$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft File: KKyX2Zh-eNvuncufA3NcKDvOGGI.mft (raw, json) Hash identifier: /fFtIqf5i9bxZ89xCJGDj4ZNdxc/Kf7hLzZdHLpjK0Y= Subject key identifier: F8:29:5D:7A:D7:79:95:FD:30:0B:84:4F:20:2E:95:C8:CA:64:26:4E Authority key identifier: 28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 Certificate issuer: /CN=A9157BC3/serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft Manifest number: 01C0 Signing time: Thu 05 Jun 2025 02:25:27 +0000 Manifest this update: Thu 05 Jun 2025 02:25:26 +0000 Manifest next update: Thu 12 Jun 2025 02:25:26 +0000 Files and hashes: 1: KKyX2Zh-eNvuncufA3NcKDvOGGI.crl (hash: ORS35MZQ9fwxBicOpjJe3LMF/REo+efLhrPQ4jlVQak=) 2: 1FCD9DE2926611EDA99A9419C4F9AE02.roa (hash: RqBWzz5uXzyQ1KueU4cHYCTj7govMSTdgiL2egEdolc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 02:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BC3, serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Validity Not Before: Jun 5 02:25:26 2025 GMT Not After : Jun 12 02:25:26 2025 GMT Subject: CN=68410016-f402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:27:91:f0:bf:df:55:1f:3a:fa:0d:c2:44: d6:b5:c6:f2:67:5c:a6:50:77:d2:ae:74:57:07:52: c5:88:7f:0c:c9:de:4a:b9:08:cb:44:5d:6f:65:e4: 5e:4e:00:a4:03:09:3f:15:7a:28:d6:30:03:92:3c: 2f:63:35:80:d3:84:12:bb:1a:eb:87:9d:43:6a:58: e4:33:fd:71:d1:58:2c:4f:59:75:43:ab:b3:7a:b8: 3c:57:57:b7:6d:79:22:78:a8:34:76:8c:5a:91:67: ec:81:50:6b:3c:d9:62:9a:60:21:50:53:e9:57:9a: 76:63:fb:28:ea:6b:ce:39:5a:ae:90:27:4e:b7:a2: 83:20:95:e5:6c:d7:fc:88:75:23:d4:ae:d6:bd:6c: ad:e6:af:6d:e1:26:89:d1:67:ba:97:0d:0d:3c:90: af:76:5b:83:26:45:79:1a:20:04:5a:13:40:24:fd: f2:41:31:54:d9:36:6d:3d:75:b1:d7:04:a4:7b:ae: 32:f1:90:dc:1a:d3:02:b2:8b:27:20:f7:43:35:66: 67:8f:1b:02:95:f4:e5:43:d0:7f:d9:b9:ea:8a:58: 76:f3:8e:3a:ac:9f:72:30:69:b4:f2:a9:1a:30:21: 93:a6:5c:8d:33:35:9c:32:f5:84:5c:35:bb:77:d7: d2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:29:5D:7A:D7:79:95:FD:30:0B:84:4F:20:2E:95:C8:CA:64:26:4E X509v3 Authority Key Identifier: keyid:28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:35:a2:38:e0:43:75:ea:89:9d:2c:16:e8:c3:31:c2:1e:19: f7:98:9f:0f:fa:3c:f3:16:60:e2:39:5c:d0:10:a1:d8:5b:95: 0b:dc:08:d4:17:10:3b:32:e6:09:a7:37:18:38:95:7c:7f:17: 1a:50:eb:b9:1e:c8:31:53:33:d6:71:7b:47:b9:c9:d0:a9:ea: e6:bb:85:58:dc:a5:41:0c:0b:6d:38:47:89:b0:2d:a7:6c:f6: 15:5f:eb:ed:98:74:83:32:2a:21:86:ad:06:41:12:2a:ac:57: f8:87:a6:d5:4c:01:76:cd:18:86:03:2a:04:be:6d:50:7d:58: 67:20:a7:28:79:82:bb:d7:c6:65:ea:ff:e1:8f:eb:dd:b1:e6: d3:dc:72:1f:2a:b7:17:09:02:78:be:2f:d8:e5:a1:89:7a:9d: 00:c0:38:5f:ba:51:15:4a:31:2c:57:3b:11:06:ad:fb:6a:4f: 6c:47:5e:1f:ee:4d:39:62:12:9d:4f:7a:0e:02:e1:3b:f9:a1: 42:e0:59:2e:5c:53:c7:74:37:89:7a:57:6c:c0:5e:03:55:15: f2:02:67:e1:a6:09:2d:d8:48:1a:43:29:3c:45:54:66:ff:06: 9f:b1:05:74:d0:7e:ec:c8:47:74:73:9c:c3:0f:c4:23:f4:21: 04:e0:af:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCQzMxMTAvBgNVBAUTKDI4QUM5N0Q5OTg3RTc4REJFRTlEQ0I5RjAzNzM1QzI4 M0JDRTE4NjIwHhcNMjUwNjA1MDIyNTI2WhcNMjUwNjEyMDIyNTI2WjAYMRYwFAYD VQQDEw02ODQxMDAxNi1mNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/wnkfC/31UfOvoNwkTWtcbyZ1ymUHfSrnRXB1LFiH8Myd5KuQjLRF1vZeRe TgCkAwk/FXoo1jADkjwvYzWA04QSuxrrh51DaljkM/1x0VgsT1l1Q6uzerg8V1e3 bXkieKg0doxakWfsgVBrPNlimmAhUFPpV5p2Y/so6mvOOVqukCdOt6KDIJXlbNf8 iHUj1K7WvWyt5q9t4SaJ0We6lw0NPJCvdluDJkV5GiAEWhNAJP3yQTFU2TZtPXWx 1wSke64y8ZDcGtMCsosnIPdDNWZnjxsClfTlQ9B/2bnqilh28446rJ9yMGm08qka MCGTplyNMzWcMvWEXDW7d9fSBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgpXXrX eZX9MAuETyAulcjKZCZOMB8GA1UdIwQYMBaAFCisl9mYfnjb7p3LnwNzXCg7zhhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JDMy83MDhFNkY2ODky NjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVOdnVuY3VmQTNOY0tEdk9H R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tLeVgyWmgtZU52dW5jdWZBM05jS0R2T0dHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JDMy83MDhFNkY2ODkyNjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVO dnVuY3VmQTNOY0tEdk9HR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAANaI44EN16omdLBbowzHCHhn3mJ8P+jzzFmDiOVzQEKHYW5UL3AjU FxA7MuYJpzcYOJV8fxcaUOu5HsgxUzPWcXtHucnQqermu4VY3KVBDAttOEeJsC2n bPYVX+vtmHSDMiohhq0GQRIqrFf4h6bVTAF2zRiGAyoEvm1QfVhnIKcoeYK718Zl 6v/hj+vdsebT3HIfKrcXCQJ4vi/Y5aGJep0AwDhfulEVSjEsVzsRBq37ak9sR14f 7k05YhKdT3oOAuE7+aFC4FkuXFPHdDeJeldswF4DVRXyAmfhpgkt2EgaQyk8RVRm /wafsQV00H7syEd0c5zDD8Qj9CEE4K9n -----END CERTIFICATE-----Generated at Thu Jun 5 19:51:50 2025 by rpki-client