$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: udsz1uBVNtiXv1FIHt2FqyQ+y5ojWPigoG2uViiNQO8= Subject key identifier: 5D:BC:44:40:DB:17:B0:B1:32:7F:DD:B0:B4:02:5F:D3:81:C8:07:8D Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 0415 Signing time: Sat 31 May 2025 00:37:03 +0000 Manifest this update: Sat 31 May 2025 00:37:02 +0000 Manifest next update: Sat 07 Jun 2025 00:37:02 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: /8uvoLIB+s27yP91kFvQePlHLeuExMtTYGMa+trEm8I=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: c0Qo/V4Zd6PI/SmvO+fxR2cS+G3poh+IiHb3vxBLGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: May 31 00:37:02 2025 GMT Not After : Jun 7 00:37:02 2025 GMT Subject: CN=683a4f2e-ea5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:77:62:f3:94:54:e8:2c:7d:5b:2a:f9:62:a3: 4e:2f:1d:7c:da:80:12:81:09:69:5e:ac:42:04:00: f3:26:78:c0:ed:49:32:f2:b2:17:8f:7e:7f:d4:ac: 99:c9:ba:90:c6:9f:2e:a7:14:34:82:75:8a:70:b8: 02:28:86:18:b2:4b:0d:46:93:74:69:1e:eb:e4:93: 0f:a2:1b:d3:73:ee:4d:16:ad:cd:a9:c7:b2:48:6b: bd:b9:1d:75:57:0a:6b:bf:79:e6:3a:c4:7d:78:81: 86:db:30:46:4a:5c:3b:8d:0b:e0:4d:55:1b:58:e8: a6:a0:d8:4e:b6:c6:2e:e6:aa:c5:7f:b2:58:5b:c6: 57:cd:e9:88:8b:20:fd:72:f5:91:7a:d1:79:28:64: 47:06:91:67:39:de:48:51:2d:a4:c0:49:9c:83:27: 8b:7b:f1:73:0b:09:18:76:3a:ab:ec:05:ef:7c:c9: 0e:f8:ef:22:cf:43:0e:55:6d:56:ac:be:83:b5:17: db:04:02:0e:6c:03:72:96:0d:7c:38:67:ac:38:05: df:d4:15:a1:c7:04:7b:21:3e:c5:8c:ae:2b:0b:c3: e2:7d:89:ef:d6:0b:42:63:dd:51:52:6e:38:a6:e8: c2:e2:2b:8d:43:09:b4:41:bd:d6:cb:e1:38:e0:72: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:44:40:DB:17:B0:B1:32:7F:DD:B0:B4:02:5F:D3:81:C8:07:8D X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f6:61:79:91:d5:02:b2:4b:24:59:2f:dc:f3:c6:86:a6:80: 1d:e3:6e:4d:25:df:0a:d8:3a:19:38:58:d8:59:d2:15:04:a0: af:8e:8a:7f:15:e7:06:fa:d0:c2:bd:44:e3:6f:42:b7:61:12: 84:a9:b8:1c:a4:8f:db:bb:74:9f:f2:a3:9f:d2:b7:61:78:3c: c0:ec:eb:1d:ab:73:68:87:e2:c8:8f:3a:15:90:7d:b4:8f:26: 04:73:cd:07:d7:29:1d:37:d4:7b:ed:09:65:9c:2c:21:9e:e6: 9c:cc:07:54:64:5c:c6:23:12:d5:9b:d9:7d:14:ac:43:5a:ff: ad:d1:5e:1f:03:a9:82:83:1b:8e:87:43:1e:2f:e2:c9:3a:92: 10:52:f9:ba:ff:79:c3:51:45:1f:09:16:1f:70:81:6d:d0:d2: 73:78:8f:f1:1b:da:4d:f9:4b:0b:f7:d6:09:e0:1e:33:10:04: 51:95:f3:e7:01:93:9e:e8:8f:e8:b4:10:bc:b0:cd:80:e2:64: a9:8f:b4:df:41:c3:ad:47:83:60:d1:4c:e0:98:2f:aa:f1:d6: 8d:b1:c6:f7:b1:42:ca:03:ab:68:23:c2:c4:0e:96:06:e0:a5: c5:15:38:e7:64:12:6b:e7:14:d5:51:51:88:2d:4f:27:ae:7e: 83:2b:ab:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjUwNTMxMDAzNzAyWhcNMjUwNjA3MDAzNzAyWjAYMRYwFAYD VQQDEw02ODNhNGYyZS1lYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Xdi85RU6Cx9Wyr5YqNOLx182oASgQlpXqxCBADzJnjA7Uky8rIXj35/1KyZ ybqQxp8upxQ0gnWKcLgCKIYYsksNRpN0aR7r5JMPohvTc+5NFq3NqceySGu9uR11 Vwprv3nmOsR9eIGG2zBGSlw7jQvgTVUbWOimoNhOtsYu5qrFf7JYW8ZXzemIiyD9 cvWRetF5KGRHBpFnOd5IUS2kwEmcgyeLe/FzCwkYdjqr7AXvfMkO+O8iz0MOVW1W rL6DtRfbBAIObANylg18OGesOAXf1BWhxwR7IT7FjK4rC8PifYnv1gtCY91RUm44 pujC4iuNQwm0Qb3Wy+E44HLrjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF28REDb F7CxMn/dsLQCX9OByAeNMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+9mF5kdUCskskWS/c88aGpoAd425NJd8K2DoZOFjYWdIVBKCvjop/ FecG+tDCvUTjb0K3YRKEqbgcpI/bu3Sf8qOf0rdheDzA7Osdq3Noh+LIjzoVkH20 jyYEc80H1ykdN9R77QllnCwhnuaczAdUZFzGIxLVm9l9FKxDWv+t0V4fA6mCgxuO h0MeL+LJOpIQUvm6/3nDUUUfCRYfcIFt0NJzeI/xG9pN+UsL99YJ4B4zEARRlfPn AZOe6I/otBC8sM2A4mSpj7TfQcOtR4Ng0UzgmC+q8daNscb3sULKA6toI8LEDpYG 4KXFFTjnZBJr5xTVUVGILU8nrn6DK6u9 -----END CERTIFICATE-----Generated at Sat May 31 16:38:57 2025 by rpki-client