$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: Avgtu4EjDSfXncjGXFWnR+i+1t/e3hYhN1wAsVLs+tk= Subject key identifier: E7:CE:01:D6:42:28:FC:E2:88:D8:61:57:83:18:A8:5C:5A:E5:2B:46 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 018E Signing time: Sun 29 Jun 2025 02:48:45 +0000 Manifest this update: Sun 29 Jun 2025 02:48:44 +0000 Manifest next update: Sun 06 Jul 2025 02:48:44 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: +dPqwy6/E81W/W//yI1REfQhQUQS/5yI/7MoqBLpkzU=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: g1Yxh4X4gr9QP8BwAN2yJktOsO1m01aHRbfwGJbCyik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Jun 29 02:48:44 2025 GMT Not After : Jul 6 02:48:44 2025 GMT Subject: CN=6860a98d-722e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:fe:03:e3:c6:8f:af:1b:85:0a:4f:a1:bd: 6f:26:e6:d1:7d:07:aa:b5:9f:90:80:6d:f5:98:96: 00:c1:c1:12:e4:89:73:2f:eb:95:14:7e:cf:9b:ad: 84:69:44:6a:c9:7b:d1:fd:4a:cd:c1:7a:e7:1f:69: c6:e8:f8:ac:28:a6:e7:9a:95:69:d1:e2:0e:01:46: eb:24:0a:4c:58:28:44:61:14:96:d6:96:a1:da:f9: 42:aa:87:70:0d:6f:79:94:f6:99:c8:7e:c4:aa:97: 91:20:72:10:9f:9e:ea:44:19:ac:c6:72:e5:86:05: ee:a1:77:f1:c1:1a:51:bb:dc:ad:56:54:71:c8:4b: 06:a0:8a:3a:0c:c4:62:78:98:53:9f:db:a1:9d:2e: 8b:30:89:f4:89:2a:f7:bb:2f:65:c0:75:be:7d:94: 42:70:d7:f6:e9:c5:a6:fc:02:70:88:cc:0e:3d:d2: d5:43:cc:2e:3d:4f:5c:c6:85:03:89:a3:27:c8:12: a0:c1:d7:8f:e8:92:ad:a1:15:93:d2:44:22:8d:67: 9b:4b:60:d9:fe:b6:e4:ab:ba:f0:45:66:5f:ef:4c: ae:52:e6:9e:e5:31:4f:aa:0d:a3:50:41:96:71:24: d2:bd:c6:74:90:cd:66:87:f4:63:2f:e1:45:d2:ee: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CE:01:D6:42:28:FC:E2:88:D8:61:57:83:18:A8:5C:5A:E5:2B:46 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:42:6e:f9:27:20:80:fe:84:91:44:69:96:9e:95:1f:d5:50: 80:d8:1c:4b:d6:34:61:d4:db:b7:93:00:85:aa:94:7b:90:e9: 37:2c:99:43:20:cb:f2:c6:c0:61:a1:ee:4a:87:0d:a3:16:30: d8:63:19:02:53:72:65:4d:69:13:80:3e:55:12:c8:52:c5:34: 3b:97:9f:15:5f:e9:c1:f1:04:46:d3:91:3c:1f:a3:34:b7:41: af:98:52:cb:ff:34:83:9a:62:5f:6f:34:22:f4:e6:38:7b:a8: 74:f5:fc:f0:ea:d3:f2:d8:5f:33:81:f1:69:5f:1a:7e:b2:5c: f5:e7:78:b0:d5:97:bc:54:84:f7:00:46:e2:c0:d4:36:2d:c8: a7:73:e5:8a:0a:65:82:58:2f:22:4b:9f:f8:1c:ef:26:e2:de: ae:cc:d5:7b:be:32:fd:dc:43:0a:fa:4f:23:94:47:80:7e:f1: 8b:96:59:43:b7:72:b0:fb:f1:71:64:bd:d3:ac:70:4a:f6:40: ca:b3:54:29:cc:0a:ad:46:ea:4c:18:95:69:cd:5c:87:9b:39: d0:56:ac:8b:7b:3c:92:f1:1d:d5:e6:42:60:ab:4a:67:2e:d3: 3c:13:bf:59:f9:35:71:fc:3c:04:6e:16:ac:0c:70:9d:c5:04: 52:0c:df:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjUwNjI5MDI0ODQ0WhcNMjUwNzA2MDI0ODQ0WjAYMRYwFAYD VQQDEw02ODYwYTk4ZC03MjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAob3+A+PGj68bhQpPob1vJubRfQeqtZ+QgG31mJYAwcES5IlzL+uVFH7Pm62E aURqyXvR/UrNwXrnH2nG6PisKKbnmpVp0eIOAUbrJApMWChEYRSW1pah2vlCqodw DW95lPaZyH7EqpeRIHIQn57qRBmsxnLlhgXuoXfxwRpRu9ytVlRxyEsGoIo6DMRi eJhTn9uhnS6LMIn0iSr3uy9lwHW+fZRCcNf26cWm/AJwiMwOPdLVQ8wuPU9cxoUD iaMnyBKgwdeP6JKtoRWT0kQijWebS2DZ/rbkq7rwRWZf70yuUuae5TFPqg2jUEGW cSTSvcZ0kM1mh/RjL+FF0u737QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfOAdZC KPziiNhhV4MYqFxa5StGMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVQm75JyCA/oSRRGmWnpUf1VCA2BxL1jRh1Nu3kwCFqpR7kOk3LJlD IMvyxsBhoe5Khw2jFjDYYxkCU3JlTWkTgD5VEshSxTQ7l58VX+nB8QRG05E8H6M0 t0GvmFLL/zSDmmJfbzQi9OY4e6h09fzw6tPy2F8zgfFpXxp+slz153iw1Ze8VIT3 AEbiwNQ2Lcinc+WKCmWCWC8iS5/4HO8m4t6uzNV7vjL93EMK+k8jlEeAfvGLlllD t3Kw+/FxZL3TrHBK9kDKs1QpzAqtRupMGJVpzVyHmznQVqyLezyS8R3V5kJgq0pn LtM8E79Z+TVx/DwEbhasDHCdxQRSDN/g -----END CERTIFICATE-----Generated at Sun Jun 29 17:48:51 2025 by rpki-client