$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: kMjKjctYuDPXk+CuXzBC6Rmr+/B4/27L1SG//q0KoU8= Subject key identifier: 30:0A:EC:D7:FE:DE:9F:0A:0A:37:3F:35:53:D7:C4:A0:7F:F3:7D:4C Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 061A Signing time: Mon 02 Jun 2025 21:45:07 +0000 Manifest this update: Mon 02 Jun 2025 21:45:06 +0000 Manifest next update: Mon 09 Jun 2025 21:45:06 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: MADUh45YEM9qI0dOIN2jttEmOgVTLOy/6f8c9Ghrzcs=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: iU7wUJ3hXR1AJP4W6iQ9Q4xhVfpuGa8z3zC49Uy6j+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Jun 2 21:45:06 2025 GMT Not After : Jun 9 21:45:06 2025 GMT Subject: CN=683e1b63-7596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:15:8b:a3:c6:e8:fe:11:cf:0f:bf:60:d6: a8:34:33:a1:64:c9:f4:09:29:6f:3f:c4:4a:3c:6a: 8f:3f:78:c6:53:18:e3:92:5e:01:d5:9a:31:65:ca: 77:b3:7c:8a:60:dc:27:c9:98:5f:c9:46:8c:79:e0: d3:49:98:8c:bb:e5:42:ca:3b:15:3a:ac:ad:c3:79: 88:ff:92:bf:22:3b:16:97:52:40:81:dc:59:5c:85: b4:43:d6:fb:3d:55:9e:ef:9d:7b:34:0c:7b:90:de: db:35:6f:09:26:5e:4d:75:ab:f4:65:51:d7:98:90: e7:38:55:83:96:ba:f4:d6:e6:7c:96:c8:67:32:31: 15:ef:1f:15:f1:a0:6c:c8:41:5d:86:eb:bd:fd:39: e0:c1:b0:7c:b0:7b:e1:21:b0:c5:b0:81:1b:7d:12: 36:a8:67:8c:39:81:49:a8:7a:dc:11:fb:f9:d5:0c: 5e:b4:a8:1d:a3:24:e8:02:7d:9c:88:9e:59:3c:f9: e5:6d:a0:bc:6e:4d:6d:fe:b3:2b:21:a7:bf:9f:60: 2e:26:49:27:72:45:f4:08:16:64:74:3a:6b:85:45: 18:39:3a:b6:3c:c7:ed:a1:40:5f:c0:de:db:fa:19: 85:7d:09:df:39:a8:34:89:a1:22:a3:9a:a6:7f:06: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0A:EC:D7:FE:DE:9F:0A:0A:37:3F:35:53:D7:C4:A0:7F:F3:7D:4C X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:46:70:d0:0b:e5:02:0a:64:d0:1e:e0:d3:ff:90:af:45:f1: 17:e6:54:97:11:f4:b8:48:00:b2:da:e9:4b:68:b6:d0:8c:d5: 47:78:7b:da:92:42:88:35:c0:5b:92:4f:f8:6c:a0:48:a6:aa: bf:22:0c:dc:18:4f:35:fd:58:27:d6:1e:fa:ca:1a:e3:73:6d: 70:46:6f:d3:ba:38:33:6e:08:34:67:7a:d5:62:fc:f6:42:d2: 36:ea:2c:2e:37:07:f4:c0:92:74:bc:01:83:82:dc:93:02:e1: 2e:fe:57:9e:b0:5b:d5:5e:9c:20:4c:5e:d3:37:e0:22:4a:99: b0:3c:3c:32:58:6f:f1:9f:ae:0b:27:4e:fb:e4:32:4c:ff:a5: 90:64:ea:8a:34:9d:e6:19:15:5b:f2:89:97:4e:da:39:d2:81: 9e:a3:48:ed:41:04:f9:fc:f1:b4:16:4f:15:da:11:30:ce:fd: 64:6c:ce:93:3e:79:75:d3:15:d3:bd:e5:f0:ae:eb:1b:55:ad: 18:09:bc:14:12:12:39:b8:20:f8:35:b6:56:09:48:e9:cf:2d: 5d:73:14:6b:68:06:71:a9:64:ac:7d:12:6b:b5:43:68:a7:ea: 6a:cc:12:08:37:18:d6:6c:8d:80:fb:88:99:83:2b:68:8e:5a: a1:6c:66:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUwNjAyMjE0NTA2WhcNMjUwNjA5MjE0NTA2WjAYMRYwFAYD VQQDEw02ODNlMWI2My03NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp8Vi6PG6P4Rzw+/YNaoNDOhZMn0CSlvP8RKPGqPP3jGUxjjkl4B1ZoxZcp3 s3yKYNwnyZhfyUaMeeDTSZiMu+VCyjsVOqytw3mI/5K/IjsWl1JAgdxZXIW0Q9b7 PVWe7517NAx7kN7bNW8JJl5Ndav0ZVHXmJDnOFWDlrr01uZ8lshnMjEV7x8V8aBs yEFdhuu9/TngwbB8sHvhIbDFsIEbfRI2qGeMOYFJqHrcEfv51QxetKgdoyToAn2c iJ5ZPPnlbaC8bk1t/rMrIae/n2AuJkknckX0CBZkdDprhUUYOTq2PMftoUBfwN7b +hmFfQnfOag0iaEio5qmfwbiUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAK7Nf+ 3p8KCjc/NVPXxKB/831MMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALRnDQC+UCCmTQHuDT/5CvRfEX5lSXEfS4SACy2ulLaLbQjNVHeHva kkKINcBbkk/4bKBIpqq/IgzcGE81/Vgn1h76yhrjc21wRm/Tujgzbgg0Z3rVYvz2 QtI26iwuNwf0wJJ0vAGDgtyTAuEu/leesFvVXpwgTF7TN+AiSpmwPDwyWG/xn64L J0775DJM/6WQZOqKNJ3mGRVb8omXTto50oGeo0jtQQT5/PG0Fk8V2hEwzv1kbM6T Pnl10xXTveXwrusbVa0YCbwUEhI5uCD4NbZWCUjpzy1dcxRraAZxqWSsfRJrtUNo p+pqzBIINxjWbI2A+4iZgytojlqhbGbO -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:18 2025 by rpki-client