$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: qxSfKF4oHO/akpxbAK0z5GBFhbSFHdOTcv/h6PeYOxk= Subject key identifier: DD:85:7E:23:85:43:9D:56:73:BB:2C:F1:14:72:03:8D:C9:E6:46:50 Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: 74 Signing time: Sat 19 Jul 2025 07:05:45 +0000 Manifest this update: Sat 19 Jul 2025 07:05:44 +0000 Manifest next update: Sat 26 Jul 2025 07:05:44 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: ORIv2+yssiNYmM2+5YUyBt11K+omyV2Kb6rJoMowB6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Jul 19 07:05:44 2025 GMT Not After : Jul 26 07:05:44 2025 GMT Subject: CN=687b43c9-d59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:6b:9c:c2:6f:39:5c:06:7a:45:9c:2b:d2: fe:6c:1e:3f:be:24:f6:2b:0b:a6:8c:ea:f7:22:89: 40:2d:ec:7a:70:bb:71:94:a1:70:97:bd:e2:89:57: bc:09:90:9a:8b:77:3d:18:2e:a6:93:57:2c:39:4e: db:46:88:a6:03:3a:a4:68:d5:bb:eb:9a:1e:77:07: 23:9f:fa:d0:f1:84:bc:77:00:72:a0:41:4f:a0:b7: 92:bf:07:05:77:09:64:74:5e:78:4d:fc:10:05:2e: 8e:67:d6:62:54:71:ba:73:37:72:eb:b9:67:20:ff: 08:77:f2:90:aa:7e:f1:9d:e5:03:7a:ef:e8:d6:b5: 8f:4f:c9:38:d1:66:4c:f7:ec:fe:37:2e:10:e3:25: 2a:0f:88:30:08:b8:73:78:05:2c:62:ee:86:c4:8d: c9:06:34:55:7c:8a:f0:4b:48:5c:92:43:22:b8:8c: 26:cc:75:74:77:73:4d:51:1e:80:51:89:ce:14:a0: 22:6e:87:7a:c9:b0:24:9f:0b:aa:95:fd:fb:89:e3: 50:6a:28:dc:df:f0:32:b6:02:1f:b8:25:af:6f:ec: b4:f9:65:c1:49:ff:98:c9:fe:4b:fd:81:20:a2:71: 0e:21:45:8c:3a:1b:4e:98:5b:70:b1:67:43:42:1d: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:85:7E:23:85:43:9D:56:73:BB:2C:F1:14:72:03:8D:C9:E6:46:50 X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b5:b9:86:34:67:88:39:c8:80:af:ad:49:f9:a5:2e:54:a7: 57:fb:01:eb:14:1a:5b:ad:69:de:f1:44:46:9b:36:2a:f5:ea: f9:4a:ec:02:e4:45:9d:e4:33:a9:4f:92:28:7d:ee:10:43:48: 0e:c5:18:2c:35:ea:a0:40:a0:85:f8:95:c6:54:c9:a6:f0:94: 28:43:0f:7c:55:ee:b3:59:00:87:e4:75:c2:f9:60:42:c8:0b: db:6f:01:e8:c6:89:e3:77:01:a8:04:ff:01:c8:2a:67:f3:77: df:69:6f:24:1f:2d:fd:5d:1a:a9:9c:7a:72:87:88:86:d8:ce: ec:64:fa:e6:94:32:10:87:10:b9:23:85:ba:ac:08:11:bb:e5: c9:9e:b2:23:14:ec:3c:ff:a4:e6:9c:61:d0:74:76:17:9e:06: e2:83:4f:e0:8f:f1:5b:e9:1b:72:68:6c:d0:8b:22:f1:9a:98: 63:8f:65:fd:01:25:74:80:4f:90:18:f3:18:99:01:a8:ba:42: ba:a0:91:0e:1f:45:c7:c9:95:a5:ec:ee:17:fc:37:03:50:4b: b4:1f:75:8a:c2:2e:b3:6e:95:0c:ca:9f:17:03:0a:a7:10:f9: 02:6d:4e:89:3f:7f:a2:df:c2:e7:c8:d7:b5:8e:d5:f9:b3:4b: a6:c3:13:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjZFMzExMC8GA1UEBRMoMkJGMEFFNjc5MEQyRjAxREQxREI2NzM4MzEzMkRDNDAz QjY3NDUyMjAeFw0yNTA3MTkwNzA1NDRaFw0yNTA3MjYwNzA1NDRaMBgxFjAUBgNV BAMTDTY4N2I0M2M5LWQ1OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHcWucwm85XAZ6RZwr0v5sHj++JPYrC6aM6vciiUAt7Hpwu3GUoXCXveKJV7wJ kJqLdz0YLqaTVyw5TttGiKYDOqRo1bvrmh53ByOf+tDxhLx3AHKgQU+gt5K/BwV3 CWR0XnhN/BAFLo5n1mJUcbpzN3LruWcg/wh38pCqfvGd5QN67+jWtY9PyTjRZkz3 7P43LhDjJSoPiDAIuHN4BSxi7obEjckGNFV8ivBLSFySQyK4jCbMdXR3c01RHoBR ic4UoCJuh3rJsCSfC6qV/fuJ41BqKNzf8DK2Ah+4Ja9v7LT5ZcFJ/5jJ/kv9gSCi cQ4hRYw6G06YW3CxZ0NCHRy3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3YV+I4VD nVZzuyzxFHIDjcnmRlAwHwYDVR0jBBgwFoAUK/CuZ5DS8B3R22c4MTLcQDtnRSIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0YyRkI4MjUwQjVE RDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS19DdVo1RFM4QjNSMjJjNE1UTGNRRHRuUlNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NkUzL0YyRkI4MjUwQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIz UjIyYzRNVExjUUR0blJTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALC1uYY0Z4g5yICvrUn5pS5Up1f7AesUGlutad7xREabNir16vlK7ALk RZ3kM6lPkih97hBDSA7FGCw16qBAoIX4lcZUyabwlChDD3xV7rNZAIfkdcL5YELI C9tvAejGieN3AagE/wHIKmfzd99pbyQfLf1dGqmcenKHiIbYzuxk+uaUMhCHELkj hbqsCBG75cmesiMU7Dz/pOacYdB0dheeBuKDT+CP8VvpG3JobNCLIvGamGOPZf0B JXSAT5AY8xiZAai6QrqgkQ4fRcfJlaXs7hf8NwNQS7QfdYrCLrNulQzKnxcDCqcQ +QJtTok/f6LfwufI17WO1fmzS6bDE3E= -----END CERTIFICATE-----Generated at Mon Jul 21 07:05:35 2025 by rpki-client