$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json) Hash identifier: S7QJ/0xy77FxxnV73YItXIhxCGF1F5ZGWKC4mQ0MPKQ= Subject key identifier: E4:F7:FA:39:72:01:97:C6:28:97:BE:17:EB:5A:61:17:F8:8E:69:26 Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Certificate serial: 21A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft Manifest number: 21A8 Signing time: Mon 30 Jun 2025 15:58:29 +0000 Manifest this update: Mon 30 Jun 2025 15:58:29 +0000 Manifest next update: Mon 07 Jul 2025 15:58:29 +0000 Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: MD0cxXWAPiKvwJMp9bIFvd7YZ9pnEfJaNK0S4hy5iRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8616 (0x21a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Validity Not Before: Jun 30 15:58:29 2025 GMT Not After : Jul 7 15:58:29 2025 GMT Subject: CN=6862b425-29c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:f9:5f:0e:4d:e3:92:6c:c0:fb:1d:7e:83: 54:fd:ec:2a:4a:0f:08:99:e5:2a:28:66:b5:a4:f0: 9f:8c:e1:61:fb:8f:7e:65:7f:69:c4:0c:7b:53:fa: 2f:ed:23:a0:78:af:f8:c9:90:73:c0:ec:83:03:f2: 75:7c:0b:e8:32:fa:d3:e1:a8:19:76:69:bd:f0:3f: 0e:e3:73:0d:66:d9:1a:d9:53:82:ae:51:f5:9a:ce: 6a:8f:4c:81:c8:93:20:4d:93:66:25:3d:63:6e:45: 94:5f:a0:25:ee:bd:f6:2e:9b:6d:c7:4b:aa:11:06: 8e:31:c5:ee:73:ee:3d:34:77:47:fc:f5:bb:31:f0: 9d:53:a1:3f:33:60:ad:d1:84:a6:a8:f4:a2:1f:7e: 80:82:ba:42:f8:76:23:54:aa:99:e3:22:b6:ed:f1: e9:c2:75:e7:f7:84:1a:d5:4b:56:28:cc:37:36:61: 45:25:cc:d9:0a:06:c2:d5:65:92:b1:d6:64:34:4c: 12:30:8d:86:44:f0:ec:fc:a7:ef:d2:30:49:aa:4c: 29:d3:dc:ab:15:84:c7:9a:3c:8b:ec:43:f5:5b:88: 96:77:b3:fe:d8:05:e5:80:c3:ae:f9:25:7e:cb:e7: 71:ab:04:aa:99:08:ec:9b:6a:58:a3:8f:70:e5:95: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F7:FA:39:72:01:97:C6:28:97:BE:17:EB:5A:61:17:F8:8E:69:26 X509v3 Authority Key Identifier: keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:9a:c7:72:31:57:71:30:23:52:6e:af:6b:4a:bb:d3:63:38: 86:02:a1:08:ad:9b:fe:ef:a0:d9:22:a7:16:51:8a:19:20:66: 9f:f4:ba:4e:29:95:6e:b8:3e:19:2a:0c:cb:48:63:0d:77:11: 56:01:fb:1f:e8:90:3d:8f:9f:f4:e4:e6:d2:de:88:ed:50:67: c5:a1:e3:f4:55:87:70:8b:e0:fb:9d:78:35:37:c4:ee:9b:1b: e7:cb:58:70:a0:81:6b:b6:bd:95:89:7a:fb:eb:f7:74:dc:09: 2e:f6:e5:e1:58:05:0c:01:17:ac:dd:b8:8d:9f:7c:3e:b2:56: 5b:df:52:21:6a:2c:4d:b1:c4:8a:ba:d8:6b:6d:14:bf:5a:f1: 48:cb:45:e1:4f:58:9e:ad:ab:fe:c0:7b:b1:36:17:2a:d7:e6: 88:41:b2:fa:0a:e1:e0:da:28:81:5a:fb:9b:16:53:e5:14:88: 25:6a:de:02:41:a1:88:ee:f1:d5:54:5f:81:15:32:5d:8a:35: a7:07:3d:29:dd:51:74:e2:29:56:78:b9:ee:3b:f2:4c:ab:e2: ac:dd:f8:88:a7:17:61:f4:6e:4a:0a:9e:6a:4a:08:ce:d9:90: 0a:83:bc:65:25:64:ea:b0:67:4d:d9:83:36:7d:c2:4f:27:d5: 2f:f6:f7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE ODU4RTFDRDAwHhcNMjUwNjMwMTU1ODI5WhcNMjUwNzA3MTU1ODI5WjAYMRYwFAYD VQQDEw02ODYyYjQyNS0yOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYb5Xw5N45JswPsdfoNU/ewqSg8ImeUqKGa1pPCfjOFh+49+ZX9pxAx7U/ov 7SOgeK/4yZBzwOyDA/J1fAvoMvrT4agZdmm98D8O43MNZtka2VOCrlH1ms5qj0yB yJMgTZNmJT1jbkWUX6Al7r32Lpttx0uqEQaOMcXuc+49NHdH/PW7MfCdU6E/M2Ct 0YSmqPSiH36AgrpC+HYjVKqZ4yK27fHpwnXn94Qa1UtWKMw3NmFFJczZCgbC1WWS sdZkNEwSMI2GRPDs/Kfv0jBJqkwp09yrFYTHmjyL7EP1W4iWd7P+2AXlgMOu+SV+ y+dxqwSqmQjsm2pYo49w5ZW5wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT3+jly AZfGKJe+F+taYRf4jmkmMB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS S3g1UW9ONHpEU3JZV09ITkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDomsdyMVdxMCNSbq9rSrvTYziGAqEIrZv+76DZIqcWUYoZIGaf9LpO KZVuuD4ZKgzLSGMNdxFWAfsf6JA9j5/05ObS3ojtUGfFoeP0VYdwi+D7nXg1N8Tu mxvny1hwoIFrtr2ViXr76/d03Aku9uXhWAUMARes3biNn3w+slZb31IhaixNscSK uthrbRS/WvFIy0XhT1ierav+wHuxNhcq1+aIQbL6CuHg2iiBWvubFlPlFIglat4C QaGI7vHVVF+BFTJdijWnBz0p3VF04ilWeLnuO/JMq+Ks3fiIpxdh9G5KCp5qSgjO 2ZAKg7xlJWTqsGdN2YM2fcJPJ9Uv9veu -----END CERTIFICATE-----Generated at Wed Jul 2 06:12:01 2025 by rpki-client