$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft File: keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json) Hash identifier: DqzKczX6GLNiKzpNz+vT3qxooY8iDOgQcBmbKOBXg9s= Subject key identifier: 29:71:AF:61:73:BB:10:CA:F0:28:4D:FA:D8:50:4D:DD:39:EF:10:F0 Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft Manifest number: 016B Signing time: Fri 13 Jun 2025 02:52:18 +0000 Manifest this update: Fri 13 Jun 2025 02:52:18 +0000 Manifest next update: Fri 20 Jun 2025 02:52:18 +0000 Files and hashes: 1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: nb7MpWyQqdGI+I1QxL9FdXs4bbkTVHlK/4blj5vonjY=) 2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: zTYXuX3GDZ63v54RvQHdui7ccszwzNrfqOTF6/FnToE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Validity Not Before: Jun 13 02:52:18 2025 GMT Not After : Jun 20 02:52:18 2025 GMT Subject: CN=684b9262-4ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:2c:c8:b7:ca:3e:99:8c:a2:5c:34:8a:47: 37:fa:c8:9c:d0:f9:a5:fb:38:ae:d0:28:6c:34:c5: eb:ae:b9:46:1b:23:8b:e0:b5:7d:04:e2:ed:6f:f7: ae:10:14:13:d5:fd:a0:85:a6:10:c8:2b:5f:16:97: 15:4d:e4:b9:5b:00:4d:ee:57:54:78:fe:9b:21:55: 77:a1:a6:9b:42:59:25:f6:9f:99:8b:c9:4f:9f:cd: 7e:a1:c2:eb:74:d3:9f:57:19:02:eb:ff:ce:02:25: 69:1c:0f:4d:7c:25:3a:a2:14:65:2b:d6:bc:fc:63: 81:67:0e:c6:96:ac:55:9c:c9:b3:89:25:a9:61:fb: 7f:ee:6e:ca:82:6f:b4:75:a5:1a:5b:c7:dd:06:82: 58:c2:a7:7f:40:ad:86:7f:72:a8:39:7f:74:ca:cc: 3c:4d:c4:88:56:15:7f:4a:c9:ab:cc:83:ce:8c:15: d0:6b:f1:38:2d:bb:d2:86:54:08:14:be:32:0f:47: e5:c8:39:8f:45:3a:2e:b9:54:9f:5f:fc:48:d7:87: 2a:cf:45:73:ad:95:c7:a1:6f:fe:1b:76:2b:60:f6: 41:43:01:1b:90:09:7e:90:95:f9:f7:03:a3:2a:2f: 13:65:8f:b0:59:8f:f3:a5:07:a4:0d:47:1c:47:cc: 41:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:71:AF:61:73:BB:10:CA:F0:28:4D:FA:D8:50:4D:DD:39:EF:10:F0 X509v3 Authority Key Identifier: keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:5b:7b:ef:e4:7e:52:e0:50:ee:11:bd:67:ce:24:8c:2d:dc: 2b:dc:f0:93:41:f2:4e:02:58:cc:fb:db:6e:26:04:05:c3:02: 16:f9:e3:88:c5:b6:e5:81:91:ec:ff:27:8d:4a:4d:02:cc:6f: 86:7c:20:1c:d1:03:25:41:ce:44:5d:ce:ce:02:f3:4e:ac:77: f0:55:08:de:93:f6:fa:75:11:c7:de:22:6a:5b:fc:94:9d:63: 48:cb:2c:18:a3:51:d5:82:c2:ee:e9:97:bf:ca:53:ea:6c:b3: 86:e9:0c:df:af:b2:01:79:fa:44:d9:f9:63:7b:70:b4:fa:0d: e3:42:c3:51:4e:17:97:a3:0c:9e:d8:20:1d:b0:6c:58:57:cb: 62:36:c2:12:9b:27:cb:e9:49:de:5e:d4:03:61:56:00:b3:09: 60:9c:6e:db:91:fa:14:e8:b4:6d:95:8f:55:c1:18:0d:a8:72: 41:5e:e0:a7:93:c7:72:12:b9:be:bc:5b:d3:b5:a4:53:37:47: 1b:7f:4f:90:f0:75:a6:fc:8b:cc:7a:2f:09:ad:29:df:1a:29: 30:8e:a1:10:82:f6:fe:c4:e6:6f:42:e3:d9:50:8a:df:e9:48: cb:56:22:f0:c3:f4:ad:94:2b:e5:7f:af:fc:5d:61:77:22:cc: fe:19:4a:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2RTQxMTAvBgNVBAUTKDkxRTJBNDk3MDMzOThGQjIwMEFDMEU5RkE0NzY2OTE1 RDc0QkY5RTUwHhcNMjUwNjEzMDI1MjE4WhcNMjUwNjIwMDI1MjE4WjAYMRYwFAYD VQQDEw02ODRiOTI2Mi00YWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQksyLfKPpmMolw0ikc3+sic0Pml+ziu0ChsNMXrrrlGGyOL4LV9BOLtb/eu EBQT1f2ghaYQyCtfFpcVTeS5WwBN7ldUeP6bIVV3oaabQlkl9p+Zi8lPn81+ocLr dNOfVxkC6//OAiVpHA9NfCU6ohRlK9a8/GOBZw7GlqxVnMmziSWpYft/7m7Kgm+0 daUaW8fdBoJYwqd/QK2Gf3KoOX90ysw8TcSIVhV/SsmrzIPOjBXQa/E4LbvShlQI FL4yD0flyDmPRTouuVSfX/xI14cqz0VzrZXHoW/+G3YrYPZBQwEbkAl+kJX59wOj Ki8TZY+wWY/zpQekDUccR8xBoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClxr2Fz uxDK8ChN+thQTd057xDwMB8GA1UdIwQYMBaAFJHipJcDOY+yAKwOn6R2aRXXS/nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZFNC9BQkU3RTA1NjFF MEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3SUFyQTZmcEhacEZkZEwt ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlS2tsd001ajdJQXJBNmZwSFpwRmRkTC1lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDZFNC9BQkU3RTA1NjFFMEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3 SUFyQTZmcEhacEZkZEwtZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFW3vv5H5S4FDuEb1nziSMLdwr3PCTQfJOAljM+9tuJgQFwwIW+eOI xbblgZHs/yeNSk0CzG+GfCAc0QMlQc5EXc7OAvNOrHfwVQjek/b6dRHH3iJqW/yU nWNIyywYo1HVgsLu6Ze/ylPqbLOG6Qzfr7IBefpE2flje3C0+g3jQsNRTheXowye 2CAdsGxYV8tiNsISmyfL6UneXtQDYVYAswlgnG7bkfoU6LRtlY9VwRgNqHJBXuCn k8dyErm+vFvTtaRTN0cbf0+Q8HWm/IvMei8JrSnfGikwjqEQgvb+xOZvQuPZUIrf 6UjLViLww/StlCvlf6/8XWF3Isz+GUok -----END CERTIFICATE-----Generated at Sat Jun 14 19:00:05 2025 by rpki-client