$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft File: kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft (raw, json) Hash identifier: zDJCUOvlve5SX9ZjYkb0xJmB+cLQsxdQ5+SQkbNhSQQ= Subject key identifier: 0F:55:C7:D8:36:D1:CE:43:AC:6D:EC:59:19:C3:FA:0B:4D:85:B7:AB Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Certificate serial: 0C14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft Manifest number: 0C01 Signing time: Wed 02 Jul 2025 19:00:09 +0000 Manifest this update: Wed 02 Jul 2025 19:00:09 +0000 Manifest next update: Wed 09 Jul 2025 19:00:09 +0000 Files and hashes: 1: kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl (hash: pokt/NqBFpDBcu6kXvLvro59F1R03720Ozyiboo9KB8=) 2: EA531ACE61C211EF89F25E2CC4F9AE02.roa (hash: wvS2IKCsAphgy9VmVy8jmzdrhXrxZNTENgiqGBEyqqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3092 (0xc14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6462, serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Validity Not Before: Jul 2 19:00:09 2025 GMT Not After : Jul 9 19:00:09 2025 GMT Subject: CN=686581b9-ad18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:29:ae:88:35:69:b6:c4:f7:de:f9:38:f3: 29:75:9a:82:00:9a:84:00:44:f6:ac:84:cd:1b:92: 0d:48:03:46:e5:85:24:62:57:a4:57:4a:ae:95:58: 6a:63:ac:72:f7:84:cc:8b:cc:98:32:ba:2e:20:c2: 55:34:e2:0a:22:5a:15:cd:58:3d:44:cd:e5:95:5e: ea:c9:51:19:d6:6b:02:55:99:b9:54:4b:19:a6:b3: 5c:26:7c:35:ec:ba:a3:7d:5a:b0:2a:38:fb:ae:d1: fd:c9:8c:fc:d4:05:79:38:14:c6:5b:5f:8e:29:74: 2b:a0:83:bb:20:a1:8a:d0:b7:f0:6a:9b:29:f4:a6: cf:63:42:8a:5b:33:e1:7d:6c:36:51:05:4c:e6:de: fd:03:34:5c:4d:7f:8c:b9:5d:63:86:ca:1d:54:e6: bd:5f:eb:a1:7c:3e:09:c4:47:28:fe:2e:d2:1f:92: 0a:db:7b:c1:ee:23:3d:15:98:5e:83:0d:7f:8e:07: d5:59:be:1e:15:5a:61:69:e1:fe:48:a8:37:9d:41: b9:44:ab:06:82:3b:39:3b:57:62:cc:a9:98:8b:be: 80:ce:a0:9a:9f:c2:37:ba:fe:83:a6:e0:7d:18:41: 93:39:96:a3:7e:d0:5b:cf:44:73:b7:53:d5:fb:33: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:55:C7:D8:36:D1:CE:43:AC:6D:EC:59:19:C3:FA:0B:4D:85:B7:AB X509v3 Authority Key Identifier: keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:0f:07:7a:c7:74:33:50:01:6c:4b:04:74:25:a2:8e:22:ad: 21:14:f2:71:d9:3d:13:c7:54:51:9b:83:1c:4a:26:90:dd:30: 7c:43:ad:3a:27:5b:2e:7c:b1:c1:57:d4:a4:59:b6:d2:81:79: 03:ac:fa:5c:49:57:bd:7e:23:cd:27:cc:68:ec:ef:a0:c2:2c: 23:1b:a5:37:a2:93:8a:7d:a3:15:34:6b:df:e9:58:31:d0:25: 25:e5:5a:5b:a4:f7:82:96:f9:23:b5:71:d7:eb:97:6b:fc:c7: 1f:4d:5a:9d:f9:52:77:90:dc:69:50:5f:3d:5c:4c:b2:27:bd: 50:fa:13:a6:db:91:40:7a:07:ef:a6:cb:2e:02:bc:f1:e0:f1: 93:18:ff:5a:fe:0e:b0:72:18:2a:44:ff:3d:1d:f7:a6:2f:0d: 85:97:dd:8a:a4:6b:b9:33:b9:5e:8d:0c:91:27:ef:a7:d5:72: cf:be:10:b0:f9:45:d1:3e:ed:23:53:a8:b5:bb:8c:46:b2:e3: 9c:bf:8e:ad:93:d0:10:a7:0c:93:9a:61:3d:ca:77:f8:35:bf: eb:df:c2:d0:87:39:f0:f8:15:f9:48:ce:fe:d3:d3:36:77:00: ba:38:b4:7c:98:50:3d:7d:0e:a3:0f:27:83:94:d8:dd:97:62: 39:42:74:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE MjBDMzgwMzkwHhcNMjUwNzAyMTkwMDA5WhcNMjUwNzA5MTkwMDA5WjAYMRYwFAYD VQQDEw02ODY1ODFiOS1hZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Asprog1abbE9975OPMpdZqCAJqEAET2rITNG5INSANG5YUkYlekV0qulVhq Y6xy94TMi8yYMrouIMJVNOIKIloVzVg9RM3llV7qyVEZ1msCVZm5VEsZprNcJnw1 7LqjfVqwKjj7rtH9yYz81AV5OBTGW1+OKXQroIO7IKGK0Lfwapsp9KbPY0KKWzPh fWw2UQVM5t79AzRcTX+MuV1jhsodVOa9X+uhfD4JxEco/i7SH5IK23vB7iM9FZhe gw1/jgfVWb4eFVphaeH+SKg3nUG5RKsGgjs5O1dizKmYi76AzqCan8I3uv6DpuB9 GEGTOZajftBbz0Rzt1PV+zMuEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9Vx9g2 0c5DrG3sWRnD+gtNhberMB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4 NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjQ2Mi9EQUY0MzVFMDE4NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZj UXhudS1mMmpLSHJTRERnRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnDwd6x3QzUAFsSwR0JaKOIq0hFPJx2T0Tx1RRm4McSiaQ3TB8Q606 J1sufLHBV9SkWbbSgXkDrPpcSVe9fiPNJ8xo7O+gwiwjG6U3opOKfaMVNGvf6Vgx 0CUl5VpbpPeClvkjtXHX65dr/McfTVqd+VJ3kNxpUF89XEyyJ71Q+hOm25FAegfv pssuArzx4PGTGP9a/g6wchgqRP89HfemLw2Fl92KpGu5M7lejQyRJ++n1XLPvhCw +UXRPu0jU6i1u4xGsuOcv46tk9AQpwyTmmE9ynf4Nb/r38LQhznw+BX5SM7+09M2 dwC6OLR8mFA9fQ6jDyeDlNjdl2I5QnQh -----END CERTIFICATE-----Generated at Thu Jul 3 00:43:21 2025 by rpki-client