$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json) Hash identifier: MDdwMQBPTP9SZaG+/LsHfIMWq9ESi3frQuPucC6DkII= Subject key identifier: FF:93:A9:FC:B2:98:2E:A9:54:06:A4:D9:64:5E:5B:66:A5:C9:D1:49 Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft Manifest number: 01E2 Signing time: Wed 11 Jun 2025 02:06:39 +0000 Manifest this update: Wed 11 Jun 2025 02:06:38 +0000 Manifest next update: Wed 18 Jun 2025 02:06:38 +0000 Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: hD+1okcYvA5Vk/F2k/2RBLA/7DAhp+kXHkEkuhPiWnk=) 2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: hbdkOUT0eBQ98Cc0oj/9P37h6+6Kubs6FMec8+3wPTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 02:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Jun 11 02:06:38 2025 GMT Not After : Jun 18 02:06:38 2025 GMT Subject: CN=6848e4af-8628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:09:7b:df:d5:c9:6e:ec:d2:83:da:89:a3: ee:53:00:3d:9d:3d:26:58:35:99:b9:57:f2:48:cc: 70:c9:79:dd:0d:37:1c:46:25:88:7a:6a:b2:56:06: 75:b2:99:cd:d8:60:b9:18:f3:6f:41:ad:e2:44:f6: 2a:ef:95:95:02:6e:1b:f4:0a:b2:74:96:df:9e:c9: 36:0e:29:f2:87:b9:04:b4:72:5a:df:11:7b:b5:bd: 1b:29:53:bc:37:78:91:90:92:b4:b9:95:1e:a6:f7: 2a:f1:71:8b:50:aa:c5:2f:d9:7e:1b:3d:6b:81:c9: 91:9d:23:bc:fb:f0:21:47:dc:a9:4b:5a:c9:21:c0: 40:e5:c0:eb:b4:f8:59:9b:34:46:e7:d7:d6:fe:62: a7:95:a5:7b:d3:02:9f:3d:a6:90:00:c9:0a:f3:cd: 8d:51:f8:80:7c:36:8c:87:a4:ce:08:04:ef:84:6a: 96:19:51:4d:c8:6e:91:db:a8:c3:87:75:b2:69:f8: c1:b1:a2:81:14:39:ca:03:bf:74:ae:a2:1f:c5:08: 21:71:f5:70:16:1b:a4:6f:d9:f9:44:8c:3b:63:09: 9a:ee:57:c0:da:29:55:b8:23:1d:65:73:83:1b:a8: 32:87:57:bf:8d:a6:ba:b9:8d:3e:16:b3:76:11:c7: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:93:A9:FC:B2:98:2E:A9:54:06:A4:D9:64:5E:5B:66:A5:C9:D1:49 X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d5:47:67:2c:52:13:7b:ea:f8:2e:c2:eb:8d:fa:e0:4f:be: 81:03:d5:9b:24:59:17:ef:81:c6:9b:d5:10:51:1d:ef:72:06: 4d:81:e2:f2:cd:b7:4f:e1:bf:46:b9:15:6f:5b:88:8f:9f:b8: 41:ed:cc:6a:d2:08:42:e3:b2:1d:9c:31:ac:ab:cb:d0:1a:fc: db:32:93:97:1d:f7:18:10:86:1b:88:7d:2f:01:c6:89:03:d3: 3c:cb:65:e5:e7:76:93:44:77:66:a4:da:45:6d:4e:a7:f4:69: 2f:0f:ca:54:9e:34:58:d4:cf:bf:25:06:ba:de:8b:d0:51:de: 3c:f4:99:72:b2:55:0d:1d:52:c6:34:39:ad:3c:57:25:47:04: 45:8d:13:0d:f2:06:e6:5e:1f:f4:da:e0:19:80:d0:c1:95:e8: da:14:1d:8f:e5:43:78:79:29:23:97:ed:45:75:47:dd:51:c2: 00:8b:fa:9d:40:fe:e7:5d:2c:34:cd:85:fb:d8:d3:1c:25:cb: c9:a7:3b:77:97:95:3f:ce:48:28:7d:d9:d5:65:fa:22:b8:15: 15:0c:33:a5:0d:c7:4f:46:69:86:ad:1c:52:5b:5a:a9:1f:5e: da:64:82:e0:5b:a9:fc:21:66:66:05:ea:32:a8:d0:3d:92:b2: 72:ee:3d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjUwNjExMDIwNjM4WhcNMjUwNjE4MDIwNjM4WjAYMRYwFAYD VQQDEw02ODQ4ZTRhZi04NjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gcJe9/VyW7s0oPaiaPuUwA9nT0mWDWZuVfySMxwyXndDTccRiWIemqyVgZ1 spnN2GC5GPNvQa3iRPYq75WVAm4b9AqydJbfnsk2Dinyh7kEtHJa3xF7tb0bKVO8 N3iRkJK0uZUepvcq8XGLUKrFL9l+Gz1rgcmRnSO8+/AhR9ypS1rJIcBA5cDrtPhZ mzRG59fW/mKnlaV70wKfPaaQAMkK882NUfiAfDaMh6TOCATvhGqWGVFNyG6R26jD h3WyafjBsaKBFDnKA790rqIfxQghcfVwFhukb9n5RIw7Ywma7lfA2ilVuCMdZXOD G6gyh1e/jaa6uY0+FrN2Ece9NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+Tqfyy mC6pVAak2WReW2alydFJMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjREMy82ODAzNEM2ODYyNjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8x TWY3dVJVbXJNTF9ucFVWUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx1UdnLFITe+r4LsLrjfrgT76BA9WbJFkX74HGm9UQUR3vcgZNgeLy zbdP4b9GuRVvW4iPn7hB7cxq0ghC47IdnDGsq8vQGvzbMpOXHfcYEIYbiH0vAcaJ A9M8y2Xl53aTRHdmpNpFbU6n9GkvD8pUnjRY1M+/JQa63ovQUd489JlyslUNHVLG NDmtPFclRwRFjRMN8gbmXh/02uAZgNDBlejaFB2P5UN4eSkjl+1FdUfdUcIAi/qd QP7nXSw0zYX72NMcJcvJpzt3l5U/zkgofdnVZfoiuBUVDDOlDcdPRmmGrRxSW1qp H17aZILgW6n8IWZmBeoyqNA9krJy7j2L -----END CERTIFICATE-----Generated at Thu Jun 12 13:40:20 2025 by rpki-client