$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: d12oe6WYNLM2y3EOeFQZWqI5w09HxcAmZZjXTnvMvJU= Subject key identifier: A8:40:36:66:6B:CE:DC:DA:E7:D8:AD:87:9B:03:B2:AB:92:2A:42:17 Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: 6C Signing time: Thu 03 Jul 2025 07:11:22 +0000 Manifest this update: Thu 03 Jul 2025 07:11:21 +0000 Manifest next update: Thu 10 Jul 2025 07:11:21 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: vu7GSDsMxgYQSdDgxadBIJ+8tM3zZTnXyLomGygh7/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Jul 3 07:11:21 2025 GMT Not After : Jul 10 07:11:21 2025 GMT Subject: CN=68662d1a-b141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:aa:f4:97:50:22:3d:09:8e:6c:04:17:1b: fe:73:11:26:7a:32:2c:f3:70:9b:ac:bd:85:4a:4f: 5b:14:e0:fa:13:18:85:d8:cd:02:cc:af:3a:5a:9f: 30:6d:1a:0c:c1:55:25:4f:70:2f:4d:01:49:b1:61: ab:99:66:e0:c8:4c:a3:eb:32:74:c2:51:7e:25:d1: 2a:62:cf:ee:0f:82:59:e0:5f:ed:72:bc:62:c3:a5: 92:da:8d:8b:e4:9f:79:6a:af:44:54:be:a6:a9:63: c9:8b:75:ec:79:f8:28:fb:e8:66:6e:ec:64:68:f4: 15:9d:da:f2:21:22:7e:1d:93:ed:92:f0:56:eb:f9: 45:4e:cb:5f:59:af:43:09:94:eb:50:8b:65:90:39: 8a:6a:e3:fc:54:d3:89:3f:0a:b7:89:c2:a3:c5:28: 1d:18:48:63:de:9c:c9:17:7b:0f:38:c1:10:b7:27: ae:53:ae:c0:fb:01:80:ac:00:4c:6d:06:f5:1a:a5: f7:70:32:68:68:d3:f8:84:0f:f4:00:e3:a9:46:ad: 6b:d1:f3:10:4f:ed:62:55:28:f2:3e:d0:14:a7:78: 6f:3e:66:f7:55:37:65:18:f3:35:e0:0e:70:c1:51: 25:62:9d:b6:96:6c:97:cf:1a:6b:08:af:97:2b:07: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:40:36:66:6B:CE:DC:DA:E7:D8:AD:87:9B:03:B2:AB:92:2A:42:17 X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6c:0a:4b:00:5f:f3:94:7e:02:81:48:c0:92:bb:68:a4:eb: 40:49:c9:fb:b5:2e:38:5e:2c:85:d2:1a:d2:d4:2e:94:30:f0: 09:81:85:fd:80:a4:96:31:e3:bd:b8:a2:55:9e:7e:45:41:b1: f4:2e:fe:b6:5e:c3:3d:d3:5d:c5:37:97:f5:65:b0:20:63:3a: 61:c2:57:80:ea:12:a6:a7:bc:e8:96:47:5d:78:55:8a:38:8c: 66:ab:00:56:79:87:e6:07:65:8a:84:bf:93:ee:30:d6:25:35: f7:e0:1a:72:02:5d:11:b0:92:1b:2a:12:2c:67:7d:3b:e1:6f: 9b:f3:2b:4f:d3:1d:d5:5e:09:42:44:a8:12:3f:8c:06:74:19: 4e:a8:43:8e:07:0f:70:76:03:89:19:ff:9c:02:45:b1:13:ce: 52:e5:e9:1b:df:40:82:78:de:9b:ac:3a:12:eb:55:dc:e6:14: f1:27:77:d7:38:76:55:7d:5b:35:3a:08:79:82:b4:bd:24:04: a6:8e:2a:0c:c2:f2:d8:e3:a0:a4:04:bf:20:66:f5:84:6c:27: 16:3b:a3:7f:a5:ef:79:b0:36:8e:a8:0a:1d:63:3e:38:51:fa: e3:f1:42:a9:e2:a4:37:ed:43:c6:85:d9:14:ab:19:ee:18:8d: 5b:f7:c9:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjZFMzExMC8GA1UEBRMoMkJGMEFFNjc5MEQyRjAxREQxREI2NzM4MzEzMkRDNDAz QjY3NDUyMjAeFw0yNTA3MDMwNzExMjFaFw0yNTA3MTAwNzExMjFaMBgxFjAUBgNV BAMTDTY4NjYyZDFhLWIxNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV96r0l1AiPQmObAQXG/5zESZ6MizzcJusvYVKT1sU4PoTGIXYzQLMrzpanzBt GgzBVSVPcC9NAUmxYauZZuDITKPrMnTCUX4l0Spiz+4PglngX+1yvGLDpZLajYvk n3lqr0RUvqapY8mLdex5+Cj76GZu7GRo9BWd2vIhIn4dk+2S8Fbr+UVOy19Zr0MJ lOtQi2WQOYpq4/xU04k/CreJwqPFKB0YSGPenMkXew84wRC3J65TrsD7AYCsAExt BvUapfdwMmho0/iED/QA46lGrWvR8xBP7WJVKPI+0BSneG8+ZvdVN2UY8zXgDnDB USVinbaWbJfPGmsIr5crB36zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqEA2ZmvO 3Nrn2K2HmwOyq5IqQhcwHwYDVR0jBBgwFoAUK/CuZ5DS8B3R22c4MTLcQDtnRSIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0YyRkI4MjUwQjVE RDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS19DdVo1RFM4QjNSMjJjNE1UTGNRRHRuUlNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NkUzL0YyRkI4MjUwQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIz UjIyYzRNVExjUUR0blJTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB5sCksAX/OUfgKBSMCSu2ik60BJyfu1LjheLIXSGtLULpQw8AmBhf2A pJYx4724olWefkVBsfQu/rZewz3TXcU3l/VlsCBjOmHCV4DqEqanvOiWR114VYo4 jGarAFZ5h+YHZYqEv5PuMNYlNffgGnICXRGwkhsqEixnfTvhb5vzK0/THdVeCUJE qBI/jAZ0GU6oQ44HD3B2A4kZ/5wCRbETzlLl6RvfQIJ43pusOhLrVdzmFPEnd9c4 dlV9WzU6CHmCtL0kBKaOKgzC8tjjoKQEvyBm9YRsJxY7o3+l73mwNo6oCh1jPjhR +uPxQqnipDftQ8aF2RSrGe4YjVv3yf0= -----END CERTIFICATE-----Generated at Thu Jul 3 10:42:29 2025 by rpki-client