$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: EtWlxhhAEGZbVTb5SbbFOFDeZvSYe4Kf4zjWF6lRG1g= Subject key identifier: 79:E3:E7:23:EE:A4:94:4A:28:AE:35:DC:16:E5:6F:B0:2F:49:EA:5C Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 03A5 Signing time: Thu 19 Jun 2025 00:35:02 +0000 Manifest this update: Thu 19 Jun 2025 00:35:02 +0000 Manifest next update: Thu 26 Jun 2025 00:35:02 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: axbQ77E7pv7HwP7FXlS02gXIrSbSjivsR6Sg9cUhxdk=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Jun 19 00:35:02 2025 GMT Not After : Jun 26 00:35:02 2025 GMT Subject: CN=68535b36-7b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:d7:cc:1b:db:0f:31:51:08:6b:8d:78:2e: 40:07:a9:d7:6a:2d:39:46:f4:a1:94:2e:f5:42:85: 2f:d5:0b:8f:f1:d6:be:70:51:b7:49:2a:0a:96:15: 64:95:4b:3a:94:d9:c1:3c:59:aa:89:0c:89:9d:0e: 4a:21:cb:76:1c:d3:e9:24:71:4e:d8:ea:46:ab:03: 5e:4c:58:73:1b:b2:48:39:95:d4:21:16:e6:12:b2: 76:08:c6:6b:33:e6:94:5f:5f:e5:63:ef:76:c7:b6: 3e:ef:8f:39:4f:70:ec:6d:07:0c:62:a6:b1:45:b4: 63:c6:72:9d:06:c2:20:7c:86:76:1f:33:30:bf:89: 61:57:87:aa:e3:7b:f9:d3:d8:02:28:d6:65:b0:f2: f2:fb:6d:72:2e:b1:c0:b5:d6:82:1f:e6:c0:41:39: 8b:ed:67:21:4a:d8:09:01:c9:c1:db:13:6f:11:30: 4c:12:4b:b1:2f:ea:88:79:e8:56:f6:5d:66:84:7e: 4c:a1:03:3b:e8:4e:09:e6:01:a5:03:65:ca:65:fa: da:eb:59:a7:d4:a0:e5:ea:cd:dc:68:a6:c1:a5:eb: ac:ea:4a:70:82:58:09:e1:22:80:1d:2d:eb:95:93: 80:c1:58:dc:d9:ff:e3:a2:0e:e8:1a:84:90:53:c8: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E3:E7:23:EE:A4:94:4A:28:AE:35:DC:16:E5:6F:B0:2F:49:EA:5C X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:27:17:6f:d3:ad:42:9a:f2:27:b4:cd:20:6c:ba:a1:07:9f: 57:02:8a:42:59:0d:ef:1b:fd:e8:b2:9e:d0:bb:a4:cf:cc:8c: dc:40:6b:94:e8:f4:31:ee:a7:69:74:e5:f6:81:03:05:ec:fd: 73:c0:2e:2c:4c:05:47:ca:89:a7:7b:2a:ff:94:19:a9:c7:5a: 51:39:a5:08:e2:45:c0:cd:0f:4e:6a:f2:42:fb:f0:dd:44:59: 6e:a1:b0:ea:1c:dd:74:f7:db:fd:30:1a:6d:6f:40:61:23:51: f3:96:5f:d5:c5:84:4e:02:42:8e:8b:94:1c:76:9e:cc:7f:a0: 87:b8:e2:95:bf:ec:56:eb:76:9b:b0:9d:4e:35:23:83:80:61: 21:55:54:88:e4:14:62:1b:6c:5c:80:1a:6c:b0:5c:84:81:53: c8:55:25:41:99:ed:30:01:e4:01:23:84:70:ec:e1:2c:fe:af: 1b:42:f9:63:2e:12:58:39:e1:58:0e:a4:b3:2d:3e:1f:f1:6a: 93:33:93:d3:00:99:1a:af:64:25:fb:91:b2:c5:27:bb:c7:aa: 20:25:39:79:bd:c0:dd:75:cc:ce:c4:26:c9:11:ce:40:f8:6d: c4:6e:d0:93:af:09:57:1a:cf:90:b8:62:db:0a:05:fa:a3:3e: db:f2:9e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUwNjE5MDAzNTAyWhcNMjUwNjI2MDAzNTAyWjAYMRYwFAYD VQQDEw02ODUzNWIzNi03Yjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2/XzBvbDzFRCGuNeC5AB6nXai05RvShlC71QoUv1QuP8da+cFG3SSoKlhVk lUs6lNnBPFmqiQyJnQ5KIct2HNPpJHFO2OpGqwNeTFhzG7JIOZXUIRbmErJ2CMZr M+aUX1/lY+92x7Y+7485T3DsbQcMYqaxRbRjxnKdBsIgfIZ2HzMwv4lhV4eq43v5 09gCKNZlsPLy+21yLrHAtdaCH+bAQTmL7WchStgJAcnB2xNvETBMEkuxL+qIeehW 9l1mhH5MoQM76E4J5gGlA2XKZfra61mn1KDl6s3caKbBpeus6kpwglgJ4SKAHS3r lZOAwVjc2f/jog7oGoSQU8gMWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnj5yPu pJRKKK413Bblb7AvSepcMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFJxdv061CmvIntM0gbLqhB59XAopCWQ3vG/3osp7Qu6TPzIzcQGuU 6PQx7qdpdOX2gQMF7P1zwC4sTAVHyomneyr/lBmpx1pROaUI4kXAzQ9OavJC+/Dd RFluobDqHN1099v9MBptb0BhI1Hzll/VxYROAkKOi5Qcdp7Mf6CHuOKVv+xW63ab sJ1ONSODgGEhVVSI5BRiG2xcgBpssFyEgVPIVSVBme0wAeQBI4Rw7OEs/q8bQvlj LhJYOeFYDqSzLT4f8WqTM5PTAJkar2Ql+5GyxSe7x6ogJTl5vcDddczOxCbJEc5A +G3EbtCTrwlXGs+QuGLbCgX6oz7b8p4h -----END CERTIFICATE-----Generated at Thu Jun 19 11:08:45 2025 by rpki-client