$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json) Hash identifier: +aBh2S8dD1afcmHp2W5THPlJlWK718DUgb9rtjx6F2Q= Subject key identifier: BE:98:92:FB:15:19:09:55:F4:78:74:DF:85:42:1C:8E:82:94:19:32 Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft Manifest number: 1A Signing time: Thu 19 Jun 2025 07:17:34 +0000 Manifest this update: Thu 19 Jun 2025 07:17:34 +0000 Manifest next update: Thu 26 Jun 2025 07:17:34 +0000 Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: BNIQg91kZhjFn6Q8eqUla+cO44CErTbaXfB3r+7wsMg=) 2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: SpbPHZ/krAG/WpD65rr9pmBtHMuwVfhmB9bAKCP8oRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Validity Not Before: Jun 19 07:17:34 2025 GMT Not After : Jun 26 07:17:34 2025 GMT Subject: CN=6853b98e-2a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7e:db:b3:03:ce:da:04:14:7e:67:8b:f4:eb: 9e:1f:0a:98:24:83:a4:c9:65:bb:e4:12:b2:ff:7e: 35:9c:dc:8c:5f:f9:e7:a7:c4:7f:ae:1d:ec:ce:54: 82:1d:c0:89:fa:31:10:6e:ca:00:42:5e:0f:79:5a: b3:89:2a:e9:57:71:ff:88:05:48:29:07:c6:0f:9d: 62:55:16:f7:84:11:99:a7:5c:41:13:08:27:20:55: d8:99:6d:9f:42:c0:64:d2:70:f5:30:98:3a:91:67: 9d:c0:57:eb:79:13:36:38:90:8c:10:e7:02:c4:92: 15:c5:c8:7d:9f:8e:5a:bd:4c:53:23:e9:6a:59:14: c7:3f:a0:23:ef:d8:ed:b0:86:0f:5d:cf:f9:38:5e: ec:46:08:3e:dc:a1:d9:5a:a5:15:20:99:fc:3d:76: 2e:37:ee:7f:be:b0:e9:dc:ce:8d:ef:3f:50:af:65: 9e:c2:e9:75:02:7e:db:37:7f:bc:4c:4a:57:82:4c: a6:c4:f5:83:ab:97:bc:e9:e9:0d:70:f3:b4:f7:d3: 47:ec:51:6e:41:31:85:51:15:af:1b:32:ab:59:06: d4:9d:33:3f:e4:5b:9b:4e:2e:6e:12:f1:2b:51:d1: 6c:0f:02:85:ae:83:9c:fb:69:e7:f9:b0:03:c4:e4: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:98:92:FB:15:19:09:55:F4:78:74:DF:85:42:1C:8E:82:94:19:32 X509v3 Authority Key Identifier: keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:b3:ef:ae:cb:51:65:3b:ed:a7:d9:3b:28:e0:d5:e5:1b:a5: 33:e5:57:cb:c5:22:d1:98:7d:35:ec:9f:22:4a:22:ea:95:85: d6:89:a8:22:b9:19:d0:2b:9b:9d:7d:42:9d:bf:56:fb:59:3f: c3:8d:a4:dd:0e:99:ee:7d:5f:7c:56:f0:bf:7e:2d:a5:9e:6d: 52:24:f5:db:8a:ba:5b:ba:4a:b7:49:66:35:ae:48:d1:7c:59: 8a:b2:c3:fc:69:a4:44:ae:57:fa:08:ad:6c:ad:3d:07:df:79: c6:85:95:aa:17:5a:29:50:7c:14:e5:78:4a:ef:e8:47:a7:8e: f9:95:ba:7b:38:87:83:f4:56:58:b8:be:10:28:59:ff:54:5f: c8:38:ff:53:7b:f2:68:3f:d3:25:96:84:8a:d8:26:4a:45:a6: 31:2a:58:d9:68:83:2b:f0:c6:0e:2f:25:fa:03:53:34:c8:4c: 50:e5:1b:73:5a:ac:75:bc:1e:56:8e:b9:53:33:c4:ca:a1:d1: 90:63:d9:7e:eb:3b:7b:97:8b:5e:6a:f4:e1:e4:5e:3b:51:59: ae:b6:aa:62:84:87:a9:6d:5d:20:af:bc:9d:8a:d6:e9:38:11: 32:f0:52:9f:1c:c5:22:7e:89:75:eb:b7:e4:cd:e4:e5:ef:0f: 0d:2b:d2:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoMkEwMEZENUQ1RUFFRjgxRjMyQjAwQjJFNUM4MkM1RUNE QUMxMjY5MzAeFw0yNTA2MTkwNzE3MzRaFw0yNTA2MjYwNzE3MzRaMBgxFjAUBgNV BAMTDTY4NTNiOThlLTJhNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmftuzA87aBBR+Z4v0654fCpgkg6TJZbvkErL/fjWc3Ixf+eenxH+uHezOVIId wIn6MRBuygBCXg95WrOJKulXcf+IBUgpB8YPnWJVFveEEZmnXEETCCcgVdiZbZ9C wGTScPUwmDqRZ53AV+t5EzY4kIwQ5wLEkhXFyH2fjlq9TFMj6WpZFMc/oCPv2O2w hg9dz/k4XuxGCD7codlapRUgmfw9di437n++sOnczo3vP1CvZZ7C6XUCfts3f7xM SleCTKbE9YOrl7zp6Q1w87T300fsUW5BMYVRFa8bMqtZBtSdMz/kW5tOLm4S8StR 0WwPAoWug5z7aef5sAPE5JWtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvpiS+xUZ CVX0eHTfhUIcjoKUGTIwHwYDVR0jBBgwFoAUKgD9XV6u+B8ysAsuXILF7NrBJpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0JCNDJDMURFMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2dEOVhWNnUtQjh5c0FzdVhJTEY3TnJCSnBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0JCNDJDMURFMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4 eXNBc3VYSUxGN05yQkpwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMyz767LUWU77afZOyjg1eUbpTPlV8vFItGYfTXsnyJKIuqVhdaJqCK5 GdArm519Qp2/VvtZP8ONpN0Ome59X3xW8L9+LaWebVIk9duKulu6SrdJZjWuSNF8 WYqyw/xppESuV/oIrWytPQffecaFlaoXWilQfBTleErv6EenjvmVuns4h4P0Vli4 vhAoWf9UX8g4/1N78mg/0yWWhIrYJkpFpjEqWNlogyvwxg4vJfoDUzTITFDlG3Na rHW8HlaOuVMzxMqh0ZBj2X7rO3uXi15q9OHkXjtRWa62qmKEh6ltXSCvvJ2K1uk4 ETLwUp8cxSJ+iXXrt+TN5OXvDw0r0pM= -----END CERTIFICATE-----Generated at Fri Jun 20 11:51:02 2025 by rpki-client