$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json) Hash identifier: BBhJh7PG/Sjn2tycL5WbARHFcsypjIGyzeRCagmthuQ= Subject key identifier: 3F:2A:A6:60:6B:82:80:12:DE:88:67:91:27:BB:06:25:FE:00:8E:CC Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Certificate serial: 0468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft Manifest number: 0464 Signing time: Sat 31 May 2025 00:20:23 +0000 Manifest this update: Sat 31 May 2025 00:20:22 +0000 Manifest next update: Sat 07 Jun 2025 00:20:22 +0000 Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: nCberJjBCV0Pgh5+GH/6NcAI0olja9kZNYp+G4xH9DU=) 2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Validity Not Before: May 31 00:20:22 2025 GMT Not After : Jun 7 00:20:22 2025 GMT Subject: CN=683a4b46-3ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:39:c5:43:80:54:7b:41:c2:3a:9f:43:2e:3c: d4:83:ae:43:60:db:77:90:a4:37:8d:db:25:31:11: 29:e0:24:0e:e4:ac:b8:81:8b:88:ba:9b:93:46:22: 70:6c:3c:34:5d:7d:f4:84:85:49:68:81:03:f1:1f: a0:fa:1b:82:1f:4b:6a:eb:f9:0a:a4:0f:61:9c:2a: d2:16:bf:a9:ae:d7:71:db:76:9c:fa:0c:c8:25:41: fd:40:f2:2f:0f:ed:4f:d8:d0:6f:d1:2d:c3:39:6c: be:32:54:40:0c:9e:37:e8:1f:00:50:5f:c6:c1:a8: b7:59:0c:db:d3:ae:4d:47:c9:d6:a8:fa:c6:2d:a1: c4:55:5d:e0:54:24:63:4c:63:cb:20:7e:ab:75:f5: 8e:5b:0c:0d:8f:0e:b0:44:ed:1a:df:97:f8:e4:4c: de:4f:f5:33:46:e6:bd:8d:3e:a3:fa:c4:53:d3:46: 50:99:23:7e:7c:f4:03:f3:67:00:e2:ac:24:7c:ca: 4e:4e:f0:dc:02:e4:56:2f:78:13:f6:cb:68:9f:94: b2:aa:2e:c5:93:f8:44:c7:c0:4d:d1:1f:57:49:38: 52:f4:23:41:33:73:fa:2c:7c:0d:e3:2c:98:cf:ae: 0b:08:16:b0:8c:e4:90:e9:5c:04:a0:dd:45:1b:1a: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2A:A6:60:6B:82:80:12:DE:88:67:91:27:BB:06:25:FE:00:8E:CC X509v3 Authority Key Identifier: keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fa:7b:ca:4f:f0:a5:66:d5:1c:bb:9c:d7:b4:b0:c0:e3:45: 8a:92:ea:cf:8e:ec:9d:f5:83:79:a0:d1:c7:dd:26:a3:51:6f: 21:50:79:a3:bf:9d:06:88:45:30:d8:1d:43:98:1a:a8:60:b6: 51:58:70:70:7c:38:09:c1:4f:04:71:be:1d:1a:a1:61:3d:a1: e7:7e:52:83:1c:90:4e:14:5b:38:d3:4e:84:16:b3:44:f8:2b: a6:5b:8c:ab:18:17:35:ad:97:e2:a4:42:21:ec:5e:cf:00:c5: b7:7b:27:f3:70:db:80:1b:2d:67:6e:82:25:46:3d:8b:d9:e4: 2e:f1:52:df:71:29:b9:ab:71:bb:9d:2d:51:cb:72:f6:88:ec: ae:7e:a1:b0:81:04:94:1f:84:ae:c3:2c:21:66:3b:39:4f:73: 95:16:f6:ec:1a:7e:03:98:b3:fd:87:78:eb:af:7d:8d:1e:9c: 11:52:27:29:9c:3d:1a:d0:17:b3:63:95:e7:e7:19:b5:28:f5: 9c:c3:ab:f1:a1:84:ca:83:31:8d:52:9e:23:37:ba:f8:61:a7: 69:6c:95:62:cb:b3:75:64:5c:89:fe:3a:ef:af:e1:56:f4:96: 97:96:a8:df:04:37:3e:5f:e6:04:1e:08:7d:f0:a8:9e:d8:f4: fb:b2:7b:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCQkExMTAvBgNVBAUTKDJCNDRDODg5MUFBRTJCOEExRkRCNDhFQkY0QTU3RTk4 OUFFQjczNjMwHhcNMjUwNTMxMDAyMDIyWhcNMjUwNjA3MDAyMDIyWjAYMRYwFAYD VQQDEw02ODNhNGI0Ni0zYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/DnFQ4BUe0HCOp9DLjzUg65DYNt3kKQ3jdslMREp4CQO5Ky4gYuIupuTRiJw bDw0XX30hIVJaIED8R+g+huCH0tq6/kKpA9hnCrSFr+prtdx23ac+gzIJUH9QPIv D+1P2NBv0S3DOWy+MlRADJ436B8AUF/Gwai3WQzb065NR8nWqPrGLaHEVV3gVCRj TGPLIH6rdfWOWwwNjw6wRO0a35f45EzeT/UzRua9jT6j+sRT00ZQmSN+fPQD82cA 4qwkfMpOTvDcAuRWL3gT9ston5Syqi7Fk/hEx8BN0R9XSThS9CNBM3P6LHwN4yyY z64LCBawjOSQ6VwEoN1FGxoyzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8qpmBr goAS3ohnkSe7BiX+AI7MMB8GA1UdIwQYMBaAFCtEyIkariuKH9tI6/Slfpia63Nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJCQS9GOTEzQzBCQTRD NDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0b2YyMGpyOUtWLW1KcnJj Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swVElpUnF1SzRvZjIwanI5S1YtbUpycmMyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJCQS9GOTEzQzBCQTRDNDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0 b2YyMGpyOUtWLW1KcnJjMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF+nvKT/ClZtUcu5zXtLDA40WKkurPjuyd9YN5oNHH3SajUW8hUHmj v50GiEUw2B1DmBqoYLZRWHBwfDgJwU8Ecb4dGqFhPaHnflKDHJBOFFs4006EFrNE +CumW4yrGBc1rZfipEIh7F7PAMW3eyfzcNuAGy1nboIlRj2L2eQu8VLfcSm5q3G7 nS1Ry3L2iOyufqGwgQSUH4SuwywhZjs5T3OVFvbsGn4DmLP9h3jrr32NHpwRUicp nD0a0BezY5Xn5xm1KPWcw6vxoYTKgzGNUp4jN7r4YadpbJViy7N1ZFyJ/jrvr+FW 9JaXlqjfBDc+X+YEHgh98Kie2PT7sntz -----END CERTIFICATE-----Generated at Sat May 31 17:00:20 2025 by rpki-client