$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json) Hash identifier: iKCdyVCK355kG5VjW0azdTfeKFtWfjupkj0CyGQRrLw= Subject key identifier: 03:D4:2A:68:F4:2C:7A:55:E2:65:3B:79:FE:57:B8:75:03:96:0E:13 Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Certificate serial: 0A91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft Manifest number: 0A75 Signing time: Mon 30 Jun 2025 19:46:31 +0000 Manifest this update: Mon 30 Jun 2025 19:46:30 +0000 Manifest next update: Mon 07 Jul 2025 19:46:30 +0000 Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: v6lStMnMStmq/E7o3sRxeGr6RL0BXrznAF1HcSDvPeI=) 2: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: 0+FYOd7cEHhPhl5/EXB24cdR/+U1VPktvi4vWKzamkI=) 3: DE137C362C7811EC97C8D979C4F9AE02.roa (hash: ORPxj2tqrIsIpHEdVkZPm4n/aNb1Vqu1v7KB5t0Gcw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Validity Not Before: Jun 30 19:46:30 2025 GMT Not After : Jul 7 19:46:30 2025 GMT Subject: CN=6862e996-1c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:dd:7f:a6:ea:2f:2a:2b:1c:67:de:72:7c: 70:d4:00:35:00:7b:f9:2e:95:f6:0d:f3:aa:2d:f4: 0e:45:a3:e3:a1:8b:b6:57:9c:a1:a7:d4:e2:39:a9: 68:cd:2d:51:d5:5a:79:40:1f:47:39:8f:04:1f:ea: 13:7d:5b:6f:af:53:b2:ae:ba:b9:1e:6f:cb:29:35: 1f:72:cd:3a:01:e2:8e:92:27:1c:a2:e9:71:ad:9f: 8b:af:b5:3b:4e:22:15:0b:31:f7:c0:c6:a7:17:94: f1:16:49:81:3b:f4:49:9c:1b:5e:77:25:c8:b0:cd: 1a:7a:b2:1a:e9:53:14:65:ef:97:b9:c9:39:76:35: c0:13:f9:6e:c9:00:cf:10:a8:a5:46:c0:cf:83:37: b9:97:4e:c6:ca:c5:14:c1:d3:fc:9e:ad:a6:3b:3e: 69:85:71:fd:e2:69:bd:de:e5:9b:c8:4d:20:8c:f5: fd:c6:85:7a:e6:d0:1a:e5:99:0a:30:6d:d1:d2:6d: ce:46:21:4f:ce:ff:68:77:2c:5c:a5:dc:37:8f:65: b1:8b:0e:71:de:c8:e0:c9:a7:c8:e6:01:a1:b2:c1: 15:75:5d:24:84:92:a9:75:80:43:be:45:e0:1e:3f: e7:c8:91:f2:4d:ff:57:42:5a:67:e2:d3:76:9f:17: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D4:2A:68:F4:2C:7A:55:E2:65:3B:79:FE:57:B8:75:03:96:0E:13 X509v3 Authority Key Identifier: keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4d:55:16:01:21:74:75:d1:9b:b6:b4:87:49:ad:0b:62:aa: 23:d3:16:2c:3d:e6:66:73:61:82:45:2b:35:54:02:92:32:79: fe:0a:24:ac:01:61:17:95:3e:f3:59:e1:22:66:96:27:9a:0d: 0a:79:ea:d7:cc:30:6e:d1:0e:73:8c:e4:3c:f7:17:ea:3c:42: a8:01:71:39:bb:e4:cc:08:b2:37:58:7d:24:c8:b8:f7:3f:fc: 2c:c4:ff:e7:3c:c3:a5:e2:f5:8e:81:ba:dc:93:15:d3:6a:fe: ed:63:da:d5:da:50:72:d0:fb:ec:59:bd:c5:31:a9:a6:5f:37: 7d:48:22:e0:1b:74:5b:5a:07:40:f6:59:a9:30:9f:f8:52:11: 7e:b5:20:c6:5b:9c:a1:ac:ed:ec:42:46:f8:2f:25:e7:4c:90: 98:ef:98:a4:f3:00:b8:b2:a0:73:95:be:7b:06:74:70:45:21: db:7f:b9:3e:d8:ef:19:eb:84:8b:fa:e3:f9:a9:14:09:c8:e6: 9f:70:49:d8:92:89:9f:fe:01:8e:85:44:06:4e:0c:78:be:d0: d9:f6:f1:f1:02:83:36:2b:59:44:13:e0:27:10:9d:0a:8e:f3: f7:50:26:5a:68:b3:f1:e3:d4:3f:e4:32:1d:b8:0a:bf:2e:22: 09:09:e5:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC QzM1RjU2RDgwHhcNMjUwNjMwMTk0NjMwWhcNMjUwNzA3MTk0NjMwWjAYMRYwFAYD VQQDEw02ODYyZTk5Ni0xYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKPdf6bqLyorHGfecnxw1AA1AHv5LpX2DfOqLfQORaPjoYu2V5yhp9TiOalo zS1R1Vp5QB9HOY8EH+oTfVtvr1Oyrrq5Hm/LKTUfcs06AeKOkiccoulxrZ+Lr7U7 TiIVCzH3wManF5TxFkmBO/RJnBtedyXIsM0aerIa6VMUZe+Xuck5djXAE/luyQDP EKilRsDPgze5l07GysUUwdP8nq2mOz5phXH94mm93uWbyE0gjPX9xoV65tAa5ZkK MG3R0m3ORiFPzv9odyxcpdw3j2Wxiw5x3sjgyafI5gGhssEVdV0khJKpdYBDvkXg Hj/nyJHyTf9XQlpn4tN2nxdhTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPUKmj0 LHpV4mU7ef5XuHUDlg4TMB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0 QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ4Qy9BNzREQTc3MjY0QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQw MDlPUTlhQ3RFTFc4TmZWdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNTVUWASF0ddGbtrSHSa0LYqoj0xYsPeZmc2GCRSs1VAKSMnn+CiSs AWEXlT7zWeEiZpYnmg0KeerXzDBu0Q5zjOQ89xfqPEKoAXE5u+TMCLI3WH0kyLj3 P/wsxP/nPMOl4vWOgbrckxXTav7tY9rV2lBy0PvsWb3FMammXzd9SCLgG3RbWgdA 9lmpMJ/4UhF+tSDGW5yhrO3sQkb4LyXnTJCY75ik8wC4sqBzlb57BnRwRSHbf7k+ 2O8Z64SL+uP5qRQJyOafcEnYkomf/gGOhUQGTgx4vtDZ9vHxAoM2K1lEE+AnEJ0K jvP3UCZaaLPx49Q/5DIduAq/LiIJCeXt -----END CERTIFICATE-----Generated at Wed Jul 2 15:05:49 2025 by rpki-client