$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json) Hash identifier: KMFugFFbHHB8HFFg94x8tCvKF/N4bbmIDbsqWQi1IVA= Subject key identifier: CB:C2:2D:68:3D:B0:00:FE:CB:70:20:7B:9E:29:39:94:35:A7:1B:B4 Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft Manifest number: E8 Signing time: Fri 13 Jun 2025 04:19:58 +0000 Manifest this update: Fri 13 Jun 2025 04:19:58 +0000 Manifest next update: Fri 20 Jun 2025 04:19:58 +0000 Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: RguLeQypMtg87U1shmO+X/25BYDeS2jlKc1QlWgolbY=) 2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Jun 13 04:19:58 2025 GMT Not After : Jun 20 04:19:58 2025 GMT Subject: CN=684ba6ee-bfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:e7:12:e1:4e:40:6e:58:8f:fe:2a:84:39: 27:a0:da:e9:40:ac:32:74:60:be:88:ed:b8:8c:76: 17:75:19:2f:4f:a2:17:a7:91:f6:e2:e2:79:47:ce: d1:1c:ba:b9:63:a8:f2:8f:65:e8:30:90:c5:27:43: 2c:90:96:cc:55:b3:a0:0e:fb:b7:e6:b8:1a:91:c5: 30:f0:35:72:64:40:9d:7c:1f:68:29:3e:1f:3f:d9: 4c:01:70:be:0a:d7:5c:7c:67:d0:20:9b:f6:7e:eb: 1a:15:30:d8:fb:1f:f5:bd:ee:6a:c3:cf:c3:2b:cf: 08:8b:70:d3:8f:31:5f:e1:30:82:79:d6:23:34:6e: 3c:07:c6:8e:0e:aa:2a:6a:75:a9:a5:26:34:de:8c: 01:ba:1d:35:39:d1:e0:4c:6a:09:4d:26:dd:5f:f8: b4:7d:d8:12:4f:9b:16:93:89:ef:88:2e:45:51:0b: a9:4e:10:b0:b7:fc:f4:0f:46:2e:aa:78:c5:77:7c: 49:81:04:b9:df:69:3d:ba:17:d9:2f:8b:df:a4:bb: b5:99:be:19:af:59:c5:d2:b6:1e:6b:1a:25:dd:1a: a4:14:6e:b7:bf:11:5f:41:c6:a0:ef:90:78:0f:86: fa:02:ea:0c:73:89:8f:42:ac:f6:63:1b:50:b0:ff: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C2:2D:68:3D:B0:00:FE:CB:70:20:7B:9E:29:39:94:35:A7:1B:B4 X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:a8:05:d9:2b:af:d3:8d:b4:30:b7:14:8e:63:5a:d8:d6:73: 89:7b:4e:04:34:b0:41:4b:a5:47:74:48:84:6b:94:dc:02:60: f9:1c:3c:14:08:7a:2f:a3:bd:8c:63:8f:48:02:c9:bf:1c:f9: 2a:69:fb:9a:63:75:f8:24:a6:e2:5a:eb:aa:c2:ac:3e:b2:38: fc:85:9c:99:2f:1c:75:98:c2:8b:8a:4a:d3:73:26:d9:73:20: 23:74:b8:c1:19:bc:13:a0:16:ea:f2:82:bc:e9:e5:f7:65:c0: 18:39:4b:63:d7:45:2d:e8:f5:fb:d6:e5:f5:7f:3a:e2:43:00: 3d:c7:d1:6d:5d:63:17:41:5a:d0:5d:07:70:22:35:64:75:4c: a0:fc:fb:31:23:63:2a:78:56:ad:fe:a7:c7:43:36:60:a5:60: 06:31:af:0c:30:65:43:13:bb:56:67:ef:54:b6:19:95:0b:a4: 6b:84:be:00:12:9b:ee:84:33:43:73:23:6d:52:e2:6a:a8:c8: 4b:c5:0a:e2:0d:4b:bc:d5:59:f0:2a:31:70:55:e0:e6:af:52: b4:7a:dc:08:7c:11:11:15:b6:d2:f0:ec:9c:e4:fc:24:3f:53: 35:34:8e:8b:57:c9:87:71:b7:0e:39:27:90:f3:91:5a:47:45: f7:79:99:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjUwNjEzMDQxOTU4WhcNMjUwNjIwMDQxOTU4WjAYMRYwFAYD VQQDEw02ODRiYTZlZS1iZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kHnEuFOQG5Yj/4qhDknoNrpQKwydGC+iO24jHYXdRkvT6IXp5H24uJ5R87R HLq5Y6jyj2XoMJDFJ0MskJbMVbOgDvu35rgakcUw8DVyZECdfB9oKT4fP9lMAXC+ CtdcfGfQIJv2fusaFTDY+x/1ve5qw8/DK88Ii3DTjzFf4TCCedYjNG48B8aODqoq anWppSY03owBuh01OdHgTGoJTSbdX/i0fdgST5sWk4nviC5FUQupThCwt/z0D0Yu qnjFd3xJgQS532k9uhfZL4vfpLu1mb4Zr1nF0rYeaxol3RqkFG63vxFfQcag75B4 D4b6AuoMc4mPQqz2YxtQsP8HywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvCLWg9 sAD+y3Age54pOZQ1pxu0MB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z LTVaMFVmN3RyMG54U09Ham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2qAXZK6/TjbQwtxSOY1rY1nOJe04ENLBBS6VHdEiEa5TcAmD5HDwU CHovo72MY49IAsm/HPkqafuaY3X4JKbiWuuqwqw+sjj8hZyZLxx1mMKLikrTcybZ cyAjdLjBGbwToBbq8oK86eX3ZcAYOUtj10Ut6PX71uX1fzriQwA9x9FtXWMXQVrQ XQdwIjVkdUyg/PsxI2MqeFat/qfHQzZgpWAGMa8MMGVDE7tWZ+9UthmVC6RrhL4A EpvuhDNDcyNtUuJqqMhLxQriDUu81VnwKjFwVeDmr1K0etwIfBERFbbS8Oyc5Pwk P1M1NI6LV8mHcbcOOSeQ85FaR0X3eZnD -----END CERTIFICATE-----Generated at Sun Jun 15 05:59:29 2025 by rpki-client