$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: A/JiwDzEhIZKeWWPTN38uVBxeCxxwNZJaTwkTpvjaCw= Subject key identifier: 33:DE:E6:FF:88:6F:1A:60:99:8B:5F:C3:52:3E:C6:72:7A:F3:51:DC Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 34 Signing time: Thu 03 Jul 2025 07:53:36 +0000 Manifest this update: Thu 03 Jul 2025 07:53:36 +0000 Manifest next update: Thu 10 Jul 2025 07:53:36 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: 6d2E7b5s87PJZOZCCWmT4hHWDmzkxMYZxxkwK9ne0NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: Jul 3 07:53:36 2025 GMT Not After : Jul 10 07:53:36 2025 GMT Subject: CN=68663700-6834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:62:46:95:17:d7:07:8d:2e:70:51:08:9c: 7f:99:79:79:c4:e8:fb:7b:56:a9:48:c3:97:b1:8e: 92:ad:97:b5:e3:8a:d7:a9:a9:b4:69:fe:87:74:58: 13:24:53:4f:65:df:da:06:42:8b:59:d7:05:41:96: 95:8a:80:95:5d:bb:0c:de:a2:5e:50:66:57:bc:cb: ae:52:cd:2c:5d:53:42:6c:4e:12:35:ad:eb:c7:1b: 76:0f:a6:79:2f:38:25:c7:76:bd:73:66:4e:d8:bc: 9f:99:e3:5c:43:97:ee:0d:f1:10:92:19:f4:34:f7: 96:0c:40:bd:a8:b7:a9:9e:0d:3f:a3:ee:93:8c:56: b8:3d:87:56:d7:63:70:d3:57:3c:0d:99:08:c8:c3: 20:21:16:2e:9e:0d:4a:a6:01:6f:6a:97:99:e4:d2: ee:a5:9d:18:c5:00:a2:9e:13:74:c3:0d:0a:79:d4: 79:87:4b:ce:72:93:54:b6:cc:cb:09:ff:ff:eb:a2: d1:50:58:3a:d3:87:c8:d7:77:fc:58:f2:84:79:ba: dd:83:c1:bf:63:37:03:4d:54:1e:86:95:43:69:bc: d8:24:ab:36:bf:23:aa:92:c8:53:48:5d:0d:b0:57: c1:32:ae:38:95:01:81:6f:2a:a7:7b:3d:12:d4:ef: 0d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DE:E6:FF:88:6F:1A:60:99:8B:5F:C3:52:3E:C6:72:7A:F3:51:DC X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:eb:b4:43:0d:ec:09:89:d5:a8:24:c1:01:18:1a:13:15:ab: b5:85:cc:58:ce:bd:95:74:9f:71:4d:37:39:a0:30:36:ee:06: f8:4e:ef:9b:48:9d:bc:16:f9:43:21:f7:46:8e:0c:4c:b2:bd: e1:55:d1:ca:99:72:74:49:c9:19:00:8c:0c:7d:15:b5:b5:6f: cb:7c:56:12:13:d4:43:29:4e:4d:0b:b6:1a:1a:91:ef:8f:b6: 05:c6:69:d1:76:c9:f6:4e:e4:5d:99:1f:18:3e:58:81:77:d5: cd:e2:80:7e:e3:88:a5:66:a8:6f:b7:2b:c5:35:a5:ad:24:ac: b1:22:fb:3f:a3:31:84:a4:6a:76:7b:24:1b:80:00:ef:f2:ef: 6f:a9:81:af:e4:87:57:8e:8e:78:7f:d3:75:50:4b:0f:b2:37: 1a:87:cb:7f:d1:af:d9:d1:1f:ba:27:c5:83:95:7f:9b:4c:f4: 12:10:33:15:53:34:75:78:f7:f9:c5:69:85:61:a6:4a:2f:79: af:51:6e:3a:72:02:09:96:66:d3:38:45:e1:e5:a6:ab:a4:93: 89:17:20:2f:1a:b5:10:ca:fd:4d:ae:f9:8e:07:9a:3e:5d:1c: 37:1e:cf:29:ee:13:44:df:5f:23:53:40:7b:48:e4:aa:fb:8a: ef:8a:b0:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoOTIwRTdEMDkxRjE1NTY5RjJEODM0MEM2NTgyQjk1OTVF QzA2NTY4MDAeFw0yNTA3MDMwNzUzMzZaFw0yNTA3MTAwNzUzMzZaMBgxFjAUBgNV BAMTDTY4NjYzNzAwLTY4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCiWJGlRfXB40ucFEInH+ZeXnE6Pt7VqlIw5exjpKtl7XjitepqbRp/od0WBMk U09l39oGQotZ1wVBlpWKgJVduwzeol5QZle8y65SzSxdU0JsThI1revHG3YPpnkv OCXHdr1zZk7YvJ+Z41xDl+4N8RCSGfQ095YMQL2ot6meDT+j7pOMVrg9h1bXY3DT VzwNmQjIwyAhFi6eDUqmAW9ql5nk0u6lnRjFAKKeE3TDDQp51HmHS85yk1S2zMsJ ///rotFQWDrTh8jXd/xY8oR5ut2Dwb9jNwNNVB6GlUNpvNgkqza/I6qSyFNIXQ2w V8EyrjiVAYFvKqd7PRLU7w1vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM97m/4hv GmCZi1/DUj7GcnrzUdwwHwYDVR0jBBgwFoAUkg59CR8VVp8tg0DGWCuVlewGVoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0YxQzc0NDdFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1Zv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2c1OUNSOFZWcDh0ZzBER1dDdVZsZXdHVm9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0YxQzc0NDdFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4 dGcwREdXQ3VWbGV3R1ZvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJLrtEMN7AmJ1agkwQEYGhMVq7WFzFjOvZV0n3FNNzmgMDbuBvhO75tI nbwW+UMh90aODEyyveFV0cqZcnRJyRkAjAx9FbW1b8t8VhIT1EMpTk0Lthoake+P tgXGadF2yfZO5F2ZHxg+WIF31c3igH7jiKVmqG+3K8U1pa0krLEi+z+jMYSkanZ7 JBuAAO/y72+pga/kh1eOjnh/03VQSw+yNxqHy3/Rr9nRH7onxYOVf5tM9BIQMxVT NHV49/nFaYVhpkovea9RbjpyAgmWZtM4ReHlpqukk4kXIC8atRDK/U2u+Y4Hmj5d HDcezynuE0TfXyNTQHtI5Kr7iu+KsDc= -----END CERTIFICATE-----Generated at Fri Jul 4 07:57:04 2025 by rpki-client