$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft File: kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json) Hash identifier: 1NfqVWKh2w1oATel3Pq1cYyofCEGSqt9K8Gye5N6C/c= Subject key identifier: 5C:5E:E1:E1:1C:40:15:06:97:B2:EB:F4:D3:B3:C9:48:72:77:4E:B1 Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft Manifest number: 0B50 Signing time: Mon 02 Jun 2025 19:17:06 +0000 Manifest this update: Mon 02 Jun 2025 19:17:05 +0000 Manifest next update: Mon 09 Jun 2025 19:17:05 +0000 Files and hashes: 1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: cIQaXzrC4wqeY/t4eqsqp+U9jK9gMXVlkdlSDIODFQc=) 2: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: 2OWyaPGRLrrFKnf1EOOsWE1CZ/F4XEfW9jNRJp2rUvY=) 3: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: OTRxLWYGIuHzUDilAOLR2h6DuKbihwZG+/xdIto74Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: Jun 2 19:17:05 2025 GMT Not After : Jun 9 19:17:05 2025 GMT Subject: CN=683df8b2-3ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:ca:37:12:e4:89:02:9c:e7:5c:04:ee:85: c9:f2:80:6a:f0:e8:0f:49:ae:d7:93:55:41:11:8d: 4b:58:35:0b:22:e7:03:3f:3c:e6:a8:14:5a:d1:44: f4:51:cb:c3:a9:d1:cc:72:9d:8c:0e:fc:38:9d:d5: cb:c0:f9:e5:3c:91:b5:ac:82:f6:cf:b9:aa:4b:3c: 86:a0:a6:27:8b:4e:0d:00:bc:eb:9b:c0:fd:60:c5: 82:e6:df:ec:41:48:e2:ed:99:27:c9:07:0e:84:a2: 6d:ad:1f:10:a7:f0:bc:a9:a9:32:8b:ff:c1:a1:f6: ec:5b:f8:a6:f7:59:c2:c4:3e:7f:6c:f8:51:da:e4: 6c:4c:c9:5c:b1:4d:3e:20:62:2b:b5:5f:51:eb:e3: 6f:8e:bb:46:0a:95:8b:22:1f:17:be:7a:55:69:75: 37:71:d2:5f:bf:8b:e0:c2:0d:9b:68:84:c8:76:e0: 90:18:a6:8b:a6:b3:44:1b:a4:d8:bd:9f:d4:cf:61: 23:03:70:83:e5:5b:17:32:f3:8e:c0:98:62:6f:91: 6f:e9:f1:87:81:e0:6f:86:c2:64:bd:7c:fc:5f:a0: 7f:52:17:dd:49:e2:e1:b6:d6:3b:85:c4:33:12:27: d2:3a:87:a5:3f:60:27:c3:b7:a2:05:c0:cb:4a:22: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5E:E1:E1:1C:40:15:06:97:B2:EB:F4:D3:B3:C9:48:72:77:4E:B1 X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:38:c3:d9:6d:21:28:ae:88:2c:4d:9e:e5:d0:8e:5f:24:e5: fc:18:aa:27:b0:70:55:51:52:af:c4:04:b8:ad:ce:64:6a:41: 58:70:f0:a4:66:ad:75:83:00:c8:e7:18:39:86:e3:22:19:9c: 37:e6:9c:7c:b2:48:d2:1a:32:35:d5:8f:0e:f4:d3:a1:c1:7c: f2:c1:31:94:39:7f:96:8d:b9:f4:53:56:b1:8a:e1:27:5e:53: ed:57:be:d2:3e:e5:9e:d2:09:41:6e:75:a5:e9:4a:37:05:1c: e3:7d:97:89:c7:35:73:23:7f:07:73:b1:e2:21:c9:45:a7:74: 0c:52:f1:bd:88:55:ff:ac:e6:bb:8d:c7:aa:a0:31:f7:21:d2: 60:5e:c8:23:4a:ca:a4:d1:1e:e8:58:86:da:57:f0:96:ab:1f: a7:5c:6b:18:51:4c:72:e2:dd:dd:f3:06:4c:24:60:55:63:bb: 98:bc:86:93:3e:82:7a:84:55:ed:b9:d7:35:81:22:2a:67:c2: 39:57:bd:26:e0:0e:59:44:4e:1d:df:39:82:42:0e:eb:96:7e: e9:41:9b:07:2c:7a:b8:72:94:2e:a2:d9:b0:f2:dd:a2:80:52: d9:c5:67:6c:ae:a2:40:62:c3:70:ad:0f:e8:21:2f:2a:e8:46: 03:a4:54:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjUwNjAyMTkxNzA1WhcNMjUwNjA5MTkxNzA1WjAYMRYwFAYD VQQDEw02ODNkZjhiMi0zYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ETKNxLkiQKc51wE7oXJ8oBq8OgPSa7Xk1VBEY1LWDULIucDPzzmqBRa0UT0 UcvDqdHMcp2MDvw4ndXLwPnlPJG1rIL2z7mqSzyGoKYni04NALzrm8D9YMWC5t/s QUji7ZknyQcOhKJtrR8Qp/C8qakyi//BofbsW/im91nCxD5/bPhR2uRsTMlcsU0+ IGIrtV9R6+NvjrtGCpWLIh8XvnpVaXU3cdJfv4vgwg2baITIduCQGKaLprNEG6TY vZ/Uz2EjA3CD5VsXMvOOwJhib5Fv6fGHgeBvhsJkvXz8X6B/UhfdSeLhttY7hcQz EifSOoelP2Anw7eiBcDLSiLdEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxe4eEc QBUGl7Lr9NOzyUhyd06xMB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc4Ni9CMEQ3MjNFRTM1REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFS X0ZOUUlkaGZXdWVfdXRwWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHOMPZbSEorogsTZ7l0I5fJOX8GKonsHBVUVKvxAS4rc5kakFYcPCk Zq11gwDI5xg5huMiGZw35px8skjSGjI11Y8O9NOhwXzywTGUOX+Wjbn0U1axiuEn XlPtV77SPuWe0glBbnWl6Uo3BRzjfZeJxzVzI38Hc7HiIclFp3QMUvG9iFX/rOa7 jceqoDH3IdJgXsgjSsqk0R7oWIbaV/CWqx+nXGsYUUxy4t3d8wZMJGBVY7uYvIaT PoJ6hFXtudc1gSIqZ8I5V70m4A5ZRE4d3zmCQg7rln7pQZsHLHq4cpQuotmw8t2i gFLZxWdsrqJAYsNwrQ/oIS8q6EYDpFRD -----END CERTIFICATE-----Generated at Wed Jun 4 00:05:25 2025 by rpki-client