$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: Lj7D/UFey9M7UVSXDAubW7AgvheNkjz/hYslkhxIdVc= Subject key identifier: 34:D6:93:7B:0F:69:84:1D:AA:3C:64:92:6D:1E:D5:8B:AD:DE:13:39 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 0117 Signing time: Thu 03 Jul 2025 04:37:52 +0000 Manifest this update: Thu 03 Jul 2025 04:37:52 +0000 Manifest next update: Thu 10 Jul 2025 04:37:52 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: enyM8VZU/Fnsj1MzaLf6R1fePh240W+q3eQ9AWss27U=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: LLGlR1swQUGpHRHzrbzk96I6Zx3kb8thD/xfxQf3uHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Jul 3 04:37:52 2025 GMT Not After : Jul 10 04:37:52 2025 GMT Subject: CN=68660920-8505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:1b:7a:99:4b:56:57:d1:13:22:c3:a2:c0: 11:7f:1d:80:39:f3:30:92:ea:62:f3:4a:e5:79:23: e4:7d:15:23:d7:a4:73:70:c0:fc:f0:f0:57:1d:9a: 23:0e:f7:12:8e:19:a6:39:a9:f8:b7:1e:13:2c:8d: f5:96:df:1f:c1:93:a8:51:c4:95:4a:fb:f3:b3:f5: ce:89:47:ff:78:3b:6a:02:77:39:72:e2:83:fd:4d: fb:0b:9a:d2:4a:fc:b7:39:59:1b:e0:4c:f2:8e:7f: 3f:c2:54:86:58:cf:15:60:81:d0:bf:6c:0b:6c:2b: 65:ca:6a:bb:1f:5b:56:c4:a4:39:1d:26:1b:0b:f2: 43:e0:dc:06:07:09:20:40:9d:5a:e0:81:c6:3c:fc: 39:02:06:d4:ad:24:eb:a1:f9:82:0b:8a:a1:55:63: 9c:2f:a5:20:76:33:e4:47:0e:c3:2b:a6:fd:a7:1e: d7:cd:81:fe:3d:1d:75:ad:a3:2e:8b:01:8c:f8:58: fa:00:ca:bd:3d:07:05:c0:59:72:6d:b5:67:ca:49: 3f:8d:33:17:10:b2:70:81:af:55:28:91:6b:aa:3e: 5d:b1:02:15:a9:83:88:cb:69:92:9c:09:63:06:33: e2:08:9f:d6:46:21:7d:de:25:77:9d:81:cf:f5:1d: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D6:93:7B:0F:69:84:1D:AA:3C:64:92:6D:1E:D5:8B:AD:DE:13:39 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cc:c7:b3:7c:e8:ec:ca:30:43:e4:6c:83:09:e3:5a:54:eb: e4:e4:83:fd:9f:5a:34:dc:7d:37:0b:d1:2d:03:ea:35:a6:b4: d2:19:ba:d1:e1:cf:a8:a3:48:13:8a:39:65:0e:4f:dd:e5:ea: 07:9c:4d:74:06:68:7a:e1:f6:50:18:6f:dd:37:20:f6:bc:0b: d6:45:0e:c3:61:92:17:65:d7:5b:b4:72:5d:70:d8:6b:09:72: 17:34:0c:bf:90:71:17:11:9e:1d:17:e4:9a:08:bf:8c:c4:f6: 35:6a:44:32:84:06:d2:74:1d:dd:3e:2c:8c:5e:9b:e0:79:c9: 98:08:6b:55:7d:1e:fe:60:b5:3a:c8:cb:56:da:5d:6d:3b:6e: 6b:be:43:94:2e:f5:80:a0:fd:af:52:0c:74:9b:77:51:07:01: ec:43:63:6e:34:9e:6e:ca:99:28:c2:8b:a9:de:93:09:01:3f: 2c:a6:88:25:a3:e5:66:06:98:41:ee:17:c4:07:26:66:74:f5: 23:bf:f1:a9:a5:7f:e9:9f:93:cc:84:46:e7:5d:f0:60:1d:e3: 04:c8:6c:7c:d5:3b:32:e4:c9:7b:e8:45:d4:33:9a:1b:dd:36: 19:9a:14:b7:13:c3:e1:ad:a7:12:b0:52:d1:05:f4:2f:5d:a9: d4:ae:80:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjUwNzAzMDQzNzUyWhcNMjUwNzEwMDQzNzUyWjAYMRYwFAYD VQQDEw02ODY2MDkyMC04NTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPAbeplLVlfREyLDosARfx2AOfMwkupi80rleSPkfRUj16RzcMD88PBXHZoj DvcSjhmmOan4tx4TLI31lt8fwZOoUcSVSvvzs/XOiUf/eDtqAnc5cuKD/U37C5rS Svy3OVkb4Ezyjn8/wlSGWM8VYIHQv2wLbCtlymq7H1tWxKQ5HSYbC/JD4NwGBwkg QJ1a4IHGPPw5AgbUrSTrofmCC4qhVWOcL6UgdjPkRw7DK6b9px7XzYH+PR11raMu iwGM+Fj6AMq9PQcFwFlybbVnykk/jTMXELJwga9VKJFrqj5dsQIVqYOIy2mSnAlj BjPiCJ/WRiF93iV3nYHP9R3gIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTWk3sP aYQdqjxkkm0e1Yut3hM5MB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMzMezfOjsyjBD5GyDCeNaVOvk5IP9n1o03H03C9EtA+o1prTSGbrR 4c+oo0gTijllDk/d5eoHnE10Bmh64fZQGG/dNyD2vAvWRQ7DYZIXZddbtHJdcNhr CXIXNAy/kHEXEZ4dF+SaCL+MxPY1akQyhAbSdB3dPiyMXpvgecmYCGtVfR7+YLU6 yMtW2l1tO25rvkOULvWAoP2vUgx0m3dRBwHsQ2NuNJ5uypkowoup3pMJAT8spogl o+VmBphB7hfEByZmdPUjv/GppX/pn5PMhEbnXfBgHeMEyGx81Tsy5Ml76EXUM5ob 3TYZmhS3E8PhracSsFLRBfQvXanUroAp -----END CERTIFICATE-----Generated at Thu Jul 3 22:52:07 2025 by rpki-client