$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: 7hUthCjIP9RYiF+TgPF3aGLpWrz0Uayc0+rHkmVoIGo= Subject key identifier: 0E:22:BE:33:F2:92:25:66:1B:ED:35:E2:5E:DB:5D:3C:1D:D0:18:A0 Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 27 Signing time: Sat 07 Jun 2025 07:17:55 +0000 Manifest this update: Sat 07 Jun 2025 07:17:55 +0000 Manifest next update: Sat 14 Jun 2025 07:17:55 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: ViHf+/JBtMEg1I1aAUwBl9gExxsq2cWgcaR+CjrmP+8=) 2: DA700744185511F09304D972C4F9AE02.roa (hash: AVDeCRqbZoyZl3fF1YnTf6HcDZbje6RSX9dEEeI1q44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 04:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Jun 7 07:17:55 2025 GMT Not After : Jun 14 07:17:55 2025 GMT Subject: CN=6843e7a3-fd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:94:a1:5d:5a:20:43:52:7d:d2:af:55:04:46: 23:60:6b:fe:6e:14:aa:a1:dc:c2:2a:7e:55:f3:18: 0e:dd:11:45:16:1e:72:c6:3b:9a:c5:0c:e8:84:82: bf:de:8a:c9:be:49:7d:e0:84:86:12:b5:6a:42:2f: be:07:f5:de:fa:3b:a1:ff:55:40:51:3a:58:b3:8e: 57:67:be:fd:ba:e4:06:88:78:a6:e1:c0:11:4f:25: 92:87:fe:06:ef:41:5a:7b:ff:c6:fc:5f:ae:7e:2e: 90:e0:26:d5:fb:25:ab:db:22:aa:12:af:10:20:7c: 89:7d:db:4f:0c:f9:e7:26:33:02:00:71:a9:8a:c1: 48:b0:a7:5b:27:9a:df:9f:06:ca:21:c0:5c:f5:48: 00:c1:34:1a:4c:28:9d:80:a6:b0:80:6d:2e:8f:94: f4:01:3e:4a:a3:31:52:84:a2:39:cf:9f:38:85:59: f5:ed:69:db:ad:df:b1:9a:d7:6f:20:ba:8a:cb:73: ff:d9:0b:a2:5a:c5:62:d8:34:54:20:8f:52:69:a4: 70:4c:0a:a2:45:4f:a7:3b:38:20:6b:fc:98:4b:a9: 2e:33:3c:b6:b9:8e:b7:d9:11:65:36:4f:e4:3a:2c: 1c:9a:e4:a5:eb:b9:46:da:cd:80:b2:28:50:1f:39: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:22:BE:33:F2:92:25:66:1B:ED:35:E2:5E:DB:5D:3C:1D:D0:18:A0 X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7c:b0:de:68:8d:ab:b6:8a:b1:22:d6:ab:2e:57:5e:c5:6c: 7f:c6:af:84:4b:d2:7f:3d:21:f1:c3:e5:c3:3b:e4:1d:1e:d8: 60:cb:b9:cc:f4:d1:4a:4c:ed:e2:f6:5e:7c:6b:91:38:ef:85: 8f:ea:38:af:30:61:50:95:bc:e4:95:58:08:7d:e8:60:fb:b0: 2b:9a:03:44:ff:2d:aa:b0:96:5b:6a:0c:03:e0:b0:21:20:da: 52:1a:55:c6:1a:da:a7:1e:04:6e:41:ce:76:06:10:77:37:68: d6:2c:85:0f:fa:4c:d9:f8:54:8c:40:77:5a:ba:a4:68:e4:18: 3e:82:cf:66:3a:94:1d:6f:af:5d:dd:0e:4e:d5:75:a1:3e:b8: ff:3e:9e:ad:e4:30:70:a3:53:78:d8:ff:ff:6d:97:21:76:fc: ca:2d:95:bb:03:3c:38:97:27:b2:e7:59:a5:bc:05:50:ee:cf: 74:12:f7:ef:74:37:9c:2b:85:54:ab:8a:db:29:54:c7:48:28: 10:75:d6:48:e1:54:fd:c0:94:a3:db:ae:f0:06:7a:37:25:6c: 09:d5:1c:37:d5:bb:49:60:16:74:84:42:7a:50:04:60:f2:c0: d5:ec:86:0b:9f:66:43:f2:ad:16:7e:e2:45:84:7f:4b:e2:ee: 95:8f:ad:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjVCOTExMC8GA1UEBRMoOTExNzZEMTY5QzQyRjAzRDk1MjgyQkJCQTIwNEM0RTQ0 RDMxRUQwOTAeFw0yNTA2MDcwNzE3NTVaFw0yNTA2MTQwNzE3NTVaMBgxFjAUBgNV BAMTDTY4NDNlN2EzLWZkNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrlKFdWiBDUn3Sr1UERiNga/5uFKqh3MIqflXzGA7dEUUWHnLGO5rFDOiEgr/e ism+SX3ghIYStWpCL74H9d76O6H/VUBROlizjldnvv265AaIeKbhwBFPJZKH/gbv QVp7/8b8X65+LpDgJtX7JavbIqoSrxAgfIl9208M+ecmMwIAcamKwUiwp1snmt+f BsohwFz1SADBNBpMKJ2AprCAbS6PlPQBPkqjMVKEojnPnziFWfXtadut37Ga128g uorLc//ZC6JaxWLYNFQgj1JppHBMCqJFT6c7OCBr/JhLqS4zPLa5jrfZEWU2T+Q6 LBya5KXruUbazYCyKFAfOdD9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDiK+M/KS JWYb7TXiXttdPB3QGKAwHwYDVR0jBBgwFoAUkRdtFpxC8D2VKCu7ogTE5E0x7Qkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGNUI5LzUyMDJEMDI4MERG OTExRjA4RTZFNzYyQUM0RjlBRTAyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1JkdEZweEM4RDJWS0N1N29nVEU1RTB4N1FrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG NUI5LzUyMDJEMDI4MERGOTExRjA4RTZFNzYyQUM0RjlBRTAyL2tSZHRGcHhDOEQy VktDdTdvZ1RFNUUweDdRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADp8sN5ojau2irEi1qsuV17FbH/Gr4RL0n89IfHD5cM75B0e2GDLucz0 0UpM7eL2XnxrkTjvhY/qOK8wYVCVvOSVWAh96GD7sCuaA0T/LaqwlltqDAPgsCEg 2lIaVcYa2qceBG5BznYGEHc3aNYshQ/6TNn4VIxAd1q6pGjkGD6Cz2Y6lB1vr13d Dk7VdaE+uP8+nq3kMHCjU3jY//9tlyF2/MotlbsDPDiXJ7LnWaW8BVDuz3QS9+90 N5wrhVSritspVMdIKBB11kjhVP3AlKPbrvAGejclbAnVHDfVu0lgFnSEQnpQBGDy wNXshgufZkPyrRZ+4kWEf0vi7pWPrZ0= -----END CERTIFICATE-----Generated at Sat Jun 7 14:46:38 2025 by rpki-client