$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft File: kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json) Hash identifier: Ex7HR2nVvaIHDljauj/CibPHfAAmq2hR2Pj2OkaM8aI= Subject key identifier: B2:30:61:29:B1:22:D1:ED:72:3D:10:57:F9:D0:CA:90:2B:08:02:B3 Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B Certificate issuer: /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft Manifest number: 04 Signing time: Tue 01 Jul 2025 08:59:42 +0000 Manifest this update: Tue 01 Jul 2025 08:59:41 +0000 Manifest next update: Tue 08 Jul 2025 08:59:41 +0000 Files and hashes: 1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: IGXCw6OOo+3F1E5vD9FYzeQMO91Xbm130gxwFOhjgGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Validity Not Before: Jul 1 08:59:41 2025 GMT Not After : Jul 8 08:59:41 2025 GMT Subject: CN=6863a37d-3632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:ce:7c:c4:ee:d6:3c:fb:28:9e:ba:7a:e4: 11:f4:df:e3:e9:c3:06:93:70:b1:23:5b:7c:3c:85: 0b:68:4f:0f:fe:fe:eb:ad:d5:56:70:3c:3e:d8:bd: 5a:25:1f:4b:ce:06:a3:d1:31:fe:34:1a:94:11:ac: a0:b3:04:e5:45:7f:67:8b:49:ee:69:82:19:bc:09: 59:d9:80:c9:ae:b1:d0:dd:e3:3a:11:32:c7:fc:44: b3:00:ba:93:ea:55:be:10:2d:25:2a:e6:ca:2b:31: 6e:d0:f5:78:c3:c9:aa:32:09:95:52:bd:47:8f:3c: 58:5a:59:a8:5e:0e:71:b9:96:f0:a6:e2:df:06:e8: 19:e7:73:40:45:77:c2:a7:37:6a:82:0b:cb:ff:fa: a5:d0:63:32:2f:4b:55:c2:68:54:6a:3b:59:b5:46: f2:ef:62:bc:94:81:37:5b:59:13:b8:f8:a1:e6:8a: 62:34:41:e9:50:8e:20:f4:05:dc:22:19:e4:f2:b5: e3:04:c9:a0:d1:60:93:4f:0d:3f:f9:25:f7:e9:78: 09:3c:90:2c:b0:6c:95:a3:93:8d:e4:24:60:0a:ef: d2:83:56:c0:25:56:d6:66:0e:ba:8d:a3:59:13:c4: b4:4b:d3:b7:0b:b9:5e:fb:4b:88:bb:ca:d3:0b:fe: 50:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:30:61:29:B1:22:D1:ED:72:3D:10:57:F9:D0:CA:90:2B:08:02:B3 X509v3 Authority Key Identifier: keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:77:ed:6a:10:e9:7a:fe:63:20:df:e6:2b:99:19:9e:79:6e: 7d:77:e3:86:e3:5e:44:64:02:49:c8:50:14:7e:2e:11:4b:45: b8:e2:1a:55:85:0d:f3:04:ec:61:49:19:fb:0b:2d:06:87:cf: d6:e2:92:72:3c:e3:33:64:40:08:e9:d9:22:2f:9e:f0:7c:74: 2b:a6:17:fd:d3:51:ad:15:c5:32:10:1c:e8:65:d8:b6:7c:02: d0:4b:6f:e8:6a:fb:1e:39:5d:f2:81:1c:48:5d:3e:f9:14:fe: a4:c5:de:89:bb:46:0d:d1:90:4b:ca:73:84:a5:54:d2:12:d4: 91:3b:a7:0c:81:2e:b7:b4:50:50:cc:05:9a:b4:3c:5e:b4:9e: 52:30:f4:4a:b1:f4:45:c7:05:eb:0d:39:a5:29:da:06:09:9d: aa:0c:e4:8b:b5:b2:27:90:ee:e6:af:6c:71:66:f1:24:e5:c7: c3:85:8a:7d:64:1b:72:f7:62:17:55:c3:5c:ad:ac:15:29:0e: 5d:9e:43:d4:8f:2a:a4:a5:6e:cc:c7:ab:86:41:6c:41:b4:0e: 2c:df:e1:7d:e1:55:16:6b:94:21:ca:f0:4e:31:e0:7a:68:3b: 11:d2:e2:47:96:9b:73:9a:83:d8:e2:67:55:11:8e:66:01:86: 0b:85:17:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkZCQzExMC8GA1UEBRMoOTExRDUwNTU4RDlGRjA5MkI5QzczOUVBMTBBNUI1MzNF MkU5RkUzQjAeFw0yNTA3MDEwODU5NDFaFw0yNTA3MDgwODU5NDFaMBgxFjAUBgNV BAMTDTY4NjNhMzdkLTM2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAI858xO7WPPsonrp65BH03+PpwwaTcLEjW3w8hQtoTw/+/uut1VZwPD7YvVol H0vOBqPRMf40GpQRrKCzBOVFf2eLSe5pghm8CVnZgMmusdDd4zoRMsf8RLMAupPq Vb4QLSUq5sorMW7Q9XjDyaoyCZVSvUePPFhaWaheDnG5lvCm4t8G6Bnnc0BFd8Kn N2qCC8v/+qXQYzIvS1XCaFRqO1m1RvLvYryUgTdbWRO4+KHmimI0QelQjiD0Bdwi GeTyteMEyaDRYJNPDT/5JffpeAk8kCywbJWjk43kJGAK79KDVsAlVtZmDrqNo1kT xLRL07cLuV77S4i7ytML/lCFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsjBhKbEi 0e1yPRBX+dDKkCsIArMwHwYDVR0jBBgwFoAUkR1QVY2f8JK5xznqEKW1M+Lp/jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRkJDL0E5RTEzMjU2NTJG NzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpLNXh6bnFFS1cxTS1McF9q cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1IxUVZZMmY4Sks1eHpucUVLVzFNLUxwX2pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RkJDL0E5RTEzMjU2NTJGNzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpL NXh6bnFFS1cxTS1McF9qcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA937WoQ6Xr+YyDf5iuZGZ55bn1344bjXkRkAknIUBR+LhFLRbjiGlWF DfME7GFJGfsLLQaHz9biknI84zNkQAjp2SIvnvB8dCumF/3TUa0VxTIQHOhl2LZ8 AtBLb+hq+x45XfKBHEhdPvkU/qTF3om7Rg3RkEvKc4SlVNIS1JE7pwyBLre0UFDM BZq0PF60nlIw9Eqx9EXHBesNOaUp2gYJnaoM5Iu1sieQ7uavbHFm8STlx8OFin1k G3L3YhdVw1ytrBUpDl2eQ9SPKqSlbszHq4ZBbEG0Dizf4X3hVRZrlCHK8E4x4Hpo OxHS4keWm3Oag9jiZ1URjmYBhguFFys= -----END CERTIFICATE-----Generated at Wed Jul 2 22:41:46 2025 by rpki-client