$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: q0ZvLK6gs3Sv4j1DvCYU8a9hsyQjQchfKWkV8b603Mw= Subject key identifier: BE:11:04:8C:48:79:38:CB:65:10:AF:82:10:A1:88:71:89:78:16:E9 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 03B2 Signing time: Sun 15 Jun 2025 00:25:29 +0000 Manifest this update: Sun 15 Jun 2025 00:25:28 +0000 Manifest next update: Sun 22 Jun 2025 00:25:28 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: plRC6HIbW//rrF8HGzLR8bVcm2qCn2WUBrJp2N4xk3A=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Jun 15 00:25:28 2025 GMT Not After : Jun 22 00:25:28 2025 GMT Subject: CN=684e12f9-9935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:30:c9:30:06:59:f1:3d:12:54:9f:fd:5f: 2c:bc:56:fa:1c:ca:c9:56:f1:74:9b:66:d4:ea:2c: 68:1a:d5:15:36:a1:6c:ac:6f:1a:10:be:e9:cf:99: fe:77:2e:a7:0a:33:08:06:b5:4c:b9:07:22:bf:22: 11:14:e0:ee:25:53:d4:7b:03:c8:19:e7:7b:35:49: 43:bd:2f:ca:c8:10:dd:e9:fe:fa:95:1c:94:3c:27: 65:78:a4:25:ce:f1:77:4d:6c:a5:f2:28:46:dc:75: 54:64:6c:ae:23:98:42:a5:5d:79:b3:8d:80:f7:fb: f1:33:5c:d0:38:1a:e7:ff:8c:46:e3:3e:ad:b2:06: d4:de:95:2b:52:86:e4:c6:10:2f:64:16:2f:be:80: 68:54:9a:d9:04:f9:c5:2e:de:64:28:8b:cc:a8:e5: 68:a3:9e:bb:d7:e4:a5:9c:54:19:db:c7:0a:e0:9b: 4a:dc:43:c8:c5:01:71:3f:73:d7:7f:53:35:81:15: d4:0f:11:b5:f8:bd:7b:db:ab:12:b0:27:f6:af:78: 35:6f:40:1f:03:e1:0b:63:3d:c1:82:74:fb:4f:7e: 9f:be:5d:ea:2f:b3:45:5b:83:d1:28:05:5b:9a:23: 4f:0b:fb:3f:8b:be:a1:cd:10:4a:e1:ec:41:c5:f1: 4b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:11:04:8C:48:79:38:CB:65:10:AF:82:10:A1:88:71:89:78:16:E9 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e2:60:ff:ca:72:b3:63:7d:ad:41:bc:20:6c:79:20:3d:dc: 36:81:68:1f:02:1b:44:f8:45:6a:f8:7f:1d:51:18:44:71:8d: b8:84:4f:e8:b3:6c:40:32:12:b6:28:24:07:ca:a8:4c:4a:e3: 5d:54:78:b0:dc:c6:9d:69:35:cc:0b:f5:5e:b9:11:9a:52:82: 22:c4:c4:f5:84:96:a0:ee:83:63:db:8f:65:de:97:56:aa:d2: d9:98:a9:8b:0c:52:b2:9c:4a:11:9d:9b:ea:e2:19:de:19:ec: f0:b5:63:97:53:cf:fd:a9:00:c2:f4:2a:3b:18:df:00:62:e6: a5:e1:f8:a4:86:c6:a0:74:67:c3:8f:35:63:52:5a:1b:20:cc: f8:71:86:95:b9:9a:3a:66:77:0c:ad:16:4b:6a:e5:8b:d8:c8: ce:a2:ba:ce:66:e3:4f:80:5b:3c:7b:36:3c:8b:d2:f5:2c:de: 6d:43:b9:ab:e6:f8:fd:61:0c:1a:68:74:fd:fb:a1:7d:aa:ad: a6:1b:2c:c1:58:f4:dc:ae:a0:9e:9b:69:d6:7e:f6:9e:b0:4c: 02:0b:cf:45:b4:d0:71:d3:07:90:ab:01:18:1d:1c:0d:a7:9a: 2d:31:63:ff:df:6d:0b:cf:48:e0:9b:bc:f1:b3:5a:81:1f:6b: 02:52:65:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjUwNjE1MDAyNTI4WhcNMjUwNjIyMDAyNTI4WjAYMRYwFAYD VQQDEw02ODRlMTJmOS05OTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPEwyTAGWfE9ElSf/V8svFb6HMrJVvF0m2bU6ixoGtUVNqFsrG8aEL7pz5n+ dy6nCjMIBrVMuQcivyIRFODuJVPUewPIGed7NUlDvS/KyBDd6f76lRyUPCdleKQl zvF3TWyl8ihG3HVUZGyuI5hCpV15s42A9/vxM1zQOBrn/4xG4z6tsgbU3pUrUobk xhAvZBYvvoBoVJrZBPnFLt5kKIvMqOVoo5671+SlnFQZ28cK4JtK3EPIxQFxP3PX f1M1gRXUDxG1+L1726sSsCf2r3g1b0AfA+ELYz3BgnT7T36fvl3qL7NFW4PRKAVb miNPC/s/i76hzRBK4exBxfFLCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4RBIxI eTjLZRCvghChiHGJeBbpMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi4mD/ynKzY32tQbwgbHkgPdw2gWgfAhtE+EVq+H8dURhEcY24hE/o s2xAMhK2KCQHyqhMSuNdVHiw3MadaTXMC/VeuRGaUoIixMT1hJag7oNj249l3pdW qtLZmKmLDFKynEoRnZvq4hneGezwtWOXU8/9qQDC9Co7GN8AYual4fikhsagdGfD jzVjUlobIMz4cYaVuZo6ZncMrRZLauWL2MjOorrOZuNPgFs8ezY8i9L1LN5tQ7mr 5vj9YQwaaHT9+6F9qq2mGyzBWPTcrqCem2nWfvaesEwCC89FtNBx0weQqwEYHRwN p5otMWP/320Lz0jgm7zxs1qBH2sCUmUq -----END CERTIFICATE-----Generated at Sun Jun 15 09:35:05 2025 by rpki-client