$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft File: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json) Hash identifier: Atvq/xenvKJ2pLqnKCbW0vqbcjJb5RqIzJX40mBuG2o= Subject key identifier: 64:7F:91:78:F4:8F:D5:13:89:94:06:3B:A5:99:F9:76:6A:B5:96:32 Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 Certificate issuer: /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft Manifest number: B7 Signing time: Sat 31 May 2025 05:31:15 +0000 Manifest this update: Sat 31 May 2025 05:31:14 +0000 Manifest next update: Sat 07 Jun 2025 05:31:14 +0000 Files and hashes: 1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: jyKhTbM9QRK9Hyc6E59ZoRsaB3rGIqsie+hYQNVMoFQ=) 2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: uOPt38YEsEAnQYMhJ/vWZ8Bh0zzqI6ovkE/WceLABSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Validity Not Before: May 31 05:31:14 2025 GMT Not After : Jun 7 05:31:14 2025 GMT Subject: CN=683a9422-cc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:8a:8c:54:21:b5:85:ed:14:b7:a4:8a:f0: 03:95:b5:62:74:d9:42:22:a0:44:5d:a0:34:6a:f1: 8f:f0:a7:6e:50:cd:6e:dc:52:ae:6e:23:55:7c:5b: 1f:eb:36:ef:37:36:10:b1:0b:46:3c:08:7c:2b:62: 13:19:94:33:cd:c0:1d:9a:7c:7a:ce:59:8d:f4:69: 0e:40:aa:74:ee:bf:72:e9:83:aa:87:4a:2a:9d:23: 85:36:08:5c:95:e9:d5:33:12:46:95:47:49:91:7f: 78:e4:bb:0d:2b:db:df:a8:70:1b:b3:49:87:70:a4: f4:79:fb:09:b8:09:87:7f:cf:f8:b8:f1:df:01:04: 6a:fe:cc:8f:e1:7d:1d:19:44:a0:9d:5c:34:02:b2: b3:2b:f1:83:c7:f4:59:49:ac:42:fc:d7:bb:36:27: 6a:32:78:6b:fd:9b:86:88:e8:8d:f2:d0:3c:d9:5a: 55:b0:af:61:9f:cb:be:3e:3a:fb:60:76:7c:31:d5: 9c:c5:05:c0:48:e2:d4:59:dc:6a:9f:98:a3:59:d2: 3d:9f:4c:7b:40:1d:7d:13:9e:e9:fd:64:f1:1d:21: 96:41:4f:f1:fe:12:94:9e:89:d8:7d:a8:a7:a3:3d: a2:c4:f6:0a:d6:9c:10:33:0f:ef:f4:20:b7:e9:a6: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7F:91:78:F4:8F:D5:13:89:94:06:3B:A5:99:F9:76:6A:B5:96:32 X509v3 Authority Key Identifier: keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:3c:64:57:95:88:cf:13:ff:71:e2:81:5c:33:da:c7:c9:68: bd:4f:26:4d:9f:8e:16:cc:10:62:bc:17:57:33:ae:7f:37:8f: 83:67:1b:ec:9c:3b:7f:a4:92:3b:9b:27:48:ec:07:b7:4f:6a: 62:73:5f:df:26:bd:1a:cc:cd:7b:52:16:bf:5c:2a:2b:17:b3: f2:5d:71:cd:31:65:a7:d6:1e:f5:43:09:62:08:4b:0c:b2:db: 46:0f:d3:09:d2:46:c6:bf:78:e6:60:63:4a:72:63:9f:63:e0: 8e:9f:27:57:d1:1a:72:a1:7f:59:fd:04:dc:7f:6a:5f:13:6f: 17:4b:7f:71:04:ab:e3:02:5c:9d:bb:72:13:bf:ff:e1:6b:73: ea:6e:8f:60:c0:e9:3b:00:7a:e0:1e:1b:4c:13:91:2a:09:4c: 40:fb:82:57:a7:54:eb:fa:db:b7:3e:78:9e:83:1f:83:57:e2: 8b:9c:1b:45:49:1e:aa:21:9f:7a:d9:f8:0d:69:f5:1e:d9:4a: 99:f5:14:0f:16:21:c5:04:7a:e3:aa:77:ae:d9:ce:da:b9:f5: a8:12:87:4e:b4:be:d7:15:2f:a7:59:46:b3:dc:26:37:a8:8c: 84:ef:6a:96:88:62:4c:d9:03:64:4a:97:6c:c8:b5:69:8b:7c: 35:4c:4d:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNEMxMTAvBgNVBAUTKDJBNDQ1NkQxNzJCMkI4NkRDREE3MTJFNjYxRjZEOUYy RkYxOTIwMzgwHhcNMjUwNTMxMDUzMTE0WhcNMjUwNjA3MDUzMTE0WjAYMRYwFAYD VQQDEw02ODNhOTQyMi1jYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdmKjFQhtYXtFLekivADlbVidNlCIqBEXaA0avGP8KduUM1u3FKubiNVfFsf 6zbvNzYQsQtGPAh8K2ITGZQzzcAdmnx6zlmN9GkOQKp07r9y6YOqh0oqnSOFNghc lenVMxJGlUdJkX945LsNK9vfqHAbs0mHcKT0efsJuAmHf8/4uPHfAQRq/syP4X0d GUSgnVw0ArKzK/GDx/RZSaxC/Ne7NidqMnhr/ZuGiOiN8tA82VpVsK9hn8u+Pjr7 YHZ8MdWcxQXASOLUWdxqn5ijWdI9n0x7QB19E57p/WTxHSGWQU/x/hKUnonYfain oz2ixPYK1pwQMw/v9CC36aYpKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGR/kXj0 j9UTiZQGO6WZ+XZqtZYyMB8GA1UdIwQYMBaAFCpEVtFysrhtzacS5mH22fL/GSA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI0Qy9BQkNCRUJENjIz RDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVHM05weExtWWZiWjh2OFpJ RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trUlcwWEt5dUczTnB4TG1ZZmJaOHY4WklEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI0Qy9BQkNCRUJENjIzRDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVH M05weExtWWZiWjh2OFpJRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGPGRXlYjPE/9x4oFcM9rHyWi9TyZNn44WzBBivBdXM65/N4+DZxvs nDt/pJI7mydI7Ae3T2pic1/fJr0azM17Uha/XCorF7PyXXHNMWWn1h71QwliCEsM sttGD9MJ0kbGv3jmYGNKcmOfY+COnydX0RpyoX9Z/QTcf2pfE28XS39xBKvjAlyd u3ITv//ha3Pqbo9gwOk7AHrgHhtME5EqCUxA+4JXp1Tr+tu3Pniegx+DV+KLnBtF SR6qIZ962fgNafUe2UqZ9RQPFiHFBHrjqneu2c7aufWoEodOtL7XFS+nWUaz3CY3 qIyE72qWiGJM2QNkSpdsyLVpi3w1TE20 -----END CERTIFICATE-----Generated at Sat May 31 15:16:23 2025 by rpki-client