$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json) Hash identifier: 5NVg7JRlzC/hwvXNR2lRB8QsSXt/QTIOe82TlHs1a5g= Subject key identifier: 7A:6F:A6:A1:D4:89:4C:41:C4:37:CF:F8:C6:43:EB:A7:6C:51:CD:46 Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Certificate serial: 065C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft Manifest number: 0657 Signing time: Fri 30 May 2025 22:41:50 +0000 Manifest this update: Fri 30 May 2025 22:41:50 +0000 Manifest next update: Fri 06 Jun 2025 22:41:50 +0000 Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: 2CBnTaZX2RFPaooWDreXW0dZEX2+8vi5N0LqRcquiTo=) 2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: rH99d2UyS2BchbUPUbqFc9GOoYlWGp7hkjxEyr/ZGj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Validity Not Before: May 30 22:41:50 2025 GMT Not After : Jun 6 22:41:50 2025 GMT Subject: CN=683a342e-d69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:0b:23:e8:4f:69:8e:fd:f7:7f:05:c2:8c: fe:2e:44:38:48:c7:21:8b:0d:62:0e:d4:b4:dc:0e: cb:65:5c:e0:68:d3:c2:3f:5f:a8:0f:6e:b4:3e:22: c1:a6:f9:ef:2b:f2:3f:81:2f:b9:dd:f8:3f:53:9b: e9:77:1f:9f:65:ed:08:d6:5c:f0:d3:e0:c5:db:b0: 2f:d7:a0:40:8f:50:ba:21:98:81:31:6b:3b:b1:41: 95:99:ec:c4:1c:6b:7b:dc:a8:01:16:64:55:82:ba: 52:20:c3:47:4e:f9:18:4d:a4:ea:86:a9:9f:e9:72: 1c:10:85:37:c5:c8:9d:19:d1:0e:11:1e:c4:21:06: 35:b3:78:c5:7e:67:cf:5f:4b:07:a3:d3:27:ed:44: 29:b5:ad:4c:48:03:b8:ee:1a:00:70:85:c0:cd:6d: 3b:90:33:c3:37:e2:54:be:a3:03:86:46:e8:d4:16: 52:e6:80:8b:e9:5e:16:fe:66:76:10:da:8d:6e:25: 8b:a1:53:3a:45:23:eb:6f:68:db:82:2f:08:85:35: 4d:79:17:87:2a:3d:63:3f:a7:94:bd:48:6e:ed:4b: e1:a2:18:4a:97:70:ba:ca:06:39:b0:84:1f:a8:8b: a8:7c:35:78:82:1b:e0:f4:54:ee:26:be:1c:e8:93: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6F:A6:A1:D4:89:4C:41:C4:37:CF:F8:C6:43:EB:A7:6C:51:CD:46 X509v3 Authority Key Identifier: keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c1:9d:e6:16:62:0a:73:08:30:13:50:51:52:95:91:f1:71: 96:4c:c0:ce:f3:2b:08:76:f5:ba:75:ae:18:0d:4d:be:28:d7: b4:04:7d:fa:c0:77:fc:24:3b:8f:2f:f0:83:ed:73:a7:e8:bd: 3f:1a:46:ea:5b:4e:17:0e:4e:fa:b5:4d:0f:77:6b:df:53:3b: b3:82:ff:8d:02:ee:6d:9b:88:f0:14:54:06:b2:38:09:e9:e0: c0:5f:47:de:86:ae:32:e2:ee:55:9a:b5:cd:a9:85:33:7a:5d: 3f:77:df:9f:01:cc:d6:ec:08:f4:f6:74:de:5b:31:a7:99:67: 0d:64:dc:87:48:66:75:3b:44:1b:52:b3:84:81:22:84:1b:42: 61:1b:2f:c3:e1:d0:f4:5f:49:87:0e:75:d5:3f:18:d6:7f:89: ce:18:3c:da:61:b5:e3:3a:3c:da:95:f8:1e:b9:d9:60:f0:9b: 84:a9:30:e7:6b:05:cc:31:18:40:b2:a0:fc:cc:40:8e:1b:a9: 6b:93:25:f8:ce:17:fc:5a:ce:63:bf:1c:cb:26:79:50:16:16: bd:bc:f5:85:64:50:cb:7b:88:f2:6e:e7:ee:0b:e6:66:9d:e5: d7:5c:4b:c2:89:07:8f:b0:9d:26:1d:ac:16:d6:2c:26:e1:1d: 8b:18:c6:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYxOTQzMTlDMTQ1 QzlDMENDQjUwHhcNMjUwNTMwMjI0MTUwWhcNMjUwNjA2MjI0MTUwWjAYMRYwFAYD VQQDEw02ODNhMzQyZS1kNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8gLI+hPaY79938Fwoz+LkQ4SMchiw1iDtS03A7LZVzgaNPCP1+oD260PiLB pvnvK/I/gS+53fg/U5vpdx+fZe0I1lzw0+DF27Av16BAj1C6IZiBMWs7sUGVmezE HGt73KgBFmRVgrpSIMNHTvkYTaTqhqmf6XIcEIU3xcidGdEOER7EIQY1s3jFfmfP X0sHo9Mn7UQpta1MSAO47hoAcIXAzW07kDPDN+JUvqMDhkbo1BZS5oCL6V4W/mZ2 ENqNbiWLoVM6RSPrb2jbgi8IhTVNeReHKj1jP6eUvUhu7UvhohhKl3C6ygY5sIQf qIuofDV4ghvg9FTuJr4c6JMlVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpvpqHU iUxBxDfP+MZD66dsUc1GMB8GA1UdIwQYMBaAFJBY/tzsX4dvPf4WGUMZwUXJwMy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIwRi81MkQwQTEyMDg1 NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094ZmgyODlfaFlaUXhuQlJjbkF6 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tGai0zT3hmaDI4OV9oWVpReG5CUmNuQXpMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094Zmgy ODlfaFlaUXhuQlJjbkF6TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkwZ3mFmIKcwgwE1BRUpWR8XGWTMDO8ysIdvW6da4YDU2+KNe0BH36 wHf8JDuPL/CD7XOn6L0/GkbqW04XDk76tU0Pd2vfUzuzgv+NAu5tm4jwFFQGsjgJ 6eDAX0fehq4y4u5VmrXNqYUzel0/d9+fAczW7Aj09nTeWzGnmWcNZNyHSGZ1O0Qb UrOEgSKEG0JhGy/D4dD0X0mHDnXVPxjWf4nOGDzaYbXjOjzalfgeudlg8JuEqTDn awXMMRhAsqD8zECOG6lrkyX4zhf8Ws5jvxzLJnlQFha9vPWFZFDLe4jybufuC+Zm neXXXEvCiQePsJ0mHawW1iwm4R2LGMbF -----END CERTIFICATE-----Generated at Sat May 31 17:34:27 2025 by rpki-client