$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: iRcnuqmqzDYhopL540ukw0TgYCbub4aOK1/EOZE2omU= Subject key identifier: 2B:78:54:C5:00:F3:DA:A7:6E:F2:15:59:66:AF:FF:6C:8B:4C:D7:B8 Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: FC Signing time: Tue 01 Jul 2025 05:40:07 +0000 Manifest this update: Tue 01 Jul 2025 05:40:07 +0000 Manifest next update: Tue 08 Jul 2025 05:40:07 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: aErko9ueYT1xfgZLPMi5yzAlfmagssqnXIFjjLxTOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Jul 1 05:40:07 2025 GMT Not After : Jul 8 05:40:07 2025 GMT Subject: CN=686374b7-ed12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:6d:6e:a9:e9:2f:5b:c8:85:8d:ba:37:dd: ae:2c:04:ac:28:9e:2d:d9:39:22:4a:d5:c2:6a:86: de:eb:0f:43:55:9a:4f:f9:bf:08:ee:e2:64:d1:31: ec:fc:f3:c1:18:ba:01:3a:7f:68:37:3c:aa:f7:07: 49:8c:75:f8:b1:5c:cd:d0:67:34:4d:1c:ec:76:81: b4:21:c7:e9:c6:60:c0:00:89:24:13:cf:f5:bd:1b: 49:00:7a:07:ad:a2:bf:05:af:e0:a5:e2:34:6a:6a: ee:d6:99:16:16:91:d4:38:72:e7:96:19:4b:9e:00: 20:51:37:9c:10:9c:5c:bd:df:43:43:6f:94:c3:76: 82:91:d6:ff:52:ba:1f:4f:ca:68:ac:d9:d7:92:af: be:34:cc:64:5f:e2:6a:40:e2:88:40:e0:62:47:cf: 49:13:14:46:32:51:9e:89:37:af:9b:f0:f5:4d:8f: f4:2d:a3:18:c6:47:ba:58:20:48:64:03:eb:c0:82: 91:eb:02:c4:bd:33:07:f6:8e:9b:4a:28:a3:fb:e3: 82:fd:70:07:07:8f:e3:4e:c7:2d:24:6a:e6:1c:62: b8:ac:5f:13:95:c9:7f:c3:b7:18:39:7f:23:68:bb: 2b:46:59:ce:36:b0:cb:dd:a3:52:b9:8b:4a:fa:c0: ad:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:78:54:C5:00:F3:DA:A7:6E:F2:15:59:66:AF:FF:6C:8B:4C:D7:B8 X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:5b:f1:47:15:81:96:13:01:d3:77:b0:29:a0:0a:c2:d0:38: 63:ec:52:d6:5b:23:55:7b:61:4e:6c:c2:af:5c:71:41:8d:f9: d1:11:af:97:61:e1:64:4c:05:79:5c:ab:6b:26:b4:aa:d4:4e: fc:f5:76:99:29:9a:7c:11:10:1b:c4:6a:f2:3c:fa:58:fd:58: 31:b4:95:36:db:84:b3:31:ae:47:15:51:31:99:bf:7c:94:43: fe:7d:3d:4e:9f:53:c8:c2:79:01:52:1b:32:19:dc:a4:4a:a6: 45:28:d5:a4:b9:14:1a:62:e5:28:9f:c5:7b:08:55:07:31:2d: db:3c:db:37:6e:78:99:3f:84:0c:dc:2d:2d:88:e6:0a:72:d1: 0f:7c:10:57:c7:34:a5:0f:a5:52:01:ef:cb:88:15:45:a3:31: bc:c5:55:06:f3:a6:69:cb:ea:81:33:27:5c:50:49:87:99:72: e3:35:8a:04:f1:4d:c2:ba:d0:f2:ec:4a:09:3f:b4:99:77:eb: db:6d:f0:9d:ab:fa:e3:44:a7:dc:35:fe:06:1e:8b:e3:48:c1: 65:9b:d7:57:1c:02:66:20:f2:5b:a8:4f:8b:73:f7:72:51:8d: c3:86:4c:bc:38:58:84:3e:d5:39:e1:0a:d7:00:f8:75:8c:cb: f5:b0:77:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUwNzAxMDU0MDA3WhcNMjUwNzA4MDU0MDA3WjAYMRYwFAYD VQQDEw02ODYzNzRiNy1lZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIdtbqnpL1vIhY26N92uLASsKJ4t2TkiStXCaobe6w9DVZpP+b8I7uJk0THs /PPBGLoBOn9oNzyq9wdJjHX4sVzN0Gc0TRzsdoG0IcfpxmDAAIkkE8/1vRtJAHoH raK/Ba/gpeI0amru1pkWFpHUOHLnlhlLngAgUTecEJxcvd9DQ2+Uw3aCkdb/Urof T8porNnXkq++NMxkX+JqQOKIQOBiR89JExRGMlGeiTevm/D1TY/0LaMYxke6WCBI ZAPrwIKR6wLEvTMH9o6bSiij++OC/XAHB4/jTsctJGrmHGK4rF8Tlcl/w7cYOX8j aLsrRlnONrDL3aNSuYtK+sCtQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCt4VMUA 89qnbvIVWWav/2yLTNe4MB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYW/FHFYGWEwHTd7ApoArC0Dhj7FLWWyNVe2FObMKvXHFBjfnREa+X YeFkTAV5XKtrJrSq1E789XaZKZp8ERAbxGryPPpY/VgxtJU224SzMa5HFVExmb98 lEP+fT1On1PIwnkBUhsyGdykSqZFKNWkuRQaYuUon8V7CFUHMS3bPNs3bniZP4QM 3C0tiOYKctEPfBBXxzSlD6VSAe/LiBVFozG8xVUG86Zpy+qBMydcUEmHmXLjNYoE 8U3CutDy7EoJP7SZd+vbbfCdq/rjRKfcNf4GHovjSMFlm9dXHAJmIPJbqE+Lc/dy UY3Dhky8OFiEPtU54QrXAPh1jMv1sHfF -----END CERTIFICATE-----Generated at Tue Jul 1 21:50:00 2025 by rpki-client