$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json) Hash identifier: DDZCpE7dy5LJDknTn3gP6ziHsW7u3ndPriPpBUgAz2c= Subject key identifier: 31:C5:F5:90:B9:E0:4F:2D:9A:FB:09:54:60:80:ED:09:16:DE:B3:7A Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft Manifest number: 0104 Signing time: Sat 31 May 2025 04:38:17 +0000 Manifest this update: Sat 31 May 2025 04:38:16 +0000 Manifest next update: Sat 07 Jun 2025 04:38:16 +0000 Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: HZzpzxdJV6aE5nSNd6Khx83bzb3qX0Z6T9ae7oh3Vos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Validity Not Before: May 31 04:38:16 2025 GMT Not After : Jun 7 04:38:16 2025 GMT Subject: CN=683a87b9-7d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:03:bb:13:09:76:82:16:9d:31:e9:71:95: 6e:b4:00:b5:21:c4:34:33:ef:3f:f8:2b:3e:16:c2: 0b:c4:ec:a0:1a:0d:29:95:9b:98:5b:35:5c:f8:ea: 13:0b:54:47:ae:d2:a4:89:eb:64:00:75:1d:bb:a4: 13:53:5b:db:92:ad:36:34:2a:d4:a1:12:da:be:1c: 2d:f1:b7:36:ee:a2:f9:c1:d7:5e:61:37:36:d3:6c: b0:61:c5:24:e3:53:05:db:90:a8:02:c0:30:d1:ed: 23:d0:56:21:fb:3a:77:29:b4:41:c0:55:59:2e:86: 39:85:b8:12:0d:70:fe:4e:5d:81:c7:55:cb:37:d2: 7e:a9:c5:e8:b3:f7:af:38:b6:65:3a:26:81:ca:59: 8c:86:31:b5:d3:6c:1b:d7:95:e2:12:69:51:b5:08: a3:0a:34:54:de:f9:7a:4b:a1:8e:6b:35:72:3a:3d: ac:59:67:66:f4:d8:b1:27:2e:d6:3d:02:1a:52:75: 04:90:f1:c4:d7:83:5b:b5:d7:2b:df:97:cd:bc:9a: 92:5a:62:fa:4a:e5:19:c8:51:69:53:50:a9:38:34: f5:e1:d5:c4:f3:72:5f:c3:21:21:21:49:9b:a0:ac: d4:90:84:fc:a4:d4:73:e7:ba:62:e3:a8:68:fc:b0: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C5:F5:90:B9:E0:4F:2D:9A:FB:09:54:60:80:ED:09:16:DE:B3:7A X509v3 Authority Key Identifier: keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:53:8c:40:6b:26:21:68:ca:1c:c0:00:a4:78:53:a4:bb:1f: 10:39:12:84:51:24:9f:fa:03:fe:16:11:08:d4:9f:d8:12:ea: ab:95:c9:33:79:39:19:06:1d:98:ad:95:a5:65:65:e3:cc:04: 10:65:b5:8a:6c:63:70:a7:c7:58:2b:0b:6c:50:f6:f2:85:0e: e7:57:4a:56:b6:e7:45:0f:30:08:d6:29:f2:48:35:80:31:4e: 52:b9:3a:73:d7:2e:e9:ce:82:34:2c:5c:f4:a5:61:92:4a:12: 9e:c0:ef:c4:2e:73:4d:19:66:3c:7e:57:43:03:fb:89:86:85: 9c:f5:c5:cb:3c:47:df:0b:d1:da:d3:54:6f:b1:75:aa:8c:69: f7:69:c1:3b:55:3a:97:d0:8e:16:96:14:e2:2d:b6:97:65:98: 4f:bc:b4:31:f9:d1:53:7e:45:ce:93:0a:7d:4f:9e:65:e8:b8: be:5d:50:ef:50:b0:8a:fa:3e:ee:e4:6b:32:6d:f6:d1:68:12: 56:a2:3d:67:39:4f:2f:59:f7:04:2b:ee:f7:72:ca:8c:91:91: b5:60:08:42:11:9e:2f:39:ec:2b:5c:e0:b0:5a:db:c5:33:8e: cd:c9:01:a6:6e:77:b1:1c:d5:06:af:26:e2:5d:e3:bf:dd:01: 25:a8:9a:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4 RTUwNzNCQzQwHhcNMjUwNTMxMDQzODE2WhcNMjUwNjA3MDQzODE2WjAYMRYwFAYD VQQDEw02ODNhODdiOS03ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApi8DuxMJdoIWnTHpcZVutAC1IcQ0M+8/+Cs+FsILxOygGg0plZuYWzVc+OoT C1RHrtKkietkAHUdu6QTU1vbkq02NCrUoRLavhwt8bc27qL5wddeYTc202ywYcUk 41MF25CoAsAw0e0j0FYh+zp3KbRBwFVZLoY5hbgSDXD+Tl2Bx1XLN9J+qcXos/ev OLZlOiaBylmMhjG102wb15XiEmlRtQijCjRU3vl6S6GOazVyOj2sWWdm9NixJy7W PQIaUnUEkPHE14Nbtdcr35fNvJqSWmL6SuUZyFFpU1CpODT14dXE83JfwyEhIUmb oKzUkIT8pNRz57pi46ho/LABGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHF9ZC5 4E8tmvsJVGCA7QkW3rN6MB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF TXBRXzNsZktNOUtPVUhPOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIU4xAayYhaMocwACkeFOkux8QORKEUSSf+gP+FhEI1J/YEuqrlckz eTkZBh2YrZWlZWXjzAQQZbWKbGNwp8dYKwtsUPbyhQ7nV0pWtudFDzAI1inySDWA MU5SuTpz1y7pzoI0LFz0pWGSShKewO/ELnNNGWY8fldDA/uJhoWc9cXLPEffC9Ha 01RvsXWqjGn3acE7VTqX0I4WlhTiLbaXZZhPvLQx+dFTfkXOkwp9T55l6Li+XVDv ULCK+j7u5GsybfbRaBJWoj1nOU8vWfcEK+73csqMkZG1YAhCEZ4vOewrXOCwWtvF M47NyQGmbnexHNUGrybiXeO/3QElqJrd -----END CERTIFICATE-----Generated at Sat May 31 17:44:01 2025 by rpki-client