$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: ZwRJNufbtWWAId3Ea44XIFrOiBIiEr5ntBJyapHLhr4= Subject key identifier: C0:DA:37:7D:91:9A:FF:D3:5F:66:1E:9B:41:92:9F:9F:71:B7:EA:30 Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 06ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 1149 Signing time: Mon 02 Jun 2025 19:47:18 +0000 Manifest this update: Mon 02 Jun 2025 19:47:17 +0000 Manifest next update: Mon 09 Jun 2025 19:47:17 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: sDzkEw8Vo+3uOaqhzdPiv84U9AkDNR5N8gXDsIboqRo=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: kG/awft1YnlMUcGo/TLCAbm8s2p3POH5kub747SVbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1773 (0x6ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: Jun 2 19:47:17 2025 GMT Not After : Jun 9 19:47:17 2025 GMT Subject: CN=683dffc6-b687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:75:8a:48:d4:26:a3:a4:84:2c:e0:2f:d7: 90:a0:dc:1b:b2:dc:55:71:2a:98:e7:e5:c5:fd:ef: 51:72:60:9a:69:f1:3d:a4:1d:0a:7a:dd:10:93:79: f1:ba:46:d0:66:02:3a:6b:2e:f4:53:54:0e:1a:de: c9:21:5e:84:29:19:04:ab:43:94:b6:5b:38:d7:39: f5:45:3a:98:0a:19:ea:74:65:e6:cc:11:a8:c6:b7: f7:ea:76:5f:d5:2b:63:d6:5c:40:6b:fd:cf:d6:7d: 58:79:8c:30:21:6e:d6:f1:3a:84:ee:b7:17:93:fe: e3:e4:cf:59:fe:f4:1e:22:c7:a3:78:33:cb:99:41: 47:81:83:3e:2b:00:3d:2c:e8:d0:00:ab:b3:ac:d5: 9e:2a:0b:11:7b:27:7a:c4:de:6c:23:39:9b:70:b1: 71:12:49:01:31:7d:27:06:d2:51:3b:94:be:26:63: 5a:68:9d:73:25:bc:07:11:49:9c:36:5c:e3:23:d6: e1:b9:e3:03:66:14:37:8a:0c:54:53:2d:7f:30:b6: 06:eb:16:f4:ee:73:87:0e:5b:bd:86:f0:90:49:c3: 3e:9d:ef:8c:f3:b4:19:5a:d2:5d:1f:f1:d3:f8:97: 1b:fa:d0:96:dc:92:21:e8:3b:32:88:01:79:df:7d: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:37:7D:91:9A:FF:D3:5F:66:1E:9B:41:92:9F:9F:71:B7:EA:30 X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b2:83:f4:6b:33:f2:28:b8:ee:88:dd:b2:50:72:ee:4f:26: 6e:51:92:55:44:0f:cc:13:7e:13:c8:30:a9:76:23:00:c2:a6: cc:9c:41:1e:f8:50:eb:06:3d:cc:e9:a2:19:e6:24:04:2c:15: a8:84:ae:1d:51:92:06:24:b7:30:d5:df:29:69:e0:f6:a3:b1: 9d:95:29:72:0b:2b:fc:0d:a9:86:88:23:2d:01:bf:5a:cc:c4: 90:41:61:97:f2:7d:ed:d8:f2:9b:67:cc:f9:db:48:90:b6:f3: 5a:c4:00:0e:3e:88:db:ad:39:5e:0f:ed:0f:61:5f:36:78:dc: 0a:24:bf:ac:73:50:00:7d:20:b0:8b:45:6b:5d:0c:ee:f6:3b: e1:4f:59:29:34:58:39:ce:44:aa:1c:06:23:34:29:05:a7:1d: 78:af:5c:8d:fb:6e:2b:9a:74:31:de:43:05:3d:0c:de:c9:74: ba:88:60:2b:4c:8f:03:6b:d4:ea:33:2b:40:02:03:f1:d4:13: 2e:23:eb:0f:62:d2:e2:a9:fa:33:63:03:dc:5f:4c:26:02:30: 68:62:6d:db:5a:3b:25:bf:ad:d0:44:b8:d3:97:68:98:89:0b: a2:ca:0b:d9:63:0b:53:a4:28:4b:78:89:5a:2b:3e:50:1c:6d: f6:fc:23:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjUwNjAyMTk0NzE3WhcNMjUwNjA5MTk0NzE3WjAYMRYwFAYD VQQDEw02ODNkZmZjNi1iNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Uh1ikjUJqOkhCzgL9eQoNwbstxVcSqY5+XF/e9RcmCaafE9pB0Ket0Qk3nx ukbQZgI6ay70U1QOGt7JIV6EKRkEq0OUtls41zn1RTqYChnqdGXmzBGoxrf36nZf 1Stj1lxAa/3P1n1YeYwwIW7W8TqE7rcXk/7j5M9Z/vQeIsejeDPLmUFHgYM+KwA9 LOjQAKuzrNWeKgsReyd6xN5sIzmbcLFxEkkBMX0nBtJRO5S+JmNaaJ1zJbwHEUmc NlzjI9bhueMDZhQ3igxUUy1/MLYG6xb07nOHDlu9hvCQScM+ne+M87QZWtJdH/HT +Jcb+tCW3JIh6DsyiAF5330eLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDaN32R mv/TX2Yem0GSn59xt+owMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSsoP0azPyKLjuiN2yUHLuTyZuUZJVRA/ME34TyDCpdiMAwqbMnEEe +FDrBj3M6aIZ5iQELBWohK4dUZIGJLcw1d8paeD2o7GdlSlyCyv8DamGiCMtAb9a zMSQQWGX8n3t2PKbZ8z520iQtvNaxAAOPojbrTleD+0PYV82eNwKJL+sc1AAfSCw i0VrXQzu9jvhT1kpNFg5zkSqHAYjNCkFpx14r1yN+24rmnQx3kMFPQzeyXS6iGAr TI8Da9TqMytAAgPx1BMuI+sPYtLiqfozYwPcX0wmAjBoYm3bWjslv63QRLjTl2iY iQuiygvZYwtTpChLeIlaKz5QHG32/CMj -----END CERTIFICATE-----Generated at Wed Jun 4 00:09:58 2025 by rpki-client