$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: GtwpxjDzTm13NyygvMD63d8UrSGOUiiX9XcQEiMvPEY= Subject key identifier: B2:1E:E4:7E:29:06:AF:FB:95:DA:34:EC:FA:C4:82:62:26:FE:CE:B5 Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 0425 Signing time: Tue 01 Jul 2025 00:55:24 +0000 Manifest this update: Tue 01 Jul 2025 00:55:23 +0000 Manifest next update: Tue 08 Jul 2025 00:55:23 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: jnOWAukww0s1Pc01MnST3wTdbAJqdGhdsQzBNRBHCLQ=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: c0Qo/V4Zd6PI/SmvO+fxR2cS+G3poh+IiHb3vxBLGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: Jul 1 00:55:23 2025 GMT Not After : Jul 8 00:55:23 2025 GMT Subject: CN=686331fb-8cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:3a:67:50:63:2b:e2:12:2c:9e:7d:50:07: 5e:eb:52:66:ce:01:77:0f:a9:78:1f:26:40:d2:28: 23:76:bf:74:d2:3e:5c:4b:e7:ea:1f:de:42:f2:73: c2:8d:eb:25:2e:2b:d8:ab:8c:b1:53:3b:5e:15:6e: 15:3f:70:2b:dd:e8:4e:65:ca:07:8a:f6:b6:17:a2: 6c:b1:68:3c:4d:ad:d1:39:6e:00:07:e7:1b:10:9f: 17:b1:ab:3c:9c:4c:8f:87:40:ed:45:5b:ca:22:a0: a1:bb:e0:3a:9f:41:de:32:8c:e9:21:26:ed:93:0b: c7:ea:8d:28:ff:50:19:85:6a:b6:33:18:a7:21:1a: 4a:11:fe:04:22:b5:31:70:54:90:7d:6d:d9:42:92: 60:b4:ab:c3:7c:16:0c:9f:f9:97:13:95:b2:46:c0: 7a:ca:86:92:29:4f:2d:c4:42:d8:ae:7c:55:c8:d6: d1:19:3e:b8:25:7d:97:b4:28:d0:b7:b8:2b:74:16: d4:b8:2f:9c:38:2d:e8:ae:88:f2:16:b1:eb:46:d2: 4e:5b:2b:40:06:15:b0:1f:f8:c8:1f:7a:e0:25:a2: a7:be:20:6b:85:23:0e:66:96:b5:4c:16:39:ce:0b: 0f:08:db:a0:3c:75:69:ab:65:37:e7:f1:0c:ca:15: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:E4:7E:29:06:AF:FB:95:DA:34:EC:FA:C4:82:62:26:FE:CE:B5 X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:83:6b:f9:a8:1a:3f:d3:6f:cd:0b:6e:ed:3d:45:0b:ae:a1: f8:8b:db:e1:22:0f:16:57:28:3d:c3:70:20:bf:4e:92:f2:2c: fd:dc:c8:32:14:f8:2e:79:d4:db:ed:48:19:b1:63:42:4e:91: e0:82:38:18:3a:b0:c6:14:24:4c:6e:12:ad:66:1f:26:9f:2c: 87:e4:d4:95:74:80:d6:1c:ea:b9:53:4a:54:3e:13:18:73:98: bb:09:6d:9c:2e:30:5c:65:cd:6e:7d:93:1f:6a:3d:28:8b:03: 5d:fd:4b:22:31:f9:c1:e4:3d:ce:3b:49:76:aa:71:99:62:1e: e7:fa:a9:49:29:d2:13:82:58:f7:de:cf:dd:00:ed:a4:61:39: 7e:64:35:04:64:6e:db:60:6d:88:fe:08:35:d6:74:0a:06:1d: 19:2e:3a:8e:d3:a9:0b:0f:99:ff:53:3b:52:bb:87:e0:f3:2f: 4a:4c:27:de:f4:88:6b:f1:0f:cf:e4:19:e3:ab:3d:e8:93:36: c7:10:ea:79:27:d5:18:98:bc:79:00:b1:fc:72:35:bc:4b:ae: fa:23:2c:1e:43:dc:4d:d1:1c:e4:61:e2:68:e9:45:67:b2:ea: 91:17:be:3f:f8:af:11:f6:16:a8:c4:42:47:b3:b1:64:72:e2: c5:0f:6b:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjUwNzAxMDA1NTIzWhcNMjUwNzA4MDA1NTIzWjAYMRYwFAYD VQQDEw02ODYzMzFmYi04Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx586Z1BjK+ISLJ59UAde61JmzgF3D6l4HyZA0igjdr900j5cS+fqH95C8nPC jeslLivYq4yxUzteFW4VP3Ar3ehOZcoHiva2F6JssWg8Ta3ROW4AB+cbEJ8Xsas8 nEyPh0DtRVvKIqChu+A6n0HeMozpISbtkwvH6o0o/1AZhWq2MxinIRpKEf4EIrUx cFSQfW3ZQpJgtKvDfBYMn/mXE5WyRsB6yoaSKU8txELYrnxVyNbRGT64JX2XtCjQ t7grdBbUuC+cOC3orojyFrHrRtJOWytABhWwH/jIH3rgJaKnviBrhSMOZpa1TBY5 zgsPCNugPHVpq2U35/EMyhUc1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIe5H4p Bq/7ldo07PrEgmIm/s61MB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeg2v5qBo/02/NC27tPUULrqH4i9vhIg8WVyg9w3Agv06S8iz93Mgy FPguedTb7UgZsWNCTpHggjgYOrDGFCRMbhKtZh8mnyyH5NSVdIDWHOq5U0pUPhMY c5i7CW2cLjBcZc1ufZMfaj0oiwNd/UsiMfnB5D3OO0l2qnGZYh7n+qlJKdITglj3 3s/dAO2kYTl+ZDUEZG7bYG2I/gg11nQKBh0ZLjqO06kLD5n/UztSu4fg8y9KTCfe 9Ihr8Q/P5Bnjqz3okzbHEOp5J9UYmLx5ALH8cjW8S676IyweQ9xN0RzkYeJo6UVn suqRF74/+K8R9haoxEJHs7FkcuLFD2uA -----END CERTIFICATE-----Generated at Tue Jul 1 13:54:52 2025 by rpki-client