$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: +1raIm/iorHNxjQ3VgWrJI5hklI63hjfplh2fjVeXzc= Subject key identifier: 05:A3:09:09:25:ED:57:96:31:BA:78:FE:3E:E9:5B:F3:CF:7A:DA:53 Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: 09 Signing time: Tue 01 Jul 2025 08:57:11 +0000 Manifest this update: Tue 01 Jul 2025 08:57:11 +0000 Manifest next update: Tue 08 Jul 2025 08:57:11 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: kMHh1EWmV5dOmOFCAh5JvSRtA0jYvjwUsmSj1lxoF6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Jul 1 08:57:11 2025 GMT Not After : Jul 8 08:57:11 2025 GMT Subject: CN=6863a2e7-4ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:8d:74:7e:8f:b6:71:cb:c0:f3:85:1b:ba: 41:e3:9f:3a:bf:1a:b3:b9:65:87:e5:81:0f:a0:e4: c3:bf:82:ae:48:b0:d6:ff:d5:79:8c:e2:7c:f4:53: 98:91:c0:cb:a0:8f:ea:02:de:9d:93:30:e6:61:40: 44:1f:7a:68:72:60:76:91:0e:5f:3d:41:2e:ab:71: 8f:54:e3:0d:4c:a0:f2:d4:47:aa:d0:88:d2:a6:2e: 8c:7c:49:e0:5c:2e:7f:c8:5e:56:10:b2:ed:4d:46: 44:b1:2e:a6:b1:33:e7:0a:0d:73:27:9f:6d:10:a4: 16:01:da:7c:f4:bc:d0:ed:a3:d9:1e:d1:f5:1a:d3: c4:89:f5:f3:82:52:a8:a1:57:2b:11:3d:9d:c4:6b: 65:6e:77:c4:6e:e2:14:15:26:32:63:a7:24:8c:8e: da:52:d2:43:68:81:cb:84:73:c5:1f:ae:ec:40:95: e6:ef:52:6b:2e:44:6e:62:91:7f:a5:57:4b:71:06: 2c:9f:a8:7e:4e:c5:b4:4a:de:bc:f0:36:f7:a9:bd: 44:d0:f4:08:0d:c4:35:f6:f6:37:73:6b:9b:a8:f4: 0c:02:af:37:ca:f2:cf:37:59:6e:9f:50:d6:22:c2: 7c:69:2b:9b:dc:b2:9d:76:2e:45:33:06:be:e9:ec: c6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A3:09:09:25:ED:57:96:31:BA:78:FE:3E:E9:5B:F3:CF:7A:DA:53 X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4e:94:21:51:53:80:4c:95:df:ed:53:92:f8:36:ef:d7:86: 93:e0:a7:e3:e7:14:8d:30:75:57:bf:e8:c1:c6:c5:8c:48:f3: e5:67:a2:d8:98:b3:96:d5:f2:ad:55:a5:82:c7:8e:bf:c8:43: 12:20:53:ae:b0:0f:71:ac:b0:f7:89:0e:12:f4:df:ca:40:9e: 36:e7:0e:d0:2e:05:01:ac:29:59:dd:ba:a6:40:bc:60:46:78: 99:0e:d1:d8:c5:30:88:63:9a:c3:a4:95:6e:d7:01:f3:b0:7c: f9:4a:4b:0a:3f:e7:30:77:82:e5:70:02:a4:68:eb:c7:a6:06: 64:b7:a5:ce:a5:eb:13:d0:72:93:32:4c:79:12:9c:66:ea:4a: 93:9f:12:9a:2b:6b:19:28:e7:b9:53:df:b6:f1:b7:90:d2:99: df:99:a7:17:7f:e8:70:21:63:36:c5:79:6a:17:7f:d8:d3:2e: d8:75:ad:d3:eb:c8:c4:3f:47:a7:49:d7:80:73:7a:7e:be:23: 07:16:bb:a9:18:ec:90:4c:3e:9f:4b:34:cd:36:0a:eb:69:ad: d4:50:a1:74:d0:37:e4:75:e8:42:53:80:ee:bb:54:0f:21:25: a5:7a:7b:a5:da:90:8b:72:5f:ce:79:f6:30:fa:da:3b:b6:e2: 85:07:c4:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTNBNTExMC8GA1UEBRMoOTAyMUJFRkYzQjYzRUU3MjQ4QjkwRERBQTVEREJGQTdF MzEyMUNEOTAeFw0yNTA3MDEwODU3MTFaFw0yNTA3MDgwODU3MTFaMBgxFjAUBgNV BAMTDTY4NjNhMmU3LTRjZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCth410fo+2ccvA84UbukHjnzq/GrO5ZYflgQ+g5MO/gq5IsNb/1XmM4nz0U5iR wMugj+oC3p2TMOZhQEQfemhyYHaRDl89QS6rcY9U4w1MoPLUR6rQiNKmLox8SeBc Ln/IXlYQsu1NRkSxLqaxM+cKDXMnn20QpBYB2nz0vNDto9ke0fUa08SJ9fOCUqih VysRPZ3Ea2Vud8Ru4hQVJjJjpySMjtpS0kNogcuEc8UfruxAlebvUmsuRG5ikX+l V0txBiyfqH5OxbRK3rzwNvepvUTQ9AgNxDX29jdza5uo9AwCrzfK8s83WW6fUNYi wnxpK5vcsp12LkUzBr7p7MatAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBaMJCSXt V5Yxunj+Pulb88962lMwHwYDVR0jBBgwFoAUkCG+/ztj7nJIuQ3apd2/p+MSHNkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExM0E1L0U1N0YzNTkyNEI3 NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hO ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0NHLV96dGo3bkpJdVEzYXBkMl9wLU1TSE5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx M0E1L0U1N0YzNTkyNEI3NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25K SXVRM2FwZDJfcC1NU0hOay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ1OlCFRU4BMld/tU5L4Nu/XhpPgp+PnFI0wdVe/6MHGxYxI8+VnotiY s5bV8q1VpYLHjr/IQxIgU66wD3GssPeJDhL038pAnjbnDtAuBQGsKVnduqZAvGBG eJkO0djFMIhjmsOklW7XAfOwfPlKSwo/5zB3guVwAqRo68emBmS3pc6l6xPQcpMy THkSnGbqSpOfEporaxko57lT37bxt5DSmd+Zpxd/6HAhYzbFeWoXf9jTLth1rdPr yMQ/R6dJ14Bzen6+IwcWu6kY7JBMPp9LNM02CutprdRQoXTQN+R16EJTgO67VA8h JaV6e6XakItyX8559jD62ju24oUHxEo= -----END CERTIFICATE-----Generated at Wed Jul 2 02:08:23 2025 by rpki-client