$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: fVLXvmiARL07HTGpEoMqkfSEwFXP+nhfofmzCHaDWoI= Subject key identifier: D7:09:67:95:D6:B9:05:3D:C4:7E:F5:AA:69:39:1A:A9:10:ED:05:F1 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0B6C Signing time: Sun 08 Jun 2025 18:50:23 +0000 Manifest this update: Sun 08 Jun 2025 18:50:22 +0000 Manifest next update: Sun 15 Jun 2025 18:50:22 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: kU/Gr6biwn2FDgKPsb0M+BF8a6EwlFLhJi0ZeDuCvd4=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: 5tQROkuKBdGr5CDnMUVPHlhLeJ1/YaIHTHWkyStRniQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Jun 8 18:50:22 2025 GMT Not After : Jun 15 18:50:22 2025 GMT Subject: CN=6845db6e-5f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:ea:4a:76:e3:94:c9:ad:17:2c:40:f4:f3: 90:55:f8:04:75:ac:f8:08:20:ea:7f:c3:37:47:dd: 34:66:82:8d:59:a8:8e:20:0a:11:1b:46:e5:5f:a1: 16:4d:d1:2e:72:c0:16:c8:0c:65:eb:d1:75:58:65: ae:ba:1c:d0:a5:9d:8a:11:fc:98:66:6c:92:05:66: 5c:4e:26:c6:f9:44:38:33:31:6e:d9:64:f3:7d:56: c4:d8:0c:8e:45:15:53:ac:79:70:11:c7:8d:32:14: 7f:77:4e:ec:d3:f9:3f:7e:42:7e:d6:65:00:55:1a: 38:f5:d4:6d:a6:e4:bb:68:c3:6d:c8:8b:05:c4:58: b9:f9:2d:22:f5:81:73:6f:de:fd:35:9b:f2:7d:69: 8f:ed:63:0b:53:ae:c5:62:24:9a:0f:4d:f3:dd:64: d3:0e:84:f7:57:ef:28:6a:cc:0d:b5:d2:5a:60:8b: f8:31:d9:b4:7d:96:dd:27:2d:8c:41:e8:e4:9b:3e: b7:7c:e0:1c:6e:47:e1:a6:06:2d:53:ce:39:cc:0f: ac:2d:ae:bc:a0:f1:93:87:a0:53:09:2a:55:c3:a5: b9:4a:e9:29:fc:89:28:f8:19:9a:0d:53:32:a3:5d: 36:87:28:2f:c3:99:fe:85:4b:7c:02:a1:a2:f5:b0: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:09:67:95:D6:B9:05:3D:C4:7E:F5:AA:69:39:1A:A9:10:ED:05:F1 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9f:6c:e2:7c:b6:0d:6e:08:53:ca:14:8e:cb:d7:8b:77:ff: 30:75:88:11:02:01:a6:81:56:e7:50:74:da:a4:0e:31:68:4c: b9:09:ca:43:a5:ed:96:ee:6e:95:f5:b7:a7:9a:9d:f2:09:86: 1f:49:01:1e:6c:04:be:68:b0:c5:19:2f:65:3c:a9:09:5c:ad: 63:76:d7:ec:5b:0f:ce:a9:37:55:e4:35:8f:d3:34:29:5b:24: 8f:43:91:07:98:5d:50:97:41:66:89:c4:13:80:d2:82:9b:32: 4d:8b:9c:2d:f0:8d:90:64:89:f1:31:0f:05:8d:3d:ef:a6:bf: bf:d4:80:b9:ec:55:a8:63:0b:8e:71:ff:e0:10:95:a6:9b:ae: c0:39:e9:2c:b2:fa:30:64:ae:91:de:c5:e6:68:c1:e3:57:cd: 9c:44:db:b8:d7:7d:b2:a1:d6:4b:a9:a2:9d:d1:d7:7b:7a:37: 67:79:35:d4:7b:e2:61:bc:85:06:e4:4e:65:0a:08:df:e3:62: 00:2c:24:04:3c:a8:9f:dd:75:49:ba:05:d3:6b:b0:36:6a:64: c4:73:eb:39:95:73:14:67:dd:d2:07:7e:c6:64:2f:a1:41:67: 8d:fb:02:99:a3:09:5a:2e:cf:d9:4b:b9:9d:07:0a:e3:d1:e3: 9f:e2:17:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjUwNjA4MTg1MDIyWhcNMjUwNjE1MTg1MDIyWjAYMRYwFAYD VQQDEw02ODQ1ZGI2ZS01Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8fqSnbjlMmtFyxA9POQVfgEdaz4CCDqf8M3R900ZoKNWaiOIAoRG0blX6EW TdEucsAWyAxl69F1WGWuuhzQpZ2KEfyYZmySBWZcTibG+UQ4MzFu2WTzfVbE2AyO RRVTrHlwEceNMhR/d07s0/k/fkJ+1mUAVRo49dRtpuS7aMNtyIsFxFi5+S0i9YFz b979NZvyfWmP7WMLU67FYiSaD03z3WTTDoT3V+8oaswNtdJaYIv4Mdm0fZbdJy2M Qejkmz63fOAcbkfhpgYtU845zA+sLa68oPGTh6BTCSpVw6W5Sukp/Iko+BmaDVMy o102hygvw5n+hUt8AqGi9bCyfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcJZ5XW uQU9xH71qmk5GqkQ7QXxMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAn2zifLYNbghTyhSOy9eLd/8wdYgRAgGmgVbnUHTapA4xaEy5CcpD pe2W7m6V9benmp3yCYYfSQEebAS+aLDFGS9lPKkJXK1jdtfsWw/OqTdV5DWP0zQp WySPQ5EHmF1Ql0FmicQTgNKCmzJNi5wt8I2QZInxMQ8FjT3vpr+/1IC57FWoYwuO cf/gEJWmm67AOekssvowZK6R3sXmaMHjV82cRNu4132yodZLqaKd0dd7ejdneTXU e+JhvIUG5E5lCgjf42IALCQEPKif3XVJugXTa7A2amTEc+s5lXMUZ93SB37GZC+h QWeN+wKZowlaLs/ZS7mdBwrj0eOf4hdw -----END CERTIFICATE-----Generated at Tue Jun 10 08:16:12 2025 by rpki-client