$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft File: kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json) Hash identifier: d9WDpT8kbTDo0tVnNVDxzVzKqrY2o2kmYUxYNxro5n4= Subject key identifier: 5A:86:18:4C:C9:95:B1:EC:2F:B1:44:FC:E3:DD:5D:BF:F1:0F:F7:49 Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 Certificate issuer: /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft Manifest number: 0467 Signing time: Sat 19 Jul 2025 00:31:08 +0000 Manifest this update: Sat 19 Jul 2025 00:31:08 +0000 Manifest next update: Sat 26 Jul 2025 00:31:08 +0000 Files and hashes: 1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: uO0PB+AkM5B3vcNmPlyLDjkrnw9JXGdA45vU96JOpeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Validity Not Before: Jul 19 00:31:08 2025 GMT Not After : Jul 26 00:31:08 2025 GMT Subject: CN=687ae74c-fae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:52:bb:e4:32:d4:89:08:57:d8:eb:66:12: c4:e5:75:b2:5d:01:cf:bf:c5:0b:4c:0f:2b:6d:52: d9:dd:71:05:5a:64:ea:0c:35:39:8b:37:be:5f:2c: 5a:3a:12:fe:ef:1c:54:90:d9:e2:b8:d7:3b:8e:66: 21:be:b1:6d:4d:51:4c:e6:04:64:ad:c9:1d:f4:c4: 43:b7:b8:e0:69:ab:13:36:21:0a:db:50:a2:a2:6d: ae:00:a2:68:30:fd:2b:e6:a2:61:83:87:37:17:b1: ec:da:52:07:10:d8:a9:d3:66:93:74:44:7a:c0:03: c0:69:2b:61:8f:4b:97:22:a2:b9:db:7f:ba:71:3d: 3e:97:72:bb:bf:79:d0:0b:70:f0:da:87:a1:f7:e2: 85:42:2d:99:7a:38:3d:53:57:e8:30:cc:be:e1:aa: 79:bf:26:29:24:d6:44:3a:53:1f:e2:75:d0:ea:46: 3c:4c:0d:3f:a0:8f:fc:a0:4b:13:fb:0b:fc:f5:71: 18:6f:f8:f9:94:6c:e7:66:58:a2:63:58:d0:5e:b3: 14:38:c0:28:29:9e:30:9b:71:c1:6e:98:09:f0:d1: 03:4e:1c:7d:0a:35:c7:ec:46:ee:ec:5c:7e:ee:d2: 6b:d6:2b:ab:63:8f:fc:60:3f:76:7a:08:38:8b:81: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:86:18:4C:C9:95:B1:EC:2F:B1:44:FC:E3:DD:5D:BF:F1:0F:F7:49 X509v3 Authority Key Identifier: keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ee:32:1a:22:19:ce:0c:91:31:ca:43:79:bc:10:fb:b3:4e: dd:df:b6:ee:b8:8b:08:ae:4a:06:f5:5b:e3:3c:50:fb:4f:0a: 18:3b:47:42:46:87:5b:03:0f:a4:af:44:4c:e7:40:2f:98:08: a0:66:a2:74:c7:4a:66:d6:8a:a8:95:8b:b5:13:9b:44:56:ac: 6c:da:33:3f:ef:51:5f:d0:a6:16:11:79:87:a9:7c:b1:9e:9f: 2a:f4:27:02:aa:5e:db:b1:2a:4d:f1:63:b2:90:66:9a:e9:d8: c0:4f:2f:5c:1b:d6:a0:30:b9:97:c8:7e:99:00:e6:90:ce:1a: 8a:31:29:ab:29:42:4a:12:75:2c:61:17:52:a5:7b:6d:6a:78: e5:11:3c:6b:76:f4:6a:a5:8d:17:65:b0:45:44:83:9a:76:4d: 64:67:b9:5d:28:55:91:03:8f:e2:df:fa:86:6c:35:51:d6:79: 42:3e:d5:ec:6c:d1:06:cb:0c:52:b5:f6:fb:2a:67:55:58:6d: 04:99:b1:6d:30:ee:67:8a:26:dc:4f:68:65:39:65:9a:e3:7d: 21:ce:38:c6:3c:57:fd:fb:b5:26:2f:7b:02:50:60:32:58:1f: f5:c8:4d:63:c5:3f:08:3f:52:99:57:13:5c:2c:ec:3d:d8:14: 8d:74:4f:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxMDYxMTAvBgNVBAUTKDkwOTQzRUI4RUFENDRDMzZFREM5OTEwMzFCRkY4OEI4 QUI2NTVBMjkwHhcNMjUwNzE5MDAzMTA4WhcNMjUwNzI2MDAzMTA4WjAYMRYwFAYD VQQDEw02ODdhZTc0Yy1mYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuRSu+Qy1IkIV9jrZhLE5XWyXQHPv8ULTA8rbVLZ3XEFWmTqDDU5ize+Xyxa OhL+7xxUkNniuNc7jmYhvrFtTVFM5gRkrckd9MRDt7jgaasTNiEK21Ciom2uAKJo MP0r5qJhg4c3F7Hs2lIHENip02aTdER6wAPAaSthj0uXIqK523+6cT0+l3K7v3nQ C3Dw2oeh9+KFQi2Zejg9U1foMMy+4ap5vyYpJNZEOlMf4nXQ6kY8TA0/oI/8oEsT +wv89XEYb/j5lGznZliiY1jQXrMUOMAoKZ4wm3HBbpgJ8NEDThx9CjXH7Ebu7Fx+ 7tJr1iurY4/8YD92egg4i4H2YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqGGEzJ lbHsL7FE/OPdXb/xD/dJMB8GA1UdIwQYMBaAFJCUPrjq1Ew27cmRAxv/iLirZVop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTEwNi85NjE3QzA2RTUz NjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVREYnR5WkVER18tSXVLdGxX aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tKUS11T3JVVERidHlaRURHXy1JdUt0bFdpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTEwNi85NjE3QzA2RTUzNjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVRE YnR5WkVER18tSXVLdGxXaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX7jIaIhnODJExykN5vBD7s07d37buuIsIrkoG9VvjPFD7TwoYO0dC RodbAw+kr0RM50AvmAigZqJ0x0pm1oqolYu1E5tEVqxs2jM/71Ff0KYWEXmHqXyx np8q9CcCql7bsSpN8WOykGaa6djATy9cG9agMLmXyH6ZAOaQzhqKMSmrKUJKEnUs YRdSpXttanjlETxrdvRqpY0XZbBFRIOadk1kZ7ldKFWRA4/i3/qGbDVR1nlCPtXs bNEGywxStfb7KmdVWG0EmbFtMO5niibcT2hlOWWa430hzjjGPFf9+7UmL3sCUGAy WB/1yE1jxT8IP1KZVxNcLOw92BSNdE9n -----END CERTIFICATE-----Generated at Sun Jul 20 07:41:47 2025 by rpki-client