$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json) Hash identifier: r5TFq0/D+yznKe5xf3Luu9gsyqwj5HA0zJU7yoctBMs= Subject key identifier: FC:BB:9F:47:E2:CD:1A:71:B4:9E:44:92:A0:56:6A:BF:57:FA:D6:69 Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Certificate serial: 0619 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft Manifest number: 0614 Signing time: Fri 30 May 2025 23:01:45 +0000 Manifest this update: Fri 30 May 2025 23:01:44 +0000 Manifest next update: Fri 06 Jun 2025 23:01:44 +0000 Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: eXT22V5c5iDGAIuCpRGMF+pl5dAjeyR59LrJeZo3y+I=) 2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1561 (0x619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Validity Not Before: May 30 23:01:44 2025 GMT Not After : Jun 6 23:01:44 2025 GMT Subject: CN=683a38d8-e503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:ce:9d:10:88:ef:5a:7e:65:99:44:86:1b: e8:49:ea:32:ef:9b:03:d7:ab:fb:58:c7:30:be:3f: 2e:e5:b0:0d:fb:c0:ba:cb:65:c7:81:d5:54:50:cd: 41:d8:2a:cd:97:b4:9c:6d:dd:03:90:78:98:c0:79: 01:2f:2e:3d:26:5b:07:88:23:03:d7:21:23:7f:58: 7e:d6:e2:d0:cb:55:54:45:4d:74:2e:1d:00:83:fa: 81:ff:a0:93:a0:ad:06:a1:6d:f6:2a:f1:46:9e:ec: f3:7a:c4:9f:fb:25:0c:54:a4:58:1c:a7:49:2f:ec: d5:b1:2c:12:d3:2a:52:29:7b:95:3c:e0:ae:51:70: a9:5d:16:18:30:a5:be:cb:e5:b2:03:17:a4:02:a7: 2b:bc:ae:9f:d3:93:33:46:f9:51:59:71:8f:71:12: c6:01:b0:3e:af:9b:dc:1e:c9:9b:07:2f:72:21:c3: c5:c2:67:98:0e:8d:25:d8:65:c1:9d:3f:a5:fd:90: d3:ae:59:4f:48:2b:cb:42:50:03:79:55:63:9d:ab: 6f:8b:25:89:af:d2:99:01:ac:e0:b2:05:dd:7e:e8: 67:3c:8a:c7:b7:1c:72:36:6e:9a:90:71:a8:17:ee: 27:1e:e2:21:40:16:6b:27:d2:06:a7:ec:dc:f8:32: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BB:9F:47:E2:CD:1A:71:B4:9E:44:92:A0:56:6A:BF:57:FA:D6:69 X509v3 Authority Key Identifier: keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2b:6e:c5:d3:68:f3:7b:b4:35:82:8e:a3:1b:b0:b8:33:53: 6e:25:1f:c7:b6:10:31:2a:3b:96:c2:43:9c:8c:64:ff:7d:90: 45:2e:ab:79:c6:5f:ac:2b:6a:9e:88:8a:f7:3d:31:8f:c2:e1: 28:2d:78:1a:da:6d:c6:cb:fe:8a:00:1b:21:87:f6:73:cb:80: d8:1c:e3:f2:b9:1d:31:28:6b:85:30:b4:03:0d:9a:55:d1:42: 9f:6f:ea:90:64:15:b1:3c:1f:0e:1e:2c:a7:05:d3:bf:91:6f: cf:72:67:e4:01:72:40:cc:e1:c3:40:e0:37:00:e8:0e:24:75: ea:0c:86:b7:e6:b6:02:18:f1:cc:b1:ca:22:5a:9f:71:b8:16: 0e:7c:d0:49:73:4d:24:b2:42:04:af:a1:04:e1:36:d3:87:b0: 82:a0:4f:6c:d0:69:51:38:4a:fd:b4:40:85:a9:52:b8:5f:56: 74:3e:63:8f:4f:df:33:e4:42:90:70:cd:3c:83:48:71:76:b5: 2a:d4:86:aa:26:e2:ce:9c:eb:b2:71:64:0a:85:7b:77:6f:1b: 61:3b:17:50:bb:a9:1c:3f:22:94:6a:b4:da:f2:89:5f:e8:d9: 9f:d3:06:9e:22:33:6b:d5:02:82:1d:ce:de:17:e6:98:e6:bb: 0c:5c:bd:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw MTIzNkIyN0MwHhcNMjUwNTMwMjMwMTQ0WhcNMjUwNjA2MjMwMTQ0WjAYMRYwFAYD VQQDEw02ODNhMzhkOC1lNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4u7OnRCI71p+ZZlEhhvoSeoy75sD16v7WMcwvj8u5bAN+8C6y2XHgdVUUM1B 2CrNl7Scbd0DkHiYwHkBLy49JlsHiCMD1yEjf1h+1uLQy1VURU10Lh0Ag/qB/6CT oK0GoW32KvFGnuzzesSf+yUMVKRYHKdJL+zVsSwS0ypSKXuVPOCuUXCpXRYYMKW+ y+WyAxekAqcrvK6f05MzRvlRWXGPcRLGAbA+r5vcHsmbBy9yIcPFwmeYDo0l2GXB nT+l/ZDTrllPSCvLQlADeVVjnatviyWJr9KZAazgsgXdfuhnPIrHtxxyNm6akHGo F+4nHuIhQBZrJ9IGp+zc+DKkYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy7n0fi zRpxtJ5EkqBWar9X+tZpMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs aE9Rck5ETk04WElCSTJzbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6K27F02jze7Q1go6jG7C4M1NuJR/HthAxKjuWwkOcjGT/fZBFLqt5 xl+sK2qeiIr3PTGPwuEoLXga2m3Gy/6KABshh/Zzy4DYHOPyuR0xKGuFMLQDDZpV 0UKfb+qQZBWxPB8OHiynBdO/kW/PcmfkAXJAzOHDQOA3AOgOJHXqDIa35rYCGPHM scoiWp9xuBYOfNBJc00kskIEr6EE4TbTh7CCoE9s0GlROEr9tECFqVK4X1Z0PmOP T98z5EKQcM08g0hxdrUq1IaqJuLOnOuycWQKhXt3bxthOxdQu6kcPyKUarTa8olf 6Nmf0waeIjNr1QKCHc7eF+aY5rsMXL00 -----END CERTIFICATE-----Generated at Sat May 31 16:44:49 2025 by rpki-client