$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json) Hash identifier: TylzEflMEiFR/nBhYU951oMkA6AqTjWABEI9kME/YlI= Subject key identifier: 04:2D:C0:C7:3C:90:2F:F5:41:9D:9A:B2:9C:19:FC:98:D7:AB:A7:4F Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft Manifest number: 8F Signing time: Sat 31 May 2025 06:04:22 +0000 Manifest this update: Sat 31 May 2025 06:04:22 +0000 Manifest next update: Sat 07 Jun 2025 06:04:22 +0000 Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: Txcdv+HW42/tX/CHEPkTsmbaj7UVkU269W4J++GX9xA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: May 31 06:04:22 2025 GMT Not After : Jun 7 06:04:22 2025 GMT Subject: CN=683a9be6-6b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:0c:f5:bf:21:e4:f9:8c:6c:2a:ae:de:57: a2:40:a2:45:98:61:26:46:2f:34:b7:72:55:2a:20: ab:19:30:5a:c6:6d:98:41:85:69:5d:93:17:1c:3c: a5:68:30:d9:e9:7c:21:56:78:af:1a:e6:6a:03:7d: da:53:cf:d5:5b:b9:63:79:de:49:e5:95:86:3c:24: ff:2d:e7:e4:c7:ce:68:62:81:a3:9d:d8:47:c7:42: 32:53:0d:2c:71:c7:7b:50:ce:76:e2:d5:a2:73:66: 3b:4f:8a:4b:e6:00:70:bf:aa:a7:c4:40:97:27:8a: 6e:44:58:93:87:fd:90:7a:3f:09:96:d6:45:73:8c: ac:65:66:d8:24:69:2a:e0:ac:35:d6:d3:8d:e5:ac: 91:59:20:55:50:ca:ab:17:72:51:13:bc:47:07:61: f6:5a:d9:d7:24:c0:b9:ac:6f:94:a4:70:de:e7:d7: 61:10:1b:1f:2a:62:4f:87:90:a0:8b:ec:7a:06:57: bb:e9:d8:d7:ac:98:32:6c:8a:87:fc:a5:cd:80:3b: 8d:ca:bc:c6:b6:db:7c:fc:34:85:ea:f6:a4:7a:bf: e3:1e:09:2b:4f:b4:a7:77:7f:cc:88:26:04:c3:8b: 37:1a:fc:5f:53:b5:22:4d:8b:78:6f:79:ed:d6:70: bb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2D:C0:C7:3C:90:2F:F5:41:9D:9A:B2:9C:19:FC:98:D7:AB:A7:4F X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:01:46:76:af:ae:02:a5:03:b8:06:92:41:f5:b1:50:ed:1e: 48:5e:d6:02:e5:9a:74:f2:bb:7a:c9:43:99:45:b3:3a:30:ae: 6e:36:4c:75:4d:f6:c6:66:57:57:5c:25:aa:ee:04:d3:91:c4: e2:1b:78:53:4c:af:3a:49:2b:d1:77:aa:90:b4:ab:67:15:ac: 93:31:97:a1:e3:92:c9:58:94:71:d8:41:a5:3a:6c:d1:36:6c: a1:92:ef:1d:d9:d9:00:16:4f:ea:00:48:97:24:d3:b2:e0:57: 16:0e:a8:a4:71:27:ea:ae:75:80:a7:43:84:21:05:83:ef:74: 7c:52:3d:a6:48:88:5e:fc:7b:38:f8:5d:21:8e:0c:46:a5:94: 4d:20:85:52:cc:c9:a5:d0:5e:4a:3f:27:ab:40:e2:61:cb:9a: 45:81:ad:5d:db:b4:95:65:af:56:3f:5d:7d:1f:8c:c1:75:77: b3:52:75:c8:77:bf:23:45:23:1c:86:98:c6:e5:ac:0a:28:64: 52:48:9b:3d:75:be:23:96:d4:8c:58:6f:35:40:75:80:5c:4a: 1e:3a:a8:ad:ef:ca:93:f2:94:d0:3b:75:89:5c:29:ed:cd:bb: 94:d7:0a:47:d3:1e:8d:bb:43:04:cd:57:e7:70:83:a4:de:33: 52:92:b2:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjUwNTMxMDYwNDIyWhcNMjUwNjA3MDYwNDIyWjAYMRYwFAYD VQQDEw02ODNhOWJlNi02YjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKQM9b8h5PmMbCqu3leiQKJFmGEmRi80t3JVKiCrGTBaxm2YQYVpXZMXHDyl aDDZ6XwhVnivGuZqA33aU8/VW7ljed5J5ZWGPCT/Lefkx85oYoGjndhHx0IyUw0s ccd7UM524tWic2Y7T4pL5gBwv6qnxECXJ4puRFiTh/2Qej8JltZFc4ysZWbYJGkq 4Kw11tON5ayRWSBVUMqrF3JRE7xHB2H2WtnXJMC5rG+UpHDe59dhEBsfKmJPh5Cg i+x6Ble76djXrJgybIqH/KXNgDuNyrzGttt8/DSF6vaker/jHgkrT7Snd3/MiCYE w4s3GvxfU7UiTYt4b3nt1nC7NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQtwMc8 kC/1QZ2aspwZ/JjXq6dPMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW eGZIck9CS0l6dHctYjRZblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhAUZ2r64CpQO4BpJB9bFQ7R5IXtYC5Zp08rt6yUOZRbM6MK5uNkx1 TfbGZldXXCWq7gTTkcTiG3hTTK86SSvRd6qQtKtnFayTMZeh45LJWJRx2EGlOmzR Nmyhku8d2dkAFk/qAEiXJNOy4FcWDqikcSfqrnWAp0OEIQWD73R8Uj2mSIhe/Hs4 +F0hjgxGpZRNIIVSzMml0F5KPyerQOJhy5pFga1d27SVZa9WP119H4zBdXezUnXI d78jRSMchpjG5awKKGRSSJs9db4jltSMWG81QHWAXEoeOqit78qT8pTQO3WJXCnt zbuU1wpH0x6Nu0MEzVfncIOk3jNSkrK/ -----END CERTIFICATE-----Generated at Sat May 31 17:57:49 2025 by rpki-client