$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: EeQOGRL6WL/XmikaNwqZ3xnqcAtTI8t9wrKE7YsA+wo= Subject key identifier: 92:FC:2C:6E:D8:85:62:0B:AA:20:B5:3A:6A:B8:DE:73:E1:76:97:3E Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: D8 Signing time: Sun 01 Jun 2025 05:24:17 +0000 Manifest this update: Sun 01 Jun 2025 05:24:17 +0000 Manifest next update: Sun 08 Jun 2025 05:24:17 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: wSN7Mf94wFTUe4GqmrR0r6axgH/U0igRagwDPKCnIFc=) 2: 62B87A26895B11EFBA2A3B22C4F9AE02.roa (hash: GkfnFa85sf2ihLyLByQY01IPDXpueRzZ4fB3mmtkqLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Jun 1 05:24:17 2025 GMT Not After : Jun 8 05:24:17 2025 GMT Subject: CN=683be401-e50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:ea:66:a4:5d:10:da:90:fa:fc:c5:6d:e1: 37:d5:66:fc:70:12:f4:e2:f3:33:e0:d9:d2:23:b0: f1:86:79:1b:86:28:3b:ff:be:f8:7f:c6:6a:f6:95: f1:13:78:67:99:1b:2d:9a:de:1c:24:fb:57:fe:e1: 01:36:7f:73:db:99:0a:e5:b2:89:c0:84:25:14:cc: 9b:5c:63:ff:39:c2:a0:0e:45:e2:6d:e6:dc:25:3e: 58:40:90:e5:f8:3b:0d:d1:98:20:72:42:3a:74:bf: c6:6f:b8:71:5e:4a:25:aa:da:42:2d:6e:5b:1a:ba: fc:48:67:83:1d:2e:6e:bc:f9:49:dd:41:89:8b:8d: da:32:d2:19:27:7e:b4:de:d1:e4:e6:f8:59:8c:f7: 8c:ec:7c:67:de:8e:0b:26:84:79:11:55:c8:b0:89: 79:99:98:5a:4e:14:df:6c:f0:87:0e:65:bb:be:c7: 4d:77:92:47:0e:c1:ff:d6:2f:33:8c:62:81:1e:69: db:7a:1c:35:7d:6a:38:36:ae:27:60:82:db:c7:e6: b6:f2:d0:82:00:91:d2:be:5f:42:63:e4:ff:34:bf: 0e:78:0e:30:bf:56:31:d6:7e:84:4d:19:91:7e:e7: 9d:14:bc:34:5f:e5:21:ea:01:84:83:d7:0c:32:6f: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FC:2C:6E:D8:85:62:0B:AA:20:B5:3A:6A:B8:DE:73:E1:76:97:3E X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:98:f8:5f:e7:2e:e6:84:42:fc:58:d3:cd:a3:7b:d0:e3:fd: 04:65:9b:59:26:47:04:db:8f:55:7c:be:cd:26:28:c3:7f:1d: 6e:6b:75:60:45:53:b5:8f:81:c6:ff:ad:d0:82:84:99:cb:07: 10:34:51:cd:54:73:ce:4a:d4:83:26:55:44:28:cf:b9:fa:b5: 36:10:7b:95:24:1f:ac:cd:56:c0:82:13:fb:35:63:dc:dc:bc: 5c:27:7a:1b:8a:5b:31:af:da:e2:02:e0:52:80:07:af:a8:ef: 69:e5:8b:1e:4a:1c:f1:08:7c:be:bc:75:91:9f:60:13:f1:a9: 5f:bf:e9:9f:fd:b4:c4:c5:31:30:6f:07:d5:39:14:74:f8:fd: 8f:27:f4:eb:74:5e:f5:04:6c:3d:96:de:00:4c:a6:b1:54:57: 42:b3:b4:9d:05:97:e5:ea:b1:a3:c8:65:f9:3b:21:2f:92:79: 39:fa:a3:b0:c7:df:ab:05:c2:21:4b:52:1c:30:03:70:b4:eb: a8:d5:d0:b6:ad:21:69:8c:40:98:73:b3:43:1e:c7:76:18:d4: 08:bf:7a:e0:f6:2c:8e:60:cf:93:0a:81:27:b2:e7:b7:99:ea: 42:30:ec:b2:d3:df:57:f3:ea:c0:bd:43:81:d0:c2:56:39:cf: ea:51:67:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjUwNjAxMDUyNDE3WhcNMjUwNjA4MDUyNDE3WjAYMRYwFAYD VQQDEw02ODNiZTQwMS1lNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxbqZqRdENqQ+vzFbeE31Wb8cBL04vMz4NnSI7Dxhnkbhig7/774f8Zq9pXx E3hnmRstmt4cJPtX/uEBNn9z25kK5bKJwIQlFMybXGP/OcKgDkXibebcJT5YQJDl +DsN0ZggckI6dL/Gb7hxXkolqtpCLW5bGrr8SGeDHS5uvPlJ3UGJi43aMtIZJ360 3tHk5vhZjPeM7Hxn3o4LJoR5EVXIsIl5mZhaThTfbPCHDmW7vsdNd5JHDsH/1i8z jGKBHmnbehw1fWo4Nq4nYILbx+a28tCCAJHSvl9CY+T/NL8OeA4wv1Yx1n6ETRmR fuedFLw0X+Uh6gGEg9cMMm8XBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL8LG7Y hWILqiC1Omq43nPhdpc+MB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmmPhf5y7mhEL8WNPNo3vQ4/0EZZtZJkcE249VfL7NJijDfx1ua3Vg RVO1j4HG/63QgoSZywcQNFHNVHPOStSDJlVEKM+5+rU2EHuVJB+szVbAghP7NWPc 3LxcJ3obilsxr9riAuBSgAevqO9p5YseShzxCHy+vHWRn2AT8alfv+mf/bTExTEw bwfVORR0+P2PJ/TrdF71BGw9lt4ATKaxVFdCs7SdBZfl6rGjyGX5OyEvknk5+qOw x9+rBcIhS1IcMANwtOuo1dC2rSFpjECYc7NDHsd2GNQIv3rg9iyOYM+TCoEnsue3 mepCMOyy099X8+rAvUOB0MJWOc/qUWfj -----END CERTIFICATE-----Generated at Mon Jun 2 20:07:31 2025 by rpki-client