$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: +wx1AU49R8US+U2KsUKcbI8Zn2RHyjs4bP0mpJ3D1jY= Subject key identifier: 8D:82:EA:85:BD:31:D2:58:D1:72:FE:76:F5:DB:43:B2:CF:1F:5A:C4 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0CCC Signing time: Mon 16 Jun 2025 18:04:54 +0000 Manifest this update: Mon 16 Jun 2025 18:04:53 +0000 Manifest next update: Mon 23 Jun 2025 18:04:53 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: Nt5lJM9oCMYhgNzASIsXyQvLK/Ww/c6NnfHyTYxYzWc=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Jun 16 18:04:53 2025 GMT Not After : Jun 23 18:04:53 2025 GMT Subject: CN=68505cc6-c2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:b6:92:fc:bb:fa:73:ff:e2:d7:51:a4:6a: e9:ce:97:2c:ea:25:f3:d1:d2:13:28:e9:98:cf:41: 0c:76:a1:ee:22:5a:84:22:6b:56:c2:16:25:d7:ab: 53:32:35:b6:58:b1:c3:3b:f6:2e:63:c5:86:66:96: 62:97:e3:9e:ba:08:c2:08:a8:00:45:2e:1d:a3:9c: 22:a7:7a:fe:4f:87:1c:3d:97:f4:3e:82:da:41:c9: 62:25:43:77:c2:e4:08:07:d0:61:b1:e0:74:20:58: 62:39:24:fe:2d:ef:b5:8b:68:81:b5:aa:83:9b:2f: b6:a7:c5:1c:6e:fb:80:92:df:ce:05:14:3d:cf:f2: 91:44:18:53:4b:05:7a:58:39:39:4b:37:1c:10:01: d3:e0:98:78:2f:b1:d1:6d:64:31:3c:4e:2a:d5:f2: 9a:22:0c:26:91:98:7b:61:bb:cd:78:e6:0b:50:14: 3e:28:12:b9:8e:f3:ad:e4:d4:65:a6:16:0a:00:47: e0:95:a0:5c:01:7b:d2:e9:ba:c1:d2:b7:de:f0:97: d4:9f:a3:98:f8:e7:67:61:96:33:33:fc:fd:d4:ae: 49:29:26:69:b5:5d:b7:4b:52:e6:1b:d3:25:f8:df: 45:4b:fa:64:f1:5a:e9:26:75:c4:44:45:33:2f:40: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:82:EA:85:BD:31:D2:58:D1:72:FE:76:F5:DB:43:B2:CF:1F:5A:C4 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:58:ee:f0:2a:07:59:01:dc:14:33:7b:74:16:24:8e:33:6e: 81:21:da:d7:19:68:44:01:66:12:b0:a9:6d:9e:a6:a1:b6:b6: 95:ac:c8:ea:ef:7b:b7:38:7f:9d:2b:74:71:60:15:6a:80:d6: a9:98:69:b4:b8:6c:c6:78:1c:f9:75:b2:57:df:3e:fe:e6:f4: 25:f9:c7:0f:74:4e:15:48:3e:91:a1:00:18:ff:63:bb:cf:05: ed:49:5f:f2:c8:99:47:4b:15:37:bd:86:05:77:90:d9:30:31: e4:0f:c9:72:57:5b:df:e3:dc:94:39:ad:87:60:ee:09:96:f3: af:fa:e3:83:3f:aa:de:36:16:89:44:07:93:fc:05:c0:34:ba: 95:a2:9a:71:4f:54:25:48:06:f6:dc:f4:92:e2:d7:e5:d6:ac: 62:2f:ec:0a:e7:bf:f9:13:0a:1b:bc:34:71:b0:39:63:e3:24: d1:78:ca:3e:8c:f8:39:4a:ab:34:41:11:7b:aa:ba:fb:f3:d6: 54:2c:c5:86:93:a6:07:68:b7:04:c5:35:6d:ae:13:e4:ae:89: ec:bf:3e:11:fb:f1:62:c9:47:e4:ec:ee:23:0f:8a:66:30:ce: 3b:71:be:19:6b:74:00:54:7e:87:79:70:67:95:1f:bf:db:cc: 83:6a:a6:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUwNjE2MTgwNDUzWhcNMjUwNjIzMTgwNDUzWjAYMRYwFAYD VQQDEw02ODUwNWNjNi1jMmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7S2kvy7+nP/4tdRpGrpzpcs6iXz0dITKOmYz0EMdqHuIlqEImtWwhYl16tT MjW2WLHDO/YuY8WGZpZil+OeugjCCKgARS4do5wip3r+T4ccPZf0PoLaQcliJUN3 wuQIB9BhseB0IFhiOST+Le+1i2iBtaqDmy+2p8UcbvuAkt/OBRQ9z/KRRBhTSwV6 WDk5SzccEAHT4Jh4L7HRbWQxPE4q1fKaIgwmkZh7YbvNeOYLUBQ+KBK5jvOt5NRl phYKAEfglaBcAXvS6brB0rfe8JfUn6OY+OdnYZYzM/z91K5JKSZptV23S1LmG9Ml +N9FS/pk8VrpJnXEREUzL0APswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2C6oW9 MdJY0XL+dvXbQ7LPH1rEMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHWO7wKgdZAdwUM3t0FiSOM26BIdrXGWhEAWYSsKltnqahtraVrMjq 73u3OH+dK3RxYBVqgNapmGm0uGzGeBz5dbJX3z7+5vQl+ccPdE4VSD6RoQAY/2O7 zwXtSV/yyJlHSxU3vYYFd5DZMDHkD8lyV1vf49yUOa2HYO4JlvOv+uODP6reNhaJ RAeT/AXANLqVoppxT1QlSAb23PSS4tfl1qxiL+wK57/5EwobvDRxsDlj4yTReMo+ jPg5Sqs0QRF7qrr789ZULMWGk6YHaLcExTVtrhPkronsvz4R+/FiyUfk7O4jD4pm MM47cb4Za3QAVH6HeXBnlR+/28yDaqbu -----END CERTIFICATE-----Generated at Tue Jun 17 17:09:27 2025 by rpki-client