$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json) Hash identifier: q6fozd1uCUOnF7NiZNl5WhvhLHNLynRQsB/1e89qURI= Subject key identifier: 2B:F2:7B:47:0A:61:65:99:5C:C0:BA:02:9B:86:29:3C:DC:4E:A7:D7 Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Certificate serial: 0ABA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft Manifest number: 0AB2 Signing time: Wed 02 Jul 2025 19:46:47 +0000 Manifest this update: Wed 02 Jul 2025 19:46:47 +0000 Manifest next update: Wed 09 Jul 2025 19:46:47 +0000 Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: usCd4XNb5dneaE1KOd6NW5Fb51WjtNqqRTTq42JnkPM=) 2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: 3V95dG8EwbjGC7EMndTVlVAHQWvt90W2HKQwUZ++P/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2746 (0xaba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Validity Not Before: Jul 2 19:46:47 2025 GMT Not After : Jul 9 19:46:47 2025 GMT Subject: CN=68658ca7-98fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:dc:b2:db:a8:4e:db:07:0b:01:5e:0d:86: f3:b1:0d:d7:ba:53:44:43:6b:75:07:48:fd:06:ab: 04:92:08:8b:c3:54:79:33:07:3f:12:4c:37:40:74: c4:7b:e6:24:2e:3a:51:d0:f4:2c:d4:49:37:6a:41: 08:52:6c:ed:f4:66:ca:8b:10:66:8f:59:75:47:05: c0:25:20:51:d5:17:5c:58:62:39:56:c9:05:91:5c: 0a:ff:9f:6e:f4:32:c1:6a:d3:ea:46:b3:98:57:88: fb:94:ba:4c:c6:33:ab:80:f5:54:cb:c8:96:f1:ce: 11:cd:0a:b4:55:09:8f:45:12:58:0b:17:df:5f:fc: d8:c6:be:8c:a2:98:62:22:d5:54:38:eb:67:d5:f7: 1a:84:90:40:04:ab:ac:6d:72:e7:82:d0:08:7d:1d: d6:1d:73:ae:c8:60:72:ca:6a:cc:39:e3:08:8e:22: f7:bf:5c:0e:ae:d4:20:ac:56:1e:c0:3a:d7:50:37: 6e:29:75:9c:1f:4a:7c:3f:a5:15:ab:aa:7e:78:0b: e5:12:82:02:3c:0f:c0:d6:90:dc:10:11:10:1d:bc: f2:83:2c:54:4e:84:0a:57:ca:fa:32:45:c3:f2:19: 7f:2c:67:01:79:2a:44:34:8b:01:88:c4:d1:6a:28: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F2:7B:47:0A:61:65:99:5C:C0:BA:02:9B:86:29:3C:DC:4E:A7:D7 X509v3 Authority Key Identifier: keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d7:78:db:a6:6d:54:a6:ad:79:16:2a:c7:af:28:1a:9b:9d: c3:77:5d:8f:3b:71:36:71:36:7d:ad:fa:03:1a:ea:c3:84:c3: 8d:b7:d8:bc:7d:f7:05:98:21:ed:b3:3b:2a:f7:f3:44:06:84: ed:9c:3c:12:aa:a0:94:f5:d3:72:a5:dd:3c:27:51:27:00:98: 3b:19:9b:26:63:83:ec:81:0b:7a:0a:51:5a:7c:cb:36:1e:94: 9d:aa:b0:b9:c0:c7:80:22:ca:74:44:40:28:7d:38:7a:94:63: 4a:74:dd:1a:a6:c3:01:76:0b:17:0e:f4:be:e7:ff:33:3b:7e: bc:4b:fc:9a:8c:ea:00:3e:a1:c0:82:44:df:2e:45:d3:11:58: 86:45:36:b6:43:40:0d:19:73:71:f6:41:0f:83:7e:3a:9d:6a: 6b:a8:32:9a:ce:8b:04:0a:3d:a0:d1:bc:da:e9:f6:6b:4a:d6: e3:b9:95:36:b8:3a:e9:a3:bd:3c:c3:27:ea:50:32:fb:8e:69: 43:0b:e3:0f:6c:b6:37:cf:ad:06:1d:75:27:db:19:ee:ea:21: 53:5c:fa:9f:91:6d:a0:41:d2:bc:60:dc:73:1c:d3:96:38:ae: 5c:be:4a:6f:21:63:17:0a:ac:04:b4:9e:d5:4f:d1:78:c8:2a: cb:1c:7a:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4 NjYzNEFBMDMwHhcNMjUwNzAyMTk0NjQ3WhcNMjUwNzA5MTk0NjQ3WjAYMRYwFAYD VQQDEw02ODY1OGNhNy05OGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIfcstuoTtsHCwFeDYbzsQ3XulNEQ2t1B0j9BqsEkgiLw1R5Mwc/Ekw3QHTE e+YkLjpR0PQs1Ek3akEIUmzt9GbKixBmj1l1RwXAJSBR1RdcWGI5VskFkVwK/59u 9DLBatPqRrOYV4j7lLpMxjOrgPVUy8iW8c4RzQq0VQmPRRJYCxffX/zYxr6Mophi ItVUOOtn1fcahJBABKusbXLngtAIfR3WHXOuyGByymrMOeMIjiL3v1wOrtQgrFYe wDrXUDduKXWcH0p8P6UVq6p+eAvlEoICPA/A1pDcEBEQHbzygyxUToQKV8r6MkXD 8hl/LGcBeSpENIsBiMTRaijFmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvye0cK YWWZXMC6ApuGKTzcTqfXMB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9BRUQzRDM1RTU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1q el9xeFVnakFycGlHWTBxZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT13jbpm1Upq15FirHrygam53Dd12PO3E2cTZ9rfoDGurDhMONt9i8 ffcFmCHtszsq9/NEBoTtnDwSqqCU9dNypd08J1EnAJg7GZsmY4PsgQt6ClFafMs2 HpSdqrC5wMeAIsp0REAofTh6lGNKdN0apsMBdgsXDvS+5/8zO368S/yajOoAPqHA gkTfLkXTEViGRTa2Q0ANGXNx9kEPg346nWprqDKazosECj2g0bza6fZrStbjuZU2 uDrpo708wyfqUDL7jmlDC+MPbLY3z60GHXUn2xnu6iFTXPqfkW2gQdK8YNxzHNOW OK5cvkpvIWMXCqwEtJ7VT9F4yCrLHHr6 -----END CERTIFICATE-----Generated at Thu Jul 3 23:19:18 2025 by rpki-client