$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: m9I3Q+SakHVD4wr9D3IX5aNnTbc6LgvWPi4gZ+Akf3c= Subject key identifier: A9:1B:4B:11:66:C1:C0:26:57:6F:02:C7:75:12:81:E7:E8:84:97:44 Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 0566 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 0566 Signing time: Wed 02 Jul 2025 14:18:19 +0000 Manifest this update: Wed 02 Jul 2025 14:18:18 +0000 Manifest next update: Wed 09 Jul 2025 14:18:18 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: i/essVAJJHIw6SszxPa7tsmJDFkQ6Vj8OHAz+O2EWD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: Jul 2 14:18:18 2025 GMT Not After : Jul 9 14:18:18 2025 GMT Subject: CN=68653fab-8be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:e8:90:a2:2e:60:c3:ff:a1:7b:c4:25:94: 7f:e3:1d:e5:4c:dd:2a:68:fe:ea:a1:a5:18:58:c7: b8:dd:10:03:d1:b6:57:2b:21:b8:35:13:db:d5:87: d5:31:09:96:d7:f3:b4:55:4e:27:0a:25:92:1b:d1: 54:23:aa:93:2b:36:18:76:a9:cf:27:d1:e0:4c:30: c7:20:ce:3a:bb:34:de:39:07:7f:46:6f:62:f7:0e: be:aa:c7:c0:0b:08:61:75:dc:53:2c:95:08:55:73: 43:8d:a6:4f:a5:88:a4:64:fe:20:c0:d0:f9:f2:bb: 27:03:ba:fa:dd:47:77:b1:14:5d:1e:35:12:b9:da: 57:dc:20:66:37:3d:b1:46:07:6c:f5:06:4c:b6:89: 7f:f5:69:81:5c:77:ed:b6:09:3c:52:a0:d7:77:20: 4d:24:0e:6e:e3:0b:e9:29:ab:be:15:ea:f1:d9:41: 73:14:4c:3e:d9:ca:f8:d7:60:fe:6c:57:96:42:76: 76:9b:12:24:63:91:18:7e:b3:2b:b6:5d:30:47:24: 50:fc:1e:5b:2a:da:e6:ff:e7:c5:36:80:da:67:92: a0:72:80:e8:58:8b:90:88:e0:94:f6:ed:89:01:58: 67:70:5d:95:a5:b8:39:22:81:92:01:f3:17:ab:6d: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1B:4B:11:66:C1:C0:26:57:6F:02:C7:75:12:81:E7:E8:84:97:44 X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3f:bf:27:d8:3f:d8:f3:77:bf:de:ef:b0:18:0f:5d:3b:c8: 53:4a:61:09:e4:db:6e:36:bf:9e:64:a1:2f:4c:33:1a:21:29: eb:79:e9:95:f4:50:22:fb:ec:21:bb:62:8b:f7:09:0d:78:ea: 88:b4:e9:a5:c9:3a:ca:ad:2e:f2:37:6c:88:b9:8f:70:e5:9c: f2:54:f6:4c:97:d2:0a:69:fa:5e:7a:86:34:bc:65:02:43:3a: 83:82:45:05:3d:2b:de:16:63:1d:e0:3c:43:3f:cf:b9:7f:d6: ae:7a:3f:17:78:dc:6a:55:a0:bb:4f:3a:6c:30:39:76:09:58: 4b:2d:1e:7e:dc:b1:c6:74:29:6f:73:cb:82:7b:f3:76:ac:04: 02:3e:64:3c:c2:18:2c:23:8f:52:97:13:35:c9:24:22:08:0f: 3d:79:cb:ff:d4:6f:c3:a1:17:fc:a9:0d:06:63:14:c1:e6:f7: 3d:73:a4:19:0e:b6:f0:27:c3:26:c9:67:a9:ec:24:2b:e9:77: 3a:16:a9:e4:28:77:e4:16:10:28:80:5c:25:a7:c6:d2:cb:bc: 19:dc:f4:78:4b:f4:f2:37:86:dc:dc:a4:39:d0:bf:52:f8:99: 0a:ff:47:22:5b:d5:93:84:27:2d:40:e3:fc:a1:e5:71:88:89: 7c:95:2a:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjUwNzAyMTQxODE4WhcNMjUwNzA5MTQxODE4WjAYMRYwFAYD VQQDEw02ODY1M2ZhYi04YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygzokKIuYMP/oXvEJZR/4x3lTN0qaP7qoaUYWMe43RAD0bZXKyG4NRPb1YfV MQmW1/O0VU4nCiWSG9FUI6qTKzYYdqnPJ9HgTDDHIM46uzTeOQd/Rm9i9w6+qsfA CwhhddxTLJUIVXNDjaZPpYikZP4gwND58rsnA7r63Ud3sRRdHjUSudpX3CBmNz2x Rgds9QZMtol/9WmBXHfttgk8UqDXdyBNJA5u4wvpKau+Ferx2UFzFEw+2cr412D+ bFeWQnZ2mxIkY5EYfrMrtl0wRyRQ/B5bKtrm/+fFNoDaZ5KgcoDoWIuQiOCU9u2J AVhncF2Vpbg5IoGSAfMXq21EBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkbSxFm wcAmV28Cx3USgefohJdEMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6P78n2D/Y83e/3u+wGA9dO8hTSmEJ5NtuNr+eZKEvTDMaISnreemV 9FAi++whu2KL9wkNeOqItOmlyTrKrS7yN2yIuY9w5ZzyVPZMl9IKafpeeoY0vGUC QzqDgkUFPSveFmMd4DxDP8+5f9auej8XeNxqVaC7TzpsMDl2CVhLLR5+3LHGdClv c8uCe/N2rAQCPmQ8whgsI49SlxM1ySQiCA89ecv/1G/DoRf8qQ0GYxTB5vc9c6QZ DrbwJ8MmyWep7CQr6Xc6FqnkKHfkFhAogFwlp8bSy7wZ3PR4S/TyN4bc3KQ50L9S +JkK/0ciW9WThCctQOP8oeVxiIl8lSos -----END CERTIFICATE-----Generated at Thu Jul 3 23:22:40 2025 by rpki-client