$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json) Hash identifier: 6kvvjYgxWtGN9T8SIjibA6JT2HXhjsV91oPkvURFs6g= Subject key identifier: 95:F4:5C:15:BF:12:67:A9:B8:CA:06:96:32:80:FD:16:C5:B8:38:97 Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft Manifest number: 0333 Signing time: Sun 15 Jun 2025 00:30:33 +0000 Manifest this update: Sun 15 Jun 2025 00:30:32 +0000 Manifest next update: Sun 22 Jun 2025 00:30:32 +0000 Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: 9zR7SXxakmxTyCk34tq6gAHJuwvV8M2vXlQUaWZRAM8=) 2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: NmvW/sg0pEXjTHBegEg6TihBwGGc4JodMMQnzVosHvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD Validity Not Before: Jun 15 00:30:32 2025 GMT Not After : Jun 22 00:30:32 2025 GMT Subject: CN=684e1429-006f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:ab:82:88:5b:31:95:03:1f:19:3b:72:f4: 07:da:0e:95:2e:ce:ae:8a:21:d6:75:de:d4:3a:1d: 57:d2:a4:fd:76:f7:9a:63:a6:8e:93:ac:3f:7b:62: ad:6f:56:ea:b4:4c:9f:29:93:4c:8d:3a:dc:88:76: 42:18:2c:41:3a:e5:45:95:30:4d:e6:f2:f5:02:78: 45:40:11:7d:51:48:21:55:79:39:bd:af:6c:c5:a0: bf:36:2b:3e:31:dc:85:8f:59:60:5d:da:07:49:6e: 77:8f:fd:14:0c:85:16:88:3c:6d:e6:8d:06:17:2f: 56:cf:f9:f6:78:2d:48:0b:18:55:f1:89:3f:61:c3: 14:43:a5:a6:25:51:a0:45:3c:98:8d:43:cd:4a:c8: 03:85:71:97:48:24:f4:8c:a0:ac:bb:75:65:9c:f2: 3c:b5:72:af:9f:2b:ad:c7:26:ad:cb:f6:43:e2:55: 70:fd:5d:7c:2d:02:b8:7a:21:82:b0:e5:e0:ad:43: 61:f1:12:ce:31:9c:41:18:fa:f2:f8:85:27:dc:30: 29:b1:4e:f5:cb:9d:2d:7a:a9:d8:ee:df:62:88:b7: b2:28:11:fa:65:00:a9:6b:d5:b4:99:dd:96:a7:a3: 0b:fe:a9:40:87:af:39:17:ef:a0:09:df:82:6b:db: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F4:5C:15:BF:12:67:A9:B8:CA:06:96:32:80:FD:16:C5:B8:38:97 X509v3 Authority Key Identifier: keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:6b:dc:86:53:ea:28:6b:84:40:a2:75:30:ff:f6:e4:9f:5c: b4:60:c8:65:46:87:2d:db:a7:61:3a:e6:2a:b8:47:75:e9:4c: fb:40:89:b6:eb:9c:24:27:e2:88:c0:0d:9e:d5:da:2f:d5:60: 17:d0:ef:c9:7c:d2:25:71:1c:c0:51:02:e0:6e:7c:70:cc:ea: a5:d8:67:3a:73:78:f0:ee:4e:72:8b:27:5a:8b:18:9d:ce:2c: 5d:6e:e9:58:3c:f2:fd:85:96:74:58:b3:08:e8:4a:40:b5:33: 50:35:1e:50:4d:7a:c7:fc:59:3d:f9:22:eb:36:9b:af:23:c7: 11:f6:5c:2b:d5:24:2c:c6:0d:11:16:ef:ec:5d:85:15:1f:4e: 47:bc:a5:bd:3a:87:0a:80:62:cf:2a:67:b9:0c:74:8a:ee:e7: a2:81:02:c9:ce:21:02:7b:0f:67:8a:98:c5:4f:ac:45:30:fd: 59:14:56:3c:0a:ea:5c:6a:87:eb:54:9d:2f:25:af:1b:4b:e1: 3d:4c:84:4b:19:50:91:ce:d5:1a:b6:4f:8c:84:16:de:2d:c0: a4:06:87:98:73:bd:fc:b7:41:a1:f1:9e:81:85:de:59:e6:2d: 05:ec:67:6e:6e:ca:cb:ef:68:b5:f2:2c:02:f5:cb:78:02:ec: 24:87:fd:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKDkwMTUyOEM5MjE3OTE3RDk1NjcyMUQxQzY4NTY2NTM0 NUJFQjU2RkQwHhcNMjUwNjE1MDAzMDMyWhcNMjUwNjIyMDAzMDMyWjAYMRYwFAYD VQQDEw02ODRlMTQyOS0wMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPOrgohbMZUDHxk7cvQH2g6VLs6uiiHWdd7UOh1X0qT9dveaY6aOk6w/e2Kt b1bqtEyfKZNMjTrciHZCGCxBOuVFlTBN5vL1AnhFQBF9UUghVXk5va9sxaC/Nis+ MdyFj1lgXdoHSW53j/0UDIUWiDxt5o0GFy9Wz/n2eC1ICxhV8Yk/YcMUQ6WmJVGg RTyYjUPNSsgDhXGXSCT0jKCsu3VlnPI8tXKvnyutxyaty/ZD4lVw/V18LQK4eiGC sOXgrUNh8RLOMZxBGPry+IUn3DApsU71y50teqnY7t9iiLeyKBH6ZQCpa9W0md2W p6ML/qlAh685F++gCd+Ca9vSsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJX0XBW/ EmepuMoGljKA/RbFuDiXMB8GA1UdIwQYMBaAFJAVKMkheRfZVnIdHGhWZTRb61b9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS8xQ0Q0NEY5RUM3 N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5bFdjaDBjYUZabE5GdnJW djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCVW95U0Y1RjlsV2NoMGNhRlpsTkZ2clZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS8xQ0Q0NEY5RUM3N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5 bFdjaDBjYUZabE5GdnJWdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEa9yGU+ooa4RAonUw//bkn1y0YMhlRoct26dhOuYquEd16Uz7QIm2 65wkJ+KIwA2e1dov1WAX0O/JfNIlcRzAUQLgbnxwzOql2Gc6c3jw7k5yiydaixid zixdbulYPPL9hZZ0WLMI6EpAtTNQNR5QTXrH/Fk9+SLrNpuvI8cR9lwr1SQsxg0R Fu/sXYUVH05HvKW9OocKgGLPKme5DHSK7ueigQLJziECew9nipjFT6xFMP1ZFFY8 CupcaofrVJ0vJa8bS+E9TIRLGVCRztUatk+MhBbeLcCkBoeYc738t0Gh8Z6Bhd5Z 5i0F7GdubsrL72i18iwC9ct4Auwkh/1T -----END CERTIFICATE-----Generated at Sun Jun 15 23:52:13 2025 by rpki-client