$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft File: kTOsvs_e7PTaOiIigng09bc6-qc.mft (raw, json) Hash identifier: jwzbN3XN5nyyDsJJYtHPQu9C95SziEfkXWu8L40clLE= Subject key identifier: CA:CA:E1:A0:39:7E:B7:C1:64:8C:DA:19:11:12:84:07:6A:24:C1:E9 Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7 Certificate issuer: /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft Manifest number: B3 Signing time: Sun 01 Jun 2025 05:39:32 +0000 Manifest this update: Sun 01 Jun 2025 05:39:31 +0000 Manifest next update: Sun 08 Jun 2025 05:39:31 +0000 Files and hashes: 1: kTOsvs_e7PTaOiIigng09bc6-qc.crl (hash: MlnHOId2R2iCtKPcMCvzA6eJfXmOaczmM/a3Rayx1/A=) 2: 6B9D491C379A11F0B3AC7740C4F9AE02.roa (hash: sWvrOshBow8m+ERTXYKHRXiSlslWao6EQWqi20E+fOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7 Validity Not Before: Jun 1 05:39:31 2025 GMT Not After : Jun 8 05:39:31 2025 GMT Subject: CN=683be794-6c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:f7:d0:c9:c0:b4:fb:d5:12:aa:45:11:22: 93:8b:0e:cf:b3:39:a5:0c:5d:5d:2d:f4:96:99:77: 11:52:dc:b7:42:01:ec:17:d0:83:9d:b2:6b:d1:ae: 92:10:dd:48:10:d8:2b:b4:39:9f:05:9e:8c:f8:bd: d0:ca:49:a9:19:89:1e:47:7c:21:ba:b9:2b:80:38: 78:9a:af:0c:0b:2e:1b:fd:73:9b:a4:39:79:a7:09: b7:d4:14:25:3e:21:fa:a7:d7:da:1a:e1:33:b9:b5: 9f:c1:6c:79:26:44:71:6c:d9:07:f9:18:46:4a:40: b0:78:27:3a:1c:0f:33:94:5c:c2:e7:7c:a2:db:8a: a5:d6:4a:78:22:b4:72:5e:2a:55:6b:5c:f0:e8:09: a3:11:fe:25:60:7f:55:d0:60:3c:69:a1:4d:eb:17: 2d:ad:61:24:1a:7a:e8:b9:94:e2:52:88:2d:25:d7: 46:2e:2b:7b:d6:7c:fb:5b:e9:9e:69:e9:88:b0:d2: 8c:65:f0:3f:c4:ef:11:75:af:16:17:32:53:0f:cf: 94:31:df:29:48:3d:03:64:be:70:ea:c4:34:74:f4: a1:5b:7c:51:f5:22:f2:41:e0:98:bd:8e:0c:78:a6: 50:69:79:ae:86:51:3a:1d:c9:4a:75:98:6b:c2:e6: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CA:E1:A0:39:7E:B7:C1:64:8C:DA:19:11:12:84:07:6A:24:C1:E9 X509v3 Authority Key Identifier: keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8d:0f:f6:3f:f8:30:97:6d:03:c3:f8:76:b1:69:90:d4:3f: 1c:c6:88:22:f7:5f:cc:2c:d8:4d:4d:3d:1a:d5:d8:52:26:b2: ad:a7:2c:bb:0d:ff:37:41:cf:c1:8f:48:f0:0a:66:a1:85:3f: 29:b1:53:c9:68:86:2c:ff:9d:26:49:84:e1:cb:46:44:ef:7c: b3:d8:4b:71:7f:51:a7:4e:b8:9f:30:74:7b:04:8d:df:50:c3: 00:98:36:4b:0f:f4:1f:90:c6:12:24:1f:56:e6:27:19:12:d8: f7:06:65:ea:e1:30:bd:7a:a9:48:1f:ef:8b:28:79:09:d9:1b: 20:70:ba:e3:34:2f:5c:3d:3b:c6:ca:87:9b:86:c8:34:8e:ab: 22:86:b6:cd:ec:e7:0c:95:ea:c5:c1:45:bd:02:d9:a5:f3:de: e6:c3:87:51:2e:b3:cc:cb:23:ad:f3:bb:0a:fb:b8:4a:64:4f: 21:38:cf:85:4c:48:8a:24:93:e9:83:f1:8e:b5:e0:ce:66:78: 76:9b:d4:fa:6f:89:43:3b:db:8b:89:80:8d:f3:0f:8e:3b:50: ba:14:88:8c:8d:d5:0b:1c:43:00:ba:1a:30:4a:fc:9d:63:68: 7b:21:be:74:fd:fa:93:16:0c:4b:e5:bb:4b:77:6a:f5:a3:3c: 54:07:c4:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5QTIxMTAvBgNVBAUTKDkxMzNBQ0JFQ0ZERUVDRjREQTNBMjIyMjgyNzgzNEY1 QjczQUZBQTcwHhcNMjUwNjAxMDUzOTMxWhcNMjUwNjA4MDUzOTMxWjAYMRYwFAYD VQQDEw02ODNiZTc5NC02YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaf30MnAtPvVEqpFESKTiw7PszmlDF1dLfSWmXcRUty3QgHsF9CDnbJr0a6S EN1IENgrtDmfBZ6M+L3QykmpGYkeR3whurkrgDh4mq8MCy4b/XObpDl5pwm31BQl PiH6p9faGuEzubWfwWx5JkRxbNkH+RhGSkCweCc6HA8zlFzC53yi24ql1kp4IrRy XipVa1zw6AmjEf4lYH9V0GA8aaFN6xctrWEkGnrouZTiUogtJddGLit71nz7W+me aemIsNKMZfA/xO8Rda8WFzJTD8+UMd8pSD0DZL5w6sQ0dPShW3xR9SLyQeCYvY4M eKZQaXmuhlE6HclKdZhrwubLpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrK4aA5 frfBZIzaGREShAdqJMHpMB8GA1UdIwQYMBaAFJEzrL7P3uz02joiIoJ4NPW3Ovqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzlBMi8xQTA1RTZFRTJE MkUxMUVGQTU0QzgwNDJDNEY5QUUwMi9rVE9zdnNfZTdQVGFPaUlpZ25nMDliYzYt cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tUT3N2c19lN1BUYU9pSWlnbmcwOWJjNi1xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzlBMi8xQTA1RTZFRTJEMkUxMUVGQTU0QzgwNDJDNEY5QUUwMi9rVE9zdnNfZTdQ VGFPaUlpZ25nMDliYzYtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5jQ/2P/gwl20Dw/h2sWmQ1D8cxogi91/MLNhNTT0a1dhSJrKtpyy7 Df83Qc/Bj0jwCmahhT8psVPJaIYs/50mSYThy0ZE73yz2Etxf1GnTrifMHR7BI3f UMMAmDZLD/QfkMYSJB9W5icZEtj3BmXq4TC9eqlIH++LKHkJ2RsgcLrjNC9cPTvG yoebhsg0jqsihrbN7OcMlerFwUW9Atml897mw4dRLrPMyyOt87sK+7hKZE8hOM+F TEiKJJPpg/GOteDOZnh2m9T6b4lDO9uLiYCN8w+OO1C6FIiMjdULHEMAuhowSvyd Y2h7Ib50/fqTFgxL5btLd2r1ozxUB8Rs -----END CERTIFICATE-----Generated at Mon Jun 2 19:24:49 2025 by rpki-client