$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: bzM6PHgPXZEm5zbrP8nt9FKrN3I//xvazSZGSUH7IFw= Subject key identifier: 2D:3E:D8:A0:1A:1D:65:5E:81:11:2B:83:C5:B5:18:1E:E0:44:7C:47 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0774 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0764 Signing time: Fri 30 May 2025 21:49:00 +0000 Manifest this update: Fri 30 May 2025 21:48:59 +0000 Manifest next update: Fri 06 Jun 2025 21:48:59 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: epOnNJBx1gAmj3QzlJT9y47bZAuvCUO2Q7Af8NpX358=) 2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: bPVen4Q79bQMysYZB+1SSkGirdnYsj/wax4oaPllL9M=) 3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: U4O6uXSOF+3gB8WDqXNclHvwBePMcUEtPgGRnogD3Pk=) 4: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: EPNFm1X8MnpnhMfq1ASr/F02aUDuHCY7XYN9aoUZxhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1908 (0x774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: May 30 21:48:59 2025 GMT Not After : Jun 6 21:48:59 2025 GMT Subject: CN=683a27cb-8f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:3c:13:47:9b:90:ec:24:65:ec:59:64:c1: 01:c7:b2:f0:dc:5e:0f:04:6a:5f:92:b7:88:be:9d: 82:31:a3:5e:63:d5:a9:eb:10:25:f3:e6:fc:70:7a: ee:0c:b2:5f:37:13:53:4f:24:e7:ed:0e:1c:53:7f: c6:4f:f9:85:7b:58:13:0f:c1:53:f0:fe:18:29:9a: 9d:ce:25:7d:23:14:10:f0:cd:bc:ce:8b:54:16:fc: 63:a6:06:f7:fb:14:9a:9b:f1:f4:45:50:54:9a:3b: 53:c0:0b:f0:6e:6c:4e:f3:f4:6f:f6:08:52:b0:9d: 5e:b1:72:05:4c:44:c7:f8:4c:e2:4e:01:2c:54:a6: a2:84:b5:cc:f9:ca:73:f4:8c:cc:5d:3b:97:94:af: ff:44:fe:84:1e:fb:97:17:28:35:ab:bd:9a:f3:6a: 3e:96:6e:3c:3c:fc:97:98:3b:d0:3c:ec:56:47:77: c7:1a:20:7a:a5:86:5e:55:7f:b1:b3:9d:b3:24:e3: 9b:2a:e0:91:9b:6f:44:be:34:ff:d6:da:4b:54:09: 30:53:0e:0e:5e:4c:67:ee:b1:e5:20:6d:c1:1c:24: eb:29:5a:7b:76:3d:d4:7b:ee:c6:7d:48:e3:d1:0f: de:5a:46:f1:25:78:13:5d:b6:67:6c:a5:d8:e6:17: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3E:D8:A0:1A:1D:65:5E:81:11:2B:83:C5:B5:18:1E:E0:44:7C:47 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:50:79:3d:29:c3:5b:8b:22:6a:83:16:0b:e8:3a:6e:2a:13: 1b:ec:ba:57:9a:24:a1:43:ce:bc:ff:c9:1f:a5:9d:1b:f7:e3: 87:ea:81:fb:a7:05:de:0a:91:46:05:fa:fb:27:98:ae:2f:f9: 2b:3e:15:91:2d:a1:47:ca:9e:2f:0e:2f:18:2b:41:b4:36:45: b6:12:3c:d5:0d:07:63:7a:80:2b:1c:5e:3b:f5:9f:50:99:25: fa:f1:79:70:86:4b:8a:ae:c8:50:e4:4d:35:f7:a6:35:1c:b5: 80:b0:95:a3:6f:e1:48:33:c7:cf:40:c0:b1:99:91:c5:f1:ba: 19:a4:17:df:50:a9:ba:ad:c0:31:82:f4:a9:02:9a:41:b6:4d: af:05:f2:dd:11:29:a5:32:db:1e:c0:71:57:07:df:fb:0a:d3: 7d:38:a0:3c:8f:8b:9e:72:f9:6c:6f:d9:37:36:cb:08:25:3c: bc:ce:0f:ef:60:5b:b9:be:da:f8:32:12:8a:54:c5:12:8d:6e: 43:ff:7c:05:d8:07:71:f2:2e:b5:bb:4f:c0:7f:0d:87:00:ce: ac:d2:01:1c:24:aa:04:27:d9:01:15:0e:15:e3:dd:b2:c0:2a: db:7b:c6:cb:b6:2c:f2:36:c0:cf:3b:c1:9e:dd:5e:26:46:d2: 3d:15:23:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjUwNTMwMjE0ODU5WhcNMjUwNjA2MjE0ODU5WjAYMRYwFAYD VQQDEw02ODNhMjdjYi04Zjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztg8E0ebkOwkZexZZMEBx7Lw3F4PBGpfkreIvp2CMaNeY9Wp6xAl8+b8cHru DLJfNxNTTyTn7Q4cU3/GT/mFe1gTD8FT8P4YKZqdziV9IxQQ8M28zotUFvxjpgb3 +xSam/H0RVBUmjtTwAvwbmxO8/Rv9ghSsJ1esXIFTETH+EziTgEsVKaihLXM+cpz 9IzMXTuXlK//RP6EHvuXFyg1q72a82o+lm48PPyXmDvQPOxWR3fHGiB6pYZeVX+x s52zJOObKuCRm29EvjT/1tpLVAkwUw4OXkxn7rHlIG3BHCTrKVp7dj3Ue+7GfUjj 0Q/eWkbxJXgTXbZnbKXY5hcC2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0+2KAa HWVegRErg8W1GB7gRHxHMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIUHk9KcNbiyJqgxYL6DpuKhMb7LpXmiShQ868/8kfpZ0b9+OH6oH7 pwXeCpFGBfr7J5iuL/krPhWRLaFHyp4vDi8YK0G0NkW2EjzVDQdjeoArHF479Z9Q mSX68XlwhkuKrshQ5E0196Y1HLWAsJWjb+FIM8fPQMCxmZHF8boZpBffUKm6rcAx gvSpAppBtk2vBfLdESmlMtsewHFXB9/7CtN9OKA8j4uecvlsb9k3NssIJTy8zg/v YFu5vtr4MhKKVMUSjW5D/3wF2Adx8i61u0/Afw2HAM6s0gEcJKoEJ9kBFQ4V492y wCrbe8bLtizyNsDPO8Ge3V4mRtI9FSPG -----END CERTIFICATE-----Generated at Sat May 31 17:46:29 2025 by rpki-client