$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: Taj85p2GqAGLypuKjJyQOuuUDBjsBBMdb88CCDzLZCY= Subject key identifier: B3:72:D6:7C:58:AF:E6:DD:CE:C8:E7:CE:28:D5:CD:EB:7C:DF:67:77 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 017F Signing time: Sat 31 May 2025 03:31:13 +0000 Manifest this update: Sat 31 May 2025 03:31:12 +0000 Manifest next update: Sat 07 Jun 2025 03:31:12 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: /hwlj4jzzkJfxVHrCJcRF0Hic0/F7MSkt9SRvbRfXe8=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: g1Yxh4X4gr9QP8BwAN2yJktOsO1m01aHRbfwGJbCyik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: May 31 03:31:12 2025 GMT Not After : Jun 7 03:31:12 2025 GMT Subject: CN=683a7800-feb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:76:59:a9:3e:a4:3d:45:15:6f:8c:45:dc: 08:6e:8c:9b:53:19:02:b7:04:19:dc:4e:70:20:7a: 88:03:88:56:fe:0c:6e:db:1c:78:26:35:8d:49:45: ff:be:47:f7:e2:38:e5:ea:cb:bd:d2:f8:6b:59:9d: 08:83:14:b9:36:cf:d1:75:10:77:e5:bd:c5:43:00: 5a:84:8d:94:0a:30:ef:35:56:0b:af:76:f1:a9:35: af:37:dc:3b:46:7c:71:50:6d:4a:86:d6:f8:6f:e7: 66:05:b7:48:99:30:df:e8:6f:eb:27:90:f2:05:2e: 4c:cf:6a:ea:5b:da:d0:6c:2b:d1:3c:01:91:ce:8a: 43:46:9e:37:0b:75:77:10:8b:32:46:d9:b3:b5:46: b3:99:7e:c6:8e:46:98:6b:f9:89:5c:e9:c5:8a:87: 92:28:b3:42:ff:ef:59:3d:76:5c:bc:92:e2:e6:35: 7a:5c:66:30:7b:90:67:da:5c:cb:92:7a:33:71:00: 22:8d:a6:56:82:c2:bc:9f:52:dc:1f:12:6e:5d:2c: f4:d3:d0:11:b1:85:fb:75:f2:36:dd:bf:b4:33:36: 3d:01:e1:57:63:cf:c5:5c:d4:13:06:56:c6:cc:0d: de:6b:28:14:c5:43:c0:15:dd:fe:19:84:a6:21:72: 8f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:72:D6:7C:58:AF:E6:DD:CE:C8:E7:CE:28:D5:CD:EB:7C:DF:67:77 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ee:1f:f7:40:fc:a8:5e:c6:6c:5d:d6:6c:c2:cd:1b:47:ed: 47:37:9a:10:50:21:8f:cb:4f:dc:9d:ba:84:b6:d4:26:df:c0: 67:0b:ff:ef:b9:89:6b:72:0c:70:8f:bb:41:fa:a5:56:b9:fd: aa:f2:64:63:5e:b2:18:3f:f7:ed:29:68:54:f0:9b:57:9a:30: 99:34:39:06:cb:a0:0c:d7:18:8e:31:21:b8:7b:b3:0c:c8:a1: b1:8e:87:19:1f:da:ed:0c:87:b4:2e:bf:cd:38:5c:83:da:1e: 59:65:f5:17:76:17:6c:8c:3e:c6:f6:97:5e:2d:27:17:11:39: e6:fd:1d:60:0e:5b:79:85:07:fd:ff:32:a0:19:71:c7:ce:25: 3c:41:85:70:f8:bd:60:52:bc:14:f9:d2:83:e5:05:81:a3:e5: b8:86:13:e2:c9:1a:f4:23:af:e5:8b:48:2d:cb:49:ef:75:e6: 87:d3:2a:9b:d5:e5:9e:43:98:35:ae:a3:de:ce:06:4d:bd:3c: e8:ed:0d:44:a9:ed:29:a7:f8:c0:01:40:be:7e:eb:32:87:04: c0:a7:ee:41:45:ea:b1:90:bc:9f:9f:07:b3:ff:05:1f:f4:36: 7e:43:61:d7:b1:83:3d:f3:d4:67:2b:9c:7e:bb:7d:f7:e6:1a: 29:7f:2e:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjUwNTMxMDMzMTEyWhcNMjUwNjA3MDMzMTEyWjAYMRYwFAYD VQQDEw02ODNhNzgwMC1mZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI52Wak+pD1FFW+MRdwIboybUxkCtwQZ3E5wIHqIA4hW/gxu2xx4JjWNSUX/ vkf34jjl6su90vhrWZ0IgxS5Ns/RdRB35b3FQwBahI2UCjDvNVYLr3bxqTWvN9w7 RnxxUG1Khtb4b+dmBbdImTDf6G/rJ5DyBS5Mz2rqW9rQbCvRPAGRzopDRp43C3V3 EIsyRtmztUazmX7GjkaYa/mJXOnFioeSKLNC/+9ZPXZcvJLi5jV6XGYwe5Bn2lzL knozcQAijaZWgsK8n1LcHxJuXSz009ARsYX7dfI23b+0MzY9AeFXY8/FXNQTBlbG zA3eaygUxUPAFd3+GYSmIXKPkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNy1nxY r+bdzsjnzijVzet832d3MB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa7h/3QPyoXsZsXdZsws0bR+1HN5oQUCGPy0/cnbqEttQm38BnC//v uYlrcgxwj7tB+qVWuf2q8mRjXrIYP/ftKWhU8JtXmjCZNDkGy6AM1xiOMSG4e7MM yKGxjocZH9rtDIe0Lr/NOFyD2h5ZZfUXdhdsjD7G9pdeLScXETnm/R1gDlt5hQf9 /zKgGXHHziU8QYVw+L1gUrwU+dKD5QWBo+W4hhPiyRr0I6/li0gty0nvdeaH0yqb 1eWeQ5g1rqPezgZNvTzo7Q1Eqe0pp/jAAUC+fusyhwTAp+5BReqxkLyfnwez/wUf 9DZ+Q2HXsYM989RnK5x+u3335hopfy45 -----END CERTIFICATE-----Generated at Sat May 31 16:30:31 2025 by rpki-client