$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft File: kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json) Hash identifier: veH6fWRmqqgsyus0J/HLRBG3ul9B+S4fe7HR9T1hN1E= Subject key identifier: AA:39:C2:E3:48:D2:0F:07:0A:0A:B7:3F:D6:F6:E8:55:C3:7D:21:0B Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F Certificate serial: 0451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft Manifest number: 043E Signing time: Mon 16 Jun 2025 23:57:51 +0000 Manifest this update: Mon 16 Jun 2025 23:57:51 +0000 Manifest next update: Mon 23 Jun 2025 23:57:51 +0000 Files and hashes: 1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: OaM4CvdMSgtJ2nr+MfDm83fKpvVywA+aLN8qH/9N1gE=) 2: E7DBA61CA1FA11EF9696DF59C4F9AE02.roa (hash: 346r3b4w4VthONfD4bZWfxOP9wmeXPFHqji5dvclr0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F Validity Not Before: Jun 16 23:57:51 2025 GMT Not After : Jun 23 23:57:51 2025 GMT Subject: CN=6850af7f-14c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:f8:16:36:c6:cb:71:3e:46:b9:d0:d4:04: da:91:3e:4f:e6:ce:99:7f:ee:51:bb:3c:cd:8b:fe: 3c:ae:f2:bf:ce:d4:4f:11:9d:65:8d:45:2b:50:11: 4d:61:ea:e3:21:93:d6:2d:49:5e:20:dd:ab:8d:af: e4:57:f2:a8:6e:ee:4c:8c:6a:53:ea:cc:2b:3c:7e: 86:75:3c:19:88:f4:6b:ff:6d:22:36:90:7b:09:ff: 5c:b2:c9:ac:62:fd:32:8f:21:db:ab:b2:e7:16:a7: 3b:ab:52:16:91:ae:8a:aa:23:4a:12:c4:42:e9:1a: 1f:91:87:e3:24:f7:2b:a2:6b:34:b9:30:2f:1d:34: 07:6b:05:59:bb:d2:6a:04:44:20:86:84:e1:51:83: 5b:b9:76:87:30:f9:b0:f9:09:26:44:0d:44:e7:e8: e1:bc:b6:03:19:5a:4b:f7:d9:72:9d:7a:bf:5f:fb: 20:7f:51:05:e9:c5:88:50:72:69:fd:d3:cd:f9:12: fb:17:fd:d3:d9:22:2a:92:7e:d5:9d:ac:a3:87:ca: 5a:b1:c5:12:34:64:01:47:db:9a:ef:ea:e6:02:23: f8:01:3d:5f:81:1a:41:08:35:0e:b1:2e:a3:c8:5b: 80:50:82:65:f8:3a:fa:1d:6d:e0:dc:99:d5:b6:22: ba:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:39:C2:E3:48:D2:0F:07:0A:0A:B7:3F:D6:F6:E8:55:C3:7D:21:0B X509v3 Authority Key Identifier: keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:ae:15:cc:57:32:7d:44:56:26:3f:7b:2a:9b:a0:21:8d:59: d9:83:c6:4e:6e:a0:26:5f:94:5c:1d:6c:ee:9f:29:66:3f:f5: 7f:58:5a:da:70:33:7b:10:04:d2:b4:c9:84:b3:cb:57:45:43: a0:2c:e1:fb:ee:51:ca:eb:44:17:53:84:51:5c:23:02:12:a8: 66:68:96:79:e5:da:46:1a:60:b3:4d:1a:5e:a1:54:59:d9:04: f4:da:ac:ff:01:a8:d4:8b:7b:45:8a:b1:2b:29:4a:fa:ca:fe: 25:45:55:6b:5c:79:d5:99:18:0e:aa:91:d4:c7:e1:53:11:f5: c7:95:7c:b0:81:54:4e:45:c8:b2:04:f8:e3:49:ae:92:19:99: 38:24:63:32:03:d0:b4:44:d2:ca:67:f2:0f:f2:78:bb:8c:f3: b7:da:a7:dc:27:ce:d6:a7:6b:cf:a2:66:5f:37:29:0d:a3:3a: 18:bc:a0:30:50:a3:d1:78:e0:c1:23:4b:9c:a5:8c:e8:c3:ce: 64:f3:93:71:74:79:de:fc:7d:b9:c2:e5:2e:9d:85:e3:ec:7c: 8d:d4:54:d1:66:ea:1f:36:31:61:6a:ca:3a:61:ae:e3:3f:68: 38:27:e0:51:e9:44:b7:d6:a3:97:8d:9d:27:21:86:9b:b0:45: ee:6b:84:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwNUIxMTAvBgNVBAUTKDkxMzM4NjkwREVCQTU3OENFNzM4MjE4QTlFMjIwODU0 RDFCNTI3NUYwHhcNMjUwNjE2MjM1NzUxWhcNMjUwNjIzMjM1NzUxWjAYMRYwFAYD VQQDEw02ODUwYWY3Zi0xNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXz4FjbGy3E+RrnQ1ATakT5P5s6Zf+5RuzzNi/48rvK/ztRPEZ1ljUUrUBFN YerjIZPWLUleIN2rja/kV/Kobu5MjGpT6swrPH6GdTwZiPRr/20iNpB7Cf9cssms Yv0yjyHbq7LnFqc7q1IWka6KqiNKEsRC6RofkYfjJPcroms0uTAvHTQHawVZu9Jq BEQghoThUYNbuXaHMPmw+QkmRA1E5+jhvLYDGVpL99lynXq/X/sgf1EF6cWIUHJp /dPN+RL7F/3T2SIqkn7Vnayjh8pascUSNGQBR9ua7+rmAiP4AT1fgRpBCDUOsS6j yFuAUIJl+Dr6HW3g3JnVtiK6qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo5wuNI 0g8HCgq3P9b26FXDfSELMB8GA1UdIwQYMBaAFJEzhpDeuleM5zghip4iCFTRtSdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA1Qi85ODE3RDI3MjY0 Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0em5PQ0dLbmlJSVZORzFK MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tUT0drTjY2VjR6bk9DR0tuaUlJVk5HMUoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA1Qi85ODE3RDI3MjY0Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0 em5PQ0dLbmlJSVZORzFKMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhrhXMVzJ9RFYmP3sqm6AhjVnZg8ZObqAmX5RcHWzunylmP/V/WFra cDN7EATStMmEs8tXRUOgLOH77lHK60QXU4RRXCMCEqhmaJZ55dpGGmCzTRpeoVRZ 2QT02qz/AajUi3tFirErKUr6yv4lRVVrXHnVmRgOqpHUx+FTEfXHlXywgVRORciy BPjjSa6SGZk4JGMyA9C0RNLKZ/IP8ni7jPO32qfcJ87Wp2vPomZfNykNozoYvKAw UKPReODBI0ucpYzow85k85NxdHne/H25wuUunYXj7HyN1FTRZuofNjFhaso6Ya7j P2g4J+BR6US31qOXjZ0nIYabsEXua4RY -----END CERTIFICATE-----Generated at Wed Jun 18 06:45:30 2025 by rpki-client