$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft File: kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft (raw, json) Hash identifier: 6dxnIlj01TitcjF3az7JAPjU3Y5eY7HBEDfux0ImbSk= Subject key identifier: A9:95:4B:3F:85:A8:6B:BF:E3:D7:FC:80:2A:FE:F2:1B:CA:1E:0F:4B Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Certificate serial: 0C0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft Manifest number: 0BF7 Signing time: Thu 12 Jun 2025 18:36:45 +0000 Manifest this update: Thu 12 Jun 2025 18:36:45 +0000 Manifest next update: Thu 19 Jun 2025 18:36:45 +0000 Files and hashes: 1: kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl (hash: U2G2+HAGsRLcLNq8jpaY+UIERTpC9duMiDTotGAdndA=) 2: EA531ACE61C211EF89F25E2CC4F9AE02.roa (hash: wvS2IKCsAphgy9VmVy8jmzdrhXrxZNTENgiqGBEyqqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3082 (0xc0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6462, serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Validity Not Before: Jun 12 18:36:45 2025 GMT Not After : Jun 19 18:36:45 2025 GMT Subject: CN=684b1e3d-183a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f9:24:4a:13:03:fd:4f:40:4f:68:54:48:2d: 00:ae:a6:4f:3d:c6:48:b1:51:39:b2:14:77:56:42: 68:f1:26:c8:fd:92:37:c2:e9:3c:5f:47:26:50:3b: 64:76:1e:a0:66:4b:67:13:e5:74:60:b3:49:14:7e: d8:cc:40:b3:82:f6:d8:cc:eb:65:77:44:6d:a7:3a: 24:2b:7b:ce:87:6a:4d:e6:ea:f5:8c:60:a7:a1:db: 9b:13:86:d7:a0:97:3d:0c:fb:db:80:21:96:e6:63: 13:b8:0d:0a:a3:ff:c0:f9:93:db:c9:13:d7:06:33: d4:53:c8:0f:68:00:cb:d9:0b:7c:d3:4c:ea:c4:e5: 39:f7:eb:d9:3c:a9:c2:4c:1b:16:c2:d4:a6:c2:25: c4:b8:ae:f2:d9:60:cc:17:11:da:a8:16:ae:e7:92: f0:63:78:48:ba:45:b5:18:f1:77:b9:cb:60:42:1f: 5f:e0:5a:f1:05:55:df:39:04:1b:b1:78:78:20:72: e6:27:f4:48:01:af:6a:81:a6:dd:49:f3:0c:e6:e1: 5f:e2:69:e5:2a:f7:40:c0:67:90:2b:a9:f0:a3:51: cd:83:b7:5d:4e:94:e2:25:b3:f2:ea:9e:8c:df:0c: 17:12:96:52:7c:50:63:31:4e:01:f4:bb:b3:db:39: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:95:4B:3F:85:A8:6B:BF:E3:D7:FC:80:2A:FE:F2:1B:CA:1E:0F:4B X509v3 Authority Key Identifier: keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:de:7f:e4:ed:37:3a:0a:d1:27:af:c9:2e:65:c1:e8:ff:ed: a4:11:10:9c:a7:8b:87:c2:5b:e3:46:d6:a5:71:66:b7:12:0c: 0a:f2:a5:26:12:a8:a0:60:96:a6:b4:32:4a:e0:9e:34:20:8d: e0:be:86:22:f3:88:91:2c:57:34:d3:86:a4:5d:b1:72:0c:dd: db:33:0e:81:90:d0:10:fe:a8:9b:b8:9e:52:94:f5:21:35:db: ef:d3:52:34:03:cc:6a:db:39:1b:f1:3c:f3:cd:f9:a9:dd:a1: 11:b6:6a:54:96:57:5f:83:61:8e:b8:2c:77:5c:08:8e:bd:5c: 2c:53:10:99:48:30:25:4a:61:ea:ee:99:93:c2:9b:11:1f:d7: 42:d5:1c:ac:63:a4:88:6e:84:12:1c:d7:32:1d:e2:16:f4:10: 62:42:c1:7d:f7:10:46:af:09:f5:f8:6f:74:6f:f2:80:00:24: 35:f0:6e:73:4b:6b:b2:97:51:c1:54:0d:7a:b7:92:a5:38:c4: 53:70:09:d0:b9:b3:48:2d:e0:bc:5a:db:5c:b9:82:4a:60:07: e2:c0:9b:8e:e6:93:d6:a1:15:f9:7c:ac:ee:d9:46:ea:a7:c7: 65:45:fb:f9:9e:35:f6:4d:9e:6a:eb:71:28:5e:ba:63:38:df: 3e:d8:af:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE MjBDMzgwMzkwHhcNMjUwNjEyMTgzNjQ1WhcNMjUwNjE5MTgzNjQ1WjAYMRYwFAYD VQQDEw02ODRiMWUzZC0xODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PkkShMD/U9AT2hUSC0ArqZPPcZIsVE5shR3VkJo8SbI/ZI3wuk8X0cmUDtk dh6gZktnE+V0YLNJFH7YzECzgvbYzOtld0RtpzokK3vOh2pN5ur1jGCnodubE4bX oJc9DPvbgCGW5mMTuA0Ko//A+ZPbyRPXBjPUU8gPaADL2Qt800zqxOU59+vZPKnC TBsWwtSmwiXEuK7y2WDMFxHaqBau55LwY3hIukW1GPF3uctgQh9f4FrxBVXfOQQb sXh4IHLmJ/RIAa9qgabdSfMM5uFf4mnlKvdAwGeQK6nwo1HNg7ddTpTiJbPy6p6M 3wwXEpZSfFBjMU4B9Luz2zkmbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmVSz+F qGu/49f8gCr+8hvKHg9LMB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4 NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjQ2Mi9EQUY0MzVFMDE4NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZj UXhudS1mMmpLSHJTRERnRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf3n/k7Tc6CtEnr8kuZcHo/+2kERCcp4uHwlvjRtalcWa3EgwK8qUm EqigYJamtDJK4J40II3gvoYi84iRLFc004akXbFyDN3bMw6BkNAQ/qibuJ5SlPUh Ndvv01I0A8xq2zkb8Tzzzfmp3aERtmpUlldfg2GOuCx3XAiOvVwsUxCZSDAlSmHq 7pmTwpsRH9dC1RysY6SIboQSHNcyHeIW9BBiQsF99xBGrwn1+G90b/KAACQ18G5z S2uyl1HBVA16t5KlOMRTcAnQubNILeC8WttcuYJKYAfiwJuO5pPWoRX5fKzu2Ubq p8dlRfv5njX2TZ5q63EoXrpjON8+2K/V -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:05 2025 by rpki-client