$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: EwNzpJUKvfk04leRKj+oj9qEMGsUy1cUmcxQbTYo8fE= Subject key identifier: C9:06:39:5F:C5:04:A7:8D:BE:8D:E7:03:30:98:50:CF:27:BF:77:41 Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0A21 Signing time: Fri 30 May 2025 19:58:54 +0000 Manifest this update: Fri 30 May 2025 19:58:54 +0000 Manifest next update: Fri 06 Jun 2025 19:58:54 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: El2Vxg/Zv5LuWhdmOZMCZ1JkJ0aEWz7idZsFN11ioqQ=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: 9EGc7zo1rzNKxXV6Dja051NIq2qalXgFXf2PEqhm154=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2599 (0xa27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: May 30 19:58:54 2025 GMT Not After : Jun 6 19:58:54 2025 GMT Subject: CN=683a0dfe-5585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:55:ea:0b:88:d9:d9:6f:49:0d:be:01:9f: c8:4c:ee:dc:b0:ab:dd:cd:ff:db:b6:a6:79:ae:a3: 94:90:0a:11:dc:70:c2:76:1a:da:27:cf:02:d7:97: 4f:84:80:ce:29:a9:3c:74:21:e5:41:3d:08:0e:87: 4c:37:32:c5:21:a4:d2:8f:fe:82:d8:42:04:ef:c4: b6:6a:2b:82:dc:1b:29:36:80:31:68:64:ef:1e:3e: 29:31:98:a2:d6:73:c9:03:08:26:d6:bf:42:ea:0f: e7:57:03:83:59:77:26:8e:e2:c2:8f:f4:1b:e8:16: 6b:8f:82:12:3b:49:49:11:a9:6d:c8:2f:95:da:41: 09:2e:d9:23:61:a2:a7:3f:35:ae:aa:b2:d7:35:1b: bc:4b:99:35:31:b6:18:57:42:10:c4:e9:44:98:f7: f9:57:d1:c9:46:53:0a:b8:df:fb:f4:27:57:f9:3b: 3e:5b:ac:31:e9:37:88:c0:f8:04:24:4f:25:16:13: 6c:58:cd:f7:ef:42:ff:1b:94:52:08:d0:da:91:22: 6b:f4:65:be:a8:c2:90:20:4f:eb:25:9d:dc:9e:bf: 1e:57:1f:fc:98:d4:cf:48:eb:ab:d8:e6:24:cc:1c: ae:47:95:3d:7c:17:04:3d:32:dd:9b:f9:cb:96:15: d9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:06:39:5F:C5:04:A7:8D:BE:8D:E7:03:30:98:50:CF:27:BF:77:41 X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:37:d9:d7:77:11:4a:e1:70:27:7d:2a:36:40:f1:83:f8:6d: 45:fb:1a:0f:32:e4:ce:45:9c:84:de:f1:7a:7f:39:f2:b4:2a: 40:24:c5:c1:ec:5f:79:50:74:25:d0:38:87:33:c3:36:8f:0b: bf:62:d3:8d:18:94:97:be:42:a7:3e:65:ce:d2:97:07:3e:5a: 8e:fa:81:ba:76:68:90:b7:50:17:49:05:4c:c4:72:a6:8e:61: 1b:bb:28:9a:20:f0:cf:68:1d:a5:05:aa:c2:46:f9:14:37:b0: 24:48:9b:b8:df:21:54:55:90:f4:76:de:98:21:35:92:f8:20: f3:d6:99:7d:98:3b:98:93:f7:c2:0e:bf:34:3d:a9:59:67:58: 98:f6:00:77:18:3e:c4:3a:2f:f4:eb:e9:46:81:c1:fe:ab:75: c2:88:fa:de:61:d7:51:a8:86:cf:db:fc:65:da:85:64:b3:78: 31:14:83:cd:4b:c1:8d:62:53:f1:66:94:07:8a:d7:76:fe:ba: 91:f5:4c:a1:01:7b:76:ac:14:10:01:19:7a:a0:7c:bd:88:e3: 1c:72:dc:d5:23:ea:4e:5a:d0:7d:5f:9d:59:88:27:55:ff:41: e8:f9:6c:9e:a3:99:78:73:24:30:a6:45:b1:da:9d:3a:6b:09: 68:62:96:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjUwNTMwMTk1ODU0WhcNMjUwNjA2MTk1ODU0WjAYMRYwFAYD VQQDEw02ODNhMGRmZS01NTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8tV6guI2dlvSQ2+AZ/ITO7csKvdzf/btqZ5rqOUkAoR3HDCdhraJ88C15dP hIDOKak8dCHlQT0IDodMNzLFIaTSj/6C2EIE78S2aiuC3BspNoAxaGTvHj4pMZii 1nPJAwgm1r9C6g/nVwODWXcmjuLCj/Qb6BZrj4ISO0lJEaltyC+V2kEJLtkjYaKn PzWuqrLXNRu8S5k1MbYYV0IQxOlEmPf5V9HJRlMKuN/79CdX+Ts+W6wx6TeIwPgE JE8lFhNsWM3370L/G5RSCNDakSJr9GW+qMKQIE/rJZ3cnr8eVx/8mNTPSOur2OYk zByuR5U9fBcEPTLdm/nLlhXZMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkGOV/F BKeNvo3nAzCYUM8nv3dBMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARN9nXdxFK4XAnfSo2QPGD+G1F+xoPMuTORZyE3vF6fznytCpAJMXB 7F95UHQl0DiHM8M2jwu/YtONGJSXvkKnPmXO0pcHPlqO+oG6dmiQt1AXSQVMxHKm jmEbuyiaIPDPaB2lBarCRvkUN7AkSJu43yFUVZD0dt6YITWS+CDz1pl9mDuYk/fC Dr80PalZZ1iY9gB3GD7EOi/06+lGgcH+q3XCiPreYddRqIbP2/xl2oVks3gxFIPN S8GNYlPxZpQHitd2/rqR9UyhAXt2rBQQARl6oHy9iOMcctzVI+pOWtB9X51ZiCdV /0Ho+Wyeo5l4cyQwpkWx2p06awloYpZH -----END CERTIFICATE-----Generated at Sat May 31 16:44:52 2025 by rpki-client