$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: Bwu04IkiT5FcHRHg4kj4yUDyvIhAbMLTMhOr3peWy68= Subject key identifier: ED:DA:B1:CA:42:38:61:1E:AE:64:E5:DC:F8:6E:A9:4C:22:3B:E7:5F Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 05A3 Signing time: Fri 30 May 2025 23:24:08 +0000 Manifest this update: Fri 30 May 2025 23:24:07 +0000 Manifest next update: Fri 06 Jun 2025 23:24:07 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: K8m/hH047/WbSSKahLaDIP/VSVsfCyKilZcybegvhf0=) 2: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: May 30 23:24:07 2025 GMT Not After : Jun 6 23:24:07 2025 GMT Subject: CN=683a3e18-eaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:1d:3f:e4:cb:dd:73:14:3b:19:b9:5a:e7: c4:d0:77:12:7e:6d:7f:e6:f1:d5:bb:f8:94:95:ad: fa:5e:84:90:64:25:4f:4f:4e:c6:ee:f9:70:f9:4a: 94:56:11:8f:3d:7d:d0:7d:f5:a9:24:bb:67:3a:ee: d6:1d:22:6c:df:82:d3:03:59:56:95:80:62:8b:99: bd:4b:8c:a9:33:91:c6:b8:09:40:70:b1:5b:a1:43: b9:13:40:28:50:d6:fe:f8:5d:8d:d2:d2:da:31:55: 9c:45:46:01:b1:03:27:2d:57:2b:86:68:35:17:ff: 80:7a:36:02:15:fd:b3:6d:43:03:b7:d2:7f:d3:99: 59:76:69:03:1e:68:42:8a:50:f7:4d:39:ca:74:13: d3:f2:dc:81:49:f7:97:25:dd:78:c2:62:4b:46:81: 5b:64:f8:01:22:01:8d:ec:5a:40:d2:55:7d:c7:eb: 67:95:b2:77:5a:3b:4a:ef:da:79:70:56:19:6c:4e: 0e:82:c6:75:50:d4:17:e0:a8:7f:02:0f:53:43:cd: 45:a9:dd:6e:67:75:8b:6c:5d:be:dc:cf:79:fa:f2: e0:9c:da:b6:1e:9b:17:4b:01:57:8b:40:ee:43:43: 8c:93:8e:e1:a9:74:43:28:a3:e7:ae:f9:bf:b7:70: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DA:B1:CA:42:38:61:1E:AE:64:E5:DC:F8:6E:A9:4C:22:3B:E7:5F X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:70:7e:41:49:cd:6d:d2:e2:4e:a6:31:6f:ea:98:9c:1e:ed: ed:4e:ef:90:8f:76:86:f8:21:43:fe:ef:2f:98:cf:86:45:9f: d0:c0:c7:8d:75:ac:3c:45:1c:48:35:64:72:71:0b:e9:1a:40: 35:28:71:4e:34:31:2a:81:72:44:04:7a:d6:66:dc:4f:b0:2e: 35:ae:eb:37:71:40:de:e9:b0:11:7c:89:de:4d:da:ad:00:7b: 64:b7:8a:c5:33:7e:99:65:47:11:c3:4d:04:71:76:64:59:94: eb:ea:a5:de:88:2b:1a:e0:db:d8:cb:f8:ba:94:61:7a:ad:98: 51:5f:10:04:20:63:24:25:e3:f3:cf:e0:ad:13:b1:28:46:90: e3:e0:f4:fe:45:e4:c5:d0:e7:29:bf:ca:f7:e8:18:fb:43:0f: 30:89:d7:fa:c2:a9:25:41:eb:48:8f:57:a3:6b:f8:34:dd:fc: e8:0f:b8:9d:c5:90:8c:4f:bd:3d:e2:bd:9e:62:b6:fb:be:1a: a2:8c:98:ec:da:60:52:7e:58:c4:d9:4f:79:6c:67:94:79:cc: 0f:bc:15:f4:bc:5a:9e:4d:cd:c8:c9:fa:62:c0:34:50:a4:c5: b7:11:b3:69:90:c8:07:2b:6b:df:2c:a6:af:a9:ed:b3:05:c0: 99:1f:f1:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUwNTMwMjMyNDA3WhcNMjUwNjA2MjMyNDA3WjAYMRYwFAYD VQQDEw02ODNhM2UxOC1lYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYkdP+TL3XMUOxm5WufE0HcSfm1/5vHVu/iUla36XoSQZCVPT07G7vlw+UqU VhGPPX3QffWpJLtnOu7WHSJs34LTA1lWlYBii5m9S4ypM5HGuAlAcLFboUO5E0Ao UNb++F2N0tLaMVWcRUYBsQMnLVcrhmg1F/+AejYCFf2zbUMDt9J/05lZdmkDHmhC ilD3TTnKdBPT8tyBSfeXJd14wmJLRoFbZPgBIgGN7FpA0lV9x+tnlbJ3WjtK79p5 cFYZbE4OgsZ1UNQX4Kh/Ag9TQ81Fqd1uZ3WLbF2+3M95+vLgnNq2HpsXSwFXi0Du Q0OMk47hqXRDKKPnrvm/t3CD1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3ascpC OGEermTl3PhuqUwiO+dfMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbcH5BSc1t0uJOpjFv6picHu3tTu+Qj3aG+CFD/u8vmM+GRZ/QwMeN daw8RRxINWRycQvpGkA1KHFONDEqgXJEBHrWZtxPsC41rus3cUDe6bARfIneTdqt AHtkt4rFM36ZZUcRw00EcXZkWZTr6qXeiCsa4NvYy/i6lGF6rZhRXxAEIGMkJePz z+CtE7EoRpDj4PT+ReTF0Ocpv8r36Bj7Qw8widf6wqklQetIj1eja/g03fzoD7id xZCMT7094r2eYrb7vhqijJjs2mBSfljE2U95bGeUecwPvBX0vFqeTc3IyfpiwDRQ pMW3EbNpkMgHK2vfLKavqe2zBcCZH/GL -----END CERTIFICATE-----Generated at Sat May 31 16:44:01 2025 by rpki-client