsnx42IKdjA+/fY6 CvkQwU/ZCZf985Hh17z6BES/zFj4xC9Er9hcixp5G+meJ2vjcPqvw2L+YnZHHKH0 GNHBTvEQUajT2XUs655eKib9Txl5xeaFR+q5drde9x1OZAXSnJ2/f4ooOMhxWFkj XVd/A805QoblJcbzf8MYCCreMN4dszbdAC2cQ48trRkR17HdYuD4y6aUMPzZTiYS /9OoMIeRoL4LxBjgE/PIBcHOfuSF5nd9e+xQHU6Z2Wg6B8mwrMWTJ+kQCtAygI4M 64/ypsGSrcgc/PhNDmEX507bGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDQtrY+ 5shqRH1SE6qW6YVp6iy9MB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMutMAK8wsU2v+MQ0Fksi2PSqcacHJ7eMvMXdlvfr0I4ifn0CJBrLv c7IV7Mj0zDeYuCRCg8hlFgetSHkITARtEP7Tc9TcPftw6ayrUnzxmDlq8hh22puf ZGwNzgeniSVtRoJ+whGyQPepao/cSRjfhAzmUw0UN++LSYt3LR5EcjRKGrGRuhKh cB6beFafJoCzA2QVOXuO2Ud97Z27VpSFv+gyESJH0Um/UoERPQ/kiqep8VzWPeL0 Sbjq6GuBEH8J3BaUDEV0G3X/4i1F4/RjIo2FOw0cv7FA312aU+cw64HLUQQOVs7C QFo5+opnZctH/S6prEnbnSkipUznxrve -----END CERTIFICATE-----Generated at Mon Jun 16 20:08:22 2025 by rpki-client