$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: 8z9aWTDDrP9DSEUdNSaR7VUH8iAiWDr26LGlEmFjm3c= Subject key identifier: AA:B4:B8:4C:90:1F:5A:07:5B:F2:5E:1F:FA:4E:18:98:C3:76:5C:BD Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 0283 Signing time: Thu 03 Jul 2025 02:03:15 +0000 Manifest this update: Thu 03 Jul 2025 02:03:15 +0000 Manifest next update: Thu 10 Jul 2025 02:03:14 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: 8AGl2gdQT5PNU9FO84ClYWGMx0VG8VR26FANJPIEiZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Jul 3 02:03:15 2025 GMT Not After : Jul 10 02:03:14 2025 GMT Subject: CN=6865e4e3-c46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:d6:e0:2d:c4:28:16:6e:d1:94:ef:ee:15: 98:f9:2d:c0:2c:6d:16:f9:56:f5:84:f3:ba:4f:58: 56:a7:b2:9e:3a:20:71:bb:df:f0:32:72:02:35:11: 7d:b0:c5:ec:a2:e3:fb:69:55:db:47:7d:75:54:ac: 69:bf:03:e1:9a:ca:f1:46:6a:1b:59:e0:75:b8:dc: 68:f3:7f:36:b1:a2:c6:c6:c5:87:b2:dc:fc:78:4f: 75:a3:53:68:15:36:a7:09:c6:a6:94:6b:1b:78:23: b7:63:cc:51:3e:f5:c0:bf:96:30:25:ef:0f:79:77: de:8a:87:9c:7a:e3:f4:a9:42:87:d1:83:46:a2:dd: 9a:1d:2d:28:ad:84:23:74:e9:68:f9:4f:4d:f4:72: e8:94:a0:e1:0d:4a:54:f9:1a:ed:24:48:70:a8:39: 69:f4:af:59:10:2b:f1:86:24:01:4f:dc:f8:f4:4d: bf:90:20:d6:f3:de:dc:3c:45:81:e4:6e:63:7b:c1: a6:b5:d6:ac:2a:92:02:65:c1:b7:67:03:50:7c:8d: 10:b2:bb:4d:95:51:c4:6c:4d:c4:61:11:2c:1b:79: 61:50:49:d1:50:f0:7b:77:a1:68:9b:cd:1c:5c:4c: 9f:a0:7f:e7:ca:a4:58:94:6b:97:b2:71:bc:40:e0: 12:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B4:B8:4C:90:1F:5A:07:5B:F2:5E:1F:FA:4E:18:98:C3:76:5C:BD X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:93:86:01:77:d5:95:19:fe:2b:f2:f0:c9:d5:75:cd:c5:87: 50:f4:42:70:42:0d:52:84:33:74:67:1a:b0:57:a4:bf:80:c6: be:f2:30:f9:10:fb:c5:93:e9:85:25:77:8b:77:be:92:11:63: 37:56:48:f8:d3:3b:27:fc:8a:2e:d1:88:5a:56:56:a5:a7:d6: fa:7f:3b:32:88:64:73:fe:a7:0b:36:e6:54:75:e6:58:76:35: e1:d3:50:09:ba:f5:e1:60:3f:be:ff:ea:a9:ce:52:ee:3d:ec: cd:37:4d:c9:e0:e8:7a:04:2d:70:77:4e:dc:3a:13:0e:23:ed: 26:9e:41:e1:41:50:99:68:4f:bb:48:0b:71:e2:d3:10:a2:cd: 32:85:9a:9c:1c:c6:33:9d:ac:e4:3e:ba:a3:b5:3c:3f:7a:a5: 00:58:ba:e9:41:36:5d:0f:49:39:06:7c:4d:e2:07:73:37:0d: e1:79:a9:9a:20:99:d9:18:e8:7d:e5:be:bb:d5:a3:77:63:82: 96:b0:ac:35:84:53:56:96:af:27:0b:7f:16:65:4a:77:0b:93: 64:4c:4e:70:6a:49:8e:36:d9:41:c1:11:55:eb:60:1c:6a:97: a8:c8:dc:7c:f0:a8:1d:c5:dd:c4:1e:2a:1d:4c:78:9f:6d:c4: 12:a4:ef:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUwNzAzMDIwMzE1WhcNMjUwNzEwMDIwMzE0WjAYMRYwFAYD VQQDEw02ODY1ZTRlMy1jNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3XW4C3EKBZu0ZTv7hWY+S3ALG0W+Vb1hPO6T1hWp7KeOiBxu9/wMnICNRF9 sMXsouP7aVXbR311VKxpvwPhmsrxRmobWeB1uNxo8382saLGxsWHstz8eE91o1No FTanCcamlGsbeCO3Y8xRPvXAv5YwJe8PeXfeioeceuP0qUKH0YNGot2aHS0orYQj dOlo+U9N9HLolKDhDUpU+RrtJEhwqDlp9K9ZECvxhiQBT9z49E2/kCDW897cPEWB 5G5je8GmtdasKpICZcG3ZwNQfI0QsrtNlVHEbE3EYREsG3lhUEnRUPB7d6Fom80c XEyfoH/nyqRYlGuXsnG8QOASqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKq0uEyQ H1oHW/JeH/pOGJjDdly9MB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgk4YBd9WVGf4r8vDJ1XXNxYdQ9EJwQg1ShDN0ZxqwV6S/gMa+8jD5 EPvFk+mFJXeLd76SEWM3Vkj40zsn/Iou0YhaVlalp9b6fzsyiGRz/qcLNuZUdeZY djXh01AJuvXhYD++/+qpzlLuPezNN03J4Oh6BC1wd07cOhMOI+0mnkHhQVCZaE+7 SAtx4tMQos0yhZqcHMYznazkPrqjtTw/eqUAWLrpQTZdD0k5BnxN4gdzNw3heama IJnZGOh95b671aN3Y4KWsKw1hFNWlq8nC38WZUp3C5NkTE5wakmONtlBwRFV62Ac apeoyNx88Kgdxd3EHiodTHifbcQSpO+C -----END CERTIFICATE-----Generated at Fri Jul 4 08:51:48 2025 by rpki-client