$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft File: K2gwqzfLNO8nOiCi8ugmQplgE9o.mft (raw, json) Hash identifier: MrgBzBVKLOws1kOnO36+anTEi8sxmwyNIuZpMf47XgQ= Subject key identifier: 46:F9:A2:FC:E7:51:3E:70:0F:CD:C9:B3:08:4B:26:45:97:44:28:1D Authority key identifier: 2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA Certificate issuer: /CN=A91E3E80/serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft Manifest number: 09 Signing time: Tue 01 Jul 2025 08:56:59 +0000 Manifest this update: Tue 01 Jul 2025 08:56:59 +0000 Manifest next update: Tue 08 Jul 2025 08:56:59 +0000 Files and hashes: 1: K2gwqzfLNO8nOiCi8ugmQplgE9o.crl (hash: 4bgsdF3Em2CjQjlXlC2sGFQrKgPEzFd/V/8Sul4JU4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Validity Not Before: Jul 1 08:56:59 2025 GMT Not After : Jul 8 08:56:59 2025 GMT Subject: CN=6863a2db-2a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:7c:8a:41:43:62:ac:1a:07:bc:86:c8:40: ec:e7:31:40:e0:8d:c4:0c:2e:37:98:09:57:ee:8e: d7:de:a9:dc:f9:f9:20:d3:a6:0f:51:05:c9:b9:e6: fa:0f:66:f5:6a:e5:8a:45:5a:b5:9e:96:aa:be:af: 9b:66:76:05:1a:79:1a:bd:c8:b1:6a:dd:38:c6:70: d4:ce:1a:e2:f9:65:a9:66:0f:aa:cd:2b:5f:74:3d: 5a:c4:dd:d0:31:85:62:75:39:8c:ed:d7:82:c6:ff: 9e:1f:80:6a:d9:ad:2f:9d:61:d0:11:35:4c:1e:b7: 8c:5a:ef:3e:ac:51:8d:f8:2f:4b:c8:64:14:ff:8f: f9:5f:0f:be:2a:d8:92:06:61:f3:d1:7a:24:64:a2: ba:99:07:10:cb:b6:4b:53:a2:a4:eb:ff:c0:3a:b7: 5e:de:0a:de:ab:5e:7f:f5:09:70:08:91:97:f5:77: ba:f1:61:16:33:23:d2:45:24:6f:50:22:75:82:13: b5:d6:8a:c4:c1:25:e2:be:56:7a:ed:1a:49:5b:85: fa:88:1a:6e:1e:0a:2e:8c:93:0b:ab:ab:16:b1:ea: 20:70:0d:d5:ec:5d:b7:da:d2:93:14:f8:dc:18:73: 15:ea:13:da:31:09:9b:ec:e8:3f:7b:54:94:4c:e7: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F9:A2:FC:E7:51:3E:70:0F:CD:C9:B3:08:4B:26:45:97:44:28:1D X509v3 Authority Key Identifier: keyid:2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:08:a8:d7:3d:de:a1:a9:06:17:69:ea:27:08:a6:00:dc:d6: 5e:ec:6a:52:2c:90:c6:fe:c6:6d:10:e7:6d:a4:02:31:7e:f2: 1f:0a:73:58:7a:68:30:9d:0c:32:63:ab:35:f3:74:6b:40:98: 78:e5:8f:cd:db:8d:d6:ae:80:2d:73:25:a4:25:f4:ef:6b:4c: 5a:3c:26:5e:c3:be:50:a8:a3:45:c1:61:43:a9:5f:27:7c:b0: 8a:70:81:8f:dd:13:47:b5:f9:7a:d2:e6:69:dd:1c:b8:62:14: 35:5b:ba:a2:c3:2c:0a:02:58:1b:f4:a5:45:62:81:eb:e8:ea: 8f:54:fa:c7:e1:d5:02:07:80:50:ac:62:4f:c8:3c:17:c8:8d: 97:99:14:0f:e8:bf:80:c2:24:73:e6:3a:34:a4:48:81:39:ba: 0e:2e:84:82:1b:ff:4d:27:56:72:4d:3f:10:61:9c:7c:7e:1e: 62:c0:99:c4:b6:f5:df:76:d2:d7:dc:9a:26:89:e0:31:bb:27: f3:d5:1d:7e:8c:dd:34:03:8a:da:7b:2b:cb:5f:32:4e:4c:28: 58:6d:6b:58:e7:7a:89:7e:e4:8e:05:76:b0:93:b7:0d:8d:93: 33:9d:39:e0:f8:b1:d1:8c:5d:af:fd:76:4f:f9:72:4a:02:74: a1:61:bf:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4MDExMC8GA1UEBRMoMkI2ODMwQUIzN0NCMzRFRjI3M0EyMEEyRjJFODI2NDI5 OTYwMTNEQTAeFw0yNTA3MDEwODU2NTlaFw0yNTA3MDgwODU2NTlaMBgxFjAUBgNV BAMTDTY4NjNhMmRiLTJhOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFJHyKQUNirBoHvIbIQOznMUDgjcQMLjeYCVfujtfeqdz5+SDTpg9RBcm55voP ZvVq5YpFWrWelqq+r5tmdgUaeRq9yLFq3TjGcNTOGuL5ZalmD6rNK190PVrE3dAx hWJ1OYzt14LG/54fgGrZrS+dYdARNUwet4xa7z6sUY34L0vIZBT/j/lfD74q2JIG YfPReiRkorqZBxDLtktToqTr/8A6t17eCt6rXn/1CXAIkZf1d7rxYRYzI9JFJG9Q InWCE7XWisTBJeK+VnrtGklbhfqIGm4eCi6Mkwurqxax6iBwDdXsXbfa0pMU+NwY cxXqE9oxCZvs6D97VJRM5zk/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURvmi/OdR PnAPzcmzCEsmRZdEKB0wHwYDVR0jBBgwFoAUK2gwqzfLNO8nOiCi8ugmQplgE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRTgwLzNFNDAyQUVBNEI2 NjExRjBCODg1MjQzOUM0RjlBRTAyL0syZ3dxemZMTk84bk9pQ2k4dWdtUXBsZ0U5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzJnd3F6ZkxOTzhuT2lDaTh1Z21RcGxnRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RTgwLzNFNDAyQUVBNEI2NjExRjBCODg1MjQzOUM0RjlBRTAyL0syZ3dxemZMTk84 bk9pQ2k4dWdtUXBsZ0U5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA0IqNc93qGpBhdp6icIpgDc1l7salIskMb+xm0Q522kAjF+8h8Kc1h6 aDCdDDJjqzXzdGtAmHjlj83bjdaugC1zJaQl9O9rTFo8Jl7DvlCoo0XBYUOpXyd8 sIpwgY/dE0e1+XrS5mndHLhiFDVbuqLDLAoCWBv0pUVigevo6o9U+sfh1QIHgFCs Yk/IPBfIjZeZFA/ov4DCJHPmOjSkSIE5ug4uhIIb/00nVnJNPxBhnHx+HmLAmcS2 9d920tfcmiaJ4DG7J/PVHX6M3TQDitp7K8tfMk5MKFhta1jneol+5I4FdrCTtw2N kzOdOeD4sdGMXa/9dk/5ckoCdKFhv1Q= -----END CERTIFICATE-----Generated at Wed Jul 2 01:57:27 2025 by rpki-client