$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft File: kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json) Hash identifier: LOjLfMACXviFYJkBYpTB4JpNEPWhnQgG4HQI/Q7o1zw= Subject key identifier: EC:13:C2:A2:82:41:33:5A:DB:C5:FA:6B:50:08:86:19:D5:BE:E8:A3 Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Certificate issuer: /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft Manifest number: 0247 Signing time: Sun 01 Jun 2025 03:21:33 +0000 Manifest this update: Sun 01 Jun 2025 03:21:32 +0000 Manifest next update: Sun 08 Jun 2025 03:21:32 +0000 Files and hashes: 1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: 02MZ68rDhN9oNpEtw7cEnlvPuUzNNET2qV6fPZqkWE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 03:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Validity Not Before: Jun 1 03:21:32 2025 GMT Not After : Jun 8 03:21:32 2025 GMT Subject: CN=683bc73d-99ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:06:31:39:12:15:ad:3f:08:f4:b8:7e:ae: eb:b9:1b:d0:ac:48:da:96:b2:19:72:f9:c6:ec:81: 0e:b6:8a:2e:96:34:74:82:9f:e6:67:a1:ad:af:df: 42:a6:ee:d7:6c:75:51:64:f3:6c:77:c9:8c:eb:5f: 97:10:9b:4e:a3:34:31:05:5c:ec:55:31:f5:ea:67: 75:37:cd:50:81:bb:f8:1e:52:72:36:2d:9f:58:b9: d2:b7:ae:81:ab:2d:42:c7:29:9b:f6:8d:46:33:68: 5d:cf:85:09:b3:66:61:b7:62:43:6c:fd:5c:a3:29: ad:78:2d:13:39:40:08:0e:5e:10:9a:19:00:60:41: cf:a3:d1:d1:94:c7:3e:f5:54:53:7b:d7:e6:09:46: 00:11:0f:84:df:54:80:7b:d0:09:04:36:43:4e:b6: f9:38:dd:a2:cd:7c:ed:98:48:2c:4d:74:de:1c:44: f1:d8:f3:6c:68:28:8a:e1:5f:a2:e8:22:38:4c:69: bf:74:c4:59:42:a0:c1:f9:e0:7c:79:16:28:8a:4d: 5f:33:29:d2:a0:43:f5:e7:21:c3:eb:8a:db:b7:d7: 7f:b9:9e:be:31:87:69:5c:61:5d:0a:75:26:60:7d: 88:2b:4d:41:3c:02:e6:19:13:39:8e:83:7f:0d:da: 0d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:13:C2:A2:82:41:33:5A:DB:C5:FA:6B:50:08:86:19:D5:BE:E8:A3 X509v3 Authority Key Identifier: keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:09:7c:86:23:29:a0:d7:2f:82:da:7b:c7:c6:2e:a4:19:c9: 69:6f:1d:6a:9f:8f:cb:26:95:dc:c8:b4:31:ea:34:9f:ed:2f: 04:a3:ce:98:a2:ff:32:e4:e3:72:b7:5d:42:a2:e9:60:5f:b8: 5c:d7:9d:8a:35:f4:53:3e:15:46:f6:a1:b0:02:3d:a5:59:50: ef:49:d3:87:5d:b1:3e:c9:02:92:e2:b4:d0:7c:ea:fc:5d:17: 8a:3e:73:4f:9b:67:53:5d:fd:6f:b1:45:bb:f3:95:ff:10:4d: c1:77:fd:f0:47:f4:6b:f5:5a:64:60:eb:20:ab:bd:22:11:87: ae:51:70:46:46:93:b0:ed:3d:98:f4:d7:8f:1c:4b:c7:c0:f3: 1f:9e:b3:5a:46:d3:01:a9:be:63:95:13:7d:b6:c8:9f:0f:c4: fa:13:8b:13:ab:9c:36:30:67:07:9b:c0:05:07:a6:08:ca:7c: 04:a1:d1:70:95:84:b5:38:a8:da:7a:85:b3:14:46:d9:cb:53: 81:19:5b:81:a6:62:44:f8:cb:8c:20:2f:33:c3:e4:86:d0:44: a7:da:eb:ba:c9:e6:17:a3:02:80:20:94:58:12:60:6d:42:3d: 48:c6:cb:b8:ad:3a:d1:98:3c:c6:b3:6a:44:00:a1:c2:9d:5f: 07:8d:64:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUNDNDI1OTJBRDA1 Qzk2NzZBNjIwHhcNMjUwNjAxMDMyMTMyWhcNMjUwNjA4MDMyMTMyWjAYMRYwFAYD VQQDEw02ODNiYzczZC05OWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWsGMTkSFa0/CPS4fq7ruRvQrEjalrIZcvnG7IEOtoouljR0gp/mZ6Gtr99C pu7XbHVRZPNsd8mM61+XEJtOozQxBVzsVTH16md1N81Qgbv4HlJyNi2fWLnSt66B qy1Cxymb9o1GM2hdz4UJs2Zht2JDbP1coymteC0TOUAIDl4QmhkAYEHPo9HRlMc+ 9VRTe9fmCUYAEQ+E31SAe9AJBDZDTrb5ON2izXztmEgsTXTeHETx2PNsaCiK4V+i 6CI4TGm/dMRZQqDB+eB8eRYoik1fMynSoEP15yHD64rbt9d/uZ6+MYdpXGFdCnUm YH2IK01BPALmGRM5joN/DdoNiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwTwqKC QTNa28X6a1AIhhnVvuijMB8GA1UdIwQYMBaAFJEtzXfOF2Jz2UocxCWSrQXJZ2pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFluUFpTaHpFSlpLdEJjbG5h bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTM05kODRYWW5QWlNoekVKWkt0QmNsbmFtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFlu UFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaCXyGIymg1y+C2nvHxi6kGclpbx1qn4/LJpXcyLQx6jSf7S8Eo86Y ov8y5ONyt11CoulgX7hc152KNfRTPhVG9qGwAj2lWVDvSdOHXbE+yQKS4rTQfOr8 XReKPnNPm2dTXf1vsUW785X/EE3Bd/3wR/Rr9VpkYOsgq70iEYeuUXBGRpOw7T2Y 9NePHEvHwPMfnrNaRtMBqb5jlRN9tsifD8T6E4sTq5w2MGcHm8AFB6YIynwEodFw lYS1OKjaeoWzFEbZy1OBGVuBpmJE+MuMIC8zw+SG0ESn2uu6yeYXowKAIJRYEmBt Qj1Ixsu4rTrRmDzGs2pEAKHCnV8HjWSa -----END CERTIFICATE-----Generated at Mon Jun 2 07:17:25 2025 by rpki-client