$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: b+/kmxz+JXdxQyGOsr1C0pLkfCDxynxehUCAfXLYTBc= Subject key identifier: 08:BA:B5:89:C8:7C:99:DE:83:71:CE:AB:0A:BD:B6:18:3D:2D:DA:55 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 05B3 Signing time: Mon 30 Jun 2025 23:32:08 +0000 Manifest this update: Mon 30 Jun 2025 23:32:07 +0000 Manifest next update: Mon 07 Jul 2025 23:32:07 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: s/6ugPKqV6D70KFydnZctfl5LFct0H//5Ozp21nklNo=) 2: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Jun 30 23:32:07 2025 GMT Not After : Jul 7 23:32:07 2025 GMT Subject: CN=68631e78-e639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:32:f2:aa:46:fc:08:c7:66:5c:93:00:42: 62:96:5e:50:90:21:33:05:ac:28:4b:6c:dc:a2:e6: 38:b7:61:fc:c3:7c:df:8f:79:24:43:eb:f0:3b:f2: fc:e3:0f:7b:c6:c2:7a:2b:ef:01:0e:c6:74:e4:f3: a8:cc:32:0d:c2:8d:0d:64:97:b5:0a:f5:f4:94:df: 43:2a:be:2d:2f:30:a2:74:ab:9f:d6:e8:c6:1b:20: c4:e9:b1:eb:e6:41:32:43:df:b2:dd:8b:f2:a3:8d: 3f:83:13:5a:64:c5:a9:83:7d:65:81:88:f0:3d:f0: f2:64:1f:7b:d6:df:5f:2c:7d:37:e9:cd:74:b8:12: ac:e8:6e:06:da:f7:ff:e1:77:39:c9:6a:a5:49:f9: 58:c1:20:ee:1a:00:c3:0c:21:e9:1f:6a:31:ff:ec: cd:10:bf:3c:85:d3:65:78:16:33:01:a9:60:9a:9f: a1:5e:ff:fb:7a:b0:b4:da:cb:e8:41:cf:2a:34:7e: 9e:8f:5f:97:76:3d:cd:33:ee:24:80:65:48:63:ec: e3:63:52:57:bc:8e:a2:87:3d:87:7c:fb:9c:00:42: 29:5a:57:38:1c:a1:e3:4c:b3:28:30:8e:0e:45:4b: 2b:b9:f3:f6:50:9c:84:a0:b1:47:a3:28:ae:62:f3: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BA:B5:89:C8:7C:99:DE:83:71:CE:AB:0A:BD:B6:18:3D:2D:DA:55 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f2:9f:82:0e:68:5d:37:79:51:64:79:51:8d:4b:8e:e7:4f: 1b:2a:26:fe:cd:3a:44:5e:b0:79:50:e5:4a:a0:d2:c9:8c:7a: 95:d7:3c:52:c9:f7:57:5a:17:f6:35:a2:17:f2:a0:3e:f4:17: 94:50:0d:67:07:30:01:43:64:6e:f9:0d:d0:63:9c:7e:e4:50: f5:ac:b8:5b:9f:51:36:d3:65:20:b3:04:24:61:1a:2e:43:1f: 25:77:02:fa:94:95:25:01:f0:48:a5:a0:3b:31:27:3f:22:a6: 5d:ae:2b:f4:33:bd:e5:6d:88:52:89:e6:e8:67:ce:45:63:af: 34:69:90:11:0b:c2:f7:45:34:7d:c6:ad:ce:84:83:0b:da:95: 1d:a7:e1:90:60:2d:70:55:7d:d5:0a:34:93:f2:3d:db:1f:8b: 70:6a:83:f0:7c:bb:f5:02:8f:0b:a4:bd:6a:e6:b9:15:b9:75: 68:50:a2:11:df:bd:49:66:85:38:61:53:b9:1d:ef:10:bd:c6: 95:18:fb:13:76:8f:3c:89:61:a9:75:0d:80:58:38:b0:de:69: 9f:34:f0:c0:01:66:62:48:58:40:bb:e8:6e:38:3e:32:51:15: 05:df:b8:20:f4:69:0c:09:b3:81:8f:5e:d9:a0:6f:0a:f1:5c: 47:d6:14:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUwNjMwMjMzMjA3WhcNMjUwNzA3MjMzMjA3WjAYMRYwFAYD VQQDEw02ODYzMWU3OC1lNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3ky8qpG/AjHZlyTAEJill5QkCEzBawoS2zcouY4t2H8w3zfj3kkQ+vwO/L8 4w97xsJ6K+8BDsZ05POozDINwo0NZJe1CvX0lN9DKr4tLzCidKuf1ujGGyDE6bHr 5kEyQ9+y3Yvyo40/gxNaZMWpg31lgYjwPfDyZB971t9fLH036c10uBKs6G4G2vf/ 4Xc5yWqlSflYwSDuGgDDDCHpH2ox/+zNEL88hdNleBYzAalgmp+hXv/7erC02svo Qc8qNH6ej1+Xdj3NM+4kgGVIY+zjY1JXvI6ihz2HfPucAEIpWlc4HKHjTLMoMI4O RUsrufP2UJyEoLFHoyiuYvOL0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAi6tYnI fJneg3HOqwq9thg9LdpVMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB48p+CDmhdN3lRZHlRjUuO508bKib+zTpEXrB5UOVKoNLJjHqV1zxS yfdXWhf2NaIX8qA+9BeUUA1nBzABQ2Ru+Q3QY5x+5FD1rLhbn1E202UgswQkYRou Qx8ldwL6lJUlAfBIpaA7MSc/IqZdriv0M73lbYhSieboZ85FY680aZARC8L3RTR9 xq3OhIML2pUdp+GQYC1wVX3VCjST8j3bH4twaoPwfLv1Ao8LpL1q5rkVuXVoUKIR 371JZoU4YVO5He8QvcaVGPsTdo88iWGpdQ2AWDiw3mmfNPDAAWZiSFhAu+huOD4y URUF37gg9GkMCbOBj17ZoG8K8VxH1hQu -----END CERTIFICATE-----Generated at Tue Jul 1 21:39:09 2025 by rpki-client