$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: eN6UBGyEUaxpq2iJHpT+/M3k317SHFb/1TuM64xeV5U= Subject key identifier: EE:F2:53:FE:0F:43:B5:B0:3D:7D:C3:C5:D5:51:97:DE:77:F9:F9:58 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0EA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0E59 Signing time: Sat 14 Jun 2025 17:43:25 +0000 Manifest this update: Sat 14 Jun 2025 17:43:24 +0000 Manifest next update: Sat 21 Jun 2025 17:43:24 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: S2TSausB4lc3xVTONnFIDxBoxttGSGwICL5D1bR8/pM=) 2: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: q8VjbfesBfjBXJ1O+TtlGTvZbuy2Q6Gq6lc9iUM1cKc=) 3: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: L+aUrfi/IHEm4FCCzrEf6AdJOcO/5KYjXAI+VHu0xCQ=) 4: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: mROz4ndcci/lFowjKQt8EppikBLu2fjIlvGiFhvH3EY=) 5: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: LliQbQ1JrB45v11EWXMUYtz6YL9U5wdtSwrWMJkpnsM=) 6: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: mlWu4QI6RV3Fazg24ou9fVsCNac8uNLMWZTkxYffaU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3748 (0xea4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Jun 14 17:43:24 2025 GMT Not After : Jun 21 17:43:24 2025 GMT Subject: CN=684db4bc-7293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:46:16:cc:25:cf:d6:e4:c5:d9:87:82:4a:f6: 9d:ca:dd:b1:cb:26:e6:d2:a2:8c:59:90:72:2a:7a: ee:46:08:e0:a0:75:6f:fb:da:a5:0a:f8:5c:a2:2a: c1:16:63:9c:cc:2f:82:85:1c:ac:98:da:f7:5e:bc: 64:00:1f:70:31:52:09:7a:ca:6c:80:38:60:3f:45: c2:ce:4d:51:b9:6d:c3:fb:73:6e:18:a7:89:1c:7b: d2:89:25:e6:b7:a8:e6:0f:65:c4:3f:07:43:fe:8b: c8:f6:90:04:9d:a9:38:7b:7c:01:03:a7:b9:d6:1e: b6:66:95:e9:aa:20:77:a7:5d:9a:4c:6a:a5:69:2a: de:29:16:17:36:49:45:bc:9e:55:ea:bc:be:b1:d5: be:cd:74:ba:4a:dc:fb:40:e2:a6:d0:dc:44:40:62: 44:b7:66:f5:28:d1:0e:65:73:46:c4:70:3c:4e:8e: fb:88:37:ff:94:5b:ee:76:b9:f7:8f:2a:a9:f4:48: b2:b0:52:d6:83:b3:9c:d3:c1:a4:bc:d4:f5:f4:df: e0:72:3b:d4:52:3e:86:bf:d8:a7:f0:f8:82:c4:b8: 8a:5a:94:27:a3:e8:27:01:ed:c6:b6:21:aa:12:8b: 90:ff:4c:4a:f3:06:f4:c3:7f:ad:b9:93:ca:5a:de: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F2:53:FE:0F:43:B5:B0:3D:7D:C3:C5:D5:51:97:DE:77:F9:F9:58 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:51:d5:67:4d:30:91:18:58:74:94:21:c0:23:5a:64:97:73: 22:24:ad:c0:ce:81:4a:14:8f:0f:7c:f2:ae:20:ac:fa:75:f3: 15:a1:74:a7:46:59:fe:2e:c9:9a:92:cf:38:a3:f9:81:15:71: da:1e:39:12:3f:0d:66:b2:09:14:67:8f:5f:f2:eb:36:31:cd: 8d:b6:51:ef:9e:86:0d:14:a0:81:70:0f:90:26:6e:a0:06:16: d8:dc:22:27:b1:6c:de:76:25:b8:a2:2c:70:ce:75:49:a5:0c: 05:9a:c8:3c:d1:11:cb:b4:3d:3d:fd:0e:f6:62:a7:19:10:b6: 26:75:1e:0f:cc:b9:9a:76:95:b5:02:37:c2:1c:a3:d3:eb:cf: 1a:b4:e3:27:72:b6:94:2c:5c:52:45:29:3b:ed:2d:16:37:62: b6:52:b1:2c:8f:9c:05:27:90:08:8b:09:fe:90:9b:7e:ea:f2: 3c:20:6d:75:76:02:90:50:95:72:bc:68:b5:0f:ff:fb:ee:d3: bf:17:af:3c:a8:91:1d:ee:59:b4:e7:e2:f6:ae:32:1b:fd:8c: 2b:d8:51:39:16:73:a9:b6:93:f4:2c:5f:a2:32:db:f1:93:63: 01:28:a6:6d:65:b8:3e:77:1f:95:af:a9:a5:c1:0f:ed:97:8d: 3c:00:79:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjUwNjE0MTc0MzI0WhcNMjUwNjIxMTc0MzI0WjAYMRYwFAYD VQQDEw02ODRkYjRiYy03MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EYWzCXP1uTF2YeCSvadyt2xyybm0qKMWZByKnruRgjgoHVv+9qlCvhcoirB FmOczC+ChRysmNr3XrxkAB9wMVIJespsgDhgP0XCzk1RuW3D+3NuGKeJHHvSiSXm t6jmD2XEPwdD/ovI9pAEnak4e3wBA6e51h62ZpXpqiB3p12aTGqlaSreKRYXNklF vJ5V6ry+sdW+zXS6Stz7QOKm0NxEQGJEt2b1KNEOZXNGxHA8To77iDf/lFvudrn3 jyqp9EiysFLWg7Oc08GkvNT19N/gcjvUUj6Gv9in8PiCxLiKWpQno+gnAe3GtiGq EouQ/0xK8wb0w3+tuZPKWt4rLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7yU/4P Q7WwPX3DxdVRl953+flYMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADUdVnTTCRGFh0lCHAI1pkl3MiJK3AzoFKFI8PfPKuIKz6dfMVoXSn Rln+Lsmaks84o/mBFXHaHjkSPw1msgkUZ49f8us2Mc2NtlHvnoYNFKCBcA+QJm6g BhbY3CInsWzediW4oixwznVJpQwFmsg80RHLtD09/Q72YqcZELYmdR4PzLmadpW1 AjfCHKPT688atOMncraULFxSRSk77S0WN2K2UrEsj5wFJ5AIiwn+kJt+6vI8IG11 dgKQUJVyvGi1D//77tO/F688qJEd7lm05+L2rjIb/Ywr2FE5FnOptpP0LF+iMtvx k2MBKKZtZbg+dx+Vr6mlwQ/tl408AHmv -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:19 2025 by rpki-client