$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: 7AehV/wxV5FMrpb83tmW35LDTERCyIkfgDFHxh0CT3Q= Subject key identifier: 03:47:AF:67:AA:F6:F2:2D:F3:A0:C1:7A:7C:0F:EF:7D:EC:48:1B:03 Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 16B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 169E Signing time: Tue 10 Jun 2025 16:40:13 +0000 Manifest this update: Tue 10 Jun 2025 16:40:12 +0000 Manifest next update: Tue 17 Jun 2025 16:40:12 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: YmtXEP3/lu/+NyJUF2+ctCQXCbMjoEdRZHbl/K1WTXg=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 16:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5812 (0x16b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Jun 10 16:40:12 2025 GMT Not After : Jun 17 16:40:12 2025 GMT Subject: CN=68485fed-87d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:a4:30:2a:c6:a5:a9:c9:22:44:28:9d:43: 00:c3:f9:27:76:3c:d9:f7:95:b5:67:b0:65:92:84: 93:c6:46:e8:ac:67:6c:39:70:88:69:41:32:49:a9: 3c:81:32:ae:6f:6e:2b:f5:08:8a:4a:9f:ec:82:aa: d2:f6:29:10:5a:5e:74:6f:75:f9:26:b9:6b:4e:d9: e4:78:0c:f9:d4:00:dc:66:30:e9:a9:b9:ec:9f:0e: 37:da:3e:49:29:cf:3d:91:cb:1b:6f:ff:e4:e4:28: 48:90:9e:d5:3c:50:de:83:99:99:87:cb:f4:e7:1f: c2:77:f3:b3:3b:4f:64:dd:4e:4c:0e:56:1d:b5:3d: 79:c3:16:cf:e4:80:3c:d2:c5:fc:9c:f4:d7:62:e9: 68:9f:14:33:46:7c:d4:c0:22:ab:e9:2f:74:15:a3: de:cb:36:87:af:f3:ab:d5:12:d5:fe:de:cb:78:f9: 1e:a5:7a:b7:40:dd:02:ac:c4:fc:b7:c5:93:e4:b2: d2:6d:27:b0:c5:87:f5:14:a6:fc:aa:a9:6d:35:48: ed:d3:38:8c:d6:97:f8:84:41:97:15:df:f2:99:ac: aa:80:95:7d:ef:4f:b2:79:75:70:e8:6f:91:cf:a7: 30:24:dc:80:bd:1c:18:fe:c6:1e:1c:80:35:2d:df: ad:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:47:AF:67:AA:F6:F2:2D:F3:A0:C1:7A:7C:0F:EF:7D:EC:48:1B:03 X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:1c:76:fc:46:64:cb:5f:e0:65:a0:20:0a:f6:f8:79:b2:5d: 05:a7:e7:f9:d3:51:55:d1:79:0f:05:d2:fa:99:0f:35:ab:eb: 25:7e:d0:20:d6:dd:3e:20:28:e4:ba:1a:89:c5:83:12:d6:f7: 3c:0a:db:6f:40:6a:07:0b:5f:14:b6:6d:c1:a7:59:57:c3:7b: 50:52:e1:21:a4:e2:29:f3:5c:dd:e4:5f:ba:2e:84:cc:a0:70: 12:45:e2:9b:23:d8:2b:33:d7:f6:55:2e:11:d5:3d:eb:58:50: 1c:b0:76:86:b2:16:94:57:d2:03:c0:a1:e4:ac:8e:29:64:57: 73:b8:00:cb:d3:1e:85:dc:db:54:d9:1b:b8:3c:e1:b4:5c:10: d4:f1:c6:53:11:41:db:8c:71:31:7b:f1:74:79:7a:24:5c:25: bd:91:7c:45:3f:28:00:81:7d:e1:bb:fd:b5:7a:b6:e2:70:c5: 67:8e:0e:36:7c:86:1d:b6:1c:8e:aa:db:3f:06:a8:73:01:a3: f2:b7:ff:50:d7:86:96:50:cc:5d:fe:61:28:da:3e:fc:f1:31: d8:aa:f3:04:c6:57:3f:66:3d:c5:66:77:ed:ee:e5:2d:a5:0c: 4f:af:8a:07:f9:35:23:01:c6:30:15:cc:18:88:ef:4d:5e:03: c0:b1:b1:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUwNjEwMTY0MDEyWhcNMjUwNjE3MTY0MDEyWjAYMRYwFAYD VQQDEw02ODQ4NWZlZC04N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYikMCrGpanJIkQonUMAw/kndjzZ95W1Z7BlkoSTxkborGdsOXCIaUEySak8 gTKub24r9QiKSp/sgqrS9ikQWl50b3X5JrlrTtnkeAz51ADcZjDpqbnsnw432j5J Kc89kcsbb//k5ChIkJ7VPFDeg5mZh8v05x/Cd/OzO09k3U5MDlYdtT15wxbP5IA8 0sX8nPTXYulonxQzRnzUwCKr6S90FaPeyzaHr/Or1RLV/t7LePkepXq3QN0CrMT8 t8WT5LLSbSewxYf1FKb8qqltNUjt0ziM1pf4hEGXFd/ymayqgJV970+yeXVw6G+R z6cwJNyAvRwY/sYeHIA1Ld+teQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANHr2eq 9vIt86DBenwP733sSBsDMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTHHb8RmTLX+BloCAK9vh5sl0Fp+f501FV0XkPBdL6mQ81q+slftAg 1t0+ICjkuhqJxYMS1vc8CttvQGoHC18Utm3Bp1lXw3tQUuEhpOIp81zd5F+6LoTM oHASReKbI9grM9f2VS4R1T3rWFAcsHaGshaUV9IDwKHkrI4pZFdzuADL0x6F3NtU 2Ru4POG0XBDU8cZTEUHbjHExe/F0eXokXCW9kXxFPygAgX3hu/21erbicMVnjg42 fIYdthyOqts/BqhzAaPyt/9Q14aWUMxd/mEo2j788THYqvMExlc/Zj3FZnft7uUt pQxPr4oH+TUjAcYwFcwYiO9NXgPAsbEJ -----END CERTIFICATE-----Generated at Thu Jun 12 13:58:24 2025 by rpki-client