$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: BeQ/qj5meg+W3TY/k/CxFYUWdalzGqQ+kFr6wHxiAsQ= Subject key identifier: A9:E0:3E:8D:42:8B:6F:21:BC:90:93:C6:11:27:86:A4:B3:09:11:0E Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 03A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 039C Signing time: Sat 07 Jun 2025 00:51:12 +0000 Manifest this update: Sat 07 Jun 2025 00:51:12 +0000 Manifest next update: Sat 14 Jun 2025 00:51:12 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: yqzz/UTpKfZ+s1Guvd7HpbHdmdLkPLspKvkqokUkMQI=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: CoOJrAcKTrWo0nejzXhp58RWFVEIO9a7vZX9DurBX3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: Jun 7 00:51:12 2025 GMT Not After : Jun 14 00:51:12 2025 GMT Subject: CN=68438d00-780d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7f:62:03:b9:8b:59:cf:97:a0:e7:eb:c5:d7: 7d:44:cc:8f:98:89:6f:cd:a1:22:0a:89:14:b9:e6: a1:54:00:35:d4:98:06:a9:ea:97:20:e5:83:a0:57: af:70:6b:e5:15:49:62:ec:e0:98:18:cc:eb:d3:98: c9:47:eb:53:01:82:96:1b:6a:1f:b8:27:08:47:a5: 8f:0a:6a:92:e4:0b:61:eb:66:57:bf:03:2e:0b:f8: 38:78:e5:ce:07:50:d2:40:df:81:65:ca:34:f6:1a: f2:b4:57:59:b2:ec:a7:de:98:85:ca:f3:a3:42:b2: 74:93:a4:0e:ba:0a:24:36:26:91:99:44:eb:12:f2: f1:bd:91:11:01:7e:b2:07:cb:ba:57:2b:5d:a3:33: 29:39:43:e0:f5:46:fc:70:2e:bf:55:36:7d:b0:66: ff:1b:c2:f0:b0:15:e2:e2:94:df:84:4f:46:0d:c7: 65:e0:a8:f6:ff:72:d0:27:1f:ae:d9:b6:2e:76:33: df:e5:bb:ec:31:ab:64:a2:3f:22:a5:f3:c3:11:d2: 81:6c:10:b6:64:d9:33:a3:20:2d:4a:a5:18:11:a8: a8:82:59:c0:32:35:02:9e:a3:3b:8f:9b:c2:bc:f5: 97:a2:b2:6e:aa:b3:ff:df:5d:c3:e5:5f:39:50:fa: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E0:3E:8D:42:8B:6F:21:BC:90:93:C6:11:27:86:A4:B3:09:11:0E X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:da:d4:eb:f3:68:16:ac:d4:61:a1:b6:34:75:eb:85:f5:a0: 8e:c7:eb:65:59:28:af:96:76:2e:3e:97:ae:28:83:9e:95:71: 5f:f1:63:9a:4e:6e:85:c7:5b:d6:bf:19:63:a6:4f:4d:81:75: 10:e6:27:09:92:5c:7d:83:b6:fe:09:19:c7:84:f3:94:4d:d4: 7e:e1:2b:ab:93:88:8a:b1:47:2d:1c:18:36:07:fd:54:ff:c2: 87:3d:14:0a:99:f5:55:81:b3:3d:cd:15:7c:c3:0a:ce:9d:a9: 4b:bf:6e:1a:b5:59:98:be:65:42:95:5a:97:63:b6:18:7b:f6: 8a:e3:0f:3c:59:93:b8:e6:ad:63:3e:0b:71:e4:61:a8:fc:b6: e4:0d:17:bf:e9:f8:d4:24:ff:96:b8:aa:c8:b3:75:6b:d7:5a: f8:f6:dd:81:dd:de:0e:5e:85:b8:e8:24:52:82:ec:37:44:a1: 90:08:4a:91:c6:cf:19:65:83:0b:af:10:50:19:a8:fe:4f:58: 9a:82:94:da:89:72:24:d7:76:70:8b:df:36:27:54:53:73:b0: f3:48:2f:ea:fc:3d:df:dd:4d:21:79:33:d5:ad:38:a6:1f:36: 5f:f3:69:a4:0d:72:1a:e4:48:71:be:f7:bd:ef:9f:50:6e:30: 2f:89:c9:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjUwNjA3MDA1MTEyWhcNMjUwNjE0MDA1MTEyWjAYMRYwFAYD VQQDEw02ODQzOGQwMC03ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5H9iA7mLWc+XoOfrxdd9RMyPmIlvzaEiCokUueahVAA11JgGqeqXIOWDoFev cGvlFUli7OCYGMzr05jJR+tTAYKWG2ofuCcIR6WPCmqS5Ath62ZXvwMuC/g4eOXO B1DSQN+BZco09hrytFdZsuyn3piFyvOjQrJ0k6QOugokNiaRmUTrEvLxvZERAX6y B8u6VytdozMpOUPg9Ub8cC6/VTZ9sGb/G8LwsBXi4pTfhE9GDcdl4Kj2/3LQJx+u 2bYudjPf5bvsMatkoj8ipfPDEdKBbBC2ZNkzoyAtSqUYEaioglnAMjUCnqM7j5vC vPWXorJuqrP/313D5V85UPqtuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKngPo1C i28hvJCTxhEnhqSzCREOMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX2tTr82gWrNRhobY0deuF9aCOx+tlWSivlnYuPpeuKIOelXFf8WOa Tm6Fx1vWvxljpk9NgXUQ5icJklx9g7b+CRnHhPOUTdR+4Surk4iKsUctHBg2B/1U /8KHPRQKmfVVgbM9zRV8wwrOnalLv24atVmYvmVClVqXY7YYe/aK4w88WZO45q1j Pgtx5GGo/LbkDRe/6fjUJP+WuKrIs3Vr11r49t2B3d4OXoW46CRSguw3RKGQCEqR xs8ZZYMLrxBQGaj+T1iagpTaiXIk13Zwi982J1RTc7DzSC/q/D3f3U0heTPVrTim HzZf82mkDXIa5Ehxvve9759QbjAvicn7 -----END CERTIFICATE-----Generated at Sun Jun 8 19:58:51 2025 by rpki-client