$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json) Hash identifier: eb6NfenLpxQs6wArG245xlXXo9cC1eUmZOssGeowveI= Subject key identifier: 37:7A:50:37:84:7A:01:51:22:30:68:C6:D2:9D:FB:04:81:51:02:62 Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Certificate serial: 06C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft Manifest number: 06BC Signing time: Fri 30 May 2025 22:21:23 +0000 Manifest this update: Fri 30 May 2025 22:21:22 +0000 Manifest next update: Fri 06 Jun 2025 22:21:22 +0000 Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: ntqJbdU6sD36kcdjjc0MJjelYEg3DJ6Eo5vuLy9fXT0=) 2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vMhYeDmA4rQgDzWKujwjU7tw9Dx++6v75EIl46gAbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Validity Not Before: May 30 22:21:22 2025 GMT Not After : Jun 6 22:21:22 2025 GMT Subject: CN=683a2f62-94f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:2f:db:1f:ce:14:56:a1:62:51:00:f4:2e: 07:fc:18:0b:99:34:3e:0f:cf:43:35:00:bd:89:03: 63:86:54:5f:7c:42:a7:e7:d7:c4:e3:46:d2:f9:f7: 74:b6:73:d8:cc:e9:aa:3a:8a:ca:9b:a4:bc:f8:e6: 0f:3a:cf:32:f9:b2:84:ae:b8:28:36:ae:29:5f:b5: ab:d8:32:ea:52:e0:20:b6:f6:7d:94:e8:02:8f:a3: 7b:28:88:25:08:f4:39:80:a6:25:d7:85:e0:a1:5b: 2c:8f:15:45:5c:57:ff:3f:0d:37:de:78:d8:e1:3d: 1f:da:98:34:a6:90:9e:f3:f0:e7:67:8e:c4:14:30: b2:32:c7:38:c9:bb:74:da:5f:40:4b:fd:f7:50:ee: fa:4e:75:c1:7f:f7:8f:79:75:b6:ca:28:23:3e:d6: c9:df:a3:5e:ec:38:94:e5:dd:67:06:e5:a2:c2:44: 12:98:10:80:73:82:65:ff:da:c4:d7:8b:86:d2:63: 5d:33:68:80:30:2b:dc:7d:e8:68:2f:a6:73:59:f7: 3b:5e:16:75:05:35:6e:12:af:f7:86:c0:87:92:e6: 7e:17:a0:fd:6a:35:1d:2c:13:09:18:ef:d1:65:49: 21:87:33:56:b5:48:e2:53:25:fb:07:30:24:70:36: b1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7A:50:37:84:7A:01:51:22:30:68:C6:D2:9D:FB:04:81:51:02:62 X509v3 Authority Key Identifier: keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1e:ba:06:04:7c:76:c1:15:9a:83:30:2b:e0:9d:44:96:97: b8:90:3b:b8:f6:c2:57:59:79:b6:97:df:e1:9f:43:6d:27:72: dc:b7:fe:c1:f5:75:cf:3d:6e:62:5c:c9:89:aa:1e:e9:c1:0e: c5:9b:75:a7:28:2b:53:a6:42:f7:22:82:c1:5e:f9:bc:51:9f: cd:0b:2c:48:32:f7:a9:c0:23:0b:59:38:c0:e2:91:ac:d9:a3: 06:b7:06:b9:a1:ee:e9:31:8a:2b:3b:40:d4:65:ca:54:43:e5: aa:8f:7b:99:39:88:c5:94:1d:65:23:b8:01:ce:95:fe:7d:ca: c6:37:41:de:bf:db:d1:0f:7b:f8:d0:b2:30:28:6b:95:ca:4b: dd:73:d1:89:44:51:63:6c:61:2c:33:7b:aa:b5:10:68:ff:2a: e4:7c:a3:cf:da:97:cf:8d:20:c2:7b:6b:d8:a6:ac:57:d2:39: e6:57:9c:d7:91:31:83:32:e8:76:d2:5a:fb:b5:0f:6a:75:c3: dc:61:c4:93:8e:09:46:5e:ee:4a:59:2d:a1:fd:73:f3:f7:84: c0:de:80:f1:4f:1e:09:b6:72:46:10:f2:c9:17:55:12:5f:ed: d3:12:53:ba:80:1d:72:7c:62:df:14:cf:75:34:d3:95:f7:d7: 6e:d7:3b:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1RkIxMTAvBgNVBAUTKDkxN0E5RjdBQTIyODFCMTlGOTQ3NDIzRTk4NjEyQjFG NjNEMTdFMEUwHhcNMjUwNTMwMjIyMTIyWhcNMjUwNjA2MjIyMTIyWjAYMRYwFAYD VQQDEw02ODNhMmY2Mi05NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmv4v2x/OFFahYlEA9C4H/BgLmTQ+D89DNQC9iQNjhlRffEKn59fE40bS+fd0 tnPYzOmqOorKm6S8+OYPOs8y+bKErrgoNq4pX7Wr2DLqUuAgtvZ9lOgCj6N7KIgl CPQ5gKYl14XgoVssjxVFXFf/Pw033njY4T0f2pg0ppCe8/DnZ47EFDCyMsc4ybt0 2l9AS/33UO76TnXBf/ePeXW2yigjPtbJ36Ne7DiU5d1nBuWiwkQSmBCAc4Jl/9rE 14uG0mNdM2iAMCvcfehoL6ZzWfc7XhZ1BTVuEq/3hsCHkuZ+F6D9ajUdLBMJGO/R ZUkhhzNWtUjiUyX7BzAkcDaxUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd6UDeE egFRIjBoxtKd+wSBUQJiMB8GA1UdIwQYMBaAFJF6n3qiKBsZ+UdCPphhKx9j0X4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzVGQi82QzI5NkQzQTYx NDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4bjVSMEktbUdFckgyUFJm ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tYcWZlcUlvR3huNVIwSS1tR0VySDJQUmZnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzVGQi82QzI5NkQzQTYxNDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4 bjVSMEktbUdFckgyUFJmZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9HroGBHx2wRWagzAr4J1Elpe4kDu49sJXWXm2l9/hn0NtJ3Lct/7B 9XXPPW5iXMmJqh7pwQ7Fm3WnKCtTpkL3IoLBXvm8UZ/NCyxIMvepwCMLWTjA4pGs 2aMGtwa5oe7pMYorO0DUZcpUQ+Wqj3uZOYjFlB1lI7gBzpX+fcrGN0Hev9vRD3v4 0LIwKGuVykvdc9GJRFFjbGEsM3uqtRBo/yrkfKPP2pfPjSDCe2vYpqxX0jnmV5zX kTGDMuh20lr7tQ9qdcPcYcSTjglGXu5KWS2h/XPz94TA3oDxTx4JtnJGEPLJF1US X+3TElO6gB1yfGLfFM91NNOV99du1zsf -----END CERTIFICATE-----Generated at Sat May 31 16:43:54 2025 by rpki-client