$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json) Hash identifier: qjpJM+50iDS0xa8EJIz3b8fgMIeObTpZWBc7tSw3YXY= Subject key identifier: A2:3A:46:64:47:16:06:9F:4A:6F:51:86:E4:5E:05:46:7E:D0:C3:A9 Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 1004 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft Manifest number: 0FF3 Signing time: Fri 30 May 2025 17:38:16 +0000 Manifest this update: Fri 30 May 2025 17:38:15 +0000 Manifest next update: Fri 06 Jun 2025 17:38:15 +0000 Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: 5v1OQx+s79EqhJGlcCQFriqgPbfgOPKn/fiJMBeq/iY=) 2: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: fPoBgkYnMh4IMhrB/TA39+M1O1OAHZFrtUEJDkMooUg=) 3: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: ucL3j8TnFmy+7V5qbIqZDaLy79WcFoXLeH1a5In6i8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4100 (0x1004) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: May 30 17:38:15 2025 GMT Not After : Jun 6 17:38:15 2025 GMT Subject: CN=6839ed08-666c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:79:a9:1d:74:29:0b:e3:70:24:3f:9f:f9: 0c:33:ef:8d:2d:80:db:52:64:ee:40:9c:dd:a4:42: 45:b1:f3:fd:4c:96:4e:12:5c:13:75:ee:87:95:48: ec:cf:08:59:2d:fc:ca:9c:90:1c:85:e8:95:16:3c: ab:f4:4d:d3:21:ee:96:20:1a:d4:c0:be:71:f2:50: 8f:59:64:b2:52:5f:8a:23:b6:73:b3:8b:d7:c8:c0: 11:4b:2b:cf:00:09:1f:01:7c:56:ae:4d:95:bb:9c: df:c5:1d:bb:ad:de:51:21:1f:cb:1b:db:11:bb:24: 5e:1b:18:c1:16:7c:47:66:15:48:68:8d:fa:45:d1: 4a:00:da:e0:d9:d1:8a:bd:c3:ff:6a:27:2d:4f:7f: d3:80:07:a0:45:81:61:78:46:f7:f5:fe:4a:09:b6: 1d:dd:6a:e0:48:5c:0e:0c:0f:52:31:fe:d1:6e:dd: 88:9c:20:a8:dc:35:e5:cb:9f:9d:2b:6f:9c:a9:a6: 88:d4:66:0f:2b:e2:a0:62:02:be:74:7e:19:2c:a8: 73:1b:e4:7e:e2:c4:58:c9:b5:ad:46:49:eb:3e:30: 59:a2:12:12:2c:fe:66:a5:03:07:f7:a4:5e:d9:ac: 8c:c2:d2:a5:53:69:77:80:2e:21:9f:1b:ce:85:44: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3A:46:64:47:16:06:9F:4A:6F:51:86:E4:5E:05:46:7E:D0:C3:A9 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:03:e0:4b:a9:f2:b3:4a:17:f8:8a:8e:77:01:e8:3c:92:c5: 09:4f:1e:26:3a:42:48:cc:8d:cc:b8:4e:cc:fa:66:e5:67:2f: d6:6a:3d:c1:4a:fb:b6:c3:c7:0d:4a:d5:94:40:dc:62:7e:3e: 65:c7:a8:c5:9e:7b:fa:64:30:fe:2e:bd:9c:92:5e:c0:c6:41: 57:9c:0f:6a:12:9a:87:e4:e0:63:a1:b8:5f:cb:31:81:ca:5c: 93:51:d8:af:ae:b0:3a:7d:91:fe:6a:00:28:e9:f5:4e:9d:59: f5:e2:7e:77:49:0e:77:c2:4a:0c:29:4b:17:64:97:42:c1:fa: b7:a1:ce:b0:06:fa:8e:15:76:49:0a:6f:35:a9:36:7c:9d:d5: fa:b7:d8:37:93:e9:5d:af:ca:6d:db:d4:ae:a7:69:fa:7e:ea: 9c:b6:31:54:f2:10:ab:5f:7a:05:03:64:5d:67:55:c1:74:5b: 71:e9:fc:c4:ed:99:9a:b6:ea:e9:18:db:21:37:1a:46:e2:3c: d4:89:cf:09:f7:ff:ac:3f:6b:17:c4:55:34:a3:f7:eb:3f:d4: c3:27:ba:0f:2c:81:2e:26:80:d6:e5:cb:d9:3c:dc:86:03:c0: a7:0d:73:b1:4f:17:5a:00:3d:59:56:21:03:3b:7b:8f:9b:7b: 67:8d:d3:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjUwNTMwMTczODE1WhcNMjUwNjA2MTczODE1WjAYMRYwFAYD VQQDEw02ODM5ZWQwOC02NjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx595qR10KQvjcCQ/n/kMM++NLYDbUmTuQJzdpEJFsfP9TJZOElwTde6HlUjs zwhZLfzKnJAcheiVFjyr9E3TIe6WIBrUwL5x8lCPWWSyUl+KI7Zzs4vXyMARSyvP AAkfAXxWrk2Vu5zfxR27rd5RIR/LG9sRuyReGxjBFnxHZhVIaI36RdFKANrg2dGK vcP/aictT3/TgAegRYFheEb39f5KCbYd3WrgSFwODA9SMf7Rbt2InCCo3DXly5+d K2+cqaaI1GYPK+KgYgK+dH4ZLKhzG+R+4sRYybWtRknrPjBZohISLP5mpQMH96Re 2ayMwtKlU2l3gC4hnxvOhUTIIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKI6RmRH FgafSm9RhuReBUZ+0MOpMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0MyMi82OTA2QzZGQTRDNzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxo M0ZVS2xKSk52Ty03WjJsTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKA+BLqfKzShf4io53Aeg8ksUJTx4mOkJIzI3MuE7M+mblZy/Waj3B Svu2w8cNStWUQNxifj5lx6jFnnv6ZDD+Lr2ckl7AxkFXnA9qEpqH5OBjobhfyzGB ylyTUdivrrA6fZH+agAo6fVOnVn14n53SQ53wkoMKUsXZJdCwfq3oc6wBvqOFXZJ Cm81qTZ8ndX6t9g3k+ldr8pt29Sup2n6fuqctjFU8hCrX3oFA2RdZ1XBdFtx6fzE 7ZmaturpGNshNxpG4jzUic8J9/+sP2sXxFU0o/frP9TDJ7oPLIEuJoDW5cvZPNyG A8CnDXOxTxdaAD1ZViEDO3uPm3tnjdM9 -----END CERTIFICATE-----Generated at Sat May 31 17:50:43 2025 by rpki-client