$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: tpXdKGoQj6FMCerqfYprye8ifgTCmmlZQZ5Ja0xMz7w= Subject key identifier: FB:54:08:C6:84:A0:DA:F4:85:28:14:11:36:4B:7F:DC:9C:4D:99:C9 Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 077F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 076A Signing time: Wed 04 Jun 2025 21:30:19 +0000 Manifest this update: Wed 04 Jun 2025 21:30:18 +0000 Manifest next update: Wed 11 Jun 2025 21:30:18 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: nmC8AxijYUchTWIGj4pXlL8F9TDtVZ1YooVhS9Xjcao=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: PfwMudypLXBG0l/8zURzPSjDmL/lqt08xsdYYn3A5t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F, serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: Jun 4 21:30:18 2025 GMT Not After : Jun 11 21:30:18 2025 GMT Subject: CN=6840baea-0527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:f3:4b:5e:6d:b4:fd:72:2c:4c:b7:87:2f: 44:c7:68:69:aa:4a:34:bf:c1:fd:99:99:30:d9:db: aa:e1:f3:17:de:79:91:db:86:0e:43:26:f8:ae:a5: 6f:b8:c5:e3:1f:45:67:57:d2:3c:2b:e7:9f:85:ba: 01:89:bd:10:74:95:75:65:38:25:47:34:c7:1f:86: 86:e0:d5:d0:2e:1f:bf:a3:7f:c6:0b:fe:69:bc:2a: 07:ed:f7:a5:ec:15:ee:34:8b:5d:85:f6:67:bc:c2: d7:7f:5c:94:84:91:7c:44:e2:97:92:f1:77:0c:30: 94:a7:8b:57:82:31:6f:20:37:ad:38:c2:e7:62:a4: 95:9a:35:b2:fe:c0:6c:f7:45:bd:82:69:3f:5f:41: d8:11:d7:1c:cb:7c:c9:fa:76:e6:9a:c5:dd:95:e7: b7:de:9b:ea:7e:dd:52:de:0f:7c:c0:ba:c1:8b:62: 2a:12:5b:07:02:13:b8:07:52:90:34:6f:4b:23:18: 20:f7:0f:04:f7:f0:79:1c:4b:1c:02:24:f7:02:7a: 70:83:44:4d:d9:49:12:a0:bf:1d:65:76:b9:45:db: 43:2b:2f:f8:a8:50:54:62:fd:13:af:1f:16:26:c5: 28:7a:33:ba:21:f8:7a:a6:55:76:92:78:60:fd:7c: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:54:08:C6:84:A0:DA:F4:85:28:14:11:36:4B:7F:DC:9C:4D:99:C9 X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:94:e8:a7:80:84:59:01:ff:cc:5b:18:6a:d6:95:d4:38:9a: 6d:75:fe:b6:f8:91:d9:cd:05:a5:78:7b:62:39:2e:ce:28:fa: 7d:e6:42:27:ec:f8:ac:1e:09:2c:88:31:0c:1e:70:be:39:13: bc:20:f8:94:a9:28:2c:15:42:45:98:10:ce:47:e0:3c:cc:94: ce:ab:d1:46:bd:b8:b5:15:89:a6:92:fc:80:25:ee:25:58:1b: 1b:2a:5f:8f:57:26:51:2f:53:d5:c7:bd:6e:96:72:eb:fb:b9: a3:3f:6b:39:bf:14:bb:1c:05:d1:b8:04:da:2d:ea:d2:08:fa: ee:35:19:22:a2:c4:7f:b6:b2:d2:82:1a:1f:65:af:ff:21:a2: f2:d3:73:0f:34:31:0f:b9:4e:b0:95:93:f1:82:79:d1:2c:27: fb:d9:a4:8c:ff:3a:4d:96:c6:98:5f:46:b1:cb:7d:e8:8c:c8: d6:d3:e7:23:8e:11:06:30:66:e2:2b:e3:e6:d7:e7:c5:18:5c: 90:23:1b:ab:11:11:8c:7c:4e:61:56:81:fc:85:39:a3:dd:31: 92:31:c2:2b:7b:e3:99:7a:8a:82:76:52:9e:5b:74:7e:d0:74: 2f:4c:89:9e:d3:f3:4b:56:bc:14:81:23:a0:a8:16:dd:76:cd: 82:83:e7:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjUwNjA0MjEzMDE4WhcNMjUwNjExMjEzMDE4WjAYMRYwFAYD VQQDEw02ODQwYmFlYS0wNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EfzS15ttP1yLEy3hy9Ex2hpqko0v8H9mZkw2duq4fMX3nmR24YOQyb4rqVv uMXjH0VnV9I8K+efhboBib0QdJV1ZTglRzTHH4aG4NXQLh+/o3/GC/5pvCoH7fel 7BXuNItdhfZnvMLXf1yUhJF8ROKXkvF3DDCUp4tXgjFvIDetOMLnYqSVmjWy/sBs 90W9gmk/X0HYEdccy3zJ+nbmmsXdlee33pvqft1S3g98wLrBi2IqElsHAhO4B1KQ NG9LIxgg9w8E9/B5HEscAiT3Anpwg0RN2UkSoL8dZXa5RdtDKy/4qFBUYv0Trx8W JsUoejO6Ifh6plV2knhg/XzIPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtUCMaE oNr0hSgUETZLf9ycTZnJMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUlOingIRZAf/MWxhq1pXUOJptdf62+JHZzQWleHtiOS7OKPp95kIn 7PisHgksiDEMHnC+ORO8IPiUqSgsFUJFmBDOR+A8zJTOq9FGvbi1FYmmkvyAJe4l WBsbKl+PVyZRL1PVx71ulnLr+7mjP2s5vxS7HAXRuATaLerSCPruNRkiosR/trLS ghofZa//IaLy03MPNDEPuU6wlZPxgnnRLCf72aSM/zpNlsaYX0axy33ojMjW0+cj jhEGMGbiK+Pm1+fFGFyQIxurERGMfE5hVoH8hTmj3TGSMcIre+OZeoqCdlKeW3R+ 0HQvTIme0/NLVrwUgSOgqBbdds2Cg+fl -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:06 2025 by rpki-client