$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json) Hash identifier: XManN3VXgvATNynAloMyT89vncithnP95kwtt/zD05w= Subject key identifier: 5F:85:83:FD:2E:DE:89:32:C9:28:BB:F7:D4:31:F0:60:C5:F7:7A:3A Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft Manifest number: 92 Signing time: Sat 31 May 2025 06:02:39 +0000 Manifest this update: Sat 31 May 2025 06:02:38 +0000 Manifest next update: Sat 07 Jun 2025 06:02:38 +0000 Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: 8vzfFFEhrT4CeYbSCWZGRVJAMNJVRUVsrAw+zzFnYoA=) 2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: HQpJTfgqUX8sx/Vj8e61bP6mPFBvq/NcDI8+HFxFJJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Validity Not Before: May 31 06:02:38 2025 GMT Not After : Jun 7 06:02:38 2025 GMT Subject: CN=683a9b7f-277d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:f8:e2:89:9d:39:38:68:2b:57:50:1d:60: 2e:50:6b:9d:68:df:d8:79:f8:f2:8e:9f:9c:a3:2a: 0f:4e:e5:b4:ea:63:1a:69:52:83:5d:29:86:9f:d5: ac:e8:d4:9b:6d:68:d6:eb:c7:f8:43:92:16:bd:f9: f2:8e:4f:a0:06:30:15:d2:11:c7:5f:e8:f7:7c:42: 0c:19:62:7d:1e:bb:dd:ee:36:d5:47:13:44:e8:01: 10:8d:d1:60:bb:fd:aa:c6:9d:8b:21:42:68:78:33: 0c:1f:d1:e7:bd:8e:f5:9e:24:40:a4:7c:91:cf:65: 7c:b3:a9:1e:f8:55:6e:a4:d5:1e:5d:83:00:e8:65: 27:35:d2:5c:ec:c2:54:15:1d:be:77:b9:5a:38:bf: b3:89:24:81:41:4d:e4:7e:23:4a:ea:0f:d4:4c:e6: 5b:04:55:0a:44:69:76:94:7e:a6:65:67:02:f9:53: 4b:97:7c:dc:5e:ad:6c:dd:0c:24:38:3e:51:8b:90: 95:05:c9:d2:99:ea:04:91:fa:94:b1:61:89:4a:92: fc:5b:fc:4f:4a:fc:ce:31:c7:71:11:fc:51:90:d5: 57:d5:00:1d:23:5c:76:74:e2:59:b0:2a:cc:c4:35: 9f:15:db:f2:a8:00:29:93:86:49:1e:64:5a:4d:0c: 39:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:85:83:FD:2E:DE:89:32:C9:28:BB:F7:D4:31:F0:60:C5:F7:7A:3A X509v3 Authority Key Identifier: keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:97:bf:4c:9a:db:ac:91:0a:f7:e5:f8:dd:1d:18:36:b7:e1: 43:55:02:85:dd:04:81:3a:cb:54:e9:50:3e:86:9a:6b:08:1f: d2:3f:0b:50:fb:43:76:2a:3d:60:f6:cc:d5:6b:c9:b2:28:e1: 37:59:8e:72:a9:f1:68:9c:6e:a7:fc:62:e7:28:c3:5d:6b:69: b9:99:32:90:85:56:ad:64:dd:3d:0c:48:b2:ce:7f:07:bb:60: 76:dc:45:37:f7:f6:f3:e7:65:09:be:02:3f:fe:20:0d:7e:9c: d1:f3:4a:69:3a:61:a3:a1:a8:81:00:d7:12:3b:78:4e:7f:19: 0c:a6:dd:b2:cc:57:37:5d:ca:a7:d2:e5:31:d2:a0:dc:d1:9b: 9e:86:c4:bf:26:41:1a:c3:70:83:41:10:5d:c1:d7:5f:07:a7: 75:04:94:c5:59:85:13:3e:d8:ba:db:cf:89:f1:3b:a9:6c:c2: c9:b2:1f:92:63:dd:a4:dd:3d:a2:0b:2c:fb:e4:0d:8b:39:04: 4e:d7:08:73:ee:70:be:5f:4e:62:e5:bf:48:1c:9d:08:75:d7: 93:63:0e:5b:31:9e:d1:32:67:be:61:e5:b6:55:d5:28:6c:76: 20:46:bb:b6:43:ca:6d:69:8c:16:95:9c:38:2a:64:4d:1d:95: a3:30:cb:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGOEQxMTAvBgNVBAUTKDJBMDFDOEZFOTY3OTY5NDQ3ODMxRUMwMUMwMkJDNEU5 Q0I5QUNFMkMwHhcNMjUwNTMxMDYwMjM4WhcNMjUwNjA3MDYwMjM4WjAYMRYwFAYD VQQDEw02ODNhOWI3Zi0yNzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQv44omdOThoK1dQHWAuUGudaN/Yefjyjp+coyoPTuW06mMaaVKDXSmGn9Ws 6NSbbWjW68f4Q5IWvfnyjk+gBjAV0hHHX+j3fEIMGWJ9Hrvd7jbVRxNE6AEQjdFg u/2qxp2LIUJoeDMMH9HnvY71niRApHyRz2V8s6ke+FVupNUeXYMA6GUnNdJc7MJU FR2+d7laOL+ziSSBQU3kfiNK6g/UTOZbBFUKRGl2lH6mZWcC+VNLl3zcXq1s3Qwk OD5Ri5CVBcnSmeoEkfqUsWGJSpL8W/xPSvzOMcdxEfxRkNVX1QAdI1x2dOJZsCrM xDWfFdvyqAApk4ZJHmRaTQw55wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+Fg/0u 3okyySi799Qx8GDF93o6MB8GA1UdIwQYMBaAFCoByP6WeWlEeDHsAcArxOnLms4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEY4RC9BMTc5RTUzQzY0 NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFVUjRNZXdCd0N2RTZjdWF6 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tnSElfcFo1YVVSNE1ld0J3Q3ZFNmN1YXppdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEY4RC9BMTc5RTUzQzY0NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFV UjRNZXdCd0N2RTZjdWF6aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAml79MmtuskQr35fjdHRg2t+FDVQKF3QSBOstU6VA+hpprCB/SPwtQ +0N2Kj1g9szVa8myKOE3WY5yqfFonG6n/GLnKMNda2m5mTKQhVatZN09DEiyzn8H u2B23EU39/bz52UJvgI//iANfpzR80ppOmGjoaiBANcSO3hOfxkMpt2yzFc3Xcqn 0uUx0qDc0ZuehsS/JkEaw3CDQRBdwddfB6d1BJTFWYUTPti628+J8TupbMLJsh+S Y92k3T2iCyz75A2LOQRO1whz7nC+X05i5b9IHJ0IddeTYw5bMZ7RMme+YeW2VdUo bHYgRru2Q8ptaYwWlZw4KmRNHZWjMMvL -----END CERTIFICATE-----Generated at Sat May 31 17:46:27 2025 by rpki-client