$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: IzxLrFC/YEjrXw6oI5K9EJ0UAg7ZJGm/h0onbftErYc= Subject key identifier: 0B:06:44:F6:80:87:14:5C:0F:CA:5A:B5:87:1E:97:6B:AE:D6:B4:3A Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0ABC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 0AB0 Signing time: Thu 12 Jun 2025 19:19:42 +0000 Manifest this update: Thu 12 Jun 2025 19:19:42 +0000 Manifest next update: Thu 19 Jun 2025 19:19:42 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: YS3wpPSRlziUz4epOe1c8ouhi64CgYuG3+UMR/MsrS0=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2748 (0xabc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Jun 12 19:19:42 2025 GMT Not After : Jun 19 19:19:42 2025 GMT Subject: CN=684b284e-d670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:b1:cf:bd:f8:4d:fe:f2:bb:64:8e:44:ef: 3b:a2:37:5b:5b:93:7d:c0:3f:2f:da:80:89:be:b1: 55:73:20:5b:8e:d2:3b:e6:52:5b:f3:d1:89:49:26: 39:7a:45:4c:db:fd:fc:42:f0:43:a8:8a:d7:f6:1c: 81:71:6e:54:06:71:bd:1e:ec:f0:db:56:fe:ab:93: 26:54:76:b8:11:16:f4:e0:3f:50:58:95:7a:35:6e: 95:b1:c3:9f:c7:ba:11:3d:9f:73:c9:03:1d:a5:a9: 73:93:67:2e:24:60:f9:24:14:41:60:76:e1:ed:9c: d2:6e:83:96:99:17:23:27:0d:d3:0e:1f:ff:14:6d: 0f:07:2c:c3:4a:27:48:86:36:c3:93:5d:59:48:77: 1d:bd:81:ce:c1:b9:0d:e9:8f:39:d8:b6:e3:e5:f7: 9d:04:ad:94:9a:f6:8d:7e:be:12:f8:b6:89:91:c3: 41:54:29:d3:da:a5:68:a8:b0:c9:bb:3d:a0:ee:fa: 88:47:b6:15:f9:5a:f3:f5:65:d8:23:bd:a3:a4:e5: 13:48:71:90:1b:83:f8:f8:1c:f6:41:b8:c9:3e:d6: 35:40:d7:58:1a:70:de:63:b7:88:61:88:85:4a:a9: 84:ef:2c:2e:3d:60:36:98:81:a6:a2:da:2c:bf:69: c0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:06:44:F6:80:87:14:5C:0F:CA:5A:B5:87:1E:97:6B:AE:D6:B4:3A X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:4c:5c:e5:5f:f1:1d:79:7c:93:7f:a3:ee:dc:e0:d0:cf:f3: c0:4f:91:d1:47:48:37:59:01:3b:9f:73:25:93:0d:ec:59:6c: 25:71:f9:63:2f:7e:e2:1d:78:c1:19:7d:c9:7c:69:78:16:de: 80:e6:45:0d:29:37:8b:88:8a:fd:52:9b:b0:e3:ff:2c:37:16: 32:33:7b:5c:af:46:41:11:89:12:7b:09:39:8b:c9:98:28:6c: b3:c4:03:f9:4d:e6:87:d7:7a:2a:26:11:5c:a5:87:02:82:b2: 32:08:6a:ad:65:f4:0e:3a:25:51:d1:31:ba:df:8b:96:9b:11: 0b:6d:22:ae:48:82:bc:a9:14:39:14:e4:90:5e:55:83:d4:53: 17:8e:78:33:67:2d:38:c5:10:1f:39:61:d4:da:f0:e2:2c:b4: 41:69:4f:2b:7c:33:93:81:cd:04:e7:88:79:1e:6b:d9:e4:93: 0d:86:70:21:56:2d:f8:de:82:42:51:28:ee:cc:c6:28:10:57: 09:32:76:6e:97:01:af:03:0c:e5:b4:71:a7:29:de:15:64:b2: 37:af:3b:36:1f:14:82:92:79:04:57:3b:94:e4:53:ab:ea:11: 86:3f:26:12:f9:40:ef:67:03:ad:e3:11:79:ad:c2:0b:3c:90: 68:74:44:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUwNjEyMTkxOTQyWhcNMjUwNjE5MTkxOTQyWjAYMRYwFAYD VQQDEw02ODRiMjg0ZS1kNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAws+xz734Tf7yu2SORO87ojdbW5N9wD8v2oCJvrFVcyBbjtI75lJb89GJSSY5 ekVM2/38QvBDqIrX9hyBcW5UBnG9Huzw21b+q5MmVHa4ERb04D9QWJV6NW6VscOf x7oRPZ9zyQMdpalzk2cuJGD5JBRBYHbh7ZzSboOWmRcjJw3TDh//FG0PByzDSidI hjbDk11ZSHcdvYHOwbkN6Y852Lbj5fedBK2UmvaNfr4S+LaJkcNBVCnT2qVoqLDJ uz2g7vqIR7YV+Vrz9WXYI72jpOUTSHGQG4P4+Bz2QbjJPtY1QNdYGnDeY7eIYYiF SqmE7ywuPWA2mIGmotosv2nAjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsGRPaA hxRcD8patYcel2uu1rQ6MB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZTFzlX/EdeXyTf6Pu3ODQz/PAT5HRR0g3WQE7n3Mlkw3sWWwlcflj L37iHXjBGX3JfGl4Ft6A5kUNKTeLiIr9Upuw4/8sNxYyM3tcr0ZBEYkSewk5i8mY KGyzxAP5TeaH13oqJhFcpYcCgrIyCGqtZfQOOiVR0TG634uWmxELbSKuSIK8qRQ5 FOSQXlWD1FMXjngzZy04xRAfOWHU2vDiLLRBaU8rfDOTgc0E54h5HmvZ5JMNhnAh Vi343oJCUSjuzMYoEFcJMnZulwGvAwzltHGnKd4VZLI3rzs2HxSCknkEVzuU5FOr 6hGGPyYS+UDvZwOt4xF5rcILPJBodETu -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:51 2025 by rpki-client