$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json) Hash identifier: gnus/ag0S0BA/8NpUV70J1UX0UWz+eDVH8SIgAvx9wo= Subject key identifier: 49:63:37:60:24:28:5B:64:23:6F:71:C1:12:73:49:FC:CA:8B:64:00 Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft Manifest number: 0671 Signing time: Fri 30 May 2025 22:33:44 +0000 Manifest this update: Fri 30 May 2025 22:33:43 +0000 Manifest next update: Fri 06 Jun 2025 22:33:43 +0000 Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: o0UXTaUKjtImPbqKvSW6zrkGtRLseDqd6SlNorA47Q8=) 2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: TnZM67noo4lbQHfXpAgCtw+JAFkneMpGmuhyQRw2ydg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: May 30 22:33:43 2025 GMT Not After : Jun 6 22:33:43 2025 GMT Subject: CN=683a3247-5972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:df:b3:d9:a3:e7:91:e5:ee:b4:2a:aa:0b: e1:7a:28:2d:93:4d:2d:6d:4f:1c:ac:ad:22:b6:23: ac:26:83:9f:b5:a5:a8:fd:29:0b:7b:75:ed:e8:b1: 8e:18:91:62:92:a9:8f:9b:b8:03:49:a3:23:b5:88: ba:cd:a2:95:fe:f8:dd:c8:93:3c:f2:55:58:a2:b4: 17:05:71:80:f2:87:f5:40:12:8a:65:db:31:ff:1b: 25:69:1d:7c:0e:f5:f7:1e:c2:3b:15:35:64:f5:a9: eb:97:ea:ff:55:fb:f9:e2:f5:19:0f:77:3e:e5:ab: 70:b1:f3:19:82:7b:9f:92:b2:08:d2:1e:b5:f4:a7: 90:5d:70:db:d6:ec:b4:f1:c1:50:3e:b5:0f:21:e6: 76:c3:6c:7c:87:48:77:38:9f:f5:1e:8f:09:16:6d: c2:78:3d:b3:84:5e:ba:0b:48:1e:80:b9:e8:08:4d: 29:fd:ea:fc:de:61:ce:ab:f6:1c:b7:4f:26:07:0b: 64:18:8e:5a:86:16:ff:7a:0f:19:aa:ae:59:49:30: 4a:be:42:1a:37:fc:d3:b3:c8:0f:1c:53:90:d1:ba: 91:a5:2b:98:84:91:2c:85:76:4b:aa:d5:05:ec:22: 66:b8:ca:d9:2e:0c:f5:81:52:76:b6:59:e9:66:f4: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:63:37:60:24:28:5B:64:23:6F:71:C1:12:73:49:FC:CA:8B:64:00 X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:5f:b1:68:45:6d:c4:22:77:68:15:19:0e:d9:9c:e9:70:ba: 13:1c:68:ba:af:87:ec:a1:ed:92:8b:bd:18:57:9d:a5:c3:a4: 10:c4:dc:9e:0d:59:13:4e:16:66:fc:5d:e9:29:27:42:f9:be: e5:b3:94:42:91:82:07:d4:34:27:65:81:c2:96:fd:e0:6b:2f: e9:bc:c0:bf:aa:78:5b:31:bf:df:05:68:f7:33:d1:1a:83:e8: 33:5c:75:59:74:f8:25:16:c7:76:84:2f:58:0f:4d:f6:c0:f0: 49:d7:02:09:da:0b:46:2a:fb:e8:18:78:72:55:a1:c7:89:14: 7a:03:23:03:a5:00:45:20:3f:57:28:32:e6:0e:12:ee:92:d7: 7a:07:79:c8:95:8c:aa:23:02:65:40:f0:16:2f:24:27:38:fc: f6:07:b3:4b:e3:65:15:02:c9:59:3d:95:81:65:4c:53:02:19: 0b:d2:72:82:78:f6:f7:a2:a5:a1:55:a8:9d:af:6e:5f:97:7a: 72:89:62:48:0f:d9:48:78:8c:f3:8d:27:80:72:2d:77:02:4b: 53:4f:24:aa:d1:16:54:83:db:3d:dc:f3:f4:1f:2a:32:69:d4: 3f:8b:5f:bc:dd:5f:6c:ab:c3:31:0f:8d:4d:48:32:37:39:29: c1:09:b7:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjUwNTMwMjIzMzQzWhcNMjUwNjA2MjIzMzQzWjAYMRYwFAYD VQQDEw02ODNhMzI0Ny01OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFPfs9mj55Hl7rQqqgvheigtk00tbU8crK0itiOsJoOftaWo/SkLe3Xt6LGO GJFikqmPm7gDSaMjtYi6zaKV/vjdyJM88lVYorQXBXGA8of1QBKKZdsx/xslaR18 DvX3HsI7FTVk9anrl+r/Vfv54vUZD3c+5atwsfMZgnufkrII0h619KeQXXDb1uy0 8cFQPrUPIeZ2w2x8h0h3OJ/1Ho8JFm3CeD2zhF66C0gegLnoCE0p/er83mHOq/Yc t08mBwtkGI5ahhb/eg8Zqq5ZSTBKvkIaN/zTs8gPHFOQ0bqRpSuYhJEshXZLqtUF 7CJmuMrZLgz1gVJ2tlnpZvQ08QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEljN2Ak KFtkI29xwRJzSfzKi2QAMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0Rz NlZwNlZXNFF2Tl9YSTMyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRX7FoRW3EIndoFRkO2ZzpcLoTHGi6r4fsoe2Si70YV52lw6QQxNye DVkTThZm/F3pKSdC+b7ls5RCkYIH1DQnZYHClv3gay/pvMC/qnhbMb/fBWj3M9Ea g+gzXHVZdPglFsd2hC9YD032wPBJ1wIJ2gtGKvvoGHhyVaHHiRR6AyMDpQBFID9X KDLmDhLuktd6B3nIlYyqIwJlQPAWLyQnOPz2B7NL42UVAslZPZWBZUxTAhkL0nKC ePb3oqWhVaidr25fl3pyiWJID9lIeIzzjSeAci13AktTTySq0RZUg9s93PP0Hyoy adQ/i1+83V9sq8MxD41NSDI3OSnBCbeS -----END CERTIFICATE-----Generated at Sat May 31 16:46:56 2025 by rpki-client