$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json) Hash identifier: UnoRIaq0oP+PoI2zSRbCwrTgqisWxUnRzOD//mMheP4= Subject key identifier: 58:8C:33:B6:E5:E3:C4:C2:EE:12:6F:AB:99:98:06:5A:35:94:EA:4C Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft Manifest number: 349C Signing time: Sun 20 Jul 2025 15:20:31 +0000 Manifest this update: Sun 20 Jul 2025 15:20:30 +0000 Manifest next update: Sun 27 Jul 2025 15:20:30 +0000 Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: UXeUoacN96TRqUS4CX20ol8DLJZ9afYNYlw1OImTqGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Validity Not Before: Jul 20 15:20:30 2025 GMT Not After : Jul 27 15:20:30 2025 GMT Subject: CN=687d093f-1172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:24:d3:e0:81:83:56:72:05:82:34:07:cc:bb: 64:94:9d:0f:ae:84:16:8e:5e:f8:61:3e:5b:d7:5b: a0:ee:88:59:0b:c5:b9:e9:7d:f1:49:8a:c5:cd:78: 10:83:6c:87:e6:ee:37:f6:68:ee:32:a0:90:2b:7a: 2d:41:25:a4:f8:d2:eb:18:86:bf:f8:c3:24:f9:c5: 08:19:ba:21:eb:eb:86:13:31:c9:ba:b6:fa:07:37: 1c:d3:b1:21:a6:3c:07:5a:2b:01:6a:cf:b6:ab:b6: 92:97:86:e7:37:42:f4:ad:ff:a1:25:92:61:47:4d: 5f:9a:9a:ed:e2:79:b6:e8:31:58:42:39:cc:d0:a5: 48:2c:13:1f:fa:97:fa:17:6e:a5:c5:df:cc:67:db: b0:fa:99:d6:0b:a8:9b:32:bb:9d:34:d0:0f:1d:7b: 89:7d:ff:be:59:3c:5d:54:6f:53:e4:f0:b3:62:92: 2f:42:ef:8a:89:be:6b:be:f9:c9:d5:1b:e1:6e:84: 3e:f3:01:b0:33:93:b0:62:67:9c:3f:ed:01:9c:c3: e1:2d:6c:09:c0:e9:9f:32:8d:b6:da:7e:c8:ff:85: 4a:d6:b3:2a:2a:e4:76:ac:49:6a:3e:55:7f:dd:11: 9b:92:cf:f6:4b:f0:c7:70:f2:b0:7c:ce:86:93:93: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:33:B6:E5:E3:C4:C2:EE:12:6F:AB:99:98:06:5A:35:94:EA:4C X509v3 Authority Key Identifier: keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:13:98:22:02:3b:85:a7:4d:16:fc:f6:0c:b2:16:e0:45:b7: 51:36:93:51:16:0c:d9:54:bc:56:9b:57:df:ce:88:ff:3a:1e: 00:60:36:f6:b4:a0:21:70:2b:ee:b3:ee:bf:3f:7c:59:93:43: 4d:fc:f9:0b:37:5d:c5:36:24:99:d3:48:09:88:78:ce:9b:39: 2d:a8:93:27:4f:51:01:03:33:b3:55:15:74:a1:a0:58:45:05: d1:df:87:1f:0f:b3:dc:67:d0:a5:01:aa:0e:3c:2d:cf:b5:99: ac:40:89:ed:43:36:bb:f1:f2:51:e6:54:10:c5:7a:61:0a:75: 1f:0f:72:64:af:62:5b:20:c9:84:28:58:f5:eb:14:ec:13:4f: 67:cf:e5:8e:4c:59:5a:2c:88:79:9e:12:0a:85:d8:57:19:b6: 1d:d6:a4:4c:cb:8f:91:87:a8:50:c5:e1:9b:69:9a:0c:0f:46: 2a:39:65:f8:80:c5:27:98:9e:4d:ae:65:c5:30:bc:08:29:5e: 11:83:41:ae:44:70:df:f4:1e:c3:67:57:fc:e3:7e:26:20:3e: 07:0b:3e:b3:d1:3b:97:01:6c:14:34:49:52:c4:84:d9:39:50: 8b:ba:0a:6d:2c:ee:ec:a0:1c:88:22:ec:aa:6a:15:9f:39:45: 1d:5d:a6:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG NTQwNjEwODIwHhcNMjUwNzIwMTUyMDMwWhcNMjUwNzI3MTUyMDMwWjAYMRYwFAYD VQQDEw02ODdkMDkzZi0xMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlyTT4IGDVnIFgjQHzLtklJ0ProQWjl74YT5b11ug7ohZC8W56X3xSYrFzXgQ g2yH5u439mjuMqCQK3otQSWk+NLrGIa/+MMk+cUIGboh6+uGEzHJurb6Bzcc07Eh pjwHWisBas+2q7aSl4bnN0L0rf+hJZJhR01fmprt4nm26DFYQjnM0KVILBMf+pf6 F26lxd/MZ9uw+pnWC6ibMrudNNAPHXuJff++WTxdVG9T5PCzYpIvQu+Kib5rvvnJ 1RvhboQ+8wGwM5OwYmecP+0BnMPhLWwJwOmfMo222n7I/4VK1rMqKuR2rElqPlV/ 3RGbks/2S/DHcPKwfM6Gk5OOzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiMM7bl 48TC7hJvq5mYBlo1lOpMMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJE5giAjuFp00W/PYMshbgRbdRNpNRFgzZVLxWm1ffzoj/Oh4AYDb2 tKAhcCvus+6/P3xZk0NN/PkLN13FNiSZ00gJiHjOmzktqJMnT1EBAzOzVRV0oaBY RQXR34cfD7PcZ9ClAaoOPC3PtZmsQIntQza78fJR5lQQxXphCnUfD3Jkr2JbIMmE KFj16xTsE09nz+WOTFlaLIh5nhIKhdhXGbYd1qRMy4+Rh6hQxeGbaZoMD0YqOWX4 gMUnmJ5NrmXFMLwIKV4Rg0GuRHDf9B7DZ1f8434mID4HCz6z0TuXAWwUNElSxITZ OVCLugptLO7soByIIuyqahWfOUUdXabS -----END CERTIFICATE-----Generated at Mon Jul 21 05:49:01 2025 by rpki-client