$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json) Hash identifier: cPt+48234JwdQTknp0nZ+8VCQRimE+k0vo07FD8dDyE= Subject key identifier: 72:03:D5:23:2C:6B:DA:0C:C4:5A:D1:FE:1E:56:DF:98:3D:F9:F1:0C Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Certificate serial: 0823 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft Manifest number: 081D Signing time: Thu 12 Jun 2025 20:32:40 +0000 Manifest this update: Thu 12 Jun 2025 20:32:39 +0000 Manifest next update: Thu 19 Jun 2025 20:32:39 +0000 Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: 1T5itYkf3K7jud0WKGH7AteKkdfhHdHtlG3sPuNh2xc=) 2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2083 (0x823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Validity Not Before: Jun 12 20:32:39 2025 GMT Not After : Jun 19 20:32:39 2025 GMT Subject: CN=684b3968-3bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:79:61:71:e8:fc:54:58:ae:85:fb:84:5a: ef:80:15:5c:94:98:22:8e:ab:3b:fa:c5:e3:e8:0f: 31:3b:b3:ec:3e:6e:16:1f:84:1f:a6:20:94:a3:61: 21:3f:c3:ab:d5:b3:9e:7d:a0:c4:ee:6f:11:68:ca: 69:dc:25:3f:de:ec:b4:72:eb:c0:c7:f9:f6:c2:b9: 99:4a:7c:6c:f6:29:8b:52:dd:d4:86:d9:79:62:b5: 0a:a2:d8:39:d1:2b:56:2a:a7:3b:82:af:af:a8:97: 81:4a:9b:8e:b8:38:9c:d2:3b:d7:d0:54:3e:1d:6a: fa:9c:ca:3a:fe:ed:d7:69:ea:0e:ee:eb:c8:c1:3f: a6:bd:92:ac:36:fa:c2:9d:b4:5d:a2:a3:2d:2c:5a: 76:82:58:f6:b7:5f:fb:b0:85:d5:1e:80:c0:e8:80: 4e:e6:6c:28:8f:38:31:d4:1c:5d:7d:ee:a6:e6:0b: 5b:cd:bb:33:39:d7:3a:c2:a2:17:10:42:07:f3:c2: f9:39:0b:7f:c3:6b:08:f1:4d:b4:45:7e:1e:4d:39: 90:5e:9f:da:ab:57:48:21:1a:4f:ab:11:a3:d5:af: 67:b4:5c:b5:0c:8c:61:64:35:22:f3:d6:89:5c:ff: 32:48:e1:4b:da:e4:6b:10:6e:17:66:6d:08:42:ea: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:D5:23:2C:6B:DA:0C:C4:5A:D1:FE:1E:56:DF:98:3D:F9:F1:0C X509v3 Authority Key Identifier: keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:81:25:cd:3d:6b:ca:e8:a9:d6:10:71:ec:b7:06:86:b4:45: c7:d8:ad:67:74:b3:f2:d6:25:db:65:96:41:41:6d:de:b5:74: cf:5a:b5:6c:58:90:10:12:57:c8:42:04:41:25:72:d2:f5:5d: ce:db:f5:30:12:ff:1c:f0:a3:a5:47:16:ca:e2:53:ff:62:b9: b3:06:b7:de:83:cf:70:a1:fa:fb:77:93:8e:22:45:ac:df:d1: 64:ed:65:5d:0d:4f:11:97:fe:28:95:f2:0a:31:e6:10:0e:7a: 14:6c:3f:58:83:4c:7c:b3:77:b4:2e:9e:43:5b:5e:25:55:68: f8:c7:89:c7:06:46:36:0a:77:38:12:8a:77:94:53:0b:77:bb: 78:22:90:bf:b4:70:41:be:5a:b2:25:46:54:03:c1:3b:7a:27: 11:c0:83:f2:96:32:55:a8:48:13:4e:2e:9d:74:da:f1:63:84: 2e:99:e1:d6:9f:f3:e0:86:18:d0:0b:78:ba:1f:d7:9e:dd:0d: 16:bd:ee:cf:5b:d2:20:83:08:57:0c:02:89:77:36:f6:fe:2f: 4d:ee:c8:b2:fa:d5:8a:f6:81:d6:b6:36:c3:8b:ea:df:27:fd: 01:81:5b:63:45:79:ce:62:9e:79:ae:6a:4f:99:d2:0b:de:d2: c8:71:da:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3 RDcxNjQyNEIwHhcNMjUwNjEyMjAzMjM5WhcNMjUwNjE5MjAzMjM5WjAYMRYwFAYD VQQDEw02ODRiMzk2OC0zYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTJ5YXHo/FRYroX7hFrvgBVclJgijqs7+sXj6A8xO7PsPm4WH4QfpiCUo2Eh P8Or1bOefaDE7m8RaMpp3CU/3uy0cuvAx/n2wrmZSnxs9imLUt3Uhtl5YrUKotg5 0StWKqc7gq+vqJeBSpuOuDic0jvX0FQ+HWr6nMo6/u3XaeoO7uvIwT+mvZKsNvrC nbRdoqMtLFp2glj2t1/7sIXVHoDA6IBO5mwojzgx1Bxdfe6m5gtbzbszOdc6wqIX EEIH88L5OQt/w2sI8U20RX4eTTmQXp/aq1dIIRpPqxGj1a9ntFy1DIxhZDUi89aJ XP8ySOFL2uRrEG4XZm0IQuqaPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHID1SMs a9oMxFrR/h5W35g9+fEMMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3 ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3 V0NtSl9NdHlfSko5Y1dRa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGgSXNPWvK6KnWEHHstwaGtEXH2K1ndLPy1iXbZZZBQW3etXTPWrVs WJAQElfIQgRBJXLS9V3O2/UwEv8c8KOlRxbK4lP/YrmzBrfeg89wofr7d5OOIkWs 39Fk7WVdDU8Rl/4olfIKMeYQDnoUbD9Yg0x8s3e0Lp5DW14lVWj4x4nHBkY2Cnc4 Eop3lFMLd7t4IpC/tHBBvlqyJUZUA8E7eicRwIPyljJVqEgTTi6ddNrxY4QumeHW n/PghhjQC3i6H9ee3Q0Wve7PW9IggwhXDAKJdzb2/i9N7siy+tWK9oHWtjbDi+rf J/0BgVtjRXnOYp55rmpPmdIL3tLIcdpf -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:22 2025 by rpki-client