$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: 30Vcb2trDdyVnME5z291mIjhl3y/wyzchLVKAzpwOnk= Subject key identifier: B2:DD:84:DF:57:D5:A9:59:82:59:E1:3A:91:93:6F:B6:2A:58:94:3F Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 0467 Signing time: Tue 01 Jul 2025 00:39:44 +0000 Manifest this update: Tue 01 Jul 2025 00:39:44 +0000 Manifest next update: Tue 08 Jul 2025 00:39:44 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: SKIcgAhM/qDQ2sInl5yvpLddlRc4Z0rr0A37QWR4CZY=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: /FpsHXLPYXsoHcGNcebXfdYyitx9/IlpkTRLrZlFe1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Jul 1 00:39:44 2025 GMT Not After : Jul 8 00:39:44 2025 GMT Subject: CN=68632e50-20da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:34:8b:c1:09:a4:52:cd:b9:22:12:f9:9f: 0f:52:b0:25:d1:b6:26:59:c3:a3:4b:2b:88:68:be: 22:4a:d6:b6:f2:d0:29:8c:6f:15:a5:70:25:fa:49: 47:bf:fe:8e:a4:25:c7:35:2c:e7:d7:ef:b7:ed:13: 43:79:5d:95:26:53:d0:5f:2c:c4:db:cb:77:68:2c: b2:70:9f:8e:33:9a:07:1a:c7:2c:2b:b9:3a:3e:3b: db:ac:71:a4:72:68:91:71:be:7c:ce:fb:d3:98:a3: 3e:6e:56:61:1f:c3:58:15:96:c5:cd:9d:71:04:c8: 3e:13:11:54:32:f5:bb:ca:b9:29:ee:a5:e8:11:ac: 48:92:73:be:96:c2:78:8d:85:33:c4:e9:8d:79:d0: db:e1:14:c8:fc:88:68:f5:5c:f8:b5:1c:b4:88:71: 6c:9e:5a:6b:06:f4:44:e8:65:09:9d:7e:58:9d:69: 64:ee:40:f0:c6:e8:74:74:33:38:ea:bf:2a:2f:eb: 77:ad:3f:30:b9:75:73:45:2e:db:9a:67:fc:99:15: cb:28:f9:ac:1c:f0:d6:73:e9:e5:90:e5:f0:78:de: bc:e1:af:76:98:1a:54:da:ac:24:0c:9c:bb:52:55: 3d:c8:79:9d:11:f3:1c:df:00:c9:6d:d6:6f:e9:74: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DD:84:DF:57:D5:A9:59:82:59:E1:3A:91:93:6F:B6:2A:58:94:3F X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:62:e2:3d:82:d2:ea:29:b8:af:50:5c:3b:9b:31:b7:53:55: 41:38:db:bf:ff:33:d1:d9:5a:e8:77:6a:5e:ca:12:8b:9e:58: 77:fa:03:ab:57:53:d3:b7:da:e2:1f:97:92:1c:4d:75:08:89: b7:c6:d0:8f:a0:96:b7:8a:90:d4:90:48:c5:33:c1:a1:cd:9e: 37:cf:13:9f:b7:95:90:4d:e7:54:f3:cd:0a:97:35:95:a1:18: ed:5c:87:ae:ef:d1:ca:a4:8e:7a:a7:3f:47:0e:ec:6e:7c:50: aa:85:d3:81:1e:16:d8:9b:b6:0b:2a:28:71:66:f1:eb:13:6c: ac:29:51:3f:9e:2d:77:62:03:b0:0e:9c:93:c7:93:6e:71:80: 4c:33:7a:c5:ca:19:db:4e:07:87:18:9a:6b:34:b8:98:f8:dc: cc:de:68:81:f1:3f:e6:a0:8e:d5:4b:b0:37:26:3e:d7:6c:8e: 3a:11:a7:bc:bb:0c:3a:70:e2:40:64:15:ff:9e:56:2d:a7:37: 73:dd:83:20:a4:8a:f7:28:3a:49:ab:57:3d:ef:c7:4a:11:de: 12:60:80:51:c5:30:50:c8:25:42:ab:55:f8:55:4b:80:19:8a: ad:45:07:d3:a6:0d:5f:28:e4:0b:ea:2e:14:6b:9d:66:4f:b9: b4:65:9b:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjUwNzAxMDAzOTQ0WhcNMjUwNzA4MDAzOTQ0WjAYMRYwFAYD VQQDEw02ODYzMmU1MC0yMGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJI0i8EJpFLNuSIS+Z8PUrAl0bYmWcOjSyuIaL4iSta28tApjG8VpXAl+klH v/6OpCXHNSzn1++37RNDeV2VJlPQXyzE28t3aCyycJ+OM5oHGscsK7k6PjvbrHGk cmiRcb58zvvTmKM+blZhH8NYFZbFzZ1xBMg+ExFUMvW7yrkp7qXoEaxIknO+lsJ4 jYUzxOmNedDb4RTI/Iho9Vz4tRy0iHFsnlprBvRE6GUJnX5YnWlk7kDwxuh0dDM4 6r8qL+t3rT8wuXVzRS7bmmf8mRXLKPmsHPDWc+nlkOXweN684a92mBpU2qwkDJy7 UlU9yHmdEfMc3wDJbdZv6XTqJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLdhN9X 1alZglnhOpGTb7YqWJQ/MB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0YuI9gtLqKbivUFw7mzG3U1VBONu//zPR2Vrod2peyhKLnlh3+gOr V1PTt9riH5eSHE11CIm3xtCPoJa3ipDUkEjFM8GhzZ43zxOft5WQTedU880KlzWV oRjtXIeu79HKpI56pz9HDuxufFCqhdOBHhbYm7YLKihxZvHrE2ysKVE/ni13YgOw DpyTx5NucYBMM3rFyhnbTgeHGJprNLiY+NzM3miB8T/moI7VS7A3Jj7XbI46Eae8 uww6cOJAZBX/nlYtpzdz3YMgpIr3KDpJq1c978dKEd4SYIBRxTBQyCVCq1X4VUuA GYqtRQfTpg1fKOQL6i4Ua51mT7m0ZZua -----END CERTIFICATE-----Generated at Thu Jul 3 00:18:06 2025 by rpki-client