$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: qIq1z90v0ZpZEGFH5gxX8kNmY4cRDOPuKc+PDhiz9xU= Subject key identifier: 17:E5:E8:27:45:36:42:B2:72:56:6D:99:6A:B1:6A:25:63:D9:2A:D1 Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 08C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 08C3 Signing time: Thu 12 Jun 2025 20:13:40 +0000 Manifest this update: Thu 12 Jun 2025 20:13:39 +0000 Manifest next update: Thu 19 Jun 2025 20:13:39 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: B9Do1AEQkZ6YW4Nf4d7K26CHum08fI1qFDavXXi3Ad4=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: ttXfxcVj6+WhtbE63+vyOYQl4F7FNyy4bCidNx2zj30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Jun 12 20:13:39 2025 GMT Not After : Jun 19 20:13:39 2025 GMT Subject: CN=684b34f4-0753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:f0:84:f3:fe:c7:e6:b7:3e:36:ec:4d:24: bc:fb:27:12:3c:a0:0f:c6:4f:7e:e1:ff:4d:40:d0: 4a:41:b6:83:0c:a3:ad:10:84:54:a6:9d:db:07:3d: 33:6e:0c:1d:4c:32:f7:cd:87:7f:7f:c5:ee:0c:fe: fa:92:12:57:8e:4e:80:62:53:5d:e3:b2:ff:01:3f: 90:2a:0b:b2:04:a1:57:15:e3:0e:f6:f2:08:95:3a: 5f:24:ad:7d:86:f9:92:78:d4:25:4c:9d:fa:f3:36: d3:2c:18:e9:02:3e:33:b4:05:d3:83:a7:03:53:03: 3d:31:dc:49:af:9a:35:41:c7:ec:53:b4:ed:bc:4a: be:44:70:41:f5:c4:ec:00:c7:91:c6:00:8f:90:56: c0:81:85:9a:ec:c5:d5:97:f4:ce:34:38:dd:59:37: a8:8f:5f:6e:96:71:6f:ef:d0:bb:03:c3:fe:60:6b: 6b:f6:64:07:77:e5:30:1c:2f:5d:30:cb:01:da:2b: 9c:77:53:03:e8:91:4c:9b:4a:bb:e7:a0:23:33:cc: f3:ec:fd:96:52:c6:e6:3f:90:7f:09:4e:05:0f:30: 35:40:ed:a0:52:e4:15:03:2e:da:e1:aa:22:8f:3c: 1c:aa:b3:93:6e:c1:25:45:10:2e:7b:5c:7d:42:7c: 25:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E5:E8:27:45:36:42:B2:72:56:6D:99:6A:B1:6A:25:63:D9:2A:D1 X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:3e:4c:a8:39:17:f8:cf:24:6d:57:4d:a1:cb:36:8c:56:a4: d6:80:4d:e0:ea:14:1f:d6:9b:63:da:fd:f0:68:3b:41:4a:67: a8:09:f0:aa:98:a3:23:c8:d5:33:d7:e2:fc:f3:32:c3:8a:f2: 7a:18:68:9a:0a:03:60:86:17:ac:e6:bf:f7:7f:63:89:5a:53: ae:87:5f:79:d2:ea:6d:5e:d2:dc:aa:df:67:4c:9e:45:1e:65: 3a:f9:f4:12:4d:11:fe:51:79:14:3e:b7:f3:9b:05:ff:69:58: dd:cc:b5:a4:5e:cd:ca:5a:8e:60:cb:09:06:7b:b2:06:db:03: 09:ad:5e:99:bb:4f:ab:f8:84:9e:e4:37:41:24:35:11:72:60: 74:6c:14:9d:0d:fe:9f:58:28:5c:d1:38:6d:63:2e:b4:ed:7e: a8:00:73:14:5c:a9:3e:e8:92:0d:00:58:97:eb:1d:a8:56:0f: f8:19:8d:59:29:ea:9a:af:6a:56:b5:10:01:57:ae:d5:72:2c: 52:f6:70:91:79:6c:49:ae:ef:9d:03:ee:48:52:93:12:98:69: 85:77:4b:14:1e:99:16:ec:63:11:83:65:27:81:2c:2c:ef:78: 5d:8a:3d:c3:71:69:22:48:b4:ce:db:65:55:27:72:78:38:d1: f6:8e:57:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjUwNjEyMjAxMzM5WhcNMjUwNjE5MjAxMzM5WjAYMRYwFAYD VQQDEw02ODRiMzRmNC0wNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpLwhPP+x+a3PjbsTSS8+ycSPKAPxk9+4f9NQNBKQbaDDKOtEIRUpp3bBz0z bgwdTDL3zYd/f8XuDP76khJXjk6AYlNd47L/AT+QKguyBKFXFeMO9vIIlTpfJK19 hvmSeNQlTJ368zbTLBjpAj4ztAXTg6cDUwM9MdxJr5o1QcfsU7TtvEq+RHBB9cTs AMeRxgCPkFbAgYWa7MXVl/TONDjdWTeoj19ulnFv79C7A8P+YGtr9mQHd+UwHC9d MMsB2iucd1MD6JFMm0q756AjM8zz7P2WUsbmP5B/CU4FDzA1QO2gUuQVAy7a4aoi jzwcqrOTbsElRRAue1x9QnwlowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfl6CdF NkKyclZtmWqxaiVj2SrRMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhPkyoORf4zyRtV02hyzaMVqTWgE3g6hQf1ptj2v3waDtBSmeoCfCq mKMjyNUz1+L88zLDivJ6GGiaCgNghhes5r/3f2OJWlOuh1950uptXtLcqt9nTJ5F HmU6+fQSTRH+UXkUPrfzmwX/aVjdzLWkXs3KWo5gywkGe7IG2wMJrV6Zu0+r+ISe 5DdBJDURcmB0bBSdDf6fWChc0ThtYy607X6oAHMUXKk+6JINAFiX6x2oVg/4GY1Z Keqar2pWtRABV67VcixS9nCReWxJru+dA+5IUpMSmGmFd0sUHpkW7GMRg2UngSws 73hdij3DcWkiSLTO22VVJ3J4ONH2jldA -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:37 2025 by rpki-client