$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft File: kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json) Hash identifier: 21STnTaIZtEUjm7AoYUJeQJER3z7WmZsXMhySVzHJF8= Subject key identifier: 0C:AA:32:0D:78:93:2D:28:97:08:85:B6:18:9C:FA:6A:90:84:D7:4A Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA Certificate issuer: /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft Manifest number: 07E1 Signing time: Thu 12 Jun 2025 20:43:17 +0000 Manifest this update: Thu 12 Jun 2025 20:43:17 +0000 Manifest next update: Thu 19 Jun 2025 20:43:17 +0000 Files and hashes: 1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: YJ8xLO6Ekln9kX7DiRUbLE7RrR1WnHuToZ0L9v8j8cs=) 2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: IS2j0d/zVkxwnqe+1txywwwV0QyYZmwCTkV8FQIqSXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Validity Not Before: Jun 12 20:43:17 2025 GMT Not After : Jun 19 20:43:17 2025 GMT Subject: CN=684b3be5-d622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:24:a4:40:78:69:f2:63:5c:e6:7d:2e:fc: d9:ac:ce:16:da:9e:5b:2e:2b:71:78:8f:73:04:4f: fc:61:92:9c:78:24:7a:30:06:8a:7a:ce:42:2a:26: 47:4c:a9:53:c1:22:aa:f4:fb:06:62:e7:c2:2c:1a: b8:ee:93:7d:4b:2b:cc:66:a4:2b:23:45:b0:fc:64: 47:1a:3e:9c:e9:48:7a:15:c2:36:fe:37:88:fc:4e: a5:43:49:53:19:a8:4c:b8:fd:26:d0:51:1d:8d:77: b3:c5:95:47:53:82:bc:71:60:24:89:10:68:59:b4: e8:09:b6:45:78:97:80:1c:7f:f1:91:16:8f:6e:b7: 62:48:2f:72:45:c9:ea:c0:52:f5:c4:14:30:b7:42: 30:a1:22:e4:ca:5e:d0:f2:b9:ab:3f:76:8d:b9:32: 07:18:95:97:36:89:e0:4b:ea:c2:3b:b4:a8:45:43: 87:e8:90:f9:bf:ff:3e:cf:64:86:67:c3:72:20:ec: 61:5e:50:e3:bd:40:2f:18:84:d3:17:ba:f2:d9:15: 03:82:20:f8:bc:45:2a:12:18:5b:46:8e:e2:01:69: 18:b7:8e:4a:f8:ae:2a:38:5b:b4:df:b5:43:5f:3d: 4c:c5:9d:83:ba:99:72:ec:a0:b1:d4:a3:cc:0c:71: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AA:32:0D:78:93:2D:28:97:08:85:B6:18:9C:FA:6A:90:84:D7:4A X509v3 Authority Key Identifier: keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:17:5f:c6:95:cc:12:a2:40:45:e5:b7:69:9e:75:22:32:89: 84:92:66:63:80:c8:1a:14:9a:92:4a:c6:78:f2:f5:bb:ff:79: ca:a7:25:32:4a:f4:d9:24:13:d7:a7:61:c7:13:26:8d:d3:3f: 1a:fb:80:16:23:97:f8:9c:29:8e:b4:59:bc:d7:6c:e3:36:74: d2:dc:95:81:c0:b7:33:9c:0d:03:df:8d:7c:dc:cd:1d:b8:6d: 8c:d2:ee:8e:12:34:9d:20:92:ca:3e:1a:4e:21:a4:cb:be:7a: c1:a7:7c:bc:f9:d3:e6:71:64:44:8f:31:ea:9d:e2:ca:26:6b: 83:e9:03:9f:a1:13:c4:3d:0e:6d:f3:f1:cf:5d:8a:3e:01:00: f5:e7:26:ca:f6:20:79:3d:5f:a1:bc:79:f1:74:d6:c8:4c:24: 7f:31:eb:09:fd:59:4f:07:87:a7:b8:a4:b3:01:bf:b7:6d:c7: 8c:e5:ef:cd:46:c6:a4:d1:31:ae:1a:39:6a:4c:3c:5a:98:64: f8:4a:dc:f7:0e:2c:56:b8:1a:61:ea:56:0a:bd:d6:d0:da:aa: ff:74:47:72:9f:dd:ce:83:51:7b:30:de:a1:de:76:7a:0e:21: c6:60:10:55:20:31:ba:49:09:ab:0d:50:3c:ff:8d:a0:37:ab: 96:a6:12:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1MDMxMTAvBgNVBAUTKDkzM0VGNzI2MDZEOUQ1QjI5RkUzQTQxRjIwQzUyQjIw Q0FGNTU1QkEwHhcNMjUwNjEyMjA0MzE3WhcNMjUwNjE5MjA0MzE3WjAYMRYwFAYD VQQDEw02ODRiM2JlNS1kNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNIkpEB4afJjXOZ9LvzZrM4W2p5bLitxeI9zBE/8YZKceCR6MAaKes5CKiZH TKlTwSKq9PsGYufCLBq47pN9SyvMZqQrI0Ww/GRHGj6c6Uh6FcI2/jeI/E6lQ0lT GahMuP0m0FEdjXezxZVHU4K8cWAkiRBoWbToCbZFeJeAHH/xkRaPbrdiSC9yRcnq wFL1xBQwt0IwoSLkyl7Q8rmrP3aNuTIHGJWXNongS+rCO7SoRUOH6JD5v/8+z2SG Z8NyIOxhXlDjvUAvGITTF7ry2RUDgiD4vEUqEhhbRo7iAWkYt45K+K4qOFu037VD Xz1MxZ2Duply7KCx1KPMDHHL6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyqMg14 ky0olwiFthic+mqQhNdKMB8GA1UdIwQYMBaAFJM+9yYG2dWyn+OkHyDFKyDK9VW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjUwMy8wMTU0QjRCNkVF ODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFiS2Y0NlFmSU1VcklNcjFW Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6NzNKZ2JaMWJLZjQ2UWZJTVVySU1yMVZiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjUwMy8wMTU0QjRCNkVFODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFi S2Y0NlFmSU1VcklNcjFWYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiF1/GlcwSokBF5bdpnnUiMomEkmZjgMgaFJqSSsZ48vW7/3nKpyUy SvTZJBPXp2HHEyaN0z8a+4AWI5f4nCmOtFm812zjNnTS3JWBwLcznA0D34183M0d uG2M0u6OEjSdIJLKPhpOIaTLvnrBp3y8+dPmcWREjzHqneLKJmuD6QOfoRPEPQ5t 8/HPXYo+AQD15ybK9iB5PV+hvHnxdNbITCR/MesJ/VlPB4enuKSzAb+3bceM5e/N Rsak0TGuGjlqTDxamGT4Stz3DixWuBph6lYKvdbQ2qr/dEdyn93Og1F7MN6h3nZ6 DiHGYBBVIDG6SQmrDVA8/42gN6uWphIy -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:09 2025 by rpki-client