$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft File: kTeon0YQ2uLIjGlNyVLOWDVScHk.mft (raw, json) Hash identifier: 5imAvD9hUmZsJhuqtrrFi9CfT4mQeq6YBkUYRyIcnrg= Subject key identifier: 06:5A:80:07:57:94:9E:92:BA:4C:80:44:4D:2D:0A:36:46:09:D6:5A Authority key identifier: 91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79 Certificate issuer: /CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079 Certificate serial: 0FE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft Manifest number: 0FDB Signing time: Fri 30 May 2025 17:40:54 +0000 Manifest this update: Fri 30 May 2025 17:40:53 +0000 Manifest next update: Fri 06 Jun 2025 17:40:53 +0000 Files and hashes: 1: kTeon0YQ2uLIjGlNyVLOWDVScHk.crl (hash: tRUCUACFgrLO7GVPM9MbLvi2LWZaFriAIp7husxuSYA=) 2: E9056E5A520611E9ABE43055C4F9AE02.roa (hash: h2Z0WowEDdcT+vihpwqc3ZmmFIzfzbEzcf903yWEHbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4071 (0xfe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8BC, serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079 Validity Not Before: May 30 17:40:53 2025 GMT Not After : Jun 6 17:40:53 2025 GMT Subject: CN=6839eda6-ffce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:19:86:4e:77:c3:49:b4:14:c5:ff:86:24: 16:f1:24:87:bd:d3:5e:b6:c3:68:54:8a:f3:4a:fa: fb:40:76:37:73:ca:cb:b7:65:6b:71:90:3c:10:61: 2b:35:bd:13:f7:bd:a4:da:dd:10:1e:0d:4a:b4:59: bb:54:38:eb:26:d5:16:92:f3:d7:27:d8:21:db:e0: 64:86:bd:c6:b8:80:ef:55:70:24:91:1c:09:95:bf: 03:60:f5:a7:d3:21:91:3d:93:3e:47:12:6e:74:c7: ad:a5:f0:f1:19:a6:d4:a5:d0:85:f7:0c:20:7c:ab: 0d:c3:d8:3d:d9:36:c8:69:18:32:6f:1b:cd:43:6d: 9f:77:2c:4e:58:d3:e1:a8:92:06:e2:4c:8c:aa:75: 7f:f9:88:23:6a:0b:37:04:14:2c:42:dc:6b:77:1d: 7b:c8:81:d6:d8:1f:5b:87:38:d9:b4:f7:d3:a1:47: c4:c9:6c:26:e1:19:88:59:b7:d6:50:9e:87:8c:57: 0e:a5:49:af:4e:da:0c:ab:a2:00:3c:9d:16:54:95: 59:14:0b:36:b9:56:10:49:9e:2b:7c:00:57:5c:b2: d8:6e:a4:d7:66:ca:c0:e2:89:f9:d0:d7:c2:d3:0e: b0:c4:36:c4:ec:cf:f1:dc:b1:c8:bb:7f:4e:56:43: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5A:80:07:57:94:9E:92:BA:4C:80:44:4D:2D:0A:36:46:09:D6:5A X509v3 Authority Key Identifier: keyid:91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c0:b6:b5:6e:78:3e:51:fc:61:d5:f8:6c:87:7f:47:0f:04: 60:ea:f5:33:90:a6:a6:c7:9a:c3:33:49:99:ea:d5:3c:94:ff: e9:63:e1:0d:61:11:34:42:a1:87:ca:9b:f6:91:ff:69:65:ae: 25:07:c4:22:53:f5:2d:0e:9b:39:b2:de:77:ef:1e:b9:29:80: 86:ce:bf:be:ff:f3:3b:2e:0c:9f:da:81:e0:ea:37:d6:89:16: de:4d:b4:8e:61:09:0f:14:72:c7:4d:33:ae:db:37:ae:23:bd: 1c:12:fc:06:d8:d9:3f:b2:1b:b5:67:26:0b:08:09:04:61:90: 61:64:fc:a1:87:05:f7:cc:30:d2:ef:26:74:62:e7:e8:74:28: 35:1d:cf:0d:a8:0c:6a:f9:61:9d:4f:2c:2f:8e:53:a1:a9:81: 07:73:e7:72:cf:38:aa:e9:82:d8:0c:c1:08:3b:91:0b:aa:11: 66:c0:09:c3:17:2c:76:82:6c:34:3d:a9:af:88:3e:48:ce:54: ab:e4:5f:b6:bb:b4:d5:2b:4e:ca:2b:66:bf:a2:b8:cd:6d:da: 34:f0:df:0e:b7:15:5e:1a:f9:7f:72:4f:4e:86:76:d5:df:4b: b4:44:fd:20:cc:bf:14:87:fb:ac:48:78:63:0c:d4:dd:ca:1c: b1:79:c4:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QkMxMTAvBgNVBAUTKDkxMzdBODlGNDYxMERBRTJDODhDNjk0REM5NTJDRTU4 MzU1MjcwNzkwHhcNMjUwNTMwMTc0MDUzWhcNMjUwNjA2MTc0MDUzWjAYMRYwFAYD VQQDEw02ODM5ZWRhNi1mZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2UZhk53w0m0FMX/hiQW8SSHvdNetsNoVIrzSvr7QHY3c8rLt2VrcZA8EGEr Nb0T972k2t0QHg1KtFm7VDjrJtUWkvPXJ9gh2+Bkhr3GuIDvVXAkkRwJlb8DYPWn 0yGRPZM+RxJudMetpfDxGabUpdCF9wwgfKsNw9g92TbIaRgybxvNQ22fdyxOWNPh qJIG4kyMqnV/+Ygjags3BBQsQtxrdx17yIHW2B9bhzjZtPfToUfEyWwm4RmIWbfW UJ6HjFcOpUmvTtoMq6IAPJ0WVJVZFAs2uVYQSZ4rfABXXLLYbqTXZsrA4on50NfC 0w6wxDbE7M/x3LHIu39OVkNoMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZagAdX lJ6SukyARE0tCjZGCdZaMB8GA1UdIwQYMBaAFJE3qJ9GENriyIxpTclSzlg1UnB5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCQy80RTEzRjQwQzUy MDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1TElqR2xOeVZMT1dEVlNj SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tUZW9uMFlRMnVMSWpHbE55VkxPV0RWU2NIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCQy80RTEzRjQwQzUyMDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1 TElqR2xOeVZMT1dEVlNjSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArwLa1bng+Ufxh1fhsh39HDwRg6vUzkKamx5rDM0mZ6tU8lP/pY+EN YRE0QqGHypv2kf9pZa4lB8QiU/UtDps5st537x65KYCGzr++//M7Lgyf2oHg6jfW iRbeTbSOYQkPFHLHTTOu2zeuI70cEvwG2Nk/shu1ZyYLCAkEYZBhZPyhhwX3zDDS 7yZ0YufodCg1Hc8NqAxq+WGdTywvjlOhqYEHc+dyzziq6YLYDMEIO5ELqhFmwAnD Fyx2gmw0PamviD5IzlSr5F+2u7TVK07KK2a/orjNbdo08N8OtxVeGvl/ck9OhnbV 30u0RP0gzL8Uh/usSHhjDNTdyhyxecTn -----END CERTIFICATE-----Generated at Sat May 31 17:24:41 2025 by rpki-client