$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft File: rt-KIRgobseQH6KolLlMoQCj_Xg.mft (raw, json) Hash identifier: W7BJUv9/4oD0FKFaBSDfrzo9UxCcQjgB+SX9vMC/Yfk= Subject key identifier: D3:8A:E5:3B:FB:EA:B5:51:CF:49:AC:2A:E8:91:DB:CF:51:55:F7:1C Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 Certificate issuer: /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft Manifest number: 04 Signing time: Sat 05 Jul 2025 08:31:29 +0000 Manifest this update: Sat 05 Jul 2025 08:31:28 +0000 Manifest next update: Sat 12 Jul 2025 08:31:28 +0000 Files and hashes: 1: rt-KIRgobseQH6KolLlMoQCj_Xg.crl (hash: soL5E3wo80h/E02gUFI6tpXMIlNuYvYqC/wm8EngzRQ=) 2: 077331D0564511F09ED8993AC4F9AE02.roa (hash: UUG92P2AWbXaMrK3iyqoTf0N43jcCkwVZ/K5MaIHibg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78 Validity Not Before: Jul 5 08:31:28 2025 GMT Not After : Jul 12 08:31:28 2025 GMT Subject: CN=6868e2e0-4c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:ff:95:44:53:43:89:86:fb:5a:6f:b3:4a: 72:d5:2d:0a:5e:e3:83:73:f7:d1:3b:e0:3d:9a:f2: a5:a0:72:25:72:42:47:a9:5a:51:04:76:4b:98:2f: c4:0f:26:f9:9e:96:b3:60:2a:be:c4:4b:f5:87:df: 34:76:98:3f:88:a1:71:ec:1c:1f:e2:bf:e7:ba:ee: 46:1f:53:82:09:1c:c2:5b:a5:9f:a7:4b:52:b0:67: 9e:7d:3c:4e:a5:04:4a:67:4c:d6:85:26:c0:28:95: dd:1b:66:f6:49:c6:c1:53:16:3c:1e:de:d0:28:14: 8b:cf:bc:78:52:20:da:4c:01:09:bc:02:e1:de:87: 31:77:0e:49:1f:ec:0d:20:7f:dd:1e:10:86:00:19: 5e:41:19:92:69:47:55:cf:87:f7:8a:64:da:14:b4: 73:78:5b:dd:bb:f7:d9:20:cb:ff:9b:c1:5c:fb:60: 2a:72:0d:2c:53:36:29:2d:d8:fa:a1:d9:89:52:4e: 96:6a:e4:a3:38:d5:af:60:78:dc:cf:59:70:8f:67: 77:84:93:64:5b:bb:90:f0:f5:7e:6b:27:25:80:1e: 5e:55:d1:74:9b:42:1c:57:8d:bb:d4:35:f2:56:81: 67:0f:99:65:64:db:de:59:4e:77:22:e6:15:82:44: 9e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:E5:3B:FB:EA:B5:51:CF:49:AC:2A:E8:91:DB:CF:51:55:F7:1C X509v3 Authority Key Identifier: keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:39:6e:db:db:c7:fe:80:88:c0:0e:d2:f2:56:53:23:05:f5: 2b:3c:8e:fe:04:bd:08:f9:bb:d3:fd:85:6e:9f:82:01:cb:70: 82:1c:a8:b9:2f:18:e6:8b:0f:19:08:41:3d:0e:d5:34:b1:f6: 3e:2b:1a:fc:97:39:12:e6:48:ec:c7:4a:78:0a:2a:59:54:94: db:c7:76:60:c9:8e:1c:d5:61:c0:4b:c4:c9:74:86:85:96:31: f5:59:aa:a6:58:b6:54:c1:9b:44:15:a9:c7:a2:30:46:a7:ff: 3d:ed:e6:e0:c5:16:21:f8:3c:5f:8c:b6:96:5f:5c:6c:fd:7e: 49:98:ef:b4:bc:62:d8:de:5f:0c:06:8c:66:ad:b1:a7:f1:13: f0:04:0c:f6:59:a5:2b:05:72:27:b1:b9:8f:38:04:c4:8d:67: 02:3e:3c:9b:85:e3:a7:d7:a6:6a:20:35:bb:4d:cb:45:1f:f8: 97:0b:f2:93:e9:e9:1f:3f:4b:5a:83:78:87:09:f7:3f:46:ec: 77:cf:64:1d:ba:63:b2:41:db:27:41:32:19:b9:4f:23:94:cb: fa:fe:88:4e:c9:f8:3b:20:32:80:a1:37:e4:1b:7c:2d:05:a5: 99:8a:49:61:19:6e:c3:47:e9:db:9a:b7:79:4a:77:9a:8f:1c: 1e:0d:3c:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNGRTExMC8GA1UEBRMoQUVERjhBMjExODI4NkVDNzkwMUZBMkE4OTRCOTRDQTEw MEEzRkQ3ODAeFw0yNTA3MDUwODMxMjhaFw0yNTA3MTIwODMxMjhaMBgxFjAUBgNV BAMTDTY4NjhlMmUwLTRjNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3Ef+VRFNDiYb7Wm+zSnLVLQpe44Nz99E74D2a8qWgciVyQkepWlEEdkuYL8QP JvmelrNgKr7ES/WH3zR2mD+IoXHsHB/iv+e67kYfU4IJHMJbpZ+nS1KwZ559PE6l BEpnTNaFJsAold0bZvZJxsFTFjwe3tAoFIvPvHhSINpMAQm8AuHehzF3Dkkf7A0g f90eEIYAGV5BGZJpR1XPh/eKZNoUtHN4W92799kgy/+bwVz7YCpyDSxTNikt2Pqh 2YlSTpZq5KM41a9geNzPWXCPZ3eEk2Rbu5Dw9X5rJyWAHl5V0XSbQhxXjbvUNfJW gWcPmWVk295ZTnci5hWCRJ7XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU04rlO/vq tVHPSawq6JHbz1FV9xwwHwYDVR0jBBgwFoAUrt+KIRgobseQH6KolLlMoQCj/Xgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzk2NkQ3MUVBNTY0 MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNlUUg2S29sTGxNb1FDal9Y Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnQtS0lSZ29ic2VRSDZLb2xMbE1vUUNqX1hnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0ZFLzk2NkQ3MUVBNTY0MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNl UUg2S29sTGxNb1FDal9YZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQ5btvbx/6AiMAO0vJWUyMF9Ss8jv4EvQj5u9P9hW6fggHLcIIcqLkv GOaLDxkIQT0O1TSx9j4rGvyXORLmSOzHSngKKllUlNvHdmDJjhzVYcBLxMl0hoWW MfVZqqZYtlTBm0QVqceiMEan/z3t5uDFFiH4PF+MtpZfXGz9fkmY77S8YtjeXwwG jGatsafxE/AEDPZZpSsFciexuY84BMSNZwI+PJuF46fXpmogNbtNy0Uf+JcL8pPp 6R8/S1qDeIcJ9z9G7HfPZB26Y7JB2ydBMhm5TyOUy/r+iE7J+DsgMoChN+QbfC0F pZmKSWEZbsNH6duat3lKd5qPHB4NPEY= -----END CERTIFICATE-----Generated at Sun Jul 6 09:33:21 2025 by rpki-client