$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: Ct31+RRlIS7Zcwwy8tqZGBev+dMx65SrbNHOEpyoG7E= Subject key identifier: CE:4A:47:97:AF:9D:D1:E3:30:64:F4:A8:5A:FE:E8:77:C7:46:51:0C Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 16B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 169F Signing time: Thu 12 Jun 2025 16:38:07 +0000 Manifest this update: Thu 12 Jun 2025 16:38:06 +0000 Manifest next update: Thu 19 Jun 2025 16:38:06 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: lz5X27gz/ZogKcfFetUgQ5RoYllXpGvxEp8Wx3MOW0Q=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5813 (0x16b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Jun 12 16:38:06 2025 GMT Not After : Jun 19 16:38:06 2025 GMT Subject: CN=684b026e-76e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:ff:ab:74:99:ec:d1:cc:25:dd:52:0a:a1: 0c:1b:82:32:53:3f:6e:04:f9:07:6c:ef:61:d0:13: d3:62:12:59:1c:4d:5b:b9:58:96:5b:db:cc:cb:93: 4d:de:ca:39:0f:ea:98:83:36:30:79:9e:30:df:e0: 49:01:87:6e:1d:30:a8:c4:fe:0e:55:61:ec:0e:9a: dd:9c:e6:9b:7a:34:c4:a3:a7:94:4b:4c:19:08:64: 74:bb:7e:00:1e:52:05:e5:18:a3:db:7b:9f:49:44: 48:d4:2b:f6:1e:92:18:08:cf:fa:0b:5f:f6:f2:04: 5e:07:f3:62:cb:49:f3:41:9a:58:62:b3:ac:44:3c: a4:df:6a:9b:12:5f:d5:47:9e:5e:65:d2:80:38:f7: 39:2c:e8:85:f4:67:ac:02:22:31:9d:85:e7:66:3a: fe:e9:ad:bf:46:4b:c8:da:2f:fc:bf:af:e9:e2:91: 02:6d:c4:e3:f4:f7:61:f2:57:74:de:80:a6:99:7b: c8:06:b5:47:bc:ba:cc:a5:c0:06:fb:62:6d:b3:96: 8c:a6:1f:38:5d:cd:e5:a2:68:96:7e:8d:8f:96:4d: ad:dd:2f:bf:a6:76:6d:22:2c:a3:4f:14:65:c1:01: 37:64:1c:1b:1c:a6:3a:7e:3a:57:e1:09:af:30:a2: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4A:47:97:AF:9D:D1:E3:30:64:F4:A8:5A:FE:E8:77:C7:46:51:0C X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:5f:a6:1a:23:45:33:f5:a4:54:a2:0b:4d:f8:57:41:2e:ad: 5d:f6:34:32:fa:17:3a:97:4f:36:5b:9a:86:37:9c:c5:b1:c9: 33:d7:41:f2:73:8d:5f:bb:4a:07:d1:65:d6:88:7a:59:40:af: 38:fb:53:74:dc:51:0d:53:87:2c:9c:84:a0:7b:b1:eb:02:57: 23:e0:ed:af:a1:d5:52:bd:ac:3f:12:1f:a9:6d:86:28:62:bb: 27:6c:20:0e:3d:a4:47:41:df:3c:b4:5d:81:f2:bf:38:43:66: 22:86:09:e2:1a:63:d9:3f:dd:6e:7e:94:6f:63:87:d0:c1:51: aa:c1:69:b5:88:a0:88:5e:95:57:ec:2e:bf:8d:89:fc:54:9e: aa:e0:6b:7d:fd:47:9e:de:11:81:21:8f:d9:c4:75:08:df:ba: 16:11:c2:fc:bf:3d:db:1b:6c:8f:de:0e:d6:6e:05:72:be:a3: 39:b7:5f:a7:ea:14:0f:81:1e:75:2c:24:82:ea:b3:e3:78:1f: af:7f:80:74:0e:95:35:91:36:9a:42:fd:a5:19:e2:88:37:66: d9:f2:91:cd:c3:99:2c:04:16:b4:28:e6:69:f5:be:52:d5:e7: 87:c3:ab:7a:37:48:d9:fd:59:b8:bb:bc:7a:7c:8b:7d:a3:24: 10:b5:43:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUwNjEyMTYzODA2WhcNMjUwNjE5MTYzODA2WjAYMRYwFAYD VQQDEw02ODRiMDI2ZS03NmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/f/q3SZ7NHMJd1SCqEMG4IyUz9uBPkHbO9h0BPTYhJZHE1buViWW9vMy5NN 3so5D+qYgzYweZ4w3+BJAYduHTCoxP4OVWHsDprdnOabejTEo6eUS0wZCGR0u34A HlIF5Rij23ufSURI1Cv2HpIYCM/6C1/28gReB/Niy0nzQZpYYrOsRDyk32qbEl/V R55eZdKAOPc5LOiF9GesAiIxnYXnZjr+6a2/RkvI2i/8v6/p4pECbcTj9Pdh8ld0 3oCmmXvIBrVHvLrMpcAG+2Jts5aMph84Xc3lomiWfo2Plk2t3S+/pnZtIiyjTxRl wQE3ZBwbHKY6fjpX4QmvMKKJDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5KR5ev ndHjMGT0qFr+6HfHRlEMMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBX6YaI0Uz9aRUogtN+FdBLq1d9jQy+hc6l082W5qGN5zFsckz10Hy c41fu0oH0WXWiHpZQK84+1N03FENU4csnISge7HrAlcj4O2vodVSvaw/Eh+pbYYo YrsnbCAOPaRHQd88tF2B8r84Q2YihgniGmPZP91ufpRvY4fQwVGqwWm1iKCIXpVX 7C6/jYn8VJ6q4Gt9/Uee3hGBIY/ZxHUI37oWEcL8vz3bG2yP3g7WbgVyvqM5t1+n 6hQPgR51LCSC6rPjeB+vf4B0DpU1kTaaQv2lGeKIN2bZ8pHNw5ksBBa0KOZp9b5S 1eeHw6t6N0jZ/Vm4u7x6fIt9oyQQtUMB -----END CERTIFICATE-----Generated at Fri Jun 13 00:55:36 2025 by rpki-client