$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json) Hash identifier: qTv/1R8HnWzpXGTmGtIBDRDYssa3JW5hn0E9QuRf0N4= Subject key identifier: 59:FA:27:2F:B0:4C:10:F2:CB:40:04:21:02:EE:F8:D6:F3:47:97:80 Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft Manifest number: 3482 Signing time: Fri 30 May 2025 15:24:15 +0000 Manifest this update: Fri 30 May 2025 15:24:14 +0000 Manifest next update: Fri 06 Jun 2025 15:24:14 +0000 Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: lnafObOCkWmBU6wXpNy0AtBbERhdRFFJ5bFTIhZXq/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Validity Not Before: May 30 15:24:14 2025 GMT Not After : Jun 6 15:24:14 2025 GMT Subject: CN=6839cd9f-0856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:23:25:3c:f2:64:57:97:2f:19:cf:78:81: b1:83:00:67:5f:36:04:2d:af:ac:ee:27:6d:33:ad: 34:84:87:30:28:40:1d:51:6e:0e:57:4e:e6:95:be: a3:b3:0b:b6:e9:ff:e7:7a:c9:bf:1b:5f:02:a5:f1: c6:72:64:43:6a:f6:a1:89:cb:ae:b2:fa:ac:26:76: d7:61:39:dc:b3:1b:6e:de:9a:58:f3:a8:24:28:16: 87:a3:98:b3:cf:36:54:10:3d:63:4c:b2:b0:48:8d: e6:ef:06:34:73:29:8a:be:ae:2b:81:63:71:ec:09: 14:47:fd:99:6b:0d:ac:88:95:27:ed:45:af:bd:ed: 4f:cb:7d:c0:88:68:f8:e9:f9:9b:97:b0:29:ab:99: f4:90:82:33:7a:ca:87:c4:82:44:a3:36:32:38:85: 2c:1c:47:ac:ea:8f:df:9c:5e:13:3a:32:4f:3c:f4: af:31:e5:b0:c6:01:2b:6f:41:bc:46:3a:63:1e:88: 27:c4:ac:09:db:6e:95:4c:7e:92:c8:07:25:f0:99: d6:7d:0e:27:4c:4a:67:f9:ea:eb:0c:a0:dc:17:33: f3:60:71:07:15:1d:69:7c:0a:a2:d3:bf:f9:10:8d: 3f:c7:22:0b:80:aa:c7:eb:a4:3c:b4:12:6e:f8:ab: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FA:27:2F:B0:4C:10:F2:CB:40:04:21:02:EE:F8:D6:F3:47:97:80 X509v3 Authority Key Identifier: keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a1:1f:71:f7:88:bc:40:89:94:ce:df:52:0d:ef:07:dd:16: e6:48:78:a7:e1:d4:f7:53:47:29:49:fa:2b:b6:c4:5c:ab:82: 49:60:2f:35:0e:3f:20:c7:16:d3:ea:8f:5f:30:c0:f5:eb:ae: 20:59:b4:79:14:b1:34:b4:b4:97:4d:c5:e5:89:7b:8c:66:a5: ae:88:3c:39:77:9b:a7:85:01:bf:db:ab:12:b1:ec:a6:2c:fe: aa:f6:33:a6:f8:f4:cb:bc:9d:8b:a3:37:3e:bf:f4:7e:d8:fe: 5d:c4:ce:62:36:d8:2b:d1:82:5d:f7:ba:18:65:87:be:db:79: c8:e8:6a:58:79:70:4f:8d:17:7f:27:0e:9d:5f:05:75:e4:73: 51:d6:4c:44:0f:9d:7c:72:c4:0f:58:45:10:8b:2a:30:cc:11: df:99:81:c9:d1:ac:af:3b:87:bc:61:38:4f:a2:f5:08:8e:96: 9a:3f:78:ba:de:a8:d8:97:af:c0:76:3d:8f:6e:2f:24:d4:69: 9b:24:0f:3e:d8:e8:d3:f8:7a:da:01:10:9d:a4:90:ca:85:3a: e9:37:63:e6:b4:20:ce:73:26:f3:99:e6:4b:21:29:81:e4:53: 5e:d5:cc:18:70:e8:f0:65:9f:2e:13:27:67:5a:ff:45:3c:96: 6b:93:3e:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG NTQwNjEwODIwHhcNMjUwNTMwMTUyNDE0WhcNMjUwNjA2MTUyNDE0WjAYMRYwFAYD VQQDEw02ODM5Y2Q5Zi0wODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SEjJTzyZFeXLxnPeIGxgwBnXzYELa+s7idtM600hIcwKEAdUW4OV07mlb6j swu26f/nesm/G18CpfHGcmRDavahicuusvqsJnbXYTncsxtu3ppY86gkKBaHo5iz zzZUED1jTLKwSI3m7wY0cymKvq4rgWNx7AkUR/2Zaw2siJUn7UWvve1Py33AiGj4 6fmbl7Apq5n0kIIzesqHxIJEozYyOIUsHEes6o/fnF4TOjJPPPSvMeWwxgErb0G8 RjpjHognxKwJ226VTH6SyAcl8JnWfQ4nTEpn+errDKDcFzPzYHEHFR1pfAqi07/5 EI0/xyILgKrH66Q8tBJu+KsrUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFn6Jy+w TBDyy0AEIQLu+NbzR5eAMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChoR9x94i8QImUzt9SDe8H3RbmSHin4dT3U0cpSfortsRcq4JJYC81 Dj8gxxbT6o9fMMD1664gWbR5FLE0tLSXTcXliXuMZqWuiDw5d5unhQG/26sSseym LP6q9jOm+PTLvJ2Lozc+v/R+2P5dxM5iNtgr0YJd97oYZYe+23nI6GpYeXBPjRd/ Jw6dXwV15HNR1kxED518csQPWEUQiyowzBHfmYHJ0ayvO4e8YThPovUIjpaaP3i6 3qjYl6/Adj2Pbi8k1GmbJA8+2OjT+HraARCdpJDKhTrpN2PmtCDOcybzmeZLISmB 5FNe1cwYcOjwZZ8uEydnWv9FPJZrkz65 -----END CERTIFICATE-----Generated at Sat May 31 16:34:02 2025 by rpki-client