$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: CZDtOTCqUa2Iuslsc6wLd/+yY4HGCp6LkiTXUfyAjCI= Subject key identifier: B3:D7:F8:71:15:42:36:31:1C:C0:53:31:17:38:C2:6F:16:A9:0E:C2 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0CC3 Signing time: Fri 30 May 2025 18:19:45 +0000 Manifest this update: Fri 30 May 2025 18:19:44 +0000 Manifest next update: Fri 06 Jun 2025 18:19:44 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: 1WnI0ryJtz0bTyD0qHdPF0Yx+0Z6VheWLqsjpz2IBX4=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: May 30 18:19:44 2025 GMT Not After : Jun 6 18:19:44 2025 GMT Subject: CN=6839f6c1-44fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d1:ff:68:7b:5d:c2:8d:84:ad:08:8b:c7:72: c6:2a:d8:93:80:6a:d3:ca:7b:81:2e:83:8b:fd:4c: 7a:09:44:e1:86:fb:7b:c9:09:bd:3a:81:2f:e1:38: f0:49:f8:24:35:59:d9:d4:62:16:d0:fa:dd:f5:3b: 44:82:f2:de:fe:84:ff:41:6d:2a:e8:7b:fa:99:0c: 02:41:06:c1:f9:76:da:1e:d8:1d:92:cd:bf:03:25: 6a:fd:98:e6:c7:b1:f1:6d:69:e5:2a:17:63:07:ed: a4:67:1c:97:12:ad:27:4b:19:db:e2:77:c4:f5:95: 31:53:ba:1d:13:55:4b:9e:f9:9b:5d:c4:36:22:ff: 0e:1c:35:31:95:0c:40:62:c8:d6:aa:fa:05:63:e6: 36:c5:8f:70:2f:5d:f5:5d:bb:39:35:ea:f2:fc:25: ed:67:30:72:76:f7:fe:bd:14:b0:a1:fe:23:26:fa: c4:ce:d9:f4:b1:b4:61:0f:3c:5f:eb:b0:e0:f2:38: e3:00:ff:ac:27:55:7e:b1:00:28:87:89:d7:4d:5b: b5:81:a1:1f:0c:bb:c7:05:c1:dc:f7:86:2d:72:7d: 02:0d:b8:8f:cb:2d:e9:23:4b:54:f1:e0:af:91:29: f2:45:84:95:d0:38:4a:37:21:66:02:b7:e7:77:79: 5e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D7:F8:71:15:42:36:31:1C:C0:53:31:17:38:C2:6F:16:A9:0E:C2 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3a:0b:f3:0b:02:22:6c:d4:ea:a8:c6:8e:0f:39:e4:96:5b: 1a:85:1b:f6:68:3f:e2:85:f2:98:61:c0:e3:9d:e4:20:2a:04: d9:71:89:a7:26:67:c0:a1:b9:72:96:91:1b:88:49:81:9e:b9: 6c:8d:96:d0:b9:82:18:d0:ca:f7:1f:dc:4b:66:a3:f5:d1:e4: 57:89:15:5c:b2:8e:5f:6e:07:a7:f4:7b:9b:1a:b8:fc:eb:75: 56:ee:8c:d7:cb:ab:70:a9:06:9f:c3:13:0f:5f:6f:ba:68:11: 43:50:cc:9e:ff:a0:74:93:00:88:b4:f5:ff:6e:79:0c:20:90: 6d:10:b1:b0:5a:ea:c3:35:bf:da:ac:f0:41:d6:1c:32:f2:ee: d2:6e:d0:9d:52:14:b1:a5:8f:02:26:16:aa:e8:07:ad:96:bb: 1f:f5:80:19:e0:87:ae:da:79:6f:9e:e0:5e:71:12:d7:ee:a4: a6:29:87:01:05:8a:de:9e:68:09:32:3a:08:47:ee:3b:62:f8: 04:c1:d5:a3:d3:0e:10:b2:7f:25:1a:ed:d7:a4:c1:72:45:07: 59:72:c5:97:08:03:59:5f:6f:b6:52:77:58:e8:f8:40:ed:94: 60:13:ee:6a:9f:c0:a4:6d:df:9a:ed:15:e8:86:de:1f:43:f3: a6:fc:07:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUwNTMwMTgxOTQ0WhcNMjUwNjA2MTgxOTQ0WjAYMRYwFAYD VQQDEw02ODM5ZjZjMS00NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNH/aHtdwo2ErQiLx3LGKtiTgGrTynuBLoOL/Ux6CUThhvt7yQm9OoEv4Tjw SfgkNVnZ1GIW0Prd9TtEgvLe/oT/QW0q6Hv6mQwCQQbB+XbaHtgdks2/AyVq/Zjm x7HxbWnlKhdjB+2kZxyXEq0nSxnb4nfE9ZUxU7odE1VLnvmbXcQ2Iv8OHDUxlQxA YsjWqvoFY+Y2xY9wL131Xbs5Nery/CXtZzBydvf+vRSwof4jJvrEztn0sbRhDzxf 67Dg8jjjAP+sJ1V+sQAoh4nXTVu1gaEfDLvHBcHc94Ytcn0CDbiPyy3pI0tU8eCv kSnyRYSV0DhKNyFmArfnd3lehwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPX+HEV QjYxHMBTMRc4wm8WqQ7CMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEOgvzCwIibNTqqMaODznkllsahRv2aD/ihfKYYcDjneQgKgTZcYmn JmfAoblylpEbiEmBnrlsjZbQuYIY0Mr3H9xLZqP10eRXiRVcso5fbgen9HubGrj8 63VW7ozXy6twqQafwxMPX2+6aBFDUMye/6B0kwCItPX/bnkMIJBtELGwWurDNb/a rPBB1hwy8u7SbtCdUhSxpY8CJhaq6Aetlrsf9YAZ4Ieu2nlvnuBecRLX7qSmKYcB BYrenmgJMjoIR+47YvgEwdWj0w4Qsn8lGu3XpMFyRQdZcsWXCANZX2+2UndY6PhA 7ZRgE+5qn8Ckbd+a7RXoht4fQ/Om/Aco -----END CERTIFICATE-----Generated at Sat May 31 15:24:48 2025 by rpki-client