$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json) Hash identifier: W6w2S8HYNOtw9VzLbD7TuJPRbcjbJZgDcJQaKyE2wVU= Subject key identifier: 96:AA:F2:C6:AF:F1:5B:0D:64:9B:9B:D1:0F:71:1E:98:03:7B:52:6E Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft Manifest number: 0102 Signing time: Sat 31 May 2025 04:44:50 +0000 Manifest this update: Sat 31 May 2025 04:44:50 +0000 Manifest next update: Sat 07 Jun 2025 04:44:50 +0000 Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: KbF+4C+2Hza6Wfj4WbNP+LivwadrwNiVQiMd/cLpS/U=) 2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: qIW59Vu75lotEAXz2XFEI0+6mfrqPvKAPSHChiVChpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Validity Not Before: May 31 04:44:50 2025 GMT Not After : Jun 7 04:44:50 2025 GMT Subject: CN=683a8942-78a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:46:34:0c:35:5c:d3:a3:41:12:66:a1:84: 2f:2b:77:5a:19:74:16:f7:ea:0d:05:b2:dd:d3:06: 86:1f:31:da:93:c3:33:1a:1d:2f:ac:0b:5b:70:f7: 4a:0f:15:8d:c3:e3:ee:96:9c:43:eb:75:50:57:c6: 6c:e3:f0:10:fd:7f:69:ba:6f:99:d9:15:a1:94:58: c7:9f:3a:bc:c3:2e:0f:47:be:2f:30:1c:e8:64:21: 7d:da:a6:e6:b9:71:19:35:05:a2:78:83:6f:47:f8: 25:ca:68:a4:ea:b6:4d:96:12:bf:f0:93:c9:23:da: c4:b9:b1:93:b8:7d:6e:88:b5:b1:40:8e:65:d1:17: 49:a4:b3:6b:59:25:41:93:8e:cf:b0:02:33:8c:fd: 6e:43:f7:7e:b5:1e:7c:e7:1e:35:ff:c8:f4:eb:a4: a6:a0:54:cc:d1:bd:a9:1a:64:06:49:4c:85:02:c2: 0f:33:cd:6f:bf:c4:c6:79:76:3f:1e:f6:de:37:5e: f5:a1:51:cc:98:f4:bf:b8:cd:46:9a:32:2b:41:ea: a0:9e:e8:30:58:92:69:36:14:a9:1c:0a:3d:ee:78: e6:90:29:5c:ee:2c:a1:8f:7e:cc:cc:e5:e6:be:da: d1:b3:d6:a6:ac:3c:d2:e0:9e:68:f3:59:20:ac:d4: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AA:F2:C6:AF:F1:5B:0D:64:9B:9B:D1:0F:71:1E:98:03:7B:52:6E X509v3 Authority Key Identifier: keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:38:87:4e:a0:27:80:78:61:01:4d:27:03:19:58:ae:a2:73: 5c:1a:1a:5c:d1:27:10:38:58:b1:15:dd:63:c4:c8:c1:77:ff: e4:f3:45:a7:85:fd:83:db:a9:5a:1e:18:22:c3:bd:8a:a0:58: 14:ec:61:71:4d:3b:4e:9b:0c:c4:4f:cd:6b:6e:90:f8:2f:d5: 55:87:2e:a1:d3:b6:dc:00:a3:6a:5a:dc:5e:f9:99:58:59:e6: 68:cc:8a:3e:2d:c3:b7:5e:6f:c1:25:47:04:f5:3c:05:4c:43: 8f:2a:49:97:50:f5:62:77:36:57:ab:03:bc:93:6a:3d:3e:e9: 1a:64:e7:60:1a:be:16:0b:01:0d:cd:1b:91:3b:97:67:58:23: fc:2b:cb:a4:b3:3f:ce:ad:cb:60:6b:28:4d:f6:ac:3b:7f:8f: 54:e9:f9:ab:1b:81:8d:7b:6e:d9:9b:82:22:de:6f:2a:36:b9: 9f:59:b3:47:6a:d2:5b:86:c5:c7:9f:50:47:3b:35:a5:1f:d2: bc:ac:18:2c:18:35:c3:94:65:82:eb:67:03:72:37:71:53:af: 11:0b:8e:d5:a6:c1:38:d2:14:b1:46:2f:28:ac:25:ab:ec:01: 40:88:35:a1:16:20:c7:ba:3f:a0:47:00:a5:54:1c:b8:2b:6f: 30:60:87:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG MjdDRDIyOTgwHhcNMjUwNTMxMDQ0NDUwWhcNMjUwNjA3MDQ0NDUwWjAYMRYwFAYD VQQDEw02ODNhODk0Mi03OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA029GNAw1XNOjQRJmoYQvK3daGXQW9+oNBbLd0waGHzHak8MzGh0vrAtbcPdK DxWNw+PulpxD63VQV8Zs4/AQ/X9pum+Z2RWhlFjHnzq8wy4PR74vMBzoZCF92qbm uXEZNQWieINvR/glymik6rZNlhK/8JPJI9rEubGTuH1uiLWxQI5l0RdJpLNrWSVB k47PsAIzjP1uQ/d+tR585x41/8j066SmoFTM0b2pGmQGSUyFAsIPM81vv8TGeXY/ HvbeN171oVHMmPS/uM1GmjIrQeqgnugwWJJpNhSpHAo97njmkClc7iyhj37MzOXm vtrRs9amrDzS4J5o81kgrNTfIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaq8sav 8VsNZJub0Q9xHpgDe1JuMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3 M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnOIdOoCeAeGEBTScDGViuonNcGhpc0ScQOFixFd1jxMjBd//k80Wn hf2D26laHhgiw72KoFgU7GFxTTtOmwzET81rbpD4L9VVhy6h07bcAKNqWtxe+ZlY WeZozIo+LcO3Xm/BJUcE9TwFTEOPKkmXUPVidzZXqwO8k2o9PukaZOdgGr4WCwEN zRuRO5dnWCP8K8uksz/OrctgayhN9qw7f49U6fmrG4GNe27Zm4Ii3m8qNrmfWbNH atJbhsXHn1BHOzWlH9K8rBgsGDXDlGWC62cDcjdxU68RC47VpsE40hSxRi8orCWr 7AFAiDWhFiDHuj+gRwClVBy4K28wYIdc -----END CERTIFICATE-----Generated at Sat May 31 16:45:51 2025 by rpki-client