$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: UTCXycpdmajOiHKJ2GwLa26UgNySE25E6UDPtkmcOGA= Subject key identifier: 12:D5:E8:CB:0D:C0:01:B3:78:97:DB:B4:96:D8:27:C6:D7:43:CE:58 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 0438 Signing time: Sat 07 Jun 2025 00:22:08 +0000 Manifest this update: Sat 07 Jun 2025 00:22:07 +0000 Manifest next update: Sat 14 Jun 2025 00:22:07 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: 1bqTXCS4d7LmQ/f/FSLFPh981cKpDdjmOq7697rmA9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Jun 7 00:22:07 2025 GMT Not After : Jun 14 00:22:07 2025 GMT Subject: CN=6843862f-6c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:ef:17:86:61:f4:4f:c8:4e:c6:64:31:d2: ea:d4:8e:17:52:4c:16:be:ba:58:3e:1b:7b:a8:16: 52:21:71:d5:ed:21:f4:36:3d:fd:ea:a2:9d:d4:07: b1:1c:a6:60:98:0b:2b:94:b9:33:cf:55:f4:3e:c8: f6:2a:b9:a1:fb:ad:b6:07:ac:c5:d5:ab:93:0f:f6: 6a:5b:d3:dd:53:40:b4:8b:c4:c9:cf:6d:58:5a:bf: 4f:7c:22:76:dc:bf:e3:4c:ca:bc:d3:a5:10:5c:34: e5:04:73:69:92:70:aa:47:72:b1:f9:2e:e1:d8:6e: 7c:e7:e1:a4:a8:d1:6a:9b:1e:da:cd:e8:71:b8:8c: d9:16:84:78:71:ed:fb:0d:b0:00:c6:dd:a0:4b:bd: 7d:4b:1e:d6:34:cb:dd:21:c7:1a:4f:0e:d6:a5:f0: 85:5a:ac:9e:c3:28:97:31:8c:60:91:16:af:2a:6a: d4:15:cb:ea:cf:27:d6:ab:96:d6:62:f5:94:ff:1b: f8:b9:cd:7e:3e:21:bc:c2:d1:d7:95:67:13:63:a5: 5a:52:2b:42:ab:6b:64:34:d2:5b:8e:8c:dc:19:f1: 21:ea:60:fd:26:74:25:d3:6f:07:1c:90:82:3f:85: 8c:45:73:e2:fe:8e:aa:55:d8:3f:48:81:32:7a:90: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D5:E8:CB:0D:C0:01:B3:78:97:DB:B4:96:D8:27:C6:D7:43:CE:58 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:72:4b:59:9d:6f:85:37:bc:7a:99:07:bf:22:8f:d6:ac:d8: 79:8e:7b:d3:60:9d:f9:fc:a0:e2:db:7e:49:14:53:a1:8e:40: 34:0c:61:f9:e8:e0:b8:a4:1e:24:79:e2:01:ac:c9:ec:a6:6a: b0:3e:53:87:dc:cb:59:9d:42:0d:37:0f:e3:d2:a5:77:9a:94: cd:74:b4:c3:04:76:05:d8:8b:8c:e0:61:64:28:c2:0f:86:2c: e3:7a:60:3f:7a:92:4f:96:66:bf:e4:40:29:57:7e:e6:02:2f: 24:73:da:24:4c:cb:9d:ce:e0:75:57:e3:ee:06:7b:3d:a5:54: a2:bf:0d:13:53:d4:2a:85:7c:84:25:c9:3a:ad:a4:48:f2:9d: 0f:cf:b5:b5:f7:7a:39:e8:e8:3a:d9:ad:56:9c:fb:27:57:0d: a7:56:ad:6d:37:1e:19:4f:01:9f:47:ec:84:51:44:76:d4:18: ce:83:d1:20:b6:11:e4:a1:79:81:d1:be:59:74:12:c9:09:59: a9:d1:e3:39:e1:f2:b0:98:d3:70:67:7d:20:37:32:2e:0a:cd: 29:cb:46:5c:98:6c:79:cf:52:77:8d:7e:df:28:b8:84:34:91: 41:05:c5:aa:13:8c:c9:91:b1:3d:fd:6a:46:79:ff:db:c8:90: 3a:03:b0:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUwNjA3MDAyMjA3WhcNMjUwNjE0MDAyMjA3WjAYMRYwFAYD VQQDEw02ODQzODYyZi02Yzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcvvF4Zh9E/ITsZkMdLq1I4XUkwWvrpYPht7qBZSIXHV7SH0Nj396qKd1Aex HKZgmAsrlLkzz1X0Psj2Krmh+622B6zF1auTD/ZqW9PdU0C0i8TJz21YWr9PfCJ2 3L/jTMq806UQXDTlBHNpknCqR3Kx+S7h2G585+GkqNFqmx7azehxuIzZFoR4ce37 DbAAxt2gS719Sx7WNMvdIccaTw7WpfCFWqyewyiXMYxgkRavKmrUFcvqzyfWq5bW YvWU/xv4uc1+PiG8wtHXlWcTY6VaUitCq2tkNNJbjozcGfEh6mD9JnQl028HHJCC P4WMRXPi/o6qVdg/SIEyepBuvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLV6MsN wAGzeJfbtJbYJ8bXQ85YMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACcktZnW+FN7x6mQe/Io/WrNh5jnvTYJ35/KDi235JFFOhjkA0DGH5 6OC4pB4keeIBrMnspmqwPlOH3MtZnUINNw/j0qV3mpTNdLTDBHYF2IuM4GFkKMIP hizjemA/epJPlma/5EApV37mAi8kc9okTMudzuB1V+PuBns9pVSivw0TU9QqhXyE Jck6raRI8p0Pz7W193o56Og62a1WnPsnVw2nVq1tNx4ZTwGfR+yEUUR21BjOg9Eg thHkoXmB0b5ZdBLJCVmp0eM54fKwmNNwZ30gNzIuCs0py0ZcmGx5z1J3jX7fKLiE NJFBBcWqE4zJkbE9/WpGef/byJA6A7Aw -----END CERTIFICATE-----Generated at Sat Jun 7 07:02:30 2025 by rpki-client