$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft File: kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json) Hash identifier: fkcRQnPgWMhfD3G7I5WyoTuQKigiU6QDiTntPOOw3OU= Subject key identifier: 12:11:B3:6F:67:56:A8:FB:26:2A:12:FC:EB:C8:59:DF:83:E6:9D:2D Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Certificate issuer: /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft Manifest number: 0259 Signing time: Thu 19 Jun 2025 02:58:43 +0000 Manifest this update: Thu 19 Jun 2025 02:58:43 +0000 Manifest next update: Thu 26 Jun 2025 02:58:43 +0000 Files and hashes: 1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: Ct9CjjKQv8b4m2h8I6Pr3Akap4+6JOABRCipYhKy5NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Validity Not Before: Jun 19 02:58:43 2025 GMT Not After : Jun 26 02:58:43 2025 GMT Subject: CN=68537ce3-0f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:9b:ef:72:70:0a:c2:76:27:c3:b4:af:e0: 52:e2:21:f9:1f:77:b4:a8:c5:db:e8:d2:4b:9d:0b: 9c:b4:ac:1d:ff:41:69:bf:e4:35:74:4a:55:97:92: fa:7f:c6:b1:9b:35:30:11:67:ad:8f:29:2e:6b:ac: e6:9e:ce:05:0a:06:93:48:b6:a3:b0:87:3e:8d:3b: f0:5b:d1:3b:3e:a5:99:fe:26:a5:e6:59:77:15:e9: c9:d3:d1:79:36:70:49:0d:f5:e3:9c:09:51:7c:af: 5d:dc:69:d9:7c:23:f5:56:08:dc:55:0e:ea:64:13: 58:6b:85:37:c6:14:29:43:b3:07:6f:12:70:61:61: 57:4b:78:05:9c:e7:73:43:64:7d:4b:42:4e:63:24: c6:0e:d4:0a:60:88:cc:86:da:de:83:45:c6:1b:96: 23:ca:ff:40:6d:5b:76:af:58:7d:2f:40:00:ea:a6: 46:d0:d9:3e:2f:38:50:f0:a5:64:b1:22:c8:f9:b8: aa:fa:ef:c4:92:03:d1:e3:3f:eb:9c:f8:7c:be:e5: cd:3a:e7:7b:8b:12:98:5e:4a:c2:3b:5e:83:2b:59: 14:e0:cc:fc:b6:57:ae:4c:a0:d1:d3:6e:38:c4:80: 52:c0:22:e6:5a:d2:a1:d8:2f:7f:f9:3d:d4:1a:50: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:11:B3:6F:67:56:A8:FB:26:2A:12:FC:EB:C8:59:DF:83:E6:9D:2D X509v3 Authority Key Identifier: keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e6:4b:88:08:41:89:10:ce:2b:5e:b1:14:fb:c1:e1:26:87: ef:c5:8a:4d:80:11:44:ad:4a:48:d0:c2:e7:bc:16:68:cc:b5: 25:97:8a:09:9f:17:49:91:90:2f:3f:f0:bb:7c:7a:79:1c:af: c8:94:db:73:2a:6e:93:c7:70:ad:c5:d8:18:4c:91:6a:ce:34: 85:12:76:2a:e0:31:02:89:4c:29:97:b1:94:14:00:c7:3d:e6: 2a:e9:b6:e4:bc:5d:cd:24:ca:7c:44:91:4b:07:0d:19:d4:18: 38:d8:8c:a0:b4:89:45:7a:72:e7:d8:00:69:94:8a:77:8d:0d: aa:fa:01:dc:72:eb:4c:b5:be:e9:c4:1d:d5:b2:71:24:f6:a1: 4d:dd:0e:ff:71:c1:9f:f6:93:ed:38:96:c3:1d:7f:8d:5e:a4: 75:9b:c9:b3:5e:a8:fc:0c:a1:25:34:4a:aa:db:2b:68:e9:db: 50:c2:cf:26:b3:a8:33:15:d3:ea:a2:d2:96:be:c3:7a:f6:c5: 71:3c:66:f2:0a:72:64:f2:ff:12:25:ff:19:f6:d5:07:dd:f6: 86:e9:9c:b0:b4:ed:05:ba:79:c2:2f:2d:da:8a:48:cf:a2:7b: 3c:0a:a0:45:04:2f:69:c2:87:56:35:4b:3b:d1:d5:69:95:5e: 67:55:6b:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUNDNDI1OTJBRDA1 Qzk2NzZBNjIwHhcNMjUwNjE5MDI1ODQzWhcNMjUwNjI2MDI1ODQzWjAYMRYwFAYD VQQDEw02ODUzN2NlMy0wZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUyb73JwCsJ2J8O0r+BS4iH5H3e0qMXb6NJLnQuctKwd/0Fpv+Q1dEpVl5L6 f8axmzUwEWetjykua6zmns4FCgaTSLajsIc+jTvwW9E7PqWZ/ial5ll3FenJ09F5 NnBJDfXjnAlRfK9d3GnZfCP1VgjcVQ7qZBNYa4U3xhQpQ7MHbxJwYWFXS3gFnOdz Q2R9S0JOYyTGDtQKYIjMhtreg0XGG5Yjyv9AbVt2r1h9L0AA6qZG0Nk+LzhQ8KVk sSLI+biq+u/EkgPR4z/rnPh8vuXNOud7ixKYXkrCO16DK1kU4Mz8tleuTKDR0244 xIBSwCLmWtKh2C9/+T3UGlA0qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIRs29n Vqj7JioS/OvIWd+D5p0tMB8GA1UdIwQYMBaAFJEtzXfOF2Jz2UocxCWSrQXJZ2pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFluUFpTaHpFSlpLdEJjbG5h bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTM05kODRYWW5QWlNoekVKWkt0QmNsbmFtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFlu UFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW5kuICEGJEM4rXrEU+8HhJofvxYpNgBFErUpI0MLnvBZozLUll4oJ nxdJkZAvP/C7fHp5HK/IlNtzKm6Tx3CtxdgYTJFqzjSFEnYq4DECiUwpl7GUFADH PeYq6bbkvF3NJMp8RJFLBw0Z1Bg42IygtIlFenLn2ABplIp3jQ2q+gHccutMtb7p xB3VsnEk9qFN3Q7/ccGf9pPtOJbDHX+NXqR1m8mzXqj8DKElNEqq2yto6dtQws8m s6gzFdPqotKWvsN69sVxPGbyCnJk8v8SJf8Z9tUH3faG6ZywtO0FunnCLy3aikjP ons8CqBFBC9pwodWNUs70dVplV5nVWuP -----END CERTIFICATE-----Generated at Fri Jun 20 22:50:23 2025 by rpki-client