$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: jCtNlTam1SDYm9FZkEFERgcWU1nQVey6jYmmCkIJcWk= Subject key identifier: B9:01:33:AA:F4:2F:38:8F:67:C5:F3:73:77:72:DD:6D:EE:E1:7E:1C Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 38DB Signing time: Mon 30 Jun 2025 14:41:26 +0000 Manifest this update: Mon 30 Jun 2025 14:41:25 +0000 Manifest next update: Mon 07 Jul 2025 14:41:25 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: t6p98zTZUkF5OJB7bMsGfG9k9EVQsO12LetGOHCyHok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Jun 30 14:41:25 2025 GMT Not After : Jul 7 14:41:25 2025 GMT Subject: CN=6862a216-46b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:15:3e:b6:9e:7f:10:46:b2:80:72:ca:d9: 1f:95:98:b9:ff:46:e3:05:7d:b1:59:6a:cf:ce:4f: 63:be:2c:7a:c2:41:2b:43:08:97:00:d4:19:1c:fd: c0:ca:f4:31:f5:cc:60:20:6f:d9:dd:b8:0e:7d:9d: 67:05:5f:93:fa:e0:80:d7:69:c5:a3:e9:a5:f6:38: f4:f0:20:60:bd:a6:58:a5:8a:8e:f7:39:b5:1b:66: 96:aa:88:ac:a3:50:2f:f3:35:fc:39:d6:d9:18:e1: 75:23:86:2b:70:8e:29:7d:8a:dd:7f:f7:90:e1:95: ba:4a:30:eb:b1:98:5e:58:ba:f2:d3:a3:76:38:9e: 27:f5:ae:ee:89:ec:38:38:6e:1f:09:3f:5e:d0:8e: 95:bb:b3:65:52:a3:5d:d8:e9:8d:fa:8a:73:61:d9: 5e:79:ff:10:01:28:2b:30:8e:d8:bc:d9:ca:7c:bb: eb:2e:3f:c5:f8:93:4c:e3:ea:b9:09:96:69:89:67: 43:db:2c:c1:fc:22:fe:b1:66:7f:48:14:76:60:8c: 9a:37:5e:66:4d:f0:20:27:56:cb:a7:7d:6b:78:33: 01:52:7c:69:ac:78:51:99:cc:95:cf:c7:1d:6a:cd: ec:00:00:00:6a:db:55:cc:a3:6d:95:dd:0b:fd:6b: 15:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:01:33:AA:F4:2F:38:8F:67:C5:F3:73:77:72:DD:6D:EE:E1:7E:1C X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:4e:2b:ce:67:fe:b1:22:79:2e:ab:61:5c:db:02:c3:a1:c5: a6:a7:76:30:25:d6:6c:11:52:6b:42:52:3a:d6:93:59:ad:96: 70:d8:53:2e:30:59:1a:95:49:84:a6:b3:33:26:a5:0a:df:26: 32:51:1b:22:5c:01:be:7c:66:35:93:c6:ea:ec:1c:64:35:ae: 75:f8:c5:b8:c3:64:a7:2e:76:1f:9a:21:a1:b1:04:3a:58:5c: 8d:ab:b9:4e:8a:06:53:05:e0:86:e8:0d:d4:22:93:0f:8e:60: a7:32:8d:a0:5a:d7:08:e0:6e:39:52:7b:ec:a3:7a:5f:fe:ce: 86:27:7c:be:d3:bd:6a:bc:b8:30:a5:6e:60:bc:97:cd:7b:fe: c0:06:51:2a:0c:bb:fc:c7:52:e3:89:0a:07:32:7c:d6:06:e2: b6:42:b2:62:cc:ce:c2:25:4c:9e:ca:c3:2d:ce:43:da:ff:fe: 38:01:04:df:73:cc:82:89:9c:92:29:51:4c:b3:c3:5d:cd:03: e4:ab:bc:bb:29:ed:e3:e4:58:ac:07:54:fc:c4:43:08:c4:46: c0:33:04:a3:82:fb:af:27:97:48:ea:c4:c2:33:e8:38:5a:cb: b1:6e:91:41:2e:e8:31:23:37:8f:d2:50:f3:a8:42:a4:ee:49: 83:80:63:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUwNjMwMTQ0MTI1WhcNMjUwNzA3MTQ0MTI1WjAYMRYwFAYD VQQDEw02ODYyYTIxNi00NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymsVPraefxBGsoByytkflZi5/0bjBX2xWWrPzk9jvix6wkErQwiXANQZHP3A yvQx9cxgIG/Z3bgOfZ1nBV+T+uCA12nFo+ml9jj08CBgvaZYpYqO9zm1G2aWqois o1Av8zX8OdbZGOF1I4YrcI4pfYrdf/eQ4ZW6SjDrsZheWLry06N2OJ4n9a7uiew4 OG4fCT9e0I6Vu7NlUqNd2OmN+opzYdleef8QASgrMI7YvNnKfLvrLj/F+JNM4+q5 CZZpiWdD2yzB/CL+sWZ/SBR2YIyaN15mTfAgJ1bLp31reDMBUnxprHhRmcyVz8cd as3sAAAAattVzKNtld0L/WsV3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkBM6r0 LziPZ8Xzc3dy3W3u4X4cMB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1TivOZ/6xInkuq2Fc2wLDocWmp3YwJdZsEVJrQlI61pNZrZZw2FMu MFkalUmEprMzJqUK3yYyURsiXAG+fGY1k8bq7BxkNa51+MW4w2SnLnYfmiGhsQQ6 WFyNq7lOigZTBeCG6A3UIpMPjmCnMo2gWtcI4G45Unvso3pf/s6GJ3y+071qvLgw pW5gvJfNe/7ABlEqDLv8x1LjiQoHMnzWBuK2QrJizM7CJUyeysMtzkPa//44AQTf c8yCiZySKVFMs8NdzQPkq7y7Ke3j5FisB1T8xEMIxEbAMwSjgvuvJ5dI6sTCM+g4 WsuxbpFBLugxIzeP0lDzqEKk7kmDgGNt -----END CERTIFICATE-----Generated at Tue Jul 1 20:16:37 2025 by rpki-client