$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: MJxE9/foAGQGSfy9xsKmLfJaKRdS2jaEZaUrssOjU1U= Subject key identifier: 0C:BA:16:6D:AD:0D:8A:7A:34:25:81:5F:FC:97:A7:5F:15:08:FD:FE Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: F5 Signing time: Tue 17 Jun 2025 04:13:52 +0000 Manifest this update: Tue 17 Jun 2025 04:13:52 +0000 Manifest next update: Tue 24 Jun 2025 04:13:52 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: PP4+LnNR4KyNlpX/BP2ADOW5mSbJ/KrbgCbZ1t3hzLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Jun 17 04:13:52 2025 GMT Not After : Jun 24 04:13:52 2025 GMT Subject: CN=6850eb80-3c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e1:28:fe:a0:f1:95:ca:73:cb:b0:6b:a5:d7: df:86:e7:05:b3:c9:55:3b:76:d7:73:ad:e5:88:c6: 2c:a1:84:cf:e6:50:63:ac:0c:5f:af:79:04:13:26: 03:da:e8:23:88:91:8b:89:79:bf:b7:d9:42:50:fa: 89:2c:f4:74:ce:cf:b7:8a:1c:2f:4d:58:93:54:e6: dd:17:6f:ff:50:f6:3b:78:04:82:8e:c9:1f:a3:41: 9b:42:c8:03:19:c7:a3:8a:77:25:5c:1e:e7:dd:90: 8f:8a:37:cc:12:1e:d1:75:65:dd:1d:d8:06:30:16: 5a:a1:5d:8c:d2:f3:a2:70:3f:84:29:37:ca:d4:10: 80:f0:ba:35:c7:59:02:75:a0:1b:55:63:1b:86:56: 89:bd:1e:d5:d7:09:e5:04:eb:02:ca:89:c9:63:eb: 1a:37:55:e5:aa:77:2e:af:c5:e5:8d:2c:a1:c3:a1: da:b8:e3:b5:5b:78:83:9f:f3:0d:51:9e:76:0a:e7: 87:ec:41:6e:a3:eb:43:f6:99:f2:49:c7:db:f5:56: a9:f1:e6:40:e4:b8:f8:c3:6e:5f:3b:94:07:5f:1d: 5b:60:78:67:66:24:73:da:d8:96:09:3e:3c:86:dd: 86:f6:a6:64:6f:3f:78:00:6e:6a:b9:80:60:58:51: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BA:16:6D:AD:0D:8A:7A:34:25:81:5F:FC:97:A7:5F:15:08:FD:FE X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ea:e3:74:19:94:fc:11:2f:30:57:97:ec:16:22:6d:97:ff: cd:35:74:41:9d:ec:8b:8d:38:8f:13:04:4d:66:2e:fc:c8:c2: 21:0f:ab:43:51:b1:ee:5b:51:89:e5:4b:1e:81:e1:3d:3c:76: 2e:ed:3a:7b:88:bf:29:fb:68:7d:1d:21:bb:07:9b:17:0f:6e: f4:fd:a9:ca:5e:c6:11:54:4d:f2:7c:98:4c:bb:27:9a:de:a7: 4b:35:99:0b:d0:5e:b2:b1:80:8a:d2:e4:5c:df:cc:d9:65:55: ea:fe:86:77:63:04:72:71:29:65:69:c8:ba:46:55:e3:61:03: bc:0c:18:dc:11:bc:eb:47:95:1c:bb:27:ce:8e:f0:07:6f:3f: b1:e7:e4:c4:e1:56:86:de:75:01:67:70:e0:bd:ae:84:04:83: 12:a8:c5:5a:e5:e4:8d:ff:49:43:9d:30:a3:4c:12:00:2b:41: 28:d9:94:09:33:59:29:1c:b5:04:7c:97:8f:5c:5c:bf:37:77: 08:2d:fb:b5:9b:94:0c:b0:b5:ee:f1:0f:a5:03:c8:19:e8:b3: b8:6d:df:78:34:35:06:af:fd:f9:ec:ba:7f:cc:3a:f0:be:86: 65:74:2d:c6:20:cf:a4:ee:3e:bc:7c:6c:1e:df:04:fb:d3:e1: 9c:5d:9c:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUwNjE3MDQxMzUyWhcNMjUwNjI0MDQxMzUyWjAYMRYwFAYD VQQDEw02ODUwZWI4MC0zYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OEo/qDxlcpzy7BrpdffhucFs8lVO3bXc63liMYsoYTP5lBjrAxfr3kEEyYD 2ugjiJGLiXm/t9lCUPqJLPR0zs+3ihwvTViTVObdF2//UPY7eASCjskfo0GbQsgD GcejinclXB7n3ZCPijfMEh7RdWXdHdgGMBZaoV2M0vOicD+EKTfK1BCA8Lo1x1kC daAbVWMbhlaJvR7V1wnlBOsCyonJY+saN1Xlqncur8XljSyhw6HauOO1W3iDn/MN UZ52CueH7EFuo+tD9pnyScfb9Vap8eZA5Lj4w25fO5QHXx1bYHhnZiRz2tiWCT48 ht2G9qZkbz94AG5quYBgWFE8HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy6Fm2t DYp6NCWBX/yXp18VCP3+MB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt6uN0GZT8ES8wV5fsFiJtl//NNXRBneyLjTiPEwRNZi78yMIhD6tD UbHuW1GJ5UsegeE9PHYu7Tp7iL8p+2h9HSG7B5sXD270/anKXsYRVE3yfJhMuyea 3qdLNZkL0F6ysYCK0uRc38zZZVXq/oZ3YwRycSllaci6RlXjYQO8DBjcEbzrR5Uc uyfOjvAHbz+x5+TE4VaG3nUBZ3Dgva6EBIMSqMVa5eSN/0lDnTCjTBIAK0Eo2ZQJ M1kpHLUEfJePXFy/N3cILfu1m5QMsLXu8Q+lA8gZ6LO4bd94NDUGr/357Lp/zDrw voZldC3GIM+k7j68fGwe3wT70+GcXZza -----END CERTIFICATE-----Generated at Tue Jun 17 20:29:07 2025 by rpki-client