$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json) Hash identifier: eiSQC5sKZCH9YnISx9UkxAm+V9AA6MGXDLfRr644+E4= Subject key identifier: D4:A1:A2:4A:28:5A:EC:1F:C3:71:DF:8E:46:4D:C4:9D:47:7B:1F:20 Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft Manifest number: BF Signing time: Tue 01 Jul 2025 06:30:38 +0000 Manifest this update: Tue 01 Jul 2025 06:30:38 +0000 Manifest next update: Tue 08 Jul 2025 06:30:38 +0000 Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: CsB8f0lmEahsfp6DHRSAqFDdiVYzRO1jvkAleD46OXE=) 2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 01Cn3pOh4671ZkIDU6odEQ9G33TuU+ryqBzUYewO8xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Validity Not Before: Jul 1 06:30:38 2025 GMT Not After : Jul 8 06:30:38 2025 GMT Subject: CN=6863808e-cfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ee:98:85:69:72:59:19:7e:3a:9d:52:51:60: b0:e7:2e:ce:17:23:6f:f7:b1:2c:c0:3f:74:8f:55: e3:37:8e:43:05:ea:be:8d:6b:93:49:f9:55:d7:f8: ab:f0:64:7e:6c:05:b1:04:10:ac:db:82:55:fb:f9: 7c:9a:29:32:50:ff:c7:86:60:64:fc:fd:94:f6:9d: 15:ac:05:6a:ed:f8:30:27:df:27:29:c5:7b:5a:2f: 22:bc:cf:9c:4b:d9:ad:77:59:48:a2:ae:71:53:51: 80:00:0e:4b:ef:22:51:99:a1:30:9c:ee:99:17:db: 5b:26:59:e0:73:b8:f3:4b:20:80:52:59:59:ac:62: 67:a8:c8:68:72:b6:d9:30:11:85:dd:b1:03:ac:89: 20:34:08:4f:71:34:74:f3:9e:11:e9:44:02:92:68: f5:c1:6c:00:ea:89:0c:0f:52:03:12:b5:fd:1e:84: 21:2c:b1:bd:ef:af:b5:8f:81:fa:30:b0:5e:83:8c: c7:02:56:58:51:17:f7:b9:0e:c2:b0:82:7f:58:75: 09:71:47:35:17:19:db:9f:d5:01:72:75:ed:93:71: af:61:ca:dd:1e:d6:a6:cb:44:74:19:aa:57:4b:57: c2:0e:78:db:5f:c2:16:3b:eb:7a:2e:87:52:ea:7a: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A1:A2:4A:28:5A:EC:1F:C3:71:DF:8E:46:4D:C4:9D:47:7B:1F:20 X509v3 Authority Key Identifier: keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:bd:f8:db:91:d4:a7:48:e2:df:f0:82:ab:cb:26:7b:ea:f7: c8:2b:0a:49:83:94:34:58:bd:26:04:4c:60:09:ca:c8:de:eb: 4a:86:50:c5:62:5d:bd:c0:22:21:7e:f2:62:4e:72:76:51:60: 9a:3e:8e:cf:af:fa:df:6c:79:a3:69:af:0d:c6:1e:f3:a9:36: 60:e4:af:57:f8:c2:03:40:18:c0:3e:1a:c7:e1:c0:2d:3d:4b: a4:00:55:af:57:81:1c:c8:45:b2:dd:05:7b:bd:19:65:7f:1b: c1:61:1f:02:24:76:60:3d:a7:1b:b6:7c:54:fe:56:fd:95:84: c2:ae:bd:3a:e9:36:06:fa:dd:53:b2:07:f8:05:17:3b:60:63: d3:88:7f:4e:7f:8c:49:42:65:0b:9b:87:ae:d7:8e:21:55:3e: 23:91:d0:be:d5:a2:6d:cb:89:7e:c9:38:7e:88:98:0a:53:59: 7f:e2:2e:71:cc:75:90:0d:c4:5c:55:18:49:b4:12:c4:15:8e: a5:63:c9:6c:6c:ad:94:ae:15:89:12:21:7a:27:47:f1:79:d9: f0:14:43:a9:8a:b9:0a:21:eb:5f:32:7a:e9:a8:d8:7a:46:08: 83:b6:b3:31:1a:86:b0:8e:cf:50:72:7d:3c:3f:9c:a1:9b:cb: bd:fb:8f:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDkyMjQxNjY1OTU1ODIxN0M5MzYyN0I5NkQ5QzlFQUZB QzFGQUEzRUUwHhcNMjUwNzAxMDYzMDM4WhcNMjUwNzA4MDYzMDM4WjAYMRYwFAYD VQQDEw02ODYzODA4ZS1jZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoO6YhWlyWRl+Op1SUWCw5y7OFyNv97EswD90j1XjN45DBeq+jWuTSflV1/ir 8GR+bAWxBBCs24JV+/l8mikyUP/HhmBk/P2U9p0VrAVq7fgwJ98nKcV7Wi8ivM+c S9mtd1lIoq5xU1GAAA5L7yJRmaEwnO6ZF9tbJlngc7jzSyCAUllZrGJnqMhocrbZ MBGF3bEDrIkgNAhPcTR0854R6UQCkmj1wWwA6okMD1IDErX9HoQhLLG976+1j4H6 MLBeg4zHAlZYURf3uQ7CsIJ/WHUJcUc1Fxnbn9UBcnXtk3GvYcrdHtamy0R0GapX S1fCDnjbX8IWO+t6LodS6npnEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNShokoo Wuwfw3HfjkZNxJ1Hex8gMB8GA1UdIwQYMBaAFJIkFmWVWCF8k2J7ltnJ6vrB+qPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi84MTY5NzJDNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlYeVRZbnVXMmNucS1zSDZv LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlY eVRZbnVXMmNucS1zSDZvLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXvfjbkdSnSOLf8IKryyZ76vfIKwpJg5Q0WL0mBExgCcrI3utKhlDF Yl29wCIhfvJiTnJ2UWCaPo7Pr/rfbHmjaa8Nxh7zqTZg5K9X+MIDQBjAPhrH4cAt PUukAFWvV4EcyEWy3QV7vRllfxvBYR8CJHZgPacbtnxU/lb9lYTCrr066TYG+t1T sgf4BRc7YGPTiH9Of4xJQmULm4eu144hVT4jkdC+1aJty4l+yTh+iJgKU1l/4i5x zHWQDcRcVRhJtBLEFY6lY8lsbK2UrhWJEiF6J0fxednwFEOpirkKIetfMnrpqNh6 RgiDtrMxGoawjs9Qcn08P5yhm8u9+49D -----END CERTIFICATE-----Generated at Thu Jul 3 02:48:06 2025 by rpki-client