$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: CMGv1sM0rv25nyfFpUH8Ql7ol+CdQA3u5Q+S0YjG6nY= Subject key identifier: 3F:18:6C:C1:44:B4:B8:5C:E5:69:C6:39:39:99:70:77:79:92:CF:79 Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 038F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 0389 Signing time: Sat 31 May 2025 01:04:01 +0000 Manifest this update: Sat 31 May 2025 01:04:01 +0000 Manifest next update: Sat 07 Jun 2025 01:04:00 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: Mfl32RfqCBnR72y+aD7ZtzvWkFqTQDSpz6L6n/t7iiM=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 0e5zzWh6ApozGk/jFChRqF4rHk2hQMmiudaU4V4FOFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: May 31 01:04:01 2025 GMT Not After : Jun 7 01:04:00 2025 GMT Subject: CN=683a5581-c966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:58:ef:44:b5:21:36:48:f0:52:9b:72:0c: ff:f3:38:0c:c0:e9:b0:5b:ab:18:2f:97:2b:49:9b: 13:dc:32:51:2e:b8:9e:64:97:a2:1d:4f:60:1d:a6: 67:31:bb:ec:45:f0:63:d1:cb:20:69:2d:b3:0b:7c: 0a:55:fa:27:6d:49:3c:8c:49:aa:da:7d:18:4a:ca: 49:34:dd:54:5a:5b:0e:33:f5:93:c9:50:8e:5c:e4: 1a:5d:4e:04:3c:5c:2c:c1:e1:5d:e0:dc:cd:31:d3: 2d:05:15:26:44:95:09:5c:56:08:b5:37:8a:72:ac: f9:d5:b9:f7:48:8d:09:3a:21:65:7d:03:c7:1d:db: ca:62:19:a4:93:4d:ac:fa:04:40:eb:2c:74:41:85: 43:d8:21:36:3d:78:9b:d3:bd:60:6a:a3:64:e6:b2: e3:e0:ad:ee:49:3f:0e:41:45:13:3d:75:8b:e1:70: 46:ac:57:89:29:0d:81:c4:4e:08:d4:1a:62:8e:9c: 9a:de:ea:b0:19:97:90:c6:0c:80:6f:2f:b0:61:14: 74:1b:c0:c9:f1:fd:8e:cc:9f:93:18:ea:a2:46:b5: 6d:cd:6e:07:a0:e9:cc:d2:41:1a:94:3f:1b:b6:64: 2b:37:1f:30:3c:c3:28:e1:8d:76:3f:d9:d1:53:a9: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:18:6C:C1:44:B4:B8:5C:E5:69:C6:39:39:99:70:77:79:92:CF:79 X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:67:75:b1:9a:32:a9:a2:86:ac:d2:bf:f1:8f:9e:c1:c7:00: 03:0f:ae:44:ce:76:69:8d:6a:88:dd:a7:27:4a:d8:80:06:e8: 5d:dc:1f:ea:07:0d:ea:88:51:91:52:48:5e:f4:d3:3a:0f:cd: 42:44:14:ac:8b:1c:86:df:98:5a:3e:f8:bc:1c:6b:34:35:10: 48:be:69:4e:a2:77:e0:13:4e:1c:44:d0:ef:e9:bf:eb:14:9d: 60:f0:3c:c0:6c:4f:34:54:07:d6:fa:89:6d:e7:0e:2e:51:34: e7:4e:e9:12:28:a9:4d:6c:7c:f2:27:34:5c:4f:b9:af:33:2e: fe:c9:26:d5:87:ea:bb:bd:82:1a:7d:be:bd:84:27:c5:83:4a: b3:c9:04:c4:e6:38:f5:dd:11:6b:a7:17:ee:6e:e4:7e:72:4d: 04:29:47:e5:f3:70:bc:6a:89:2f:ac:0d:4c:c2:c8:c0:8f:96: ed:78:d3:32:a0:15:be:77:c6:56:95:11:44:02:86:b6:1b:2d: 59:1a:9e:3a:52:c0:ef:65:a5:91:78:2c:60:9c:21:7a:2d:35: 71:29:0a:83:96:d6:cc:26:16:da:ee:bd:a2:6b:08:9f:4a:0b: 4e:3f:a6:5c:f1:36:99:5f:87:24:a1:a2:87:2a:47:bb:42:61: 63:7b:a1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjUwNTMxMDEwNDAxWhcNMjUwNjA3MDEwNDAwWjAYMRYwFAYD VQQDEw02ODNhNTU4MS1jOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PlY70S1ITZI8FKbcgz/8zgMwOmwW6sYL5crSZsT3DJRLrieZJeiHU9gHaZn MbvsRfBj0csgaS2zC3wKVfonbUk8jEmq2n0YSspJNN1UWlsOM/WTyVCOXOQaXU4E PFwsweFd4NzNMdMtBRUmRJUJXFYItTeKcqz51bn3SI0JOiFlfQPHHdvKYhmkk02s +gRA6yx0QYVD2CE2PXib071gaqNk5rLj4K3uST8OQUUTPXWL4XBGrFeJKQ2BxE4I 1Bpijpya3uqwGZeQxgyAby+wYRR0G8DJ8f2OzJ+TGOqiRrVtzW4HoOnM0kEalD8b tmQrNx8wPMMo4Y12P9nRU6mfzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8YbMFE tLhc5WnGOTmZcHd5ks95MB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTZ3WxmjKpooas0r/xj57BxwADD65EznZpjWqI3acnStiABuhd3B/q Bw3qiFGRUkhe9NM6D81CRBSsixyG35haPvi8HGs0NRBIvmlOonfgE04cRNDv6b/r FJ1g8DzAbE80VAfW+olt5w4uUTTnTukSKKlNbHzyJzRcT7mvMy7+ySbVh+q7vYIa fb69hCfFg0qzyQTE5jj13RFrpxfubuR+ck0EKUfl83C8aokvrA1MwsjAj5bteNMy oBW+d8ZWlRFEAoa2Gy1ZGp46UsDvZaWReCxgnCF6LTVxKQqDltbMJhba7r2iawif SgtOP6Zc8TaZX4ckoaKHKke7QmFje6HS -----END CERTIFICATE-----Generated at Sat May 31 17:39:16 2025 by rpki-client