$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json) Hash identifier: KT/mvGxUMts5Y5rxUwklyahYRT3NpcIJDbSgCSJyRt4= Subject key identifier: 2E:D6:CA:D6:B6:B4:DF:43:9D:D6:58:93:14:9C:05:8A:72:CC:07:AD Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Certificate serial: 03F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft Manifest number: 03ED Signing time: Sun 15 Jun 2025 00:14:57 +0000 Manifest this update: Sun 15 Jun 2025 00:14:57 +0000 Manifest next update: Sun 22 Jun 2025 00:14:57 +0000 Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: UVrVI/TEa/5cCCA4x3AJDmwv5WG8ZUBhciMWnVy4NDI=) 2: A5621F3480EA11EC9B13735BC4F9AE02.roa (hash: 8vDL+87ujwmt0cTUprGHDVqUcQ7iOWe78XinpUQSTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1015 (0x3f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCFE, serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Validity Not Before: Jun 15 00:14:57 2025 GMT Not After : Jun 22 00:14:57 2025 GMT Subject: CN=684e1081-8363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:5a:3c:11:20:45:e2:21:3d:0a:a4:43:9d: 39:d9:7f:54:58:29:d4:8f:d4:e3:0e:f7:f0:b0:b0: 36:43:c8:62:fa:7a:c7:ce:d3:fe:6f:29:a6:6d:71: 97:6c:0c:ea:35:cf:c2:b2:2d:d1:61:f0:99:43:0b: 77:09:95:bd:a6:69:ab:73:26:80:91:7e:3e:9c:b4: 97:7f:9b:ef:07:1a:f9:c9:3e:f4:6b:04:85:a5:81: 34:7d:f1:76:cb:05:f7:17:41:3a:a7:39:7f:40:27: 84:db:1c:09:38:a9:92:b0:84:b4:82:43:4c:ca:f5: a6:30:a9:e8:b9:8a:0e:3f:66:6b:1a:31:03:09:8b: 12:85:47:63:54:2b:52:c5:07:51:9c:9f:5f:bb:fb: 11:d7:a4:3a:85:45:42:26:a2:e7:71:f1:0a:ce:18: ca:db:3d:82:13:5f:75:c4:ab:9b:e5:81:cd:a0:6d: 41:8d:6c:15:cc:ba:bd:41:ba:ec:ed:cd:05:01:6e: 61:f9:72:b2:5d:1b:4e:37:5f:df:1f:c7:1e:ca:f7: ed:6e:25:53:33:c0:4b:0f:4b:78:28:4a:4c:85:84: ac:e1:8a:ec:f4:44:f9:61:e6:33:5f:f4:f7:4d:61: 96:e8:b8:50:f0:5c:2e:c6:95:8e:76:ee:bc:5a:9e: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D6:CA:D6:B6:B4:DF:43:9D:D6:58:93:14:9C:05:8A:72:CC:07:AD X509v3 Authority Key Identifier: keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:8e:26:78:d3:9a:64:f6:97:35:52:9e:2d:e4:99:f3:ff:76: 8e:b4:b9:a4:b7:32:84:b2:73:b1:fb:0d:67:a9:73:bb:27:4f: 1e:81:31:93:f3:cf:e3:bb:a9:b4:c2:32:4a:c4:aa:43:34:cb: 33:41:1d:85:90:11:f5:1b:75:d2:1d:b8:ac:8f:ba:6d:ab:3c: 95:ba:0d:0b:2f:96:e5:5b:ea:f4:da:aa:d0:b2:4f:5c:aa:1d: 1d:43:f6:1b:15:30:5f:b8:bb:df:19:f2:2b:84:b0:0c:2e:93: 2d:fa:a0:9e:21:6e:cc:31:85:c3:42:af:25:c5:ef:37:9b:f6: 0b:e5:ca:4f:1e:a5:e3:67:5d:2d:5f:99:b7:1f:a8:85:bb:12: 0e:42:29:fa:2c:bb:99:1d:18:4d:51:72:8c:6b:11:c0:c1:85: 62:99:cf:80:45:9c:68:ab:8f:8f:d9:e3:6a:73:81:3f:fc:98: ca:f7:cc:68:65:96:9f:07:de:13:af:ce:a6:9e:c1:7f:52:84: 63:84:ed:d9:eb:f6:d4:c7:10:f5:f3:1a:06:12:15:a1:97:71: 88:33:9c:6b:8e:03:37:5f:7a:50:4e:50:34:03:05:0c:c7:e9: 7d:2d:5b:09:b0:d2:fe:28:bc:53:22:24:31:91:2a:3e:d4:40: 3d:14:aa:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG OTNBNTIzMzQwHhcNMjUwNjE1MDAxNDU3WhcNMjUwNjIyMDAxNDU3WjAYMRYwFAYD VQQDEw02ODRlMTA4MS04MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBxaPBEgReIhPQqkQ5052X9UWCnUj9TjDvfwsLA2Q8hi+nrHztP+bymmbXGX bAzqNc/Csi3RYfCZQwt3CZW9pmmrcyaAkX4+nLSXf5vvBxr5yT70awSFpYE0ffF2 ywX3F0E6pzl/QCeE2xwJOKmSsIS0gkNMyvWmMKnouYoOP2ZrGjEDCYsShUdjVCtS xQdRnJ9fu/sR16Q6hUVCJqLncfEKzhjK2z2CE191xKub5YHNoG1BjWwVzLq9Qbrs 7c0FAW5h+XKyXRtON1/fH8ceyvftbiVTM8BLD0t4KEpMhYSs4Yrs9ET5YeYzX/T3 TWGW6LhQ8FwuxpWOdu68Wp61nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7Wyta2 tN9DndZYkxScBYpyzAetMB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGRS85NjUwNUIyNDgwRTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3Fk LUo4TWd4akR6VVg1T2xJelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+jiZ405pk9pc1Up4t5Jnz/3aOtLmktzKEsnOx+w1nqXO7J08egTGT 88/ju6m0wjJKxKpDNMszQR2FkBH1G3XSHbisj7ptqzyVug0LL5blW+r02qrQsk9c qh0dQ/YbFTBfuLvfGfIrhLAMLpMt+qCeIW7MMYXDQq8lxe83m/YL5cpPHqXjZ10t X5m3H6iFuxIOQin6LLuZHRhNUXKMaxHAwYVimc+ARZxoq4+P2eNqc4E//JjK98xo ZZafB94Tr86mnsF/UoRjhO3Z6/bUxxD18xoGEhWhl3GIM5xrjgM3X3pQTlA0AwUM x+l9LVsJsNL+KLxTIiQxkSo+1EA9FKrY -----END CERTIFICATE-----Generated at Sun Jun 15 09:35:35 2025 by rpki-client