$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft File: kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json) Hash identifier: JkKHbgVgj3aTsJ8gsBeXI99FzCTi0pLjh3aqV+OWDuU= Subject key identifier: 46:64:15:9D:4B:94:63:C2:87:BB:29:38:E8:68:9D:B4:18:34:0E:9A Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 Certificate issuer: /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft Manifest number: 15 Signing time: Sun 15 Jun 2025 07:05:58 +0000 Manifest this update: Sun 15 Jun 2025 07:05:57 +0000 Manifest next update: Sun 22 Jun 2025 07:05:57 +0000 Files and hashes: 1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: puE66cu/UBvaZ3I1+NA0s7Cyr1ljHqKZsVE9YCiJOw8=) 2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: AMD2GEEFiF8rkGOwYs1r+qxOyHQFwJJUEW+dwUt3a3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Validity Not Before: Jun 15 07:05:57 2025 GMT Not After : Jun 22 07:05:57 2025 GMT Subject: CN=684e70d6-8c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e4:de:ee:32:5e:07:04:aa:b0:39:ec:ae:ef: 0d:51:d2:99:b3:ee:f8:79:06:78:f2:84:d9:53:a9: 00:14:15:55:ef:16:e6:97:42:81:51:e9:ce:6a:3f: 17:af:67:5c:16:77:c6:0e:81:e9:ae:e6:89:4b:09: ee:d6:34:c4:11:24:f8:f2:59:8d:ad:bd:69:b0:bb: 30:ee:ca:9b:17:d2:64:16:80:e4:91:15:08:37:26: f6:e8:f4:3a:16:40:1d:21:e2:c8:38:2e:b9:3a:dc: bf:ed:9d:25:60:70:8c:56:74:ba:ed:f2:3b:2f:24: 5d:de:d3:a3:ac:08:05:e9:c9:ab:b0:54:05:bb:97: 96:3c:77:bb:27:1c:c2:59:86:8b:dc:a1:ce:f2:8c: 11:9a:4f:23:08:70:6c:f0:b7:52:2f:fb:ab:b9:30: bf:cf:4b:ee:85:23:64:ab:83:76:22:28:2e:03:b1: e5:aa:6a:2f:63:22:ed:6f:e2:7f:6f:bd:7a:55:9d: 77:c8:78:f2:75:39:f0:d9:5b:29:6e:f8:59:08:3c: 13:a5:85:b4:77:d4:54:86:ab:4b:0b:0d:47:89:42: 6e:69:19:3e:a6:3f:c3:2d:23:21:90:80:3a:a4:80: 41:47:74:a2:b0:bc:3c:ca:f3:a0:7b:0d:9e:ee:fb: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:15:9D:4B:94:63:C2:87:BB:29:38:E8:68:9D:B4:18:34:0E:9A X509v3 Authority Key Identifier: keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ba:37:34:42:e2:68:02:f1:66:40:6f:90:b6:4c:b3:52:ab: 5b:45:56:6f:3e:86:30:c4:50:95:7b:6b:bf:ca:ed:f9:a1:d9: 77:91:bc:99:ff:d8:fb:cf:fd:7e:e5:f0:3d:87:64:d1:96:7b: 61:4b:bb:1e:45:da:5f:2d:0d:5b:f6:a0:f6:e3:54:28:8a:66: a2:70:9b:cd:ec:1d:af:66:d0:24:d4:a9:76:3f:d7:53:a9:ff: 41:62:8e:53:95:56:82:a0:54:db:6e:7b:fa:d0:22:de:35:64: b7:6e:0e:ed:ba:d3:da:ae:03:52:91:8f:d8:ce:55:ad:87:f4: e1:51:2e:99:f8:fb:94:73:9b:27:ca:00:b4:c5:36:2f:c8:02: 1d:25:6d:a5:3d:3b:d9:f3:55:01:1c:47:f0:0f:ff:00:16:7d: 28:fb:bf:75:e6:4a:3a:40:05:dd:b5:47:d9:ac:f5:21:08:d1: 00:13:d5:93:c9:91:af:7b:94:b8:42:dd:17:0b:6d:b2:cf:25: d5:58:03:52:cc:ab:9c:94:b3:54:3a:85:f6:cd:02:f3:85:49: fd:1a:2c:15:f7:df:1c:4f:ea:04:4b:fd:21:0e:58:ee:d9:0f: 59:63:a9:05:10:fc:29:1e:d0:39:74:f6:cd:91:3f:ee:3e:f0: 56:a0:12:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNDQzExMC8GA1UEBRMoOTMwNzZFMkNCNUUwOTk1NDJBQjIxMEZFQjQ4NjAxOTBD NTQ1QzQzNjAeFw0yNTA2MTUwNzA1NTdaFw0yNTA2MjIwNzA1NTdaMBgxFjAUBgNV BAMTDTY4NGU3MGQ2LThjNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg5N7uMl4HBKqwOeyu7w1R0pmz7vh5BnjyhNlTqQAUFVXvFuaXQoFR6c5qPxev Z1wWd8YOgemu5olLCe7WNMQRJPjyWY2tvWmwuzDuypsX0mQWgOSRFQg3Jvbo9DoW QB0h4sg4Lrk63L/tnSVgcIxWdLrt8jsvJF3e06OsCAXpyauwVAW7l5Y8d7snHMJZ hovcoc7yjBGaTyMIcGzwt1Iv+6u5ML/PS+6FI2Srg3YiKC4DseWqai9jIu1v4n9v vXpVnXfIePJ1OfDZWylu+FkIPBOlhbR31FSGq0sLDUeJQm5pGT6mP8MtIyGQgDqk gEFHdKKwvDzK86B7DZ7u+xYzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURmQVnUuU Y8KHuyk46GidtBg0DpowHwYDVR0jBBgwFoAUkwduLLXgmVQqshD+tIYBkMVFxDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0NDLzc1OEM4MEEyMkZE NzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZRcXNoRC10SVlCa01WRnhE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3dkdUxMWGdtVlFxc2hELXRJWUJrTVZGeERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0NDLzc1OEM4MEEyMkZENzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZR cXNoRC10SVlCa01WRnhEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG+6NzRC4mgC8WZAb5C2TLNSq1tFVm8+hjDEUJV7a7/K7fmh2XeRvJn/ 2PvP/X7l8D2HZNGWe2FLux5F2l8tDVv2oPbjVCiKZqJwm83sHa9m0CTUqXY/11Op /0FijlOVVoKgVNtue/rQIt41ZLduDu2609quA1KRj9jOVa2H9OFRLpn4+5RzmyfK ALTFNi/IAh0lbaU9O9nzVQEcR/AP/wAWfSj7v3XmSjpABd21R9ms9SEI0QAT1ZPJ ka97lLhC3RcLbbLPJdVYA1LMq5yUs1Q6hfbNAvOFSf0aLBX33xxP6gRL/SEOWO7Z D1ljqQUQ/Cke0Dl09s2RP+4+8FagEq4= -----END CERTIFICATE-----Generated at Sun Jun 15 09:51:35 2025 by rpki-client