$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: lXevQ+1sOlZoRJDLDLrGSfNkuEVGfTruYfSlC/tAJ08= Subject key identifier: DB:1F:59:6B:B3:AF:F6:5F:61:D2:62:21:90:8C:A8:C6:29:7A:87:50 Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 0273 Signing time: Sun 01 Jun 2025 01:55:31 +0000 Manifest this update: Sun 01 Jun 2025 01:55:30 +0000 Manifest next update: Sun 08 Jun 2025 01:55:30 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: z1cYHH0WUYWf9X3FFY6W589mQ5XhLcYPeA3eMoJEjZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Jun 1 01:55:30 2025 GMT Not After : Jun 8 01:55:30 2025 GMT Subject: CN=683bb312-85c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:4f:73:4b:68:98:38:9b:0f:75:16:49:d8: e8:53:5e:af:52:91:da:45:cc:f3:98:e3:74:4a:7a: 79:3e:fe:20:19:09:dd:e3:2b:ff:61:88:a1:82:78: a0:35:0b:7f:b8:1b:b5:a9:b1:65:42:bf:bb:5f:94: 90:01:b5:ea:f1:10:4a:78:97:59:3b:f2:e2:a0:5d: f7:bc:89:51:06:2c:96:fb:2d:27:f1:c9:06:c4:7b: 11:17:37:bb:01:21:ee:3a:4c:aa:9b:6c:02:b2:f1: 37:bc:05:56:2e:b4:29:4e:16:87:70:39:fe:23:1b: 7a:05:32:48:08:59:1f:70:24:59:a5:99:44:4f:80: 78:69:49:e5:bb:91:92:1a:5b:20:41:34:34:39:c6: 3f:32:a8:b1:fc:e4:6d:a0:dc:fd:5f:5c:9c:af:af: 38:d6:bd:41:ec:9a:77:81:14:e0:0c:2b:cf:6f:bf: 43:b8:1a:f8:2e:20:88:e1:32:71:25:8e:27:fc:72: e5:58:3a:ed:a1:17:21:c3:03:ac:6a:cc:e2:a0:44: ce:cf:e1:6d:bc:68:cc:aa:8e:2d:ad:ec:15:c2:c5: a3:68:ec:ce:e8:13:9d:c7:77:a1:b6:d1:f6:0e:a7: 1e:8f:7f:5b:b5:db:47:98:33:be:fd:3c:dd:41:7e: e1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1F:59:6B:B3:AF:F6:5F:61:D2:62:21:90:8C:A8:C6:29:7A:87:50 X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6a:ed:64:25:0b:b0:f0:2a:2b:7a:81:cd:ef:38:fe:d9:71: cd:3c:8c:80:63:31:5d:f7:64:eb:21:e6:d8:8b:38:c9:2f:df: 31:d4:22:fb:eb:20:f1:de:0c:b8:68:e9:62:08:f1:b8:9e:a0: 30:d5:95:e8:24:cc:79:88:5b:fa:58:65:fe:d0:63:13:75:f5: d4:6f:e6:3d:67:d3:6d:c6:2c:e0:9e:76:3a:43:72:04:57:e0: db:ef:4c:6a:41:67:34:e9:a8:6e:9f:35:c0:f8:b2:c2:ff:98: a8:38:c0:10:32:46:76:fb:5e:9e:1b:32:e7:60:7d:6e:bb:9a: 4f:45:3c:2d:e2:4a:8a:3e:4a:7f:48:d8:93:43:f2:ea:75:1d: b5:52:9a:7f:9a:b7:1b:f8:24:ca:3b:70:b5:6c:e2:d1:da:0c: cb:5a:f7:63:5a:46:7d:74:0a:57:c3:a1:55:67:54:4f:8d:13: 2c:ed:ee:a0:0e:4a:85:93:f6:34:16:20:b6:15:05:0c:54:7e: 8e:8e:5a:ad:0b:e9:fa:c3:fa:92:06:62:5d:25:20:ef:cb:b4: 65:0d:49:75:3a:9b:db:80:8b:62:04:fd:eb:4c:8d:d5:79:0c: ff:4d:c6:e6:11:10:8c:68:be:e1:87:69:af:62:26:7b:a3:9a: d5:f1:36:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUwNjAxMDE1NTMwWhcNMjUwNjA4MDE1NTMwWjAYMRYwFAYD VQQDEw02ODNiYjMxMi04NWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4tPc0tomDibD3UWSdjoU16vUpHaRczzmON0Snp5Pv4gGQnd4yv/YYihgnig NQt/uBu1qbFlQr+7X5SQAbXq8RBKeJdZO/LioF33vIlRBiyW+y0n8ckGxHsRFze7 ASHuOkyqm2wCsvE3vAVWLrQpThaHcDn+Ixt6BTJICFkfcCRZpZlET4B4aUnlu5GS GlsgQTQ0OcY/Mqix/ORtoNz9X1ycr6841r1B7Jp3gRTgDCvPb79DuBr4LiCI4TJx JY4n/HLlWDrtoRchwwOsaszioETOz+FtvGjMqo4trewVwsWjaOzO6BOdx3ehttH2 Dqcej39btdtHmDO+/TzdQX7hoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsfWWuz r/ZfYdJiIZCMqMYpeodQMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCau1kJQuw8CoreoHN7zj+2XHNPIyAYzFd92TrIebYizjJL98x1CL7 6yDx3gy4aOliCPG4nqAw1ZXoJMx5iFv6WGX+0GMTdfXUb+Y9Z9NtxizgnnY6Q3IE V+Db70xqQWc06ahunzXA+LLC/5ioOMAQMkZ2+16eGzLnYH1uu5pPRTwt4kqKPkp/ SNiTQ/LqdR21Upp/mrcb+CTKO3C1bOLR2gzLWvdjWkZ9dApXw6FVZ1RPjRMs7e6g DkqFk/Y0FiC2FQUMVH6OjlqtC+n6w/qSBmJdJSDvy7RlDUl1OpvbgItiBP3rTI3V eQz/TcbmERCMaL7hh2mvYiZ7o5rV8TZL -----END CERTIFICATE-----Generated at Mon Jun 2 22:26:24 2025 by rpki-client