$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: AXI5TmfaI3Sy3ttpcZkQxX027BarBS7fu7Vg8Cxanew= Subject key identifier: 17:1C:16:A1:5C:FD:53:56:9F:DF:5B:75:57:20:5C:CC:33:A8:9A:A8 Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0C50 Signing time: Sat 14 Jun 2025 20:33:12 +0000 Manifest this update: Sat 14 Jun 2025 20:33:12 +0000 Manifest next update: Sat 21 Jun 2025 20:33:12 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: 1N6ppOK8ZM/SF1YjfDL9k3LKG4jdaRVQJPvmJ0JAmpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Jun 14 20:33:12 2025 GMT Not After : Jun 21 20:33:12 2025 GMT Subject: CN=684ddc88-9267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:c2:a2:e8:e3:ac:21:90:8e:12:88:e1:49: 11:9f:e6:38:15:a2:da:84:16:30:2b:17:5a:47:85: 3b:95:72:06:f6:68:f5:5c:27:f7:3d:0c:13:a7:89: 83:a3:76:fc:de:a6:cd:89:7f:4c:0d:a7:31:3d:a7: 5c:67:f6:a6:27:47:78:53:10:d9:d8:b6:6b:5c:25: 97:92:41:ad:2c:46:a0:18:55:09:90:4e:90:bf:44: ef:78:d7:22:48:e7:4e:25:37:c9:d0:be:6b:21:3d: 25:e7:f0:ae:21:b7:78:28:b3:17:af:e4:06:a3:ff: 75:84:e1:4f:53:01:4b:83:34:96:c2:d3:92:28:9d: b9:7b:25:18:f7:bd:ac:c8:55:51:2b:e4:a2:82:72: f2:6d:b2:dc:6f:9f:64:dd:60:ec:0c:bc:63:7a:3b: e5:49:88:df:9a:b4:7d:ad:f2:b8:44:54:e3:bd:b4: 9f:30:76:08:70:85:36:10:f1:33:c7:0d:41:c9:cf: 00:83:1c:09:55:0d:86:7f:35:01:4a:a2:5f:f3:8c: 4e:74:ae:8c:66:6b:83:5b:0e:10:4c:9a:a6:3c:d8: b5:71:37:3d:1f:30:7d:73:98:2b:94:61:6b:a6:ff: d1:ca:52:01:f6:9e:5a:fc:1c:62:0b:63:a0:05:ca: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1C:16:A1:5C:FD:53:56:9F:DF:5B:75:57:20:5C:CC:33:A8:9A:A8 X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:98:dc:24:86:90:b6:c0:20:7d:f9:6e:83:59:5d:60:87:73: ed:9e:86:1e:b5:ea:c7:b0:82:40:1c:fc:e8:cc:93:16:b1:dd: 74:e0:f7:be:7f:52:14:fc:6d:09:fc:81:b1:ed:5f:b3:39:02: bd:b2:bb:5f:50:78:95:07:f2:b1:12:b6:2c:df:1d:05:62:84: 58:b1:05:5f:ff:b2:a3:a0:63:49:80:39:18:d4:ba:46:2d:3b: 0c:5a:94:59:4f:56:e9:90:45:00:59:76:f2:fd:2a:6c:f7:b8: 82:23:0a:79:5c:66:9b:da:fc:16:da:a6:3b:b7:35:0c:85:aa: 55:0b:45:be:3c:21:30:6d:74:9a:3f:ad:12:39:b2:fb:65:86: ad:61:27:f2:c8:1c:cf:2f:a9:16:29:b5:f7:52:ce:9f:7a:05: ce:51:b7:7b:e3:45:6b:24:98:8a:c1:ca:b7:99:26:85:42:26: c9:f0:12:56:3d:6d:dd:e6:ec:c8:f1:10:78:60:a5:8e:5c:25: 0a:c3:57:7a:6e:ec:02:ee:8e:56:e4:69:b4:cc:c8:49:25:a7: 54:26:76:9a:1a:33:ab:b0:e3:ad:8e:75:ff:d1:9e:ec:66:02: d8:3b:82:61:c5:03:46:64:4a:68:0d:a5:cd:05:b5:ef:f5:d9: df:a1:c1:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjUwNjE0MjAzMzEyWhcNMjUwNjIxMjAzMzEyWjAYMRYwFAYD VQQDEw02ODRkZGM4OC05MjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08PCoujjrCGQjhKI4UkRn+Y4FaLahBYwKxdaR4U7lXIG9mj1XCf3PQwTp4mD o3b83qbNiX9MDacxPadcZ/amJ0d4UxDZ2LZrXCWXkkGtLEagGFUJkE6Qv0TveNci SOdOJTfJ0L5rIT0l5/CuIbd4KLMXr+QGo/91hOFPUwFLgzSWwtOSKJ25eyUY972s yFVRK+SignLybbLcb59k3WDsDLxjejvlSYjfmrR9rfK4RFTjvbSfMHYIcIU2EPEz xw1Byc8AgxwJVQ2GfzUBSqJf84xOdK6MZmuDWw4QTJqmPNi1cTc9HzB9c5grlGFr pv/RylIB9p5a/BxiC2OgBcpwdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBccFqFc /VNWn99bdVcgXMwzqJqoMB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAemNwkhpC2wCB9+W6DWV1gh3PtnoYeterHsIJAHPzozJMWsd104Pe+ f1IU/G0J/IGx7V+zOQK9srtfUHiVB/KxErYs3x0FYoRYsQVf/7KjoGNJgDkY1LpG LTsMWpRZT1bpkEUAWXby/Sps97iCIwp5XGab2vwW2qY7tzUMhapVC0W+PCEwbXSa P60SObL7ZYatYSfyyBzPL6kWKbX3Us6fegXOUbd740VrJJiKwcq3mSaFQibJ8BJW PW3d5uzI8RB4YKWOXCUKw1d6buwC7o5W5Gm0zMhJJadUJnaaGjOrsOOtjnX/0Z7s ZgLYO4JhxQNGZEpoDaXNBbXv9dnfocGd -----END CERTIFICATE-----Generated at Sun Jun 15 19:23:07 2025 by rpki-client