$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: s/m3JjjiNgqTAbaNWgaWRgfftzA+MxD8JlpltzOlaSA= Subject key identifier: 4D:4E:AF:38:30:F7:36:D2:30:A5:07:E8:6C:1C:1A:B4:82:6F:E2:F2 Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 25 Signing time: Tue 03 Jun 2025 07:42:20 +0000 Manifest this update: Tue 03 Jun 2025 07:42:19 +0000 Manifest next update: Tue 10 Jun 2025 07:42:19 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: p69+4ngvJBOSZNCdhB4xWZWxsoH9BewFzMq2Q3rjtLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: Jun 3 07:42:19 2025 GMT Not After : Jun 10 07:42:19 2025 GMT Subject: CN=683ea75b-8eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:8b:59:f5:aa:53:15:ab:ab:d2:92:dd:42: e1:4c:ad:03:d4:31:45:b2:3c:9c:bd:58:3f:5d:5b: 44:b5:4f:c7:c0:65:4f:b5:f7:18:7f:a7:e8:3f:bf: fa:84:7a:01:33:e6:ca:b9:34:63:23:f9:d4:9c:95: c4:c8:14:23:cf:73:44:1e:4e:21:bb:4c:8b:74:5b: 19:f2:ed:70:0a:f7:1e:eb:45:9a:c0:3f:63:33:c7: 60:5d:f1:a1:66:20:9a:c4:a6:a1:35:20:f4:ac:57: ba:19:ad:85:44:db:90:bb:90:47:76:ca:bd:aa:0e: 95:9d:41:ee:25:31:cb:ea:4a:7d:f1:00:8c:64:00: 5c:35:23:eb:cd:df:aa:c6:7b:33:d7:ee:16:72:d8: 9e:15:72:3a:60:8f:f1:14:62:64:b3:05:6a:b8:03: 79:07:08:80:40:84:15:6c:a8:66:70:29:c1:db:e2: 2a:7d:9e:17:8e:ca:25:77:5a:1c:bd:c3:69:09:9c: 17:5d:04:72:0d:75:9d:75:ea:22:cf:12:86:b7:af: 55:32:a6:da:54:78:41:cf:eb:03:cb:64:49:6b:61: fd:34:07:ce:0a:46:a6:36:e4:07:bc:77:63:34:97: b5:87:f6:e8:e4:68:80:1e:a2:44:eb:8a:c4:46:dc: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4E:AF:38:30:F7:36:D2:30:A5:07:E8:6C:1C:1A:B4:82:6F:E2:F2 X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b6:94:00:59:58:7b:a5:64:1d:60:28:fd:aa:26:db:70:4e: c0:5a:7f:b4:8e:b7:e7:34:c7:44:f2:b5:2b:4e:50:43:f5:9b: ac:6a:69:53:92:b0:fe:1f:73:b0:d4:8d:a7:90:e6:2b:23:fe: 1e:95:95:48:42:91:39:8a:ed:6e:0f:e9:20:8a:be:f7:0b:d6: 81:7a:2e:cc:14:ac:79:13:25:86:99:ca:ab:95:b0:75:42:24: 02:08:46:e6:43:ea:e6:c0:ee:4d:1b:50:5a:ff:26:9b:1e:0c: 86:14:6d:92:66:15:1b:89:30:b6:c4:19:ec:78:f4:8a:df:ba: c4:64:a8:6d:c6:91:73:0c:5c:b9:58:94:5d:1a:84:8a:6a:28: 58:3e:f7:05:0c:f4:9e:4f:fb:3a:e2:c0:6a:40:3f:ed:3a:3f: 94:91:e4:a0:ab:63:c2:54:3f:e7:c4:1b:1e:03:9c:cc:67:e0: 4a:0b:e5:4a:f4:6e:15:6e:ff:69:05:50:09:e9:24:33:29:c6: c3:18:08:d5:46:d2:3d:c7:15:5e:f7:00:d1:45:9d:84:19:28: cb:ec:11:33:8f:03:ae:33:87:6f:22:b7:8d:bf:79:3f:b1:4b: 3a:e7:1e:8f:ee:8a:6d:b7:0b:1f:24:d9:43:fb:c7:de:df:25: 3c:f8:89:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoOTIwRTdEMDkxRjE1NTY5RjJEODM0MEM2NTgyQjk1OTVF QzA2NTY4MDAeFw0yNTA2MDMwNzQyMTlaFw0yNTA2MTAwNzQyMTlaMBgxFjAUBgNV BAMTDTY4M2VhNzViLThlY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaaItZ9apTFaur0pLdQuFMrQPUMUWyPJy9WD9dW0S1T8fAZU+19xh/p+g/v/qE egEz5sq5NGMj+dSclcTIFCPPc0QeTiG7TIt0Wxny7XAK9x7rRZrAP2Mzx2Bd8aFm IJrEpqE1IPSsV7oZrYVE25C7kEd2yr2qDpWdQe4lMcvqSn3xAIxkAFw1I+vN36rG ezPX7hZy2J4Vcjpgj/EUYmSzBWq4A3kHCIBAhBVsqGZwKcHb4ip9nheOyiV3Why9 w2kJnBddBHINdZ116iLPEoa3r1UyptpUeEHP6wPLZElrYf00B84KRqY25Ae8d2M0 l7WH9ujkaIAeokTrisRG3FvVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTU6vODD3 NtIwpQfobBwatIJv4vIwHwYDVR0jBBgwFoAUkg59CR8VVp8tg0DGWCuVlewGVoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0YxQzc0NDdFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1Zv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2c1OUNSOFZWcDh0ZzBER1dDdVZsZXdHVm9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0YxQzc0NDdFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4 dGcwREdXQ3VWbGV3R1ZvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFS2lABZWHulZB1gKP2qJttwTsBaf7SOt+c0x0TytStOUEP1m6xqaVOS sP4fc7DUjaeQ5isj/h6VlUhCkTmK7W4P6SCKvvcL1oF6LswUrHkTJYaZyquVsHVC JAIIRuZD6ubA7k0bUFr/JpseDIYUbZJmFRuJMLbEGex49IrfusRkqG3GkXMMXLlY lF0ahIpqKFg+9wUM9J5P+zriwGpAP+06P5SR5KCrY8JUP+fEGx4DnMxn4EoL5Ur0 bhVu/2kFUAnpJDMpxsMYCNVG0j3HFV73ANFFnYQZKMvsETOPA64zh28it42/eT+x SzrnHo/uim23Cx8k2UP7x97fJTz4iYs= -----END CERTIFICATE-----Generated at Wed Jun 4 00:13:23 2025 by rpki-client