$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: 9astviSo09mYaVKSfRFIcYJ9HbTS/0gvKymMs8sKuf8= Subject key identifier: 84:EA:23:AF:76:08:23:0E:5D:B5:B2:33:5E:81:98:2C:B9:4A:41:C4 Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 27 Signing time: Sat 05 Jul 2025 08:08:28 +0000 Manifest this update: Sat 05 Jul 2025 08:08:28 +0000 Manifest next update: Sat 12 Jul 2025 08:08:28 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: Crs3nqqUh6BayN77N9CVeCQTKd7YbMp0tOF93wJgYGQ=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Jul 5 08:08:28 2025 GMT Not After : Jul 12 08:08:28 2025 GMT Subject: CN=6868dd7c-6e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:6d:51:38:10:75:ad:40:e1:df:ed:56:55: 72:11:31:c7:5f:a8:ae:98:ba:b8:5e:3d:4f:cb:74: 55:65:2c:34:fe:00:de:c8:ee:02:64:72:9b:55:d3: 03:c9:af:06:47:58:19:aa:d7:3a:a7:9b:70:ca:c3: 3f:15:52:53:12:db:95:fb:55:57:b5:49:a4:e4:b0: 63:95:df:e5:c1:e5:26:c6:12:46:fb:17:65:f5:7b: 1d:e4:5e:c6:59:a8:81:6c:d1:6e:a6:e3:c0:25:90: 9e:29:2a:57:72:dc:f1:a7:9b:d4:27:2f:93:b8:65: 39:5a:46:36:83:07:3d:12:e9:34:00:34:d5:23:52: c6:3c:60:27:07:ae:0b:36:1a:4c:4c:2c:de:c1:bd: 5e:6a:19:8c:61:d3:45:eb:71:92:76:78:a8:34:13: 1f:9a:dc:8a:6c:6d:f6:3a:de:e1:75:1c:3b:17:d7: fa:f7:02:a4:1c:2a:62:f0:f2:6f:93:79:12:7e:64: 8a:5d:fc:cc:36:f5:c2:f3:b8:04:3e:47:52:01:80: e8:7e:af:6a:ae:d9:ce:cb:20:40:03:bb:ff:b2:25: 84:72:cc:f0:65:7f:d7:24:6e:23:7d:2d:9a:d9:3e: 79:bf:20:75:a5:30:dd:50:b8:94:b7:6b:80:84:0c: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EA:23:AF:76:08:23:0E:5D:B5:B2:33:5E:81:98:2C:B9:4A:41:C4 X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9f:a6:bb:da:60:7b:b4:71:6b:9c:d3:7b:c5:1a:5a:46:18: b2:f4:ea:92:3a:94:1b:5e:c5:72:53:0b:a4:4d:7e:f4:73:fb: 7d:ff:62:62:3e:b6:a2:26:5f:a0:a0:da:b3:74:ca:1f:c7:88: f2:6c:97:50:ff:ec:2c:d7:aa:e9:83:50:da:13:22:13:bb:cc: 9b:0b:ca:76:be:97:b2:71:7a:ca:93:0b:b2:01:81:45:ba:fa: df:65:40:c2:f6:83:cf:5f:0b:d9:bb:c6:5a:31:e5:66:19:e5: 98:94:06:ac:8c:7c:c3:fc:9a:f9:6b:02:32:1c:bf:3d:8a:64: e4:af:34:df:ee:f8:04:bc:95:f7:79:a8:d5:fd:ae:a6:c5:47: 3b:b0:0f:5b:ef:15:93:34:21:2d:1f:96:06:fc:11:58:22:a2: af:dc:e5:d6:06:73:e1:8b:96:4c:09:77:02:35:f3:1c:c0:a5: 72:9a:a1:61:3b:2f:70:1e:5a:f8:fb:f5:9b:50:df:33:bd:ef: 2a:79:d8:fc:83:5c:4e:86:bc:b5:f0:88:cc:4f:b1:a1:25:0f: 59:c2:88:be:0b:cd:c9:e2:96:51:c0:68:c7:71:c9:02:7b:84: df:65:f0:fa:88:48:2b:f2:9c:b7:00:8a:c4:19:8a:f8:96:6e: 56:f2:f3:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTA3MDUwODA4MjhaFw0yNTA3MTIwODA4MjhaMBgxFjAUBgNV BAMTDTY4NjhkZDdjLTZlODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC88G1ROBB1rUDh3+1WVXIRMcdfqK6YurhePU/LdFVlLDT+AN7I7gJkcptV0wPJ rwZHWBmq1zqnm3DKwz8VUlMS25X7VVe1SaTksGOV3+XB5SbGEkb7F2X1ex3kXsZZ qIFs0W6m48AlkJ4pKldy3PGnm9QnL5O4ZTlaRjaDBz0S6TQANNUjUsY8YCcHrgs2 GkxMLN7BvV5qGYxh00XrcZJ2eKg0Ex+a3IpsbfY63uF1HDsX1/r3AqQcKmLw8m+T eRJ+ZIpd/Mw29cLzuAQ+R1IBgOh+r2qu2c7LIEADu/+yJYRyzPBlf9ckbiN9LZrZ Pnm/IHWlMN1QuJS3a4CEDPsNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhOojr3YI Iw5dtbIzXoGYLLlKQcQwHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHyfprvaYHu0cWuc03vFGlpGGLL06pI6lBtexXJTC6RNfvRz+33/YmI+ tqImX6Cg2rN0yh/HiPJsl1D/7CzXqumDUNoTIhO7zJsLyna+l7JxesqTC7IBgUW6 +t9lQML2g89fC9m7xlox5WYZ5ZiUBqyMfMP8mvlrAjIcvz2KZOSvNN/u+AS8lfd5 qNX9rqbFRzuwD1vvFZM0IS0flgb8EVgioq/c5dYGc+GLlkwJdwI18xzApXKaoWE7 L3AeWvj79ZtQ3zO97yp52PyDXE6GvLXwiMxPsaElD1nCiL4LzcnillHAaMdxyQJ7 hN9l8PqISCvynLcAisQZiviWblby8wk= -----END CERTIFICATE-----Generated at Sat Jul 5 11:08:06 2025 by rpki-client