$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json) Hash identifier: w3HhToyqR+1isWljtS4eeUjPbqOiOd3XdQYn59bXy/Y= Subject key identifier: C0:4B:B6:BA:20:4C:C5:9B:1A:BD:AA:BD:E3:72:33:26:36:FD:5F:C7 Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft Manifest number: 0363 Signing time: Sun 15 Jun 2025 00:39:44 +0000 Manifest this update: Sun 15 Jun 2025 00:39:43 +0000 Manifest next update: Sun 22 Jun 2025 00:39:43 +0000 Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: XE+LDl4lZgHwItMdx/dm06Lsz3P2D71T9WD/nekxDzE=) 2: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: xHLevAzZuis8NnrBHZLDJf2yx7IF05dGBA1riYkWutY=) 3: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: /NRpEcDAXrkS/YDBwDOng+rHtIrpT7sCWxlP3Tbbtb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Validity Not Before: Jun 15 00:39:43 2025 GMT Not After : Jun 22 00:39:43 2025 GMT Subject: CN=684e1650-06eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:15:6b:3c:c8:2c:7e:af:fd:a5:db:e0:6b: 36:ba:29:87:97:93:92:d1:41:27:76:28:4c:58:0c: f6:2c:cc:e3:f1:ce:90:58:d1:14:34:b6:f0:1e:5e: 25:95:5e:63:01:b3:f5:1d:97:7e:77:d0:ad:c0:ea: 7e:40:a7:eb:ab:54:2b:d1:b0:c6:45:81:33:cb:d3: a3:e7:0a:93:25:56:66:8c:ea:a9:28:4f:30:83:0e: 69:b3:0d:be:a2:94:09:3d:ca:35:6f:d4:36:bc:ea: 67:e0:be:0a:cb:53:e6:15:09:88:9d:64:80:a2:a3: f1:bf:17:33:ad:1e:d8:f5:09:f7:9c:38:9a:5c:92: 20:ae:4c:ce:9f:6d:88:27:37:b9:db:93:ca:47:3a: db:19:e5:d5:5e:6f:ec:e2:34:4b:c7:e1:62:3c:e0: 44:ee:dd:a8:93:58:cd:5e:e5:65:f7:1a:09:13:9b: 59:87:0e:49:7e:f1:96:73:ac:8d:22:4b:45:ca:dd: 93:d5:95:5a:96:32:fb:65:bf:50:39:2a:a4:0a:87: bd:8d:1a:5e:04:85:e8:d6:16:49:ab:2c:a7:02:25: 21:3a:69:39:7c:4d:87:a7:c2:f5:0f:6f:3b:b7:b2: a1:1c:8b:68:2c:65:49:5f:c8:c3:57:5d:09:97:fb: e2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4B:B6:BA:20:4C:C5:9B:1A:BD:AA:BD:E3:72:33:26:36:FD:5F:C7 X509v3 Authority Key Identifier: keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a3:b4:40:9f:85:ad:2f:d4:72:87:6d:d6:0c:29:40:49:58: f8:90:57:c3:cd:39:45:c3:2b:c6:21:c5:81:61:9a:1b:7d:62: 01:11:63:29:54:fc:6c:02:36:d4:da:c8:d9:6b:fc:ab:ea:d4: 55:e3:50:33:8f:c2:45:14:7e:7d:9d:4b:ed:b0:bb:96:61:3d: 06:10:e4:71:ea:48:8a:ae:c9:61:eb:b7:aa:b6:60:7f:65:b7: 5b:ed:78:4c:a6:28:26:ef:69:7b:2d:1d:fa:c4:6a:f7:08:71: 5e:7e:95:b6:b6:42:f4:40:21:2b:94:f0:7c:0f:98:08:24:06: 70:85:c0:c0:f0:ad:a1:4f:e4:68:eb:f7:53:d4:13:3c:70:bf: 0c:33:37:c8:3e:79:1b:62:c2:83:83:7c:ae:c9:4a:c7:a6:85: a6:94:c4:8b:fd:75:78:06:47:93:a4:cb:91:86:34:82:05:e5: 67:f1:e5:3c:bb:4c:ae:8e:e6:bd:88:05:b3:02:25:77:4c:30: 8d:84:65:cd:17:99:41:a4:a0:8e:95:ff:f3:c0:97:89:cc:d3: 02:20:e7:be:2d:45:43:a5:bc:44:ea:81:e2:9d:fd:cb:83:76: 68:6a:ac:b7:f7:0a:7f:ea:9c:2a:a8:13:26:fe:20:76:40:23: 6d:e4:0f:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz N0JBMUNEMjgwHhcNMjUwNjE1MDAzOTQzWhcNMjUwNjIyMDAzOTQzWjAYMRYwFAYD VQQDEw02ODRlMTY1MC0wNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z8VazzILH6v/aXb4Gs2uimHl5OS0UEndihMWAz2LMzj8c6QWNEUNLbwHl4l lV5jAbP1HZd+d9CtwOp+QKfrq1Qr0bDGRYEzy9Oj5wqTJVZmjOqpKE8wgw5psw2+ opQJPco1b9Q2vOpn4L4Ky1PmFQmInWSAoqPxvxczrR7Y9Qn3nDiaXJIgrkzOn22I Jze525PKRzrbGeXVXm/s4jRLx+FiPOBE7t2ok1jNXuVl9xoJE5tZhw5JfvGWc6yN IktFyt2T1ZValjL7Zb9QOSqkCoe9jRpeBIXo1hZJqyynAiUhOmk5fE2Hp8L1D287 t7KhHItoLGVJX8jDV10Jl/vinwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBLtrog TMWbGr2qveNyMyY2/V/HMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0 RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfo7RAn4WtL9Ryh23WDClASVj4kFfDzTlFwyvGIcWBYZobfWIBEWMp VPxsAjbU2sjZa/yr6tRV41Azj8JFFH59nUvtsLuWYT0GEORx6kiKrslh67eqtmB/ Zbdb7XhMpigm72l7LR36xGr3CHFefpW2tkL0QCErlPB8D5gIJAZwhcDA8K2hT+Ro 6/dT1BM8cL8MMzfIPnkbYsKDg3yuyUrHpoWmlMSL/XV4BkeTpMuRhjSCBeVn8eU8 u0yujua9iAWzAiV3TDCNhGXNF5lBpKCOlf/zwJeJzNMCIOe+LUVDpbxE6oHinf3L g3Zoaqy39wp/6pwqqBMm/iB2QCNt5A/2 -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:00 2025 by rpki-client