$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: BqbX0eHa5IP88w47CSDBWNqC4B6QeyF4PlfXqAe74Tk= Subject key identifier: 07:E6:46:F0:78:85:E9:57:9F:F9:4D:4D:83:45:4F:9F:AD:2C:8E:03 Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 38BD Signing time: Sat 31 May 2025 14:36:11 +0000 Manifest this update: Sat 31 May 2025 14:36:10 +0000 Manifest next update: Sat 07 Jun 2025 14:36:10 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: UNPwtvhptiHU+dJb6Q6dn5kXTe40MrKnjH7KbTeDzIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: May 31 14:36:10 2025 GMT Not After : Jun 7 14:36:10 2025 GMT Subject: CN=683b13da-6968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:a3:ac:e4:9e:da:5a:63:26:43:be:ff:4f: 14:c8:fd:8f:fb:75:cc:48:43:a7:8c:98:93:41:50: a9:70:56:87:1e:91:63:7d:ad:f3:d4:4f:9b:c0:53: 7a:22:6f:bf:ee:5c:d5:db:4f:db:d4:94:bf:c9:a0: 3f:d7:3c:21:89:7f:a2:55:39:66:ae:d0:d5:df:53: d6:10:95:02:9d:93:96:75:22:9d:4c:16:28:a5:58: 63:c4:0e:04:77:c9:90:2b:04:43:ae:66:62:ca:a5: f2:7e:45:d6:de:2a:93:51:74:98:12:c8:3b:36:70: 2b:91:c4:d6:45:47:63:2e:ab:85:6c:9a:aa:5e:3a: 76:15:9f:57:b8:af:39:fd:63:91:84:a6:9c:43:4e: a5:f5:53:74:2c:4c:0a:7b:b4:cf:04:51:8f:83:4b: 46:2a:2a:c6:bb:c9:b5:73:01:da:25:b5:e2:4d:c2: 9b:a3:cd:37:66:ba:0d:bf:0d:23:f9:d3:a9:69:03: ca:b4:55:20:05:20:8f:fc:77:5e:46:af:85:ef:77: db:a5:a9:44:81:8d:79:73:a0:97:b4:f3:92:07:88: 02:5e:84:53:8c:c5:e1:e3:75:b1:41:4f:8b:ad:02: 08:54:f3:77:fc:cf:62:79:fd:84:61:88:72:fe:51: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E6:46:F0:78:85:E9:57:9F:F9:4D:4D:83:45:4F:9F:AD:2C:8E:03 X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:89:0a:3e:06:c2:d0:6f:a3:8b:13:9b:d0:71:f5:6d:4a:74: 1b:33:93:3e:a5:9e:37:2f:d3:a5:f7:8b:b2:14:99:5d:c6:51: 5d:d8:21:ab:ad:b4:9c:86:52:23:31:84:b3:42:d2:24:51:c7: 45:d6:e8:e6:b0:18:c2:e2:c9:7a:56:10:e1:4c:d8:7c:de:75: f0:01:3a:f1:2c:42:ed:07:97:ff:02:78:c2:43:35:35:34:ad: 51:f4:fd:2f:98:40:cf:b5:66:5b:13:58:d5:93:3a:bc:79:3e: bd:43:63:e5:2f:d9:1c:06:fa:42:ff:0c:ae:44:f2:58:16:6e: d3:78:e0:dc:01:68:c5:b7:f7:3b:0f:a7:30:8a:64:58:13:0c: 27:e7:9e:28:90:f5:3f:1b:42:3c:cc:41:5e:32:c1:53:84:01: 67:d6:e5:e4:be:56:12:49:e9:0c:3c:08:8b:ba:68:85:74:38: cf:82:24:2b:d0:2a:fd:6a:3c:50:68:3f:e7:22:2c:81:47:43: 34:d8:c6:4e:77:a8:74:c3:83:a5:db:5c:af:2e:9c:99:cf:1d: 3c:3f:b0:9e:98:32:e9:b0:cc:e2:48:3f:2d:07:80:8d:1c:d6: 11:48:cc:f5:59:cc:0e:19:0c:e1:e1:65:86:69:fa:03:d3:2b: 7a:a8:cb:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUwNTMxMTQzNjEwWhcNMjUwNjA3MTQzNjEwWjAYMRYwFAYD VQQDEw02ODNiMTNkYS02OTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUGjrOSe2lpjJkO+/08UyP2P+3XMSEOnjJiTQVCpcFaHHpFjfa3z1E+bwFN6 Im+/7lzV20/b1JS/yaA/1zwhiX+iVTlmrtDV31PWEJUCnZOWdSKdTBYopVhjxA4E d8mQKwRDrmZiyqXyfkXW3iqTUXSYEsg7NnArkcTWRUdjLquFbJqqXjp2FZ9XuK85 /WORhKacQ06l9VN0LEwKe7TPBFGPg0tGKirGu8m1cwHaJbXiTcKbo803ZroNvw0j +dOpaQPKtFUgBSCP/HdeRq+F73fbpalEgY15c6CXtPOSB4gCXoRTjMXh43WxQU+L rQIIVPN3/M9ief2EYYhy/lFg5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfmRvB4 helXn/lNTYNFT5+tLI4DMB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtiQo+BsLQb6OLE5vQcfVtSnQbM5M+pZ43L9Ol94uyFJldxlFd2CGr rbSchlIjMYSzQtIkUcdF1ujmsBjC4sl6VhDhTNh83nXwATrxLELtB5f/AnjCQzU1 NK1R9P0vmEDPtWZbE1jVkzq8eT69Q2PlL9kcBvpC/wyuRPJYFm7TeODcAWjFt/c7 D6cwimRYEwwn554okPU/G0I8zEFeMsFThAFn1uXkvlYSSekMPAiLumiFdDjPgiQr 0Cr9ajxQaD/nIiyBR0M02MZOd6h0w4Ol21yvLpyZzx08P7CemDLpsMziSD8tB4CN HNYRSMz1WcwOGQzh4WWGafoD0yt6qMvY -----END CERTIFICATE-----Generated at Sat May 31 16:36:50 2025 by rpki-client