$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json) Hash identifier: eYEHjNFhEf4YN4+HLAkMXbo2R+bnT+u0yF4CSS9NHjI= Subject key identifier: A9:A0:E2:A3:86:A4:2C:5F:10:BD:FC:58:BA:A6:08:89:EC:F2:67:71 Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft Manifest number: AF Signing time: Sat 31 May 2025 05:38:06 +0000 Manifest this update: Sat 31 May 2025 05:38:06 +0000 Manifest next update: Sat 07 Jun 2025 05:38:06 +0000 Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: H8XMcApdYcC/LeBAFDdjQrcjWFnPAxVezBxHxh9FaAo=) 2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 01Cn3pOh4671ZkIDU6odEQ9G33TuU+ryqBzUYewO8xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Validity Not Before: May 31 05:38:06 2025 GMT Not After : Jun 7 05:38:06 2025 GMT Subject: CN=683a95be-57e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:a9:b0:b9:08:d8:d7:5a:a9:75:d0:c3:c3: 4c:79:a9:3c:a3:0d:de:81:be:65:73:bd:87:62:a8: da:39:99:07:b1:87:86:c9:b4:37:03:29:d1:78:d9: ba:ed:0f:11:e4:fc:4c:31:16:56:f7:79:3b:f7:91: c8:8a:15:d9:f5:8c:5d:10:03:92:48:5c:05:23:93: 8d:46:e1:80:d4:fe:07:60:fd:f9:aa:6e:51:f7:48: d7:14:f3:32:fc:f6:2f:ff:33:1b:6d:73:ad:60:5a: 8c:2f:6a:90:10:a9:39:f3:3d:b5:84:ac:97:c3:07: 55:b5:a7:4c:cc:b1:f6:2b:a3:26:b3:a1:07:bb:19: b0:45:88:ad:62:4b:62:b9:91:4d:98:9c:a7:42:db: 44:fc:95:f6:99:f4:ad:db:a7:d7:76:75:44:f0:33: d6:ea:1d:4a:0c:78:b8:57:73:10:e1:45:23:41:8c: b8:f6:27:52:8b:0c:35:c4:5b:fe:6a:f4:49:f3:57: 5c:4d:a2:c7:84:65:54:c5:53:2c:0d:4a:38:ae:09: 8c:0b:b6:cc:ea:d2:97:b3:ad:94:28:e3:b4:32:f5: 0a:f8:14:41:54:1f:d8:83:82:4c:ef:fa:01:a8:66: fa:9a:de:93:be:ae:43:bd:8e:04:88:54:c5:76:66: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A0:E2:A3:86:A4:2C:5F:10:BD:FC:58:BA:A6:08:89:EC:F2:67:71 X509v3 Authority Key Identifier: keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4d:6d:c9:90:5f:a5:6f:0c:ac:48:d1:48:18:22:1b:fe:bf: e2:2f:34:fa:f8:a5:90:d5:b2:bc:24:05:72:e9:ad:32:bf:91: 77:b4:37:e8:6d:99:65:40:af:9d:8d:20:15:65:38:57:b8:45: 6a:42:fe:fa:a1:2b:63:5a:6c:ec:1b:06:3a:e3:be:05:91:73: 3a:b7:f9:27:73:74:28:65:0f:d0:b3:5b:ca:67:53:7f:06:a1: 0b:22:73:0c:4b:23:20:2a:42:29:68:8b:73:9b:58:d4:d2:6d: 8e:9f:a8:e2:a9:b2:21:ba:0a:0a:1d:15:6d:24:01:86:c1:42: c8:c5:46:07:9e:4d:a7:19:44:60:4a:fb:83:85:23:c4:13:e9: b4:8f:df:fd:c6:53:05:a9:2f:69:2d:a3:4f:15:69:4e:e7:fe: 2f:a7:f0:18:a1:44:c0:a5:01:f4:dc:fd:3a:5e:40:62:eb:87: 05:25:cd:09:f0:b3:39:8e:af:79:c1:2f:26:50:4d:04:f3:21: fc:7d:77:7b:89:bd:47:84:57:d1:82:87:76:28:ab:d4:97:1c: ad:ea:29:ed:1d:71:c6:f0:84:d9:2a:2a:ee:62:be:bd:43:96: 57:b5:31:46:01:d6:72:a6:4e:3f:d4:ac:db:7a:27:17:67:81: 3e:70:f3:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDkyMjQxNjY1OTU1ODIxN0M5MzYyN0I5NkQ5QzlFQUZB QzFGQUEzRUUwHhcNMjUwNTMxMDUzODA2WhcNMjUwNjA3MDUzODA2WjAYMRYwFAYD VQQDEw02ODNhOTViZS01N2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa6psLkI2NdaqXXQw8NMeak8ow3egb5lc72HYqjaOZkHsYeGybQ3AynReNm6 7Q8R5PxMMRZW93k795HIihXZ9YxdEAOSSFwFI5ONRuGA1P4HYP35qm5R90jXFPMy /PYv/zMbbXOtYFqML2qQEKk58z21hKyXwwdVtadMzLH2K6Mms6EHuxmwRYitYkti uZFNmJynQttE/JX2mfSt26fXdnVE8DPW6h1KDHi4V3MQ4UUjQYy49idSiww1xFv+ avRJ81dcTaLHhGVUxVMsDUo4rgmMC7bM6tKXs62UKOO0MvUK+BRBVB/Yg4JM7/oB qGb6mt6Tvq5DvY4EiFTFdmbnkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmg4qOG pCxfEL38WLqmCIns8mdxMB8GA1UdIwQYMBaAFJIkFmWVWCF8k2J7ltnJ6vrB+qPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi84MTY5NzJDNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlYeVRZbnVXMmNucS1zSDZv LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlY eVRZbnVXMmNucS1zSDZvLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4TW3JkF+lbwysSNFIGCIb/r/iLzT6+KWQ1bK8JAVy6a0yv5F3tDfo bZllQK+djSAVZThXuEVqQv76oStjWmzsGwY6474FkXM6t/knc3QoZQ/Qs1vKZ1N/ BqELInMMSyMgKkIpaItzm1jU0m2On6jiqbIhugoKHRVtJAGGwULIxUYHnk2nGURg SvuDhSPEE+m0j9/9xlMFqS9pLaNPFWlO5/4vp/AYoUTApQH03P06XkBi64cFJc0J 8LM5jq95wS8mUE0E8yH8fXd7ib1HhFfRgod2KKvUlxyt6intHXHG8ITZKiruYr69 Q5ZXtTFGAdZypk4/1KzbeicXZ4E+cPMs -----END CERTIFICATE-----Generated at Sat May 31 17:34:22 2025 by rpki-client